Skip to main content

Security & Trust

Our Commitment to Protecting Your Enterprise Data

At Querynora, security is not an afterthought — it is the foundation of our platform. Because we connect directly to your Shopify, Stripe, and Google Sheets workspaces, we employ enterprise-grade security protocols to protect your transactional data, API keys, and credentials.

Strict Tenant Isolation

All database rows, configurations, and analytical snapshots are securely partitioned by organization ID. Every SQL query dynamically binds to your authenticated session organization, preventing any possibility of cross-tenant data leaks.

AES-256 Credentials Encryption

We never store raw API keys, secrets, or access tokens. All third-party platform credentials (e.g. Shopify access tokens) are encrypted at rest using AES-256-GCM before writing to our Neon PostgreSQL database.

AI Data Privacy & PII Scrubbing

Querynora communicates with OpenAI APIs solely using transient schema definitions and aggregates. Before forwarding requests, we strip out sensitive PII (customer names, emails, card numbers). Our LLM processors do not use your business data for model training.

Session & Token Security

We use secure, HttpOnly, and SameSite-restricted cookies to store cryptographically signed JWT sessions. Our system enforces strict CSRF token validation and automatic refresh token rotation on every client-side page load.

Hosting and Infrastructure

Querynora's web dashboard and analytical API engines are hosted on Vercel inside the Singapore regional servers (`sin1`), minimizing transit latency to your database. Our Neon serverless PostgreSQL database cluster is hosted securely on AWS in Singapore, protected behind secure network gateways and encrypted disk architectures.

Vulnerability Disclosures

We believe in proactive security and continuous improvement. If you discover a vulnerability or security flaw inside Querynora, please contact our security response team directly at security@querynora.com. We will acknowledge and resolve all reported issues as a matter of highest priority.