Security and reliability features

User account access ​

• Users must sign in with a password of minimum 6 characters 

• Unique username (id, email or phone number) is required 

• Changes to email or phone numbers are registered as user notifications 

• Changes to password are registered as user activities 

• User access can be blocked by uQualio​® ​  

• User can change password from within the application 

• Account is locked for a period after three unsuccessful login attempts  

​

Application data access ​

• Data access in the application is role based 

• An Account Manager can delegate roles to other users on levels Account and lower 

• A Channel Manager can delegate roles to other users on level Channel and lower 

• User roles can be removed during operation, so no logout is required to enforce removal of a role 

• A user can only access data according to the role level 

​

Data backup and recovery 

• uQualio​® data and applications are backed up on daily basis 

• Database backups are regularly restored to verify that we can continue operation with as little potential interruption and data loss as possible 

​

Development processes ​

• All code is managed on git, daily backups are made of the repository 

• All tools for development, build and deployment are regularly updated according to the vendors recommendations

• User access is limited to the lowest possible level for each individual 

• Developers must change password on regular basis 

​

Infrastructure

• uQualio​® uses Amazon Web Services (AWS) for infrastructure and hardware services 

• Data access to AWS hosted services is limited to few persons in the company 

• Data is encrypted between server and client (HTTPS) 

• Uploaded documents are encrypted and can only be accessed via uQualio®  

​

Information security ​

• Internal data access policy is enforced 

• Developers do not have access to User Acceptance Test (UAT) or Production data 

• Developers do not have access to deployment application and database servers in Development, UAT or Production 

• Support staff do not have access to application servicer at all and to database servers in UAT and Production 

​

Payment security ​

• uQualio​® does not store information that can process a payment on your credit card. All information is handled by our credit card processing partner Stripe.

• Stripe is certified PCI Service Provider Level 1 and follows all international rules and regulations to keeping your credit card information safe.