Your queue data is sensitive. We treat it that way.
Type II certified. Annual audits covering security, availability, and confidentiality.
Business Associate Agreements available. PHI handling follows HIPAA Security Rule requirements.
Data Processing Agreements in place. Standard Contractual Clauses for international transfers.
We maintain a documented incident response plan with defined severity levels and escalation procedures. Security incidents are communicated to affected customers within 72 hours, in compliance with GDPR notification requirements.
Found a vulnerability? We appreciate responsible disclosure. Report security issues to security@boringqms.com. We aim to acknowledge reports within 24 hours and provide resolution timelines within 5 business days.