QRMYour data, protected and in your control
QRM is built for organizations that take security seriously. Run it where your data needs to live, with enterprise-grade protection at every layer.
- Built to SOC 2 criteria
- Built to ISO 27001
- Deploy in any region
- Never trains on your data
Last reviewed October 26, 2026
On this page
Deploy anywhere
Your data lives where you decide.
Run QRM in your own cloud account on Amazon Web Services, Google Cloud, Microsoft Azure or Oracle Cloud, in any region you choose. Or run it in your own data center. Your data stays in the location you select.
Your cloud
A dedicated QRM deployment in your own cloud account, in the region you choose.
Your data center
QRM on your own servers, behind your own physical and network controls.
QRM cloud
Fully managed workspaces at yourteam.qais.app, ready in minutes.
- Amazon Web Services
- Google Cloud
- Microsoft Azure
- Oracle Cloud
Every Enterprise deployment is dedicated to a single customer.
Security at every layer
Encryption everywhere
Data is encrypted in transit with TLS 1.2+ and sensitive data is encrypted at rest with AES-256.
Enterprise access controls
Single sign-on, multi-factor authentication, role-based access and audit logging, managed by your administrators.
Tenant isolation
Each workspace's data is kept separate from every other customer's, and every request is scoped to its own workspace.
Resilient backups
Continuous, encrypted, off-site backups with point-in-time recovery keep your data safe and recoverable.
AI you can trust
Never trains on your data
Your data is never used to train AI models.
Agents follow your rules
AI agents act only with the permissions your people have. Every action is recorded, and sending, publishing or spending waits for a person's approval.
You stay in control
AI stays inside your workspace, and you decide which AI features are turned on.
Compliance
QRM's security program is built to the SOC 2 Trust Services Criteria and ISO/IEC 27001, and the platform runs on infrastructure from providers certified to both. Enterprise customers can run QRM inside their own certified cloud account. Send us your security questionnaire and we complete it.
Infrastructure certifications
A current list of sub-processors is available to customers on request, under NDA.
Security contact
Questions about security, questionnaires or documentation? Email support@qais.app.
Blane Steckline
Responsible disclosure
Found a vulnerability? We want to hear from you.
Email support@qais.app with "Security" in the subject and include the steps to reproduce.
Please
- Test only against a workspace you own or are allowed to test.
- Never access, change or delete other people's data.
- No denial-of-service, social engineering or physical attacks.
- Give us reasonable time to fix the issue before sharing it.
In return
- We confirm your report and keep you updated.
- We credit you when the fix ships, if you wish.
- We do not take legal action against good-faith research that follows these rules.
Common questions
Can we choose where our data is stored?
Yes. Deploy QRM in your own cloud account, in any region you choose, or in your own data center.
What is QRM's compliance status?
QRM's security program is built to the SOC 2 Trust Services Criteria and ISO/IEC 27001, and the platform runs on infrastructure from providers certified to both. Enterprise customers can run QRM inside their own certified cloud account. Send us your security questionnaire and we complete it.
Is our data used to train AI?
No. Your data is never used to train AI models.
What happens to our data if we leave?
Administrators can export workspace data, and account owners can request deletion.
Can you complete our security questionnaire?
Yes. Send it to support@qais.app.