Security - Protect your contracts with industry-leading technology
Your data is our priority. QNOVA protects your contracts with strong authentication, encryption and full traceability. With industry-leading security measures, your information is safe – from login and storage to signing and archiving.
Built to protect your contracts.
Extra high security
We know how important it is to keep your business information secure and confidential. That’s why we only use Swedish suppliers of servers, databases and backups. Which means all your data stays within the safe borders of Sweden. Nothing leaves the country.
To ensure that we maintain the highest level of security, QNOVA has also passed the OWASP Top 10 with flying colors. An industry standard that ensures that the most critical vulnerabilities are managed and protected. QNOVA also has a documented management system for information security.
Top 10
Your account. Your security.
Secure login and access control
Unauthorized access is one of the biggest risks in digital contract management. That’s why we offer modern solutions for secure login. In addition, access can be further restricted through VPN tunneling or by limiting traffic to specific IP addresses, providing extra protection.
- Two-factor authentication - An extra layer of security to protect your data.
- Single Sign-On (SSO) – Integrate with existing login systems such as Microsoft ADFS, Azure AD/Entra ID and Okta for a smooth and secure login.
- Customized user permissions - Control who can view, edit or sign contracts.
Who did what - and when?
Full traceability and history
In our system, every event is traceable so you can follow every step.
- Who opened, edited or downloaded a contract.
- When a signature was added.
- If anyone made changes and which version is the latest.
QNOVA continuously monitors access and internal system components, while GlobalConnect is responsible for monitoring the overall technical platform and reporting any security measures.
Legal certainty in every signature.
eIDAS and qualified electronic signatures
QNOVA complies with eIDAS Simple Electronic Signature (SES) and Advanced Electronic Signature (AdES). Our system always uses a two-factor verification, either with Swedish BankID or with a pin code via SMS.
Simple Electronic Signature (SES)
Simple electronic signature is done via email or other digital tool. With QNOVA e-signing, it becomes even more verified with a pin code via SMS.
Advanced Electronic Signature (AdES)
Advanced electronic signature logs information about signatories by email and phone number, ensuring that the right person has signed the document.
Your data, always protected.
Encryption and secure data management
We protect your information with strong encryption when it is transmitted and use advanced security measures for stored data.
- SSL protected communication - All data is transmitted encrypted to prevent interception.
- Encryption during transmission - Your personal data is protected with at least a 2048-bit encryption key or higher.
- Protected authentication - All authentications over the network are encrypted to ensure that only authorized people have access.
In addition to the OWASP Top 10, QNOVA carries out regular vulnerability assessments and external penetration tests in separate test environments.
Safe operating
environment
- HTTPS encryption and firewall protection in the QNOVA data center.
- Access control based on user permissions and network restrictions.
- Logical separation of customer environments, so that customer A can never see customer B's data.
- The operating environment is based on GlobalConnect's data center with physical redundancy, backup power, fire protection, DDoS protection and continuous monitoring.
Business continuity and incident management
- Daily backup of all customer data, stored for 120 days, with double offsite backup between two different server halls.
- Continuous testing to ensure recovery in case of problems.
- QNOVA works according to documented incident response processes for detection, escalation and handling, with continuous monitoring and logging.
- Affected customers are informed in accordance with applicable contracts and regulations.
GDPR and
data protection
- Personal data is stored securely and handled only by authorized personnel.
- Data processing agreements are always signed with both customers and subcontractors.
- QNOVA has a strict confidentiality policy to protect confidential information.
FAQ
Need any further help?
QNOVA cooperates with the following subcontractors to ensure operation, security and functionality:
- GlobalConnect AB (556597-6122) – Operating Partner
- vMar Software AB (556841-6233) – Backup
- ZignSec AB (559016-5261) – BankID verification
- 46Elks AB (556838-8184) – SMS and telephone services
Backups are taken daily and stored for 120 days.
Yes, QNOVA provides the service around the clock (24/7). Availability must be at least 99.5%, and if this level is not achieved, the customer is entitled to claim compensation under the contract.
QNOVA stores all data in Sweden and the handling of data is adapted to current GDPR legislation. We exclusively use Swedish suppliers of servers, databases and backup.
All communication is transmitted encrypted via SSL/HTTPS, and personal data is protected during transmission with at least a 2048-bit encryption key or higher. Stored data is protected in a safe operating environment with logical separation between customer environments, so that customer A can never see customer B’s contracts.
QNOVA uses role-based access control and supports two-factor authentication and Single Sign-On (SSO) with providers such as Microsoft ADFS, Azure AD/Entra ID and Okta. Access can be further restricted through VPN tunneling and by limiting traffic to specific IP addresses, providing extra protection.
Yes. Operations are provided by GlobalConnect and backup by vMar IT, both of which are ISO 27001 certified.
QNOVA has passed the OWASP Top 10 with no findings. The system is developed and tested in separate test environments, and we carry out regular vulnerability assessments and external penetration tests.
QNOVA works according to documented incident response processes for detection, escalation and handling, with continuous monitoring and logging. Affected customers are informed in accordance with applicable contracts and regulations.
Yes. QNOVA complies with GDPR, signs data processing agreements with both customers and subcontractors, and applies a strict confidentiality policy. Our security work also supports relevant principles of NIS2.
QNOVA’s operations are based on GlobalConnect’s data center with physical redundancy, backup power, fire protection, DDoS protection and continuous monitoring. Backups are taken daily and stored in two different server halls, with recovery tests and documented recovery plans.
QNOVA has a documented management system for information security with policies, roles and controls for confidentiality, integrity and availability. It covers areas such as access control, encryption, backup and incident management.
Yes. QNOVA complies with eIDAS Simple Electronic Signature (SES) and Advanced Electronic Signature (AdES), and every signature is made with a two-factor verification, either with Swedish BankID or with a pin code via SMS.
Yes. Every event is traceable: who opened, edited or downloaded a contract, when a signature was added and which version is the latest. QNOVA applies extensive logging for traceability, anomaly detection and compliance.
We’re here for you
Do you have any further questions?
Our team would be happy to help you find the right solution for managing your contracts.
