1. Data Ownership & Privacy

#

• You control all credentials used by Quality Clouds.
• Only CE code tables are accessed — never business or transactional data.
• Quality Clouds stores only:
  
  
  • Issue summaries
  • List of modified CIs
    
    
• Source code is analyzed in-memory (not stored).
• Access can be restricted with ACLs.
• You may request full data deletion anytime.
• No personal user info is collected from your instance.
  
  

2. Access Control

#

• User accounts managed within Quality Clouds:
  
  
  • Customer record creation
  • User setup
  • Password expiration
  • Temporary passwords (changed at first login)
    
    

3. Authentication & Passwords

#

• Unique credentials for each user.
• Password must:
  
  
  • Be at least 8 characters
  • Include upper, lower, number, symbol
  • Not reuse previous passwords
    
    
• Expiration range: 1 day – 1 year.
• Idle sessions auto-logout after 10 minutes.
  
  

4. Encryption

#

• Credentials & personal data encrypted using AES-256.
• Passwords hashed with SHA-256.
• All communication is secured with TLS (256-bit).
  
  

5. IP Whitelisting

#

If your system enforces IP allowlists, add Quality Clouds’ IP addresses to avoid blocked requests (see supporting article).