I very much doubt it’s the software vendor who has chosen to implement the automatic logout after a minute. Most probably someone wrote that down in a requirement because that’s how the previous system worked or that’s what they saw on the internet, and once that’s done it’s set in stone