Security

How we protect your data.

You own your data.
It belongs to your company. You can ask us to delete it at any time.
Never used to train AI.
We don't train AI models on your data, and the AI companies we use can't either.
Kept separate.
Your data is walled off from every other customer's.
Everything is recorded.
Every change is logged, with who approved it and why.

Controls

Safeguards in place.

These apply to every customer, however Quro is set up for you.

Encryption
Your data is encrypted while it travels over the internet and while it is stored.
Passwords and keys
The logins Quro uses to reach your systems are kept in a secure store. They give access only to what Quro needs, and can be changed at any time.
Who can see what
People see only what their role needs. Quro reaches only the systems you connect, and every access is logged.
AI companies we use
They work under contracts that stop them training on your data and limit how long they can keep it.
A full history
Each action is saved with the information it used, the reason for it, the rules in force at the time and the person who approved it.
You decide what runs on its own
At first, a person approves everything. Quro takes on more only when you choose, and only within the limits you set.

Deployment

Quro runs in our cloud as standard. If your company has stricter rules, there are two other options.

Our cloud
We run and monitor it for you.
Dedicated
Servers used only by your company, in the region you need.
Your cloud
Quro runs in your own cloud account, with the AI companies you choose.

Compliance

In progress
We're building our controls to the SOC 2 criteria, ahead of the independent audit.
Built to meet it
The EU's privacy law.
Built to meet it
California's privacy law.

We can sign a data processing agreement (DPA) with you.

Ownership

If you stop using Quro, we give your data back or delete it, as your contract sets out.

Ask us, and we'll send any of these:

This page is a summary. The exact terms are in your contract with us.