QMSdesk Privacy Policy
Effective Date: January 1, 2026 | Document ID: POL-SEC-001
1. Purpose & Scope
QMSdesk Technologies ("QMSdesk", "we", "us", or "our") provides an enterprise Electronic Quality Management System (eQMS) engineered for regulated life sciences organizations. This Privacy Policy governs our processing of personal and tenant data in compliance with global privacy regulations, including GDPR, CCPA, and HIPAA.
2. GxP Data Segregation & Multi-Tenant Edge Security
Customer quality records, audit trails, standard operating procedures, and training records are strictly segregated using database-level schema isolation and encrypted middleware routing (`proxy.ts`). Customer data is never co-mingled, mined, or used to train public machine learning models.
3. 21 CFR Part 11 Electronic Signature Logs
In compliance with FDA 21 CFR Part 11 and EU GMP Annex 11, electronic signature manifests capture user identity, timestamp, signature meaning (`APPROVED_BY`, `REVIEWED_BY`), and SHA-256 cryptographic checksums. These records form an immutable legal audit trail retained according to customer-configured record retention schedules.
4. Contact Our Data Protection Officer
For questions regarding data privacy, SOC 2 compliance, or data processing agreements (DPAs), contact our dedicated compliance office at:
Official Inquiries: info@akatalyst.com | contact@qmsdesk.com
HQ & Global Delivery: Chennai, India (+91 776 007 8606)
Middle East Office: Dubai, UAE (+971 50 280 1688)