QEDARA TRUST CENTER
Security built around your workspace
Understand the controls around access, sensitive actions and service operations.
Access to contracts
QCM checks authenticated workspace membership and the permission applicable to each operation. Selecting a workspace in the browser does not itself grant access. Members have assigned roles; administrators should remove access when it is no longer needed.
Sessions and privileged actions
The reviewed configuration uses a 120-minute inactivity limit and a warning at 115 minutes. Background polling does not count as human activity. Privileged platform actions use additional controls. Closing a tab is not a reliable substitute for logging out.
Signing and document integrity
Electronic signing uses invitation and verification workflows, with signed outputs and evidence records. Signing access is separate from workspace membership. Do not share invitation links or verification codes. The standard workflow is not represented as a qualified electronic signature.
Backups and recovery
The published privacy notice describes rolling backups. For a continuity assessment, request the applicable backup scope, retention and restore-test evidence. Backup availability is not the same as a demonstrated recovery time.
Testing and assurance
QCM has security review and remediation records. Their dates, tested releases and limitations matter. Ask for the relevant assessment summary rather than assuming that an earlier test validates every later release. No independent certification is asserted by this page.