Security

Overview

We know security is one of your top concerns when doing business on the internet. Your data needs to be kept safe from accidental loss, safe from internal disclosure, and safe from outside access. At the same time, to work quickly and efficiently, you need easy access at any time, from anywhere. We understand this challenge and strive to offer the highest standards of data integrity, confidentiality, and accessibility.

Qtask takes the three elements of information security - confidentiality, integrity, and availability - and applies them to each level of our security, from basic philosophy through to our physical and application features. At each level, we constantly check ourselves, refining policy, hardware, and software to provide the best possible security.

Password protection

Your Qtask account is password protected to ensure that you have sole access to the account and its information. As always, follow safe password procedures: do not share your password with anyone, do not use similar passwords for different applications, and choose strong passwords.

Fine-grained security

Qtask Project Leads have complete control over the access rights of other users within their respective project(s). This includes access to projects on the same company account. In the event a user's password is compromised, access to one part of Qtask does not grant access rights to all parts of Qtask. This limits a single mistake in user security from becoming a much larger issue.

SaaS Hosted Security

Qtask provides Software as a Service (SaaS), where we host Qtask on our secure servers within secure hosting centers. Your information is stored on secure servers at data centers chosen for reliability and security. With SaaS Hosted deployment, we use the following features to keep your information secure and accessible:

Secure Socket Layer (SSL)

Qtask uses SSL, an industry standard method for sending encrypted information and securing data including your login, which prevents outsiders from intercepting the information you are viewing or sending over the internet. This method is used by most banks, credit card companies and online stores.

Site privacy

Qtask does not share information about you or your company with anyone. User access to your projects is controlled by Project Leads, so no one can be included in a project without his or her approval.

Data center security

All information you provide or create is stored securely on our servers. Qtask maintains physical, electronic, and procedural safeguards that comply with federal regulations to protect your personal and company information. Our hosting partners provide 24/7 physical security and system monitoring to ensure the availability and reliability of your account and information.

• Visual verification - Access to one of the data centers is granted only after close visual verification of a Qtask employee and identification.
• Security Escort - Once the Qtask team member's access is confirmed, security personnel escort him or her into the facility, maintaining a physical presence.
• Pass codes and biometrics - Gaining access to the servers themselves requires both a pass code and a match with biometric readers.
• Constant environmental control - Qtask's data centers use exacting environmental controls to ensure that the servers stay at optimum conditions for maximum performance allowing uninterrupted accessibility.
• Emergency power - In case of power failure, our data centers have round-the-clock backup generators keeping your data available during the worst local conditions.
• Remote access - Qtask maintains remote access to all of its data centers for maintenance and emergency purposes. This allows for faster response time, keeping your data accessible in case of hardware or software failure of any kind.

Qtask also protects the servers from remote intrusion. We guard against remote attacks with:

• Firewalls - Firewalls protect our servers by blocking unauthorized connections through a variety of hardware and software filters.
• Intrusion detection systems - Intrusion detection systems work by monitoring communications and system processes for unwanted activity and reporting this directly to our security personnel.

Education and training

Each member of our team is trained in our required security procedures and policies. We ensure that everyone in our workforce understands and abides by this training. If you have any questions or need further clarification, please, don't hesitate to contact us!

---

---