Your FINTRAC data, kept safe and kept in Canada
Client identities, transaction histories, suspicious transaction reports: this is sensitive data, and it is treated that way. It stays in Canada, it is encrypted, and access to it is controlled and logged.
How Quantoflow Protects Your FINTRAC Data
Quantoflow holds the most sensitive data a reporting entity has: client identities, transaction histories, suspicious transaction reports. Here is how that data is hosted, encrypted, accessed and logged, set out plainly so you, your IT team or an examiner can judge it.
Hosted in Canada
- AWS infrastructure in a Canadian region
- Compliance data stored in Canada
- No cross-border transfer of filing data
Encrypted, moving or still
- TLS encryption in transit
- Encryption at rest for all stored data
- Encrypted credential management
Controlled and logged
- Multi-factor authentication for every user
- Role-based access with least privilege
- Tamper-evident audit log of every action
Hosting and Data Residency
Quantoflow's primary database runs on Amazon Web Services (AWS) in Canada, in the ca-central-1 (Canada Central) region. Our APIs run on Google Cloud Platform infrastructure. Your compliance data is stored in Canada, in line with Canadian privacy law, and filing data is not transferred across borders.
Encryption
Data travelling between your browser or systems and Quantoflow is encrypted with TLS. Data stored in our databases is encrypted at rest.
Access Control
Multi-factor authentication
Every user account is protected with MFA, with no exceptions. Identities are managed through Keycloak, an open-source identity and access management platform.
Role-based access control and ACLs
User, Admin and Super Admin roles control what each person can view, edit, submit and delete, and access control lists (ACLs) decide who can see each entity and each case. In multi-tenant accounts, one client never sees another's data.
Least privilege
Each team member gets only the access their job needs. Deleting reports and viewing audit logs are reserved for admins, and only a Super Admin can change roles.
See role management for what each role can do.
Audit Logging
Every upload, change, submission and deletion is recorded with the user, the time and what changed. The audit log is tamper-evident: once an entry is written, no one can alter or delete it, including Super Admins. When an examiner asks who filed a report and when, the answer is an export.
Continuous Monitoring and Compliance
All systems are monitored for security threats and vulnerabilities. SOC 2 compliance is in progress.
Request Our Security Documentation
Completing a vendor risk assessment? We can share our security documentation and answer your questionnaire. Request our security documentation, or book a demo to see how access control and audit logging work in practice.