We hold quality records that auditors will want to see for years. We take that seriously.
Your quality records are stored on Supabase (AWS US-East), encrypted at rest with AES-256 and in transit with TLS 1.3. Daily database snapshots are retained for 7 days — and you can download your own complete CSV export in one click, anytime, so a current copy is always within reach.
We never sell or share your data. Row-level security isolates every organization's records at the database layer — no customer can ever see another's data, on every one of our tables. Role-based access controls (Owner / Admin / Inspector / Viewer) keep permissions tight.
Recorded inspection measurements and submitted audit answers are write-once — the database itself rejects edits, not just the app. A closed NCR refuses changes to its details until it is formally reopened, and once work starts on a CAPA it becomes a permanent quality record that cannot be deleted. Where deletion is allowed, it leaves a named, timestamped entry in the activity log.
Two-factor authentication uses an authenticator app, with one-time recovery codes issued at enrollment that you can regenerate. Owners can require it by role, with a grace period. An account owner can reset two-factor for a teammate who has lost both phone and codes; every reset is logged and the member is notified. The owner’s own two-factor is reset only by NominalQC support, after identity verification from the account’s email address.
Cal searches pages, your records and the help, and shows what a record still needs — only what your own login can see, through the same per-organization isolation as every screen. It is plain software, not an AI model: nothing you type in the app is sent to one, and Cal never creates, edits or deletes a record.
We will give 90 days' notice. You can export all your data anytime — and we will send you a complete data package before any shutdown so nothing is ever stranded.
Your data is always yours. Export it anytime.
Create your free account