Security

Encryption

• In transit via TLS 1.2+; at rest using provider-managed encryption (e.g., AES‑256).
• Secrets stored securely; regular rotation and least-privilege access.

Access controls

• Role-based access at the application and infrastructure levels.
• MFA enforced for administrative access. Quarterly access reviews.

Reliability and backups

• Automated backups with periodic restore tests.
• Documented RPO/RTO objectives and disaster recovery procedures.

SSO and audit logs

• Enterprise SSO (SAML). Organization roles and audit trails for critical actions.

Vulnerability management

• Dependency scanning and periodic penetration testing. Defined incident response plan.

Contact security

Report a security issue: security@qrcodgen.com