Security

DATE OF ISSUE

August 5, 2026

PREPARED FOR

Public - In-Quora Group

1. Security First Infrastructure

At In-Quora, data security and confidentiality are foundational to our platform. We employ enterprise-grade defense-in-depth methodologies to protect your questionnaires, intellectual property, and survey responses against unauthorized access and cyber threats.

2. Industry-Standard Data Encryption

We protect your information at rest and during transit using high-grade cryptographic protocols.

✓Encryption in Transit: All communications between your browser, APIs, and cloud services are encrypted using TLS 1.3 and SSL protocols.
✓Encryption at Rest: Uploaded DOCX files, survey definitions, and database storage are protected with AES-256 bit encryption on AWS cloud infrastructure.
✓Credential Protection: User credentials are encrypted using salted bcrypt hashing algorithms, ensuring raw passwords are never stored or accessible.

3. Perimeter Defense & WAF Protection

Our infrastructure implements multi-layered perimeter security to mitigate DDoS attacks and malicious web traffic.

✓Web Application Firewall: All inbound web traffic is inspected through Cloudflare WAF for real-time threat detection and automated bot mitigation.
✓API Throttling & Hardening: API endpoints feature adaptive rate limiting, sanitized exception handling, and strict origin validation.
✓Network Isolation: Application servers reside in isolated network environments protected by strict firewall policies.

4. Multi-Tenant Isolation & Access Control

In-Quora implements strict Role-Based Access Control (RBAC) and logical multi-tenant data separation.

✓Role-Based Access Control: Granular permission levels separate Administrator, Client, and Respondent access to ensure data is limited strictly to authorized users.
✓Data Segmentation: Survey responses and customer records are logically segmented by tenant ID, preventing cross-organization access.

5. Document Confidentiality & Privacy Guarantee

We treat your uploaded questionnaires as strictly confidential intellectual property.

✓Strict Data Ownership & Privacy: Your uploaded DOCX documents, compiled surveys, and respondent data belong exclusively to you and remain strictly confidential. They are processed solely by our deterministic automated engine and are never shared or repurposed.
✓Permanent Purge Policies: Data from deleted accounts or purged questionnaires is permanently erased from active servers within 30 days.