Bernt
58ca4e68db
- Go backend API with full CRUD for all modules (CRM, Sales, Finance, HR, Legal, Marketing, Support, Purchase, Inventory, Projects, Automation, Analytics) - Rust analytics service with parallel report generation - C runtime with POSIX shared memory IPC - PostgreSQL schema with 30+ tables, full migrations - Redis cache, sessions, pub/sub - Kafka event streaming with Zookeeper - WebSocket hub for real-time updates - Automation engine with cron jobs, workflows, event triggers - JWT authentication, multi-tenant from start - Docker Compose with all services - Nginx reverse proxy with rate limiting - Integration tests passing - Feature gap analysis against Fortnox/Odoo/Visma Refs: BOC-001
116 lines
5.3 KiB
HTML
116 lines
5.3 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title>End-to-End Encryption — quiXzoom Security</title>
|
|
<style>
|
|
:root{
|
|
--bg-dark:#1a1a1a;--bg-white:#FFFFFF;--bg-off:#F7F7F5;
|
|
--blue:#0066FF;--blue-dark:#0052CC;--blue-pale:rgba(0,102,255,.07);
|
|
--green:#00C853;--text-dark:#1a1a1a;--text-body:#3a3a3a;--text-muted:#6B6B6B;
|
|
--radius-card:16px;--shadow-hover:0 16px 48px rgba(0,0,0,.14);
|
|
--transition:.22s cubic-bezier(.25,.46,.45,.94);
|
|
--text-xs:.75rem;--text-sm:.875rem;--text-base:1rem;
|
|
--text-lg:1.125rem;--text-xl:1.375rem;--text-2xl:1.75rem;
|
|
--radius-sm:8px;--radius-md:14px;--radius-lg:24px;
|
|
}
|
|
*,*::before,*::after{box-sizing:border-box;margin:0;padding:0}
|
|
body{font-family:-apple-system,BlinkMacSystemFont,'SF Pro Display','SF Pro Text','Helvetica Neue',Arial,sans-serif;background:var(--bg-off);color:var(--text-dark);line-height:1.6;-webkit-font-smoothing:antialiased}
|
|
|
|
/* NAV */
|
|
nav{position:sticky;top:0;z-index:100;background:rgba(255,255,255,.9);backdrop-filter:blur(20px);border-bottom:1px solid rgba(0,0,0,.08)}
|
|
.nav-inner{max-width:1200px;margin:0 auto;display:flex;align-items:center;justify-content:space-between;height:68px;padding:0 24px;gap:32px}
|
|
.nav-logo{font-size:1.375rem;font-weight:900;color:var(--text-dark);letter-spacing:-.04em;text-decoration:none}
|
|
.nav-logo .x{color:var(--blue)}
|
|
.nav-links{display:flex;align-items:center;gap:32px;flex:1;justify-content:center;list-style:none}
|
|
.nav-links a{color:var(--text-muted);font-size:var(--text-base);font-weight:500;transition:color .15s;text-decoration:none}
|
|
.nav-links a:hover{color:var(--text-dark)}
|
|
.btn-nav{background:var(--blue);color:var(--text-dark);border:none;border-radius:var(--radius-lg);padding:10px 24px;font-size:var(--text-base);font-weight:700;transition:background .15s;white-space:nowrap;flex-shrink:0;text-decoration:none}
|
|
.btn-nav:hover{background:var(--blue-dark)}
|
|
|
|
/* CONTENT */
|
|
.container{max-width:800px;margin:0 auto;padding:0 24px 80px}
|
|
.back-link{display:inline-flex;align-items:center;gap:8px;color:var(--blue);text-decoration:none;font-weight:700;margin-bottom:24px;margin-top:32px}
|
|
.back-link:hover{text-decoration:underline}
|
|
.page-header{padding:32px 0 48px}
|
|
.page-header h1{font-size:clamp(2rem,5vw,3rem);font-weight:900;letter-spacing:-.03em;margin-bottom:16px}
|
|
.page-header p{font-size:var(--text-lg);color:var(--text-muted);line-height:1.5}
|
|
.section{margin-bottom:48px}
|
|
.section h2{font-size:var(--text-2xl);font-weight:800;margin-bottom:16px;letter-spacing:-.03em}
|
|
.section p,.section li{font-size:var(--text-base);color:var(--text-muted);line-height:1.65;margin-bottom:12px}
|
|
.section ul{margin-left:24px}
|
|
.section li{margin-bottom:8px}
|
|
|
|
/* FOOTER */
|
|
footer{border-top:1px solid rgba(0,0,0,.08);padding:40px 24px;text-align:center;color:var(--text-muted);font-size:var(--text-sm)}
|
|
footer a{color:var(--text-muted);text-decoration:none;margin:0 12px;transition:color .15s}
|
|
footer a:hover{color:var(--text-dark)}
|
|
|
|
@media(max-width:768px){
|
|
.nav-links{display:none}
|
|
.page-header h1{font-size:2rem}
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<nav>
|
|
<div class="nav-inner">
|
|
<a href="/" class="nav-logo">qui<span class="x">X</span>zoom</a>
|
|
<ul class="nav-links">
|
|
<li><a href="/">For Zoomers</a></li>
|
|
<li><a href="/for-organisations/">For Organisations</a></li>
|
|
<li><a href="/pricing">Pricing</a></li>
|
|
<li><a href="/about">About</a></li>
|
|
</ul>
|
|
<a href="/support" class="btn-nav">Support</a>
|
|
</div>
|
|
</nav>
|
|
|
|
<div class="container">
|
|
<a href="/security/" class="back-link">← Back to Security</a>
|
|
<header class="page-header">
|
|
<h1>End-to-End Encryption</h1>
|
|
<p>How we protect data from capture to delivery.</p>
|
|
</header>
|
|
|
|
<div class="section">
|
|
<h2>Encryption in Transit</h2>
|
|
<p>All communication between Zoomer devices, our servers, and orderer systems uses TLS 1.3 with perfect forward secrecy. This ensures that even if a private key is compromised in the future, past communications remain secure.</p>
|
|
<ul>
|
|
<li>TLS 1.3 for all API and web traffic</li>
|
|
<li>Certificate pinning in mobile apps</li>
|
|
<li>HSTS enforced with 1-year max-age</li>
|
|
<li>Regular certificate rotation</li>
|
|
</ul>
|
|
</div>
|
|
|
|
<div class="section">
|
|
<h2>Encryption at Rest</h2>
|
|
<p>All stored data is encrypted using AES-256. This includes submission images, metadata, user profiles, and payment records. Encryption keys are managed through AWS KMS with strict access controls.</p>
|
|
<ul>
|
|
<li>AES-256-GCM for all stored data</li>
|
|
<li>AWS KMS with automatic key rotation</li>
|
|
<li>Separate encryption keys per customer (tenant isolation)</li>
|
|
<li>Backup encryption with offline key storage</li>
|
|
</ul>
|
|
</div>
|
|
|
|
<div class="section">
|
|
<h2>Submission Image Protection</h2>
|
|
<p>Submission images receive special protection. Each image is encrypted individually with a unique key derived from the submission ID. Images are decrypted only at the point of delivery to authorised orderers.</p>
|
|
<ul>
|
|
<li>Per-image encryption keys</li>
|
|
<li>Secure temporary URLs for image access</li>
|
|
<li>Automatic expiry of image access tokens</li>
|
|
<li>Watermarking for sensitive missions</li>
|
|
</ul>
|
|
</div>
|
|
</div>
|
|
|
|
<footer>
|
|
<p>© 2026 quiXzoom INC · Operated by Landvex AB</p>
|
|
</footer>
|
|
</body>
|
|
</html>
|