LEGAL
Security
Q-Expert works with the design of your scripts, never with your data.
Last updated: October 2026
What we store
- The design of your projects: table and field names, expressions and file paths
- The scripts you generate
- Your account details and license
What we never receive
- Your data files (QVD, CSV, Excel): they are read inside your browser
- Sample rows shown in Row Preview: they stay in your browser
- Credentials for Qlik, databases or servers: Q-Expert never connects to them
How it is protected
- Every connection uses HTTPS.
- Each account can only read and change its own projects (row-level security in the database).
- The app is locked down so your browser can only talk to our own server, and your scripts are never sent to any AI service.
- Our administration panel requires two-factor authentication and records every action.
- Usage statistics record actions such as "generated a script", never names, fields or code.
Infrastructure
Q-Expert runs on certified providers.
| Provider |
Used for |
Certifications |
| Netlify |
Hosting of the app and this website |
SOC 2 Type 2, ISO 27001 |
| Supabase |
Database and sign-in |
SOC 2 Type 2, ISO 27001 |
| Lemon Squeezy |
Payments, as merchant of record; we never see card details |
PCI DSS handled as merchant of record |
| Resend |
Service and product emails |
SOC 2 Type II |
For companies
We sign a Data Processing Agreement on request, answer security questionnaires, and delete accounts and their projects on request. Write to devteam@qfabrica.com.
Read the Privacy Policy
Report a security issue
If you find a vulnerability, write to devteam@qfabrica.com with the details. We reply within 2 business days and fix confirmed issues as a priority.
devteam@qfabrica.com