Bernt
58ca4e68db
- Go backend API with full CRUD for all modules (CRM, Sales, Finance, HR, Legal, Marketing, Support, Purchase, Inventory, Projects, Automation, Analytics) - Rust analytics service with parallel report generation - C runtime with POSIX shared memory IPC - PostgreSQL schema with 30+ tables, full migrations - Redis cache, sessions, pub/sub - Kafka event streaming with Zookeeper - WebSocket hub for real-time updates - Automation engine with cron jobs, workflows, event triggers - JWT authentication, multi-tenant from start - Docker Compose with all services - Nginx reverse proxy with rate limiting - Integration tests passing - Feature gap analysis against Fortnox/Odoo/Visma Refs: BOC-001
196 lines
10 KiB
HTML
196 lines
10 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title>Security — quiXzoom</title>
|
|
<meta name="description" content="quiXzoom security practices, data protection, and responsible disclosure.">
|
|
<style>
|
|
:root{
|
|
--bg-dark:#1a1a1a;--bg-white:#FFFFFF;--bg-off:#F7F7F5;
|
|
--blue:#0066FF;--blue-dark:#0052CC;--blue-pale:rgba(0,102,255,.07);
|
|
--green:#00C853;--text-dark:#1a1a1a;--text-body:#3a3a3a;--text-muted:#6B6B6B;
|
|
--radius-card:16px;--shadow-hover:0 16px 48px rgba(0,0,0,.14);
|
|
--transition:.22s cubic-bezier(.25,.46,.45,.94);
|
|
--text-xs:.75rem;--text-sm:.875rem;--text-base:1rem;
|
|
--text-lg:1.125rem;--text-xl:1.375rem;--text-2xl:1.75rem;
|
|
--radius-sm:8px;--radius-md:14px;--radius-lg:24px;
|
|
}
|
|
*,*::before,*::after{box-sizing:border-box;margin:0;padding:0}
|
|
body{font-family:-apple-system,BlinkMacSystemFont,'SF Pro Display','SF Pro Text','Helvetica Neue',Arial,sans-serif;background:var(--bg-off);color:var(--text-dark);line-height:1.6;-webkit-font-smoothing:antialiased}
|
|
|
|
/* NAV */
|
|
nav{position:sticky;top:0;z-index:100;background:rgba(255,255,255,.9);backdrop-filter:blur(20px);border-bottom:1px solid rgba(0,0,0,.08)}
|
|
.nav-inner{max-width:1200px;margin:0 auto;display:flex;align-items:center;justify-content:space-between;height:68px;padding:0 24px;gap:32px}
|
|
.nav-logo{font-size:1.375rem;font-weight:900;color:var(--text-dark);letter-spacing:-.04em;text-decoration:none}
|
|
.nav-logo .x{color:var(--blue)}
|
|
.nav-links{display:flex;align-items:center;gap:32px;flex:1;justify-content:center;list-style:none}
|
|
.nav-links a{color:var(--text-muted);font-size:var(--text-base);font-weight:500;transition:color .15s;text-decoration:none}
|
|
.nav-links a:hover{color:var(--text-dark)}
|
|
.btn-nav{background:var(--blue);color:var(--text-dark);border:none;border-radius:var(--radius-lg);padding:10px 24px;font-size:var(--text-base);font-weight:700;transition:background .15s;white-space:nowrap;flex-shrink:0;text-decoration:none}
|
|
.btn-nav:hover{background:var(--blue-dark)}
|
|
|
|
/* HERO */
|
|
.page-header{text-align:center;padding:80px 24px 64px;max-width:640px;margin:0 auto}
|
|
.page-header h1{font-size:clamp(2.5rem,6vw,4rem);font-weight:900;letter-spacing:-.04em;line-height:1.05;margin-bottom:16px}
|
|
.page-header p{font-size:var(--text-lg);color:var(--text-muted);line-height:1.5}
|
|
|
|
/* CARDS */
|
|
.container{max-width:1200px;margin:0 auto;padding:0 24px 80px}
|
|
.card-grid{display:grid;grid-template-columns:repeat(2,1fr);gap:24px;margin-bottom:64px}
|
|
.card{background:var(--bg-white);border-radius:var(--radius-card);padding:32px;transition:var(--transition);cursor:pointer;text-decoration:none;color:inherit;display:block;position:relative;overflow:hidden;border:1px solid transparent}
|
|
.card::before{content:'';position:absolute;top:0;left:0;right:0;height:3px;background:var(--blue);transform:scaleX(0);transition:transform .3s ease}
|
|
.card:hover{transform:translateY(-4px);box-shadow:var(--shadow-hover);border-color:rgba(0,102,255,.15)}
|
|
.card:hover::before{transform:scaleX(1)}
|
|
.card-icon{width:48px;height:48px;border-radius:var(--radius-sm);display:flex;align-items:center;justify-content:center;margin-bottom:20px;background:var(--blue-pale)}
|
|
.card-icon svg{width:24px;height:24px;stroke:var(--blue);fill:none;stroke-width:2;stroke-linecap:round;stroke-linejoin:round}
|
|
.card h3{font-size:var(--text-lg);font-weight:800;margin-bottom:10px;letter-spacing:-.02em}
|
|
.card p{font-size:var(--text-base);color:var(--text-muted);line-height:1.6}
|
|
.card-arrow{display:inline-flex;align-items:center;gap:6px;margin-top:16px;color:var(--blue);font-size:var(--text-sm);font-weight:700;opacity:0;transform:translateX(-8px);transition:all .3s ease}
|
|
.card:hover .card-arrow{opacity:1;transform:translateX(0)}
|
|
|
|
/* SECTIONS */
|
|
.section{margin-bottom:48px}
|
|
.section h2{font-size:var(--text-2xl);font-weight:800;margin-bottom:16px;letter-spacing:-.03em}
|
|
.section p{font-size:var(--text-base);color:var(--text-muted);line-height:1.65;margin-bottom:16px}
|
|
.section ul{margin-left:24px;margin-bottom:16px}
|
|
.section li{font-size:var(--text-base);color:var(--text-muted);line-height:1.65;margin-bottom:8px}
|
|
|
|
/* BADGES */
|
|
.badge{display:inline-block;padding:4px 12px;border-radius:var(--radius-full);font-size:var(--text-xs);font-weight:700;letter-spacing:.04em;text-transform:uppercase;margin-right:8px;margin-bottom:8px}
|
|
.badge-green{background:rgba(0,200,83,.12);color:#00a050}
|
|
.badge-blue{background:var(--blue-pale);color:var(--blue)}
|
|
.badge-purple{background:rgba(123,47,255,.12);color:#7b2fff}
|
|
.badge-orange{background:rgba(232,102,10,.12);color:#d45a0a}
|
|
|
|
/* CTA */
|
|
.cta-box{background:var(--blue);border-radius:var(--radius-card);padding:48px 32px;text-align:center;margin-top:64px}
|
|
.cta-box h2{font-size:var(--text-2xl);font-weight:800;margin-bottom:12px;color:var(--text-dark)}
|
|
.cta-box p{font-size:var(--text-base);color:rgba(0,0,0,.6);margin-bottom:24px}
|
|
.btn-white{display:inline-block;padding:12px 28px;border-radius:var(--radius-lg);background:var(--bg-white);color:var(--text-dark);text-decoration:none;font-weight:700;font-size:var(--text-base);transition:transform .2s}
|
|
.btn-white:hover{transform:translateY(-2px)}
|
|
|
|
/* FOOTER */
|
|
footer{border-top:1px solid rgba(0,0,0,.08);padding:40px 24px;text-align:center;color:var(--text-muted);font-size:var(--text-sm)}
|
|
footer a{color:var(--text-muted);text-decoration:none;margin:0 12px;transition:color .15s}
|
|
footer a:hover{color:var(--text-dark)}
|
|
|
|
@media(max-width:768px){
|
|
.card-grid{grid-template-columns:1fr}
|
|
.nav-links{display:none}
|
|
.page-header h1{font-size:2rem}
|
|
}
|
|
</style>
|
|
<link rel="canonical" href="https://www.quixzoom.com/security/">
|
|
</head>
|
|
<body>
|
|
|
|
<nav>
|
|
<div class="nav-inner">
|
|
<a href="/" class="nav-logo">qui<span class="x">X</span>zoom</a>
|
|
<ul class="nav-links">
|
|
<li><a href="/">For Zoomers</a></li>
|
|
<li><a href="/for-organisations/">For Organisations</a></li>
|
|
<li><a href="/pricing">Pricing</a></li>
|
|
<li><a href="/about">About</a></li>
|
|
</ul>
|
|
<a href="/support" class="btn-nav">Support</a>
|
|
</div>
|
|
</nav>
|
|
|
|
<header class="page-header">
|
|
<h1>Security at quiXzoom</h1>
|
|
<p>How we protect data, verify identity, and maintain trust across the ecosystem.</p>
|
|
</header>
|
|
|
|
<div class="container">
|
|
<div class="card-grid">
|
|
<a href="/security/encryption/" class="card">
|
|
<div class="card-icon">
|
|
<svg viewBox="0 0 24 24"><rect x="3" y="11" width="18" height="11" rx="2" ry="2"></rect><path d="M7 11V7a5 5 0 0 1 10 0v4"></path></svg>
|
|
</div>
|
|
<h3>End-to-end encryption</h3>
|
|
<p>All data in transit uses TLS 1.3. Sensitive data at rest is encrypted with AES-256. Submission images are encrypted from capture through delivery.</p>
|
|
<span class="card-arrow">Learn more →</span>
|
|
</a>
|
|
|
|
<a href="/security/identity/" class="card">
|
|
<div class="card-icon">
|
|
<svg viewBox="0 0 24 24"><path d="M20 21v-2a4 4 0 0 0-4-4H8a4 4 0 0 0-4 4v2"></path><circle cx="12" cy="7" r="4"></circle></svg>
|
|
</div>
|
|
<h3>Identity verification</h3>
|
|
<p>Every Zoomer completes KYC before first payout. Government ID + liveness check. Verified by our own regulated KYC system, not stored by quiXzoom.</p>
|
|
<span class="card-arrow">Learn more →</span>
|
|
</a>
|
|
|
|
<a href="/security/data-residency/" class="card">
|
|
<div class="card-icon">
|
|
<svg viewBox="0 0 24 24"><path d="M21 10c0 7-9 13-9 13s-9-6-9-13a9 9 0 0 1 18 0z"></path><circle cx="12" cy="10" r="3"></circle></svg>
|
|
</div>
|
|
<h3>Data residency</h3>
|
|
<p>All data stored in EU (Stockholm, eu-north-1). No third-country transfers. GDPR compliant by design. SOC 2 Type II in progress.</p>
|
|
<span class="card-arrow">Learn more →</span>
|
|
</a>
|
|
|
|
<a href="/security/fraud-detection/" class="card">
|
|
<div class="card-icon">
|
|
<svg viewBox="0 0 24 24"><circle cx="11" cy="11" r="8"></circle><line x1="21" y1="21" x2="16.65" y2="16.65"></line><line x1="11" y1="8" x2="11" y2="14"></line><line x1="8" y1="11" x2="14" y2="11"></line></svg>
|
|
</div>
|
|
<h3>AI review & fraud detection</h3>
|
|
<p>Every submission passes automated quality and location verification. Anomaly detection flags suspicious patterns. Human review for edge cases.</p>
|
|
<span class="card-arrow">Learn more →</span>
|
|
</a>
|
|
</div>
|
|
|
|
<div class="section">
|
|
<h2>Compliance & Certifications</h2>
|
|
<span class="badge badge-green">GDPR Compliant</span>
|
|
<span class="badge badge-blue">EU Data Residency</span>
|
|
<span class="badge badge-purple">SOC 2 In Progress</span>
|
|
<span class="badge badge-orange">ISO 27001 Roadmap</span>
|
|
<p style="margin-top:16px">quiXzoom is built for regulated industries. We maintain a comprehensive compliance programme covering data protection, payment regulation (PSD2), and anti-money laundering (AML) requirements. Our KYC and payment processors are fully regulated entities under EU law.</p>
|
|
</div>
|
|
|
|
<div class="section">
|
|
<h2>Responsible Disclosure</h2>
|
|
<p>We take security seriously and welcome responsible disclosure of vulnerabilities. If you discover a security issue, please report it to:</p>
|
|
<ul>
|
|
<li>Email: <strong>security@quixzoom.com</strong></li>
|
|
<li>PGP key available on request</li>
|
|
<li>We respond within 48 hours</li>
|
|
<li>We do not pursue legal action against good-faith researchers</li>
|
|
</ul>
|
|
<p>Please include sufficient detail to reproduce the issue, and allow reasonable time for remediation before public disclosure.</p>
|
|
</div>
|
|
|
|
<div class="section">
|
|
<h2>Data Processing</h2>
|
|
<p>quiXzoom acts as data controller under GDPR. Key processors:</p>
|
|
<ul>
|
|
<li><strong>Stripe</strong> — Payment processing & payouts (PCI DSS Level 1)</li>
|
|
<li><strong>AWS</strong> — Cloud infrastructure (Stockholm region)</li>
|
|
<li><strong>KYC Provider</strong> — Identity verification (regulated entity)</li>
|
|
</ul>
|
|
<p>All processor relationships are governed by Data Processing Agreements compliant with GDPR Article 28.</p>
|
|
</div>
|
|
|
|
<div class="cta-box">
|
|
<h2>Questions about security?</h2>
|
|
<p>Our security team is available for enterprise customers and researchers.</p>
|
|
<a href="mailto:security@quixzoom.com" class="btn-white">Contact Security Team →</a>
|
|
</div>
|
|
</div>
|
|
|
|
<footer>
|
|
<p>© 2026 quiXzoom INC · Operated by Landvex AB</p>
|
|
<p style="margin-top:8px">
|
|
<a href="/privacy">Privacy</a>
|
|
<a href="/terms">Terms</a>
|
|
<a href="/security/">Security</a>
|
|
<a href="/support">Support</a>
|
|
</p>
|
|
</footer>
|
|
|
|
</body>
|
|
</html>
|