Here are the core security features for keeping your data safe.
All customer data, in addition to object-storage, temporary storage and databases are encrypted at rest.
We use TLS 1.2 or higher everywhere data is transmitted over potentially insecure networks. We renew our SSL certificates regularly and we restrict the allowed ciphers to well-known secure ciphers only.
This means your data is protected both during transmission and while stored on our servers.
Quanscient Allsolve utilizes a robust authentication system with strong password requirements and optional two-factor authentication.
A granular permission system ensures users only have the access they need.
All our encryption keys are managed via Key Management System (KMS). Using KMS prevents direct access to the keys by any individuals, including employees of Quanscient. The keys are used for encryption and decryption via KMS APIs only.
Application secrets are stored encrypted and access to these values is limited to only the services that absolutely need them.
Quanscient Allsolve operates within an isolated cloud environment, segregated from public networks by strict network firewall rules.
This means that your applications and data are completely separated from other users and potential vulnerabilities.
We adhere to strict privacy standards and comply with relevant regulations
Personally Identifiable Information (PII) is stored separately to ensure easy retrieval or removal upon user request.
We store your data in your region (e.g., EU customer data in the EU).
We comply with required GDPR requirements and other relevant regional regulations where we do business.
Strict security measures are in place in the day-to-day operations of Quanscient to ensure a robust and comprehensive security framework
Endpoint protection
All of our devices are equipped with anti-malware protection, disc-encryption, automatic screen-locking, automatic software updates and we utilize password managers to prevent leaking access.
Secure remote access
As a cloud-first company, all the data we handle is securely stored and backed-up by our carefully selected, world-class vendors, who are committed to security. All connections to the services we use are encrypted using standard techniques.
Identity and access management
We utilize a security compliance management software to monitor the access rights and identities in the services we use. These are reviewed at least annually and any access to services needs to be requested via internal system and reviewed by the system owners before allowing access.
Security education
We require our employees to complete annual security training. In addition to that, we have established a Product Security Team that has representatives from all of our teams. In their regular meetings, latest security information is shared and passed on to the teams by these representatives. In addition, we also follow security incidents and notify our employees on our internal communication channels about new threats or required measures.
Vendor security
We have defined a policy for evaluating risks for any new service vendors we might use. We check them for compliance and thoroughly assess the risk and define the scope of usage of the services.