Snapshot 48397
Normalized text
Scripts and page chrome removed; this is what change detection compares.
QuotaPath is continuously monitoring its overall security posture. Announcements 2025 SOC 2 Type II Available (Covers 12 months ending 10/31/2025) Published on Dec 22, 2025 See below for download link. 2025 SOC 2 Type II Covering the 12 months ending October 31, 2025. Security Policies Continuous monitoring Note: If a control is passing all tests, it will be marked as green. If a control has a failed test that was not resolved within the past 14 days, it will be marked yellow. App Security Annual Performance Evaluations Background Checks Backup Policy Clean Desk Policy in Place Cloud Infrastructure Linked to Drata Code Review Process Commitments Explained to Customers Cryptography Policies Data Security Daily Database Backups Encryption at Rest SSL/TLS Enforced System Access Control Policy Infrastructure Security Cloud Data Storage Restricted Encryption of Web-Based Admin Access Multiple Availability Zones Password Policy Network Security Denial of Public SSH Firewalls Unique Accounts Used Organization Security Disaster Recovery Plan Incident Response Plan Incident Response Team Product Security Databases Monitored & Alarmed Messaging Queues Monitored & Alarmed MFA on Accounts Terms of Service Subprocessors Fivetran | Fivetran Managed ELT / data ingestion. Fivetran connectors read from QuotaPath production Cloud SQL (PostgreSQL) instances and load into the Snowflake warehouse operated by Mozart Data. P... Data location: United States — NOT INDEPENDENTLY VERIFIED. Inferred from the des... OpenAI | API Large language model processing via the OpenAI API Platform. Named as a sub-processor in the published Subprocessors list (August 2026). Customer data is sent to the API in the c... Data location: United States - NOT INDEPENDENTLY VERIFIED; confirm against the D... PostHog | default Product analytics platform. Named as a sub-processor in the published Subprocessors list (August 2026). Data location: NOT INDEPENDENTLY VERIFIED. New Relic Application performance monitoring and observability. Named as a sub-processor in the published Subprocessors list (August 2026). Data location: NOT INDEPENDENTLY VERIFIED. SOC 3 names AWS, Azure and GCP as sub... Anthropic | Anthropic Large language model processing via the Claude API. Named as a sub-processor in the published Subprocessors list (August 2026). Customer data is sent to the API in the course of ... Data location: United States. From 2026-08-24 a portion of Team-plan commercial ... Amplitude Product analytics (Digital Analytics Platform). Named as a sub-processor in the published Subprocessors list (August 2026). Data location: NOT INDEPENDENTLY VERIFIED. Subservice organisations per the SOC ...