Your data is safe
and secure with Quantal

1. Cloud hosting

Quantal uses AWS (Amazon Web Services) for its data storage and virtual servers and hosting websites for its applications using Amazon EC2 (Elastic Compute Cloud). AWS maintains the highest enterprise and government security standards, supporting over 143 security compliance frameworks.

2. Encryption

• Data at Rest: Data stored in AWS services (like Amazon S3, EBS, or RDS) is encrypted before being written to disk. Many AWS services provide server-side encryption by default using AWS-managed keys, or you can use your own Customer Managed Keys (CMKs).
• Data in Transit: All traffic moving between AWS regions and data centres is transparently encrypted at the physical layer. Traffic sent over public networks to and from AWS APIs uses Transport Layer Security (TLS).
• Envelope Encryption: Instead of sending massive datasets to a hardware security module (HSM) for every read/write, AWS uses envelope encryption. A master key encrypts a unique data encryption key, which then encrypts your actual data locally.

3. User authentication

Quantal uses two-factor authentication (2FA) to secure all manager and supervisor accounts. Users must provide two distinct forms of identification to access an account. The Manager portal can review, change and delete all Supervisor accounts.

4. Audit trails

All stocktake data is kept, including edits and deletes. Supervisors cannot change data without generating an audit trail.

5. Data ownership

Your stocktake data belong to you. We will keep it for you for up to three months. If you want it stored longer, please let us know and we can arrange a long-term data storage service.

6. Privacy

We are committed to protecting the privacy and security of your stocktake data. We employ industry-standard safeguards to keep your information strictly confidential, accessing or sharing it only as necessary to deliver our service, resolve technical issues, or comply with applicable local laws and regulations.