Security at QAVENIQ
Your business data is isolated, encrypted, and protected by database-level access controls.
Account isolation
Every workspace record is tied to its owner at the database level. Row-level security policies ensure one account can never read or modify another account's data.
Encrypted in transit
All traffic is served over HTTPS with modern TLS. Authentication tokens are never exposed in URLs.
Secure authentication
Passwords are hashed with industry-standard algorithms and never stored in plain text. Sessions are managed through short-lived, HTTP-only tokens.
Least-privilege access
Administrative functions are restricted to admin accounts. Plan-based workspace access is enforced both in the interface and on every data request.
Responsible disclosure
If you discover a security issue, please report it through our contact page so we can address it promptly.
Found something? Report it here.