Security & Compliance

Payments infrastructure is only as good as its security. Security and traceability aren't features we add — they are the foundation every Quantro Connect system is built on.

Platform security

• All traffic is encrypted in transit with TLS; sensitive data is encrypted at rest.
• Infrastructure runs in hardened, isolated containers with read-only runtimes and least-privilege access.
• Every deploy is built from signed, immutable images and health-checked before serving traffic.
• Complete, tamper-evident audit trails: every transaction and every administrative action is on the record.

Payment data

The Quantro Connect gateway is being built to align with PCI DSS requirements ahead of launch, with card data handled through certified channels and never stored on our marketing systems. Compliance attestations will be published here as certification milestones are completed.

Data protection

Personal data is processed under Thailand's PDPA — see our Privacy Policy. Data is hosted in the Asia-Pacific region with tested backup and recovery procedures.

Responsible disclosure

If you believe you've found a security vulnerability in any Quantro Connect or Quantro Flow system, please report it to [email protected]. We ask that you give us reasonable time to investigate and remediate before public disclosure; we commit to acknowledging reports promptly and not pursuing good-faith research.