Incident response
We notify affected customers without undue delay and within 72 hours of becoming aware of a personal-data breach.
Incident Response Process
Security vulnerabilities can be reported to security@qpher.ai. Qpher acknowledges reports within 48 hours and provides a triage assessment within 7 days. When an incident happens, we contain and fix it first, then review its root cause and the measures that prevent a repeat.
Breach Notification
If a personal-data breach affects customer data, Qpher notifies the affected customers without undue delay and within 72 hours of becoming aware of it, as our Data Processing Agreement commits. Notification includes the nature of the breach, categories and approximate number of affected records, likely consequences, and measures taken or proposed to address the breach. Qpher also notifies the relevant supervisory authority within the same 72-hour window when required. Customers with custom DPA terms may have additional notification requirements specified in their agreement. Breach notifications are delivered via email and in-portal notification to all affected tenant administrators.
Status Page
A public status page is not live yet. Until it is, write to support@qpher.ai for the current status of the service.