For us, information security and confidentiality are top priorities. Qlerify serves companies worldwide, all of which have stringent security standards. These organizations trust us with their confidential and crucial business information, making information security a fundamental aspect of our operations.
We uphold strict protocols and continuously enhance our security measures to guarantee that all our customers can securely manage their data with us. The data your organization gathers on our platform is encrypted, backed up, and accessible solely to the users you authorize.
Within Qlerify, only a few trusted employees have access to the production environment for the purposes of maintaining our cloud services and assisting our customers. Access to customer data is restricted to only employees who have a need to know this information.
Qlerify employees may sign into your account to access settings related to a support issue. For this they use their individual SSO account with 2FA, and all activity is logged to audit logs. This way special access improves efficiency and security. Employees can see your environment without you sharing any credentials. Furthermore, all employees at Qlerify strive to respect your privacy as much as possible, and only access files and settings needed to diagnose and resolve reported issues.
Qlerify is designed to be secure from the very first line of code. Security is always top of mind in our development.
At Qlerify, we leverage DevOps and Continuous Delivery models. This means a highly automated software and infrastructure delivery, and security is embedded into the SDLC.
Here are a few controls included in our process:
By default, Qlerify Modeler runs as Software as a Service (SaaS) hosted in the European Union, so you always have the latest version with nothing to maintain or upgrade. Enterprise customers can also choose where their data is stored, or host Qlerify Modeler in their own environment.
Qlerify leverages the advanced protection mechanisms available in AWS, such as AWS Web Application Firewall, AWS API Gateway, AWS GuardDuty and many more. This ensures protection from all common web-based attacks like SQL injection, cross-site scripting attacks and session hijacking.
Authentication is handled through AWS Cognito. Secrets are stored in AWS Secrets Manager and user passwords are not visible to anyone at Qlerify. If the password is forgotten, the only way is to reset it. Enterprise customers have the option to implement Single Sign-On (SSO) through OpenID Connect (OIDC) with your Microsoft Entra ID.
Qlerify uses an industry-leading cloud platform (Amazon AWS) to host production environments. AWS runs secure data centers worldwide that contain customers' data.
Our workstations and laptops use full disk encryption and are always locked when not in use.
Customer data is stored in the AWS DynamoDB database. It's a fully managed database-as-a-service that can handle mission-critical workloads with predictable performance, security, high availability, and dynamic scalability. Customer data is backed up with point-in-time recovery backups that provide continuous backups of data for 35 days.
The Qlerify platform is multi-tenant with logical and strict separation between all customers. Customers are segregated with unique subdomains and all customer data is segregated at both the application and database level using unique IDs.
Files are stored and managed in AWS S3. AWS S3 offers highly available, massively scalable, durable, and secure storage. Each customer has its own segregated area for their files.
All data in transit is encrypted with Secure Sockets Layer and Transport Layer Security (SSL/TLS) with a minimum requirement of TLS 1.2.
Data at rest in the database is encrypted using a FIPS 140-2 validated cryptographic module. Data is encrypted on disk, including backups and the temporary files created while queries are running.
Data at rest in file storage is encrypted and decrypted transparently using 256-bit AES encryption. We use AWS Secrets Manager for encryption key storage, key control, and key rotation.
Security, authentication and application logs are centrally collected in AWS CloudTrail for a retention period of 90 days. Logs are stored in separate storage locations from other application data and are fully protected from manipulation or deletion.
Every instance of data modification and selected events of data access are recorded in an audit log, which includes the user ID and the precise time at which these actions occurred.
Qlerify uses Amazon Web Services (AWS) as the cloud provider. AWS is responsible for the security of its actual data centers and the AWS cloud. Qlerify is hosted in AWS data centers inside the European Union. However, Enterprise customers can choose their data residency.
AWS is well known for its high level of security and has been certified by third-party organizations and manages many compliance programs to comply with laws and regulations. A list of such certifications and compliance statements can be found here. Some examples:
AWS has a public SOC 3 report on Security, Availability & Confidentiality (pdf).
You can find more information here:
Qlerify has a disaster recovery process in place and it is tested on a regular basis.
Qlerify is committed to protecting your data, including the personal information of all your employees. As a result, we help your organization remain and demonstrate compliance with privacy laws and regulations such as GDPR.
Our services only collect personal information necessary to provide access to our service. This information is classified, kept up to date, and is never shared with any third party. All data is stored within the European Union by default.
Read more in our Privacy Policy.
