Security Audit

Quero leverages enterprise-grade cloud providers with SOC 2 Type II compliance. All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.3.

We employ multi-layered network security, including web application firewalls (WAF), DDoS protection, and strict VPC peering rules to isolate our databases from public internet access.

Our platform utilizes an Edge-runtime middleware proxy alongside Supabase Custom JWT Claims to enforce strict Role-Based Access Control (RBAC). This ensures that data access is cryptographically verified at the edge before any database query is executed.

All API mutations are protected by Zod schemas to prevent injection attacks and ensure strict data validation.

We conduct continuous automated vulnerability scanning on our dependencies and container images. Furthermore, we mandate annual third-party penetration testing and maintain a responsible disclosure bug bounty program.