Quantum Logo
Quantum Care
Collective
Back to Quantum Home ENTERPRISE TRUST & SECURITY
Data Sovereignty & Encryption Standard

Enterprise Security & Privacy Architecture for Medical Credentials

Your credentials are encrypted at rest with AES-256 and in transit with TLS 1.3. We never share your data with an agency or facility without your explicit, per-request consent.

Encryption Standards

All stored credentials, PDFs, and user data are encrypted at rest using AES-256 bit encryption. All network communications are forced over encrypted TLS 1.3 connections.

  • AES-256 Bit Storage Encryption
  • TLS 1.3 Transport Security
  • Encrypted Automated Backup Vaults

Authentication & Access

Strict role-based access control (RBAC) ensures only authorized account owners can view uploaded credentials. We support multi-factor authentication (MFA) and encrypted session controls.

  • OAuth 2.0 Single Sign-On (Google & Apple)
  • SMS & Authenticator App 2FA
  • Clinician-Authorized Recruiter Dispatches

Data Privacy & Non-PHI Standard

Quantum is an administrative technology and credentialing platform for independent clinicians. We do not collect, process, or store Protected Health Information (PHI) or patient medical records (EMR). All clinician Personally Identifiable Information (PII) is safeguarded with SOC 2-aligned cryptographic standards.

  • Strict Non-PHI Data Isolation Architecture
  • SOC 2 Type II Roadmap Alignment
  • Practitioner PII & Identity Custody Standards

Data Ownership & Right to Erase

You own 100% of your data. We never sell provider credentials, contact records, or earnings logs to third parties. If you close your account, your data is permanently deleted upon request.

  • Zero Third-Party Data Monetization
  • One-Click Export of Vault Artifacts
  • Permanent Account & Data Deletion

Key Infrastructure & Verified Subprocessors

Vercel Cloud InfrastructureNext.js serverless application hosting with encrypted private object storage (Vercel Blob) and SSL/TLS transport.
Managed PostgreSQL DatabaseCloud database cluster with mandatory SSL/TLS transit encryption and AES-256 storage encryption at rest.
Stripe PaymentsPCI-DSS Level 1 certified payment processing for platform billing, optional Concierge services, and agency settlements.
Google AI ServicesEnterprise Gemini AI integration for secure document OCR, credential extraction, and receipt parsing with zero model training on customer data.
Twilio CommunicationsSecure SMS delivery for two-factor authentication (2FA) verification codes and urgent shift alerts.
PostHog AnalyticsProduct and telemetry analytics with client-side password masking and privacy safeguards.

Have security or vulnerability questions? Reach our security engineering team directly at security@quantumcarecollective.org

Quantum Care Collective, Inc. • © 2026 All rights reserved.