Trust Center

    Security and privacy are foundational to OnQuest. Here's how we protect your data and earn your trust every day.

    Security at Every Layer

    Encryption

    All data is encrypted in transit (TLS 1.2+) and at rest using AES-256. Your information is protected at every layer.

    Access Controls

    Role-based access control (RBAC) ensures users only see what they need. Admin permissions are fully configurable.

    Infrastructure

    Hosted on SOC 2 Type II compliant cloud infrastructure with 99.9% uptime SLA and automatic failover.

    Audit Trails

    Every action is logged with timestamps and user attribution. Full audit history available for compliance reviews.

    Authentication

    Passwordless magic-link login and social sign-in with Apple, Microsoft, and Google. No passwords to manage or forget.

    Data Governance

    Data residency options, retention policies, and data export capabilities. You own your data — always.

    Subprocessors

    We partner with trusted third-party providers to deliver the OnQuest platform. Each subprocessor is evaluated for security and compliance.

    Supabase

    Database, authentication & backend infrastructure

    SOC 2 Type IIHIPAAGDPR
    📍 United States

    Vercel

    Application hosting & edge delivery

    SOC 2 Type IIISO 27001GDPR
    📍 United States

    Resend

    Transactional email delivery

    SOC 2 Type IIGDPR
    📍 United States

    Firma

    Electronic signature & document signing

    SOC 2 Type IIGDPR
    📍 United States

    Tango Card

    Digital rewards & gift card fulfillment

    SOC 2 Type IIPCI DSS
    📍 United States

    Questions about security?

    Our team is happy to discuss our security practices, provide additional documentation, or answer any compliance-related questions.