Security & Compliance

At Qmica, security, reliability and data protection are fundamental principles in the design and operation of our platform.

We continuously invest in secure infrastructure, access management, monitoring, backup procedures and operational controls to protect the confidentiality, integrity and availability of customer data.

Our platform is designed to support manufacturers, wholesalers, distributors and retailers in managing, transforming, enriching and publishing product data securely and efficiently.

Qmica operates its platform primarily on Amazon Web Services (AWS) infrastructure located in Frankfurt, Germany, within the European Economic Area (EEA).

AWS is one of the world's leading cloud providers and provides enterprise-grade infrastructure security, availability and resilience. By leveraging AWS infrastructure, Qmica benefits from extensive physical, network and operational security controls.

Qmica is committed to protecting personal data and business data in accordance with applicable privacy legislation, including the General Data Protection Regulation (GDPR).

Our services are primarily designed for the processing of product and business data. Personal data processing is generally incidental to the services provided by Qmica.

We implement appropriate technical and organisational measures designed to protect data against unauthorised access, disclosure, alteration, loss or destruction.

Qmica applies multiple layers of technical and organisational security measures, including:

• Encryption of data in transit;
• Encryption of data at rest where applicable;
• Identity and Access Management (IAM);
• Role-based access controls;
• Principle of least privilege;
• Network segmentation and firewall protection;
• Logging and monitoring;
• Security event detection and alerting;
• Daily backups and recovery procedures;
• Regular software updates and security maintenance.

Access to production systems and customer data is restricted to authorised personnel who require such access for operational, support or security purposes.

Qmica maintains backup and recovery procedures designed to support business continuity and minimise service disruption.

Infrastructure and services are continuously monitored to detect availability issues, operational risks and potential security incidents.

Where necessary, contingency measures may be implemented to maintain the stability and security of the platform.

Qmica strives to operate in accordance with recognised security and privacy best practices.

While Qmica is not currently certified under standards such as ISO 27001 or SOC 2, we utilise AWS infrastructure that supports internationally recognised security and compliance frameworks and we continuously evaluate and improve our security practices.

Our operational procedures are designed to support secure service delivery, data protection and regulatory compliance.

Qmica's services are focused on product data management, transformation, enrichment and publication.

To improve our services and develop new functionality, Qmica may use product data, metadata, mappings, classifications and other non-personal information processed through the platform.

Qmica may create anonymised, aggregated and statistical datasets for analytical, benchmarking, research, development, machine learning and artificial intelligence purposes.

Such datasets do not identify individual persons or specific customers

If you believe you have identified a security vulnerability in a Qmica service, we encourage responsible disclosure.

Please report potential vulnerabilities to:

security@qmica.io

We will investigate legitimate reports and take appropriate action where necessary.

For questions regarding security, compliance, privacy or data protection, please contact:

Qmica B.V.
Zijperweg 4N
1742 NE Schagen
The Netherlands

E-mail: info@qmica.io
Website: www.qmica.io