Encryption
- At rest: AES-256 encryption for all stored data.
- In transit: TLS 1.2+ on every connection.
- Credentials: encrypted with per-workspace keys and never exposed in the UI.
Access control
- Role-based permissions (Owner, Admin, Editor, Viewer).
- Single sign-on (SSO / SAML) on Enterprise.
- Multi-factor authentication for all users.
- Detailed audit logs.
Compliance
Qvista’s infrastructure is aligned with SOC 2, GDPR, and CCPA requirements. Enterprise customers can request current compliance reports and DPAs.Deployment options
- Cloud — fully managed by Qvista.
- Private cloud / VPC — dedicated environment (Enterprise).
- Self-hosted — run on your own infrastructure (Enterprise).