-
Notifications
You must be signed in to change notification settings - Fork 7
Expand file tree
/
Copy pathsecurity.html
More file actions
238 lines (231 loc) · 12.4 KB
/
Copy pathsecurity.html
File metadata and controls
238 lines (231 loc) · 12.4 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
<!DOCTYPE html>
<html class="no-js" lang="en">
<head>
<link rel="stylesheet" href="https://use.typekit.net/cbd7kad.css">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css">
<!-- Google tag (gtag.js) -->
<script async src="https://www.googletagmanager.com/gtag/js?id=G-P7YYXKH86F"></script>
<script>
window.dataLayer = window.dataLayer || [];
function gtag(){dataLayer.push(arguments);}
gtag('js', new Date());
gtag('config', 'G-P7YYXKH86F');
</script>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=2, user-scalable=yes">
<title>QFieldCloud - Seamless fieldwork for QGIS</title>
<meta name="description" content="QFieldCloud - Seamless fieldwork for QGIS">
<meta name="author" content="OPENGIS.ch">
<link href="css/bootstrap.min.css" rel="stylesheet" media="screen">
<link href="css/qfield.css?ver=4" rel="stylesheet" media="screen">
<script src="js/jquery-1.11.0.min.js"></script>
<script src="js/bootstrap.min.js"></script>
<script src="js/qfield.js"></script>
</head>
<body>
<!-- Section #0: navigation -->
<nav id="navbar" class="navbar navbar-default navbar-fixed-top">
<div class="container">
<div class="navbar-header">
<button type="button" class="navbar-toggle collapsed" data-toggle="collapse" data-target="#navbarNav"
aria-expanded="false">
<span class="sr-only">Toggle navigation</span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
</button>
<a class="navbar-brand" href="/"><img src="/img/logo_sidetext.svg"
style="width: auto; height: 52px; margin-top: 8px" alt="QField Logo"></a>
</div>
<div class="collapse navbar-collapse" id="navbarNav">
<ul class="nav navbar-nav">
<li>
<a href="/index#highlights" title="Highlights">HIGHLIGHTS</a>
</li>
<li class="dropdown"></li>
<li>
<a href="https://qfield.org/assistance" title="Get assistance">GET ASSISTANCE</a>
</li>
<li class="dropdown">
<a href="#" class="dropdown-toggle" data-toggle="dropdown" role="button" aria-haspopup="true"
aria-expanded="false">RESOURCES<span class="caret"></span></a>
<ul class="dropdown-menu">
<li>
<a
href="/faq"
title="FAQ"
>FAQ</a
>
</li>
<li>
<a href="https://qfield.org/success-stories" title="Success stories">Success
stories</a>
</li>
<li>
<a href="https://community.qfield.org/" target="_blank" title="Community">Community</a>
</li>
<li>
<a href="https://docs.qfield.org" target="_blank" title="Documentation">Documentation</a>
</li>
<li>
<a href="https://docs.qfield.org/get-started/contribute/" target="_blank"
title="Contribute to QField">Contribute</a>
</li>
<li>
<a href="https://github.com/opengisch/qfieldcloud" target="_blank" title="Source code">Source code</a>
</li>
<li>
<a href="https://qfield.org/partner" title="Partner programs">Partner programs</a>
</li>
<li>
<a href="https://qfield.org/sdgs" title="Sustainable development goals">Sustainable development
goals</a>
</li>
<li>
<a href="https://qfield.org/blog" target="_blank" title="Blog">Blog</a>
</li>
<li>
<a href="https://www.opengis.ch/newsletter" target="_blank" title="newsletter">Newsletter</a>
</li>
</ul>
</li>
<li>
<a href="/pricing" title="Pricing">PRICING</a>
</li>
<li class="get-started-button">
<a href="https://app.qfield.cloud/accounts/signup/" target="_blank" title="Get started"><i
class="fas fa-rocket"></i> REGISTER</a>
</li>
<li class="support-button">
<a href="https://app.qfield.cloud/" title="Sign in"> <i class="fas fa-lock"></i> SIGN IN</a>
</li>
</ul>
</div>
</div>
</nav>
<!-- MAIN CONTENT -->
<!-- SECURITY SPECIFICATIONS -->
<main role="main" class="p-3">
<div class="container">
<div
class="pricing-header px-3 py-3 pt-md-5 pb-md-4 mx-auto text-center"
>
<h1 class="display-4">QFieldCloud Security Specifications</h1>
</div>
<div class="alert alert-warning" role="alert">
For further legal and compliance information see <a href="legal">legal & compliance</a>
</div>
<p>Last updated: February 3, 2024</p><!--When updating, please also add a new revision in the last paragraph-->
<p>Making the security of your data a top priority is integral to our commitment at QFieldCloud. We understand that trusting an external entity with your data is a significant decision.</p>
<h2>Overview of Security Measures</h2>
<p>The QFieldCloud service is protected by security measures on several levels. This includes hardening the infrastructure with a firewall and an intrusion detection system as well as regular backups, monitoring, encryption and following best practices for developing and deploying the system.</p>
<h2>Encryption</h2>
<p>All communication with QFieldCloud is encrypted via SSL / HTTPS.</p>
<h2>Access Control</h2>
<p>The service uses Role Based Access Control. Users need to authenticate with username and password or token. Authorization is managed based on organization, team and user configuration.</p>
<h2>Incident Response and Monitoring</h2>
<p>We are constantly monitoring our services and receive alerts whenever something unexpected happens. This gives us the possibility to react quickly and efficiently.</p>
<p>When incidents are detected we keep our users informed about the status via <a href="https://status.qfield.cloud">status.qfield.cloud</a> and provide follow-up analysis on incidents.</p>
<h2>Data Backup and Recovery</h2>
<p>All data stored within QFieldCloud is regularly backed up in a different location. Some of the data is replicated in real time, other parts are backed up based on a regular schedule which guarantees that no data older than 12 hours is without a backup.</p>
<h2>Payment</h2>
<p>Payments are handled by Stripe, a certified PCI Service Provider Level 1.</p>
<p>We do not store any credit card information; we only store identifiers that reference Stripe data.</p>
<h2>Compliance</h2>
<p>QFieldCloud is compliant with relevant data protection laws and regulations; for more detail consult the <a href="legal">legal & compliance page</a>.</p>
<p>Data is processed in data centers within Switzerland, operated by Exoscale and flow.swiss. All data centers are ISO 27001 certified.</p>
<h2>Software Development Security</h2>
<p>Security is a fundamental subject throughout the development of QFieldCloud. Each code change is reviewed thoroughly before being integrated into a release. We also maintain a comprehensive suite of tests which is continuously run on the code base.</p>
<h2>Third-Party Security</h2>
<ul>
<li>Stripe is used for payment processing. The connection to Stripe is encrypted and authenticated. All errors during payment failures are stored by Stripe for detailed logging. All sensitive information like tokens is removed before transmission.
<li>Sentry is integrated for performance and error monitoring. User identifiers as well as error messages are attached to errors. The connection to Sentry is encrypted and authenticated. All sensitive information such as tokens and passwords is removed before any data is sent to Sentry.
</ul>
<h2>Contact Information</h2>
<p>If you need to get in touch with the team for critical security purposes, please reach out to <a href="mailto:security@qfield.org">security@qfield.org</a>.</p>
<h2>Updates and Revision History</h2>
<p>We are committed to continue to improve and document security and will keep this information updated as security of QFieldCloud evolves over time.</p>
<ul>
<!--when adding a new version also update the date at the top of the page-->
<li>3.2.2024 - Initial version</li>
</ul>
</div>
</main>
<!-- Section #6: fine lines -->
<section id="about" data-speed="2" data-type="background">
<div class="container">
<div class="page-header">
<h1>About QFieldCloud</h1>
</div>
<div class="row-fluid">
<div class="span4"></div>
<p>
QField and QFieldCloud form the leading professional fieldwork platform used in
enterprise settings for efficient geospatial data collection, synchronization, and
management. As Digital Public Goods, they not only excel in
enterprise and professional applications but also contribute
significantly to advancing at least six of the
<a href="https://qfield.org/sdgs">United Nations Sustainable Development Goals (SDGs)</a>,
promoting a more sustainable and equitable future.
</p>
<div>
<h2>Stay in the loop</h2>
<p>
<a href="https://opengis.ch/newsletter" target="_blank">Subscribe to our newsletter</a> and stay up to date
on the latest and greatest!
</p>
</div>
<div>
<h2>Open-source</h2>
<p>
QField is <a class="reference external" href="https://github.com/opengisch/QField">
released</a> under the GNU Public License (GPL) Version 2 or above.
QFieldCloud is <a class="reference external" href="https://github.com/opengisch/qfieldcloud">
released</a> under the MIT License. Developing our solutions under these licenses means
that you can inspect and modify the source code and guarantees that you will always
have access to a complete QGIS-based field data collection and synchronization platform that is
free of cost and can be freely modified.
</p>
</div>
<div class="span4">
<h2>Legal</h2>
<p>
View our <a href="/legal">Legal Information</a> to learn about our privacy policy,
terms of service, data processing agreement (DPA), and other legal matters.
</p>
</div>
<div class="span4">
<h2>Credits</h2>
<p>
QField, QFieldCloud and QFieldSync are developed by
<a href="https://www.opengis.ch/">OPENGIS.ch</a>. OPENGIS.ch
offers <a href="https://www.opengis.ch/training-consulting/">consulting</a>,
<a href="https://www.opengis.ch/custom-development/">development</a>,
<a href="https://www.opengis.ch/qfield-training/">training</a> and
<a href="https://www.opengis.ch/qgis-support/">support</a> for
open-source software including QField, QGIS and PostGIS.
</p>
</div>
</div>
</div>
<div class="social-links">
<a href="https://fosstodon.org/@qfield" target="_blank" rel="me noopener noreferrer">
<img src="https://upload.wikimedia.org/wikipedia/commons/4/48/Mastodon_Logotype_%28Simple%29.svg" alt="Mastodon"
width="32" height="32">
</a>
<a href="https://bsky.app/profile/qfield.org" target="_blank" rel="noopener noreferrer">
<img src="https://upload.wikimedia.org/wikipedia/commons/7/7a/Bluesky_Logo.svg" alt="Bluesky" width="32"
height="32">
</a>
<a href="https://www.linkedin.com/company/qfield" target="_blank" rel="noopener noreferrer">
<img class="linkedin-icon" src="https://cdn.jsdelivr.net/gh/simple-icons/simple-icons/icons/linkedin.svg"
alt="LinkedIn" width="32" height="32">
</a>
<a href="https://github.com/opengisch/QField/" target="_blank" rel="noopener noreferrer">
<img src="https://upload.wikimedia.org/wikipedia/commons/c/c2/GitHub_Invertocat_Logo.svg" alt="Github"
width="32" height="32">
</a>
</div>
</section>
</body>
</html>