Security and reliability features

Privacy and consents

• Your data is safe with uQualio®

• uQualio® follows EU regulations on GDPR

• You can revoke electronic marketing permissions you have granted to an account owner on our platform

• We do not use your data for other purposes than helping you get a better user experience

• We do not sell your data to anyone

• We have not implemented login using e.g. your Apple ID, Facebook or Google accounts as we think their data use lacks transparency and fairness

​​

User account access ​

• Users must sign in with a password of minimum 6 characters 

• Unique username (id, email or phone number) is required 

• Changes to email or phone numbers are registered as user notifications 

• Changes to password are registered as user activities 

• User access can be blocked by uQualio​® ​  

• User can change the password from within the application 

• An account is locked for a period after three unsuccessful login attempts  

​

Application data access ​

• Data access in the application is role-based 

• An Account Manager can delegate roles to other users on levels Account and lower 

• A Channel Manager can delegate roles to other users on level Channel and lower 

• User roles can be removed during the operation, so no log out is required to enforce removal of a role 

• A user can only access data according to the role level 

​

Data backup and recovery 

• uQualio​® data and applications are backed up on a daily basis 

• Database backups are regularly restored to verify that we can continue operation with as little potential interruption and data loss as possible 

​

Development processes ​

• All code is managed on git, daily backups are made of the repository 

• All tools for development, build, and deployment are regularly updated according to the vendors' recommendations

• User access is limited to the lowest possible level for each individual 

• Developers must change the password on a regular basis 

​

Infrastructure

• uQualio​® uses Amazon Web Services (AWS) for infrastructure and hardware services 

• Data access to AWS hosted services is limited to a few persons in the company 

• Data is encrypted between server and client (HTTPS) 

• Uploaded documents are encrypted and can only be accessed via uQualio®  

​

Information security ​

• Internal data access policy is enforced 

• Developers do not have access to User Acceptance Test (UAT) or Production data 

• Developers do not have access to deployment application and database servers in Development, UAT or Production 

• Support staff do not have access to application servicer at all and to database servers in UAT and Production 

​

Payment security ​

• uQualio​® does not store information that can process a payment on your credit card. All information is handled by our credit card processing partner Stripe.

• Stripe is a certified PCI Service Provider Level 1 and follows all international rules and regulations to keep your credit card information safe.