OMIQ, LLC is registered as compliant with the requirements of ISO/IEC 27001:2022, the international standard for information security management systems (ISMS). This reflects our ongoing commitment to systematically managing the confidentiality, integrity, and availability of company and customer information.
Full details of the certification are available in our Trust Center.
To leverage industry-leading security standards, OMIQ is hosted in a private Google Cloud Platform (GCP) environment. GCP is recognized for its comprehensive security and compliance capabilities, including strong physical, network, and infrastructure controls.
GCP ensures high uptime and security of data. In addition to GCP's underlying infrastructure audits, OMIQ commissions an independent third-party penetration test on an annual basis to identify and remediate potential vulnerabilities.
All data is private to the user by default. Users can choose to share it with anyone they've connected with, and both users must agree to the connection before any sharing happens
Data at rest refers to inactive data stored physically in a database, disk, or similar medium. OMIQ data is stored within the secure GCP environment, encrypted at the storage layer using the Advanced Encryption Standard (AES-256).
Data residency depends on deployment type. Customers on OMIQ's multi-tenant production environment (app.omiq.ai) have their data stored in the US. Customers on a single-tenant environment are provisioned according to their specific requirements.
Data in motion refers to data traversing the network. Communication between OMIQ's servers and the customer is encrypted in transit. All connections to OMIQ use Transport Layer Security (TLS), with a minimum of TLS 1.2 enforced and TLS 1.3 preferred.
Data in use refers to data held in computer RAM, CPU cache, or other registers during job processing. While data in use may in some instances be unencrypted, all processing takes place within the secure GCP environment.
We frequently back up all customer data stored within the cloud to prevent any accidental loss due to unforeseen events. Data cannot be restored if customers delete their own data.
We monitor platform security on an ongoing basis. Any issues identified through audits or monitoring are prioritized immediately within the development backlog.
If you would like to complete a review of our security posture, more detailed information is available on the Dotmatics Trust Center.
If there are specific questions not answered in the Trust Center, reach out to our support team at support@omiq.ai.