Safe Software

Safe Software
Name	Safe Software
Founded	1993
Founders	Don Murray, Dale Lutz
Headquarters	Surrey, British Columbia, Canada
Industry	Software, GIS, Data Integration
Products	FME
Employees	500+ (approx.)

Safe Software

Safe Software, founded in 1993, develops spatial and data integration products centered on Extract, Transform, Load (ETL) for geospatial and tabular datasets. Its flagship product, FME, serves government, utility, transportation, and environmental organizations by enabling format translation, data transformation, and automated workflows. The company is headquartered in Surrey, British Columbia, and is recognized for contributions to interoperability and standards within the geospatial and data-integration communities.

Definition and Scope

This company produces FME, a platform that performs data conversion, data transformation, and spatial ETL operations for formats such as Esri ArcGIS, MapInfo, Autodesk, OpenStreetMap, and PostGIS, and integrates with platforms like Amazon Web Services, Microsoft Azure, and Google Cloud Platform. Its scope spans customers in municipal administrations, utility companies, transportation agencies, environmental consultancies, and national mapping agencies including users of Esri, Autodesk, Oracle Corporation, Microsoft Azure, and Amazon Web Services. The product ecosystem interfaces with standards and organizations such as the Open Geospatial Consortium, the International Organization for Standardization, and industry-specific data models like the INSPIRE Directive and national cadastre systems. The company’s reach includes partnerships with systems integrators, consulting firms, and academic institutions such as University of British Columbia and technical communities that rely on spatially enabled databases like PostGIS and Oracle Spatial.

Principles and Best Practices

Engineering and product guidance emphasize interoperability, reproducibility, and maintainability across ecosystems that include Esri ArcGIS, QGIS, AutoCAD Civil 3D, Bentley Systems, and MapInfo Professional. Best practices promoted include building deterministic workflows, version control interoperability with tools like Git, metadata stewardship compatible with standards from the Federal Geographic Data Committee, and modular pipeline design to support continuous integration with platforms like Jenkins and GitLab CI/CD. Documentation, testing, and community training leverage conferences and events such as FME World Conference and collaborations with professional associations including the Urban and Regional Information Systems Association and national mapping agencies like Natural Resources Canada.

Secure Software Development Lifecycle

The company applies a Secure Software Development Lifecycle (SSDLC) integrating threat modeling, static analysis, and dependency management for third-party libraries including runtime ecosystems tied to Python (programming language), Java (programming language), and .NET runtimes from Microsoft. Security controls include code review, automated unit and integration testing, and vulnerability scanning that references advisory sources such as the Common Vulnerabilities and Exposures list and community feeds. Release management aligns with continuous delivery practices found in organizations using Docker containers and orchestration with Kubernetes to support scalable deployment of cloud-enabled connectors and gateway components.

Tools and Technologies

Products and connectors interoperate with GIS and IT stacks: formats and servers such as GeoServer, MapServer, ArcGIS Server, ArcGIS Online, and databases like PostgreSQL and MySQL. Integration tooling supports APIs and messaging with REST, SOAP, AMQP, and cloud services from Amazon S3 and Google Cloud Storage as well as authentication via OAuth 2.0 and SAML. The platform extends into scripting and automation using Python (programming language), supports containerization with Docker, and enables orchestration and monitoring through systems like Prometheus and Grafana. Data validation, topology correction, and reprojection workflows reference standards such as EPSG codes and leverage spatial libraries like GDAL/OGR.

Regulatory and Compliance Considerations

Deployments often must meet mandates from regulatory bodies and standards setters including the INSPIRE Directive, the European Union data-protection framework, and national legislation such as the Personal Information Protection and Electronic Documents Act in Canada. Compliance concerns intersect with standards from the Open Geospatial Consortium and metadata schemes used by agencies like the United States Geological Survey and the Ordnance Survey. Licensing and contractual obligations involve commercial software vendors such as Esri and procurement frameworks used by entities like Crown Corporations and municipal authorities. Data sovereignty, cross-border transfer, and retention policies require alignment with cloud providers such as Amazon Web Services and Microsoft Azure and with regional regulations including the General Data Protection Regulation.

Risk Management and Incident Response

Operational risk management leverages frameworks and practices from organizations such as the National Institute of Standards and Technology and incident response playbooks used by enterprise IT teams in utilities and transportation operators like Metrolinx or TransLink (British Columbia). Detection and response use logging, SIEM solutions like Splunk, and monitoring integrations with Prometheus and Grafana while backup and recovery follow patterns recommended by cloud providers including Amazon Web Services and Microsoft Azure. Coordination with external stakeholders—system integrators, vendors, and national authorities—parallels exercises and protocols practiced by critical infrastructure operators and mapping agencies such as Natural Resources Canada and the United States Geological Survey.

Category:Companies of Canada