QRMYour data, protected and in your control
QRM is built for organizations that take security seriously. Run it where your data needs to live, with enterprise-grade protection at every layer.
- SOC 2 ready
- ISO 27001 ready
- Deploy in any region
- Never trains on your data
Last reviewed October 26, 2026
On this page
Deploy anywhere
Your data lives where you decide.
Run QRM in your own cloud account on Amazon Web Services, Google Cloud, Microsoft Azure or Oracle Cloud, in any region you choose. Or run it in your own data center. Your data stays in the location you select.
Your cloud
A dedicated QRM deployment in your own cloud account, in the region you choose.
Your data center
QRM on your own servers, behind your own physical and network controls.
QRM cloud
Fully managed workspaces at yourteam.qais.app, ready in minutes.
- Amazon Web Services
- Google Cloud
- Microsoft Azure
- Oracle Cloud
Every Enterprise deployment is dedicated to a single customer.
Security at every layer
Encryption everywhere
Data is encrypted in transit with TLS 1.2+ and sensitive data is encrypted at rest with AES-256.
Enterprise access controls
Single sign-on, multi-factor authentication, role-based access and audit logging, managed by your administrators.
Tenant isolation
Each workspace's data is kept separate from every other customer's, and every request is scoped to its own workspace.
Resilient backups
Continuous, encrypted, off-site backups with point-in-time recovery keep your data safe and recoverable.
AI you can trust
Never trains on your data
Your data is never used to train AI models.
Agents follow your rules
AI agents act only with the permissions your people have. Every action is recorded, and sending, publishing or spending waits for a person's approval.
You stay in control
AI stays inside your workspace, and you decide which AI features are turned on.
Compliance
QRM is SOC 2 ready and ISO 27001 ready, and runs on infrastructure from providers certified to ISO 27001 and SOC 2.
Infrastructure certifications
A current list of sub-processors is available to customers on request, under NDA.
Security contact
Questions about security, questionnaires or documentation? Email support@qais.app.
Blane Steckline
Responsible disclosure
Found a vulnerability? We want to hear from you.
Email support@qais.app with "Security" in the subject and include the steps to reproduce.
Please
- Test only against a workspace you own or are allowed to test.
- Never access, change or delete other people's data.
- No denial-of-service, social engineering or physical attacks.
- Give us reasonable time to fix the issue before sharing it.
In return
- We confirm your report and keep you updated.
- We credit you when the fix ships, if you wish.
- We do not take legal action against good-faith research that follows these rules.
Common questions
Can we choose where our data is stored?
Yes. Deploy QRM in your own cloud account, in any region you choose, or in your own data center.
What is QRM's compliance status?
QRM is SOC 2 ready and ISO 27001 ready, and runs on infrastructure from providers certified to ISO 27001 and SOC 2.
Is our data used to train AI?
No. Your data is never used to train AI models.
What happens to our data if we leave?
Administrators can export workspace data, and account owners can request deletion.
Can you complete our security questionnaire?
Yes. Send it to support@qais.app.