Your treasury is safe.
You run your union’s treasury, and you are the one who answers to the members for its finances. Your work matters, and so does its security. We protect that work at every step, and this page explains how.
Four everyday protections.
Protections Qota applies automatically, every time you work on the treasury.
Your union’s data stays your union’s
Every union works in an isolated space. No other union can see your entries: separation is enforced by the database itself, at the lowest level, not by the interface.
Everyone sees only what they should
Owner, Administrator and Member roles, plus a three-level per-module permission: no access, read, write. The oversight committee and the external auditor get exactly the read access they need, and nothing more.
Your data is encrypted.
Your data is encrypted on the servers and again as it travels to your browser, with the algorithms required in the financial sector.
A trace of everything, that cannot be erased
Every creation, change and deletion is written to an audit log, and account sign-ins appear there with the device and address used. No one — not even your own administrators — can erase that trace. That is what gives it value before an external auditor or the oversight committee.
Our providers and their certifications.
For hosting, subscription payments and transactional email, Qota relies on specialized, certified providers.
An enterprise cloud in Canada
The whole platform is hosted with a global infrastructure operator, in data centers located in Canada. Unlike multi-region software, Qota runs a single region: Canada is where your data is kept.
SOC 2 Type IINo credit card data on our side
Subscription payment goes through a provider certified at the industry’s strictest level. No card number is stored on our servers. The invoice is issued in the union’s name, not in the name of the person managing the subscription.
PCI-DSS Level 1Authenticated email, without your data inside
Invitations, reminders and statements go out through a specialized sending provider, with domain authentication. Accounting documents stay in the application: email is there to notify, not to carry your accounting.
SPF · DKIMThe requirements we meet.
Accounting software must be ready to show an auditor at a moment’s notice. Qota was designed within the frameworks below.
Who does what.
No software replaces your own internal rules. The split below can serve as a base for your union’s financial policy.
Found a problem?
Write to us. We answer every question.
Our team answers security questions quickly. We are always available.
Get started with Qota today.
Create your union, get your treasury going, and see how Qota keeps you in control of your finances.