Snapshot 57781
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Quality Clouds Products Resources Pricing Contact Log in Get started Get started Norma Norma Builders Engineering The enterprise MCP setup Quality Certified Loop engineering Salesforce Quality Clouds for Salesforce Developers & architects Platform owners Executives ServiceNow Quality Clouds for ServiceNow Developers & architects Platform owners Executives Products Why Quality Clouds Resources Documentation Blog White papers Customer stories Events Security Pricing Quality Clouds for ServiceNow Quality Clouds for Salesforce Norma Company Contact Security and compliance are built into everything we do. Quality Clouds is ISO 27001:2022 certified and SOC 2 Type II attested, demonstrating that our people, processes, and technology meet the highest global standards for information security, data privacy, and operational resilience . We operate a fully audited Information Security Management System (ISMS) and maintain annual third-party SOC 2 Type II assessments that validate the effectiveness of our controls around confidentiality, integrity, and availability. Whether you use Quality Clouds for Salesforce, ServiceNow, Dynamics 365, or emerging AI-native development platforms, your environment is protected by enterprise-grade security across every layer, from data access to cloud infrastructure. Our Commitment - ISO 27001:2022 Certified We’re proud to have achieved ISO 27001:2022 certification, the leading international standard for Information Security Management Systems (ISMS). This confirms our continuous dedication to data privacy, risk management, and operational resilience. Our certification scope covers all Quality Clouds products and services across ServiceNow, Salesforce, and Dynamics 365 platforms, hosted securely in Microsoft Azure regions within the EU and US. How We Keep Your Data Safe - End-to-end encryption and zero data persistence Read-only access: Quality Clouds connects through the official platform REST APIs. We never read or store transactional or business data, only metadata and code elements for analysis. In-memory processing: Source code is analyzed in memory and never persisted. Only aggregated scores and quality metrics are retained. Encryption everywhere: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). PII fields (name, email, IP) are encrypted at the field level and stored only for notification and audit purposes. No business data: We never access records, transactions, or PII beyond user contact info. Access is restricted by customer ACLs and OAuth scopes. Isolated environments: Development, staging, and production nodes are physically separated to eliminate cross-environment exposure. Infrastructure & Business Continuity Built on trusted clouds Hosted on Microsoft Azure (primary) and AWS S3 (backups). Multi-tenant options in Northern Europe (Ireland) and Central US (Iowa); single-tenant deployments available on request. Daily backups, quarterly DR tests, and annual BCP reviews ensure RTO/RPO of 24 hours and SLA uptime of 99.9% . Zero Trust networking, all internal and external traffic is blocked by default unless explicitly authorized. Application & Portal Security Defense in depth Secure portal delivery: All dashboards and reports served over 256-bit TLS channels. API authentication: Every call uses JWT tokens with signature validation (RFC 7519). Automatic disconnection handlers and user session identification for portal access. Annual penetration testing: Independent security firms conduct vulnerability assessments and remediation audits. Compliance & Governance - Standards we follow Our information security and SDLC processes adhere to: ISO 27001:2022 certification SOC 2 Type II audits (annual reports available on request) OWASP ASVS and NIST SP 800-57 guidelines GDPR and EU AI Act principles for data minimization and lawful processing . Certifications & Reports ISO 27001:2022 – Certified August 2023 SOC 2 Type II – Annual Report Available on Request External Vulnerability and PenTest – Yearly Cyber and Data Insurance – Active Coverage through 2026 Contact Security Team: security@qualityclouds.com