High Availability: Our application servers are placed under a load balancer to handle the traffic and auto-scale when needed. Our databases are set up as sharded clusters, therefore if the server fails a new primary node will be promoted.

Power: Servers have redundant internal and external power supplies.

Uptime: Continuous uptime monitoring, with immediate escalation to Qualia Analytics staff for any downtime.

Uptime:  Continuous uptime monitoring, with immediate escalation to Qualia Analytics staff for any downtime.

Third Party Scans: Weekly security scans are performed by Qualys.

Testing: System functionality and design changes are verified in an isolated test “sandbox” environment and subject to functional and security testing prior to deployment to active production systems.

Firewall: Firewall restricts web server access to all ports except 80 (http) and 443 (https). Our database servers are only accessible from the internal network.

Patching: Latest security patches are applied to all operating system and application files to mitigate newly discovered vulnerabilities.

Access Control: Role-based access is enforced for systems management by authorized engineering staff.

Logging and Auditing: Central logging systems capture and archive all internal systems access including any failed authentication attempts.

Backup Frequency: Automatic database backups are scheduled to run every hour. Backups are encrypted using a public-private key encryption and stored in multiple geographically disparate sites. Database backups are stored for 1 year allowing to fully restore a system from any point of time.

Production Redundancy: Data is stored on a RAID 10 array. O/S stored on a RAID 1 array.

Training: We provide security training where appropriate.

Audit Logging: We maintain and monitor audit logs on our services and systems (our logging systems generate gigabytes of log files each day).

Two-factor security: All our critical systems are enforced with 2 Factor security to avoid password compromises.

Stack: We code in JavaScript, Java, PHP and Go. Our data is stored in MongoDB, MySQL and Redis. Our productions servers run on Ubuntu LTS versions.

Coding Practices: Our engineers use best practices and industry-standard secure coding guidelines to ensure the code produced is reliable, robust and secure.

Despite best efforts, methods of transmission over the Internet and methods of electronic storage is not perfectly secure. Thus, while we can never guarantee absolute security, we can (and do) proactively mitigate risks to security on your behalf. However, if a security breach were to occur, our breach notification procedures are consistent with our obligations under various laws and regulation in the United States (state and federal) and across Europe. As such,we adhere to,  industry rules and standards for notification procedures, which include providing email notices to any affected users or posting a notice on our website if a breach should occur, so appropriate protective steps can be taken.

Keeping your data secure also depends on you ensuring that you maintain the security of your account by using sufficiently complicated passwords and storing them safely. You should also ensure that you have sufficient security on your own systems, to keep any survey data you download to your own computer away from prying eyes. Your password can be changed by accessing your Account Settings via your Dashboard in the Qualia platform. We recommend that you enable 2-factor security from your account settings for additional security.

Specific security questions can be addressed by contacting our System Administrators (sysadmin@qualiaanalytics.org) and/or Data Protection Officer (dpo@qualiaanalytics.org). Your question and accompanying details may then be forwarded to members of our Software Development team.