Data kept private, safe and secure
At qrunchin, we take the security and privacy of our customers’ data seriously. We ensure that data is kept private, safe and secure through our infrastructure, technology, policies, and procedures across all qrunchin’s activities.
This includes product security, data security, availability and reliability, incident management and response, business continuity policies, privacy management, and organization security.
qrunchin uses strong authentication mechanisms, including multi-factor authentication (MFA) and Single Sign-On (SSO), to ensure that only authorized users can access our platform. SSO is available on Enterprise plans only.
Role-Based Access Control (RBAC)
Our platform implements role-based access control to provide granular access permissions, ensuring that users can only access the resources and functionalities necessary for their role.
RESPONSIVE Self-Serve User Management
qrunchin enables administrators to manage user accounts, including adding and removing users, modifying permissions, and resetting passwords at anytime, all within the platform.
We maintain comprehensive audit logs to track user activities within our platform. This helps us monitor access and detect any suspicious activities. Audit logs are accessible by organizations using the Business and the Enterprise plans, as well as by the qrunchin team.
Data Hosting and Storage
We host our services and store our users’ data on the state-of-the-art infrastructure of Google Cloud Platform (GCP), which adheres to strict security standards and certifications across: operational and device security, internet communication security, identity management, storage security, application deployment security, hardware infrastructure security, and data centers security.
Your data is encrypted in transit for all plans and at rest on Enterprise plans, using industry-standard encryption algorithms to ensure its confidentiality and integrity.
Availability and Reliability
qrunchin’s platform automatically scales to accommodate fluctuations in demand, ensuring consistent performance and availability.
Our infrastructure is designed with redundancy in mind to minimize the risk of single points of failure, on Google Cloud Platform.
Quality Assurance Testing
We conduct automated and manual quality assurance testing upon each change to ensure the stability, performance, and functionality of our platform.
We continuously monitor our platform to detect and resolve potential issues before they impact our customers.
Uptime and Status Page
Our commitment to availability is reflected in our uptime, and we provide a public status page to keep customers informed about platform performance and incidents.
Incident Management and Response
Data Breach Notification
In the event of a data breach, affected customers will be notified as soon as possible, without undue delay, and no later than 72 hours after the discovery of the incident.
Incident Response Plan (IRP)
We have a comprehensive Incident Response Plan in place to quickly identify, investigate, and remediate security incidents.
Business Continuity Plan
qrunchin maintains a comprehensive Business Continuity Plan to minimize disruptions and ensure the resilience of our platform.
We perform regular data backups to ensure data durability and facilitate swift recovery in case of an incident or a disaster.
qrunchin is a fully remote company. All processes occur in cloud services designed for high-availability.
Data Retention Policy
qrunchin adheres to a comprehensive data retention policy, which details the length of time we store your data and how we dispose of it securely.
Data Removal Requests
We promptly respond to data removal requests in accordance with applicable data protection regulations. Customers can reach out to us at [email protected] for data removal requests.
All qrunchin employees sign confidentiality agreements to protect sensitive customer information.
Employee Security Training
Our employees receive regular security training and updates to ensure they are aware of the latest threats and best practices.
Employee Workstations Encrypted
All employee workstations are encrypted and secured with up-to-date antivirus and security software.