Security
The trust boundary, stated plainly.
This page is maintained by EFUPAL LLC to answer common security and privacy questions about EFUPAL QSOL-VS. It describes current practices and enabled controls; it is not an independent certification.
Entropy source disclosure
Each entropy response names its source class. The default is os_entropy — the platform CSPRNG of the serving runtime. We do not describe our default as quantum random number generation, and a different source class appears in the API and console only when it has actually been provisioned for your organization.
No private-key custody
QSOL-VS never receives, generates, or stores your private keys. You request entropy and derive keys inside your own boundary. We retain the attestation hash of a request, not the bytes we served.
Tenant isolation with row-level security
All organization data — API key records, attestations, scans, findings, policies, subscriptions, invoices, audit events — is protected by Postgres row-level security policies scoped to organization membership. Client applications use the publishable key only; the service role key never reaches a browser bundle.
Trust boundary
Inside our boundary: the entropy endpoint, validation scan processing, policy storage, and the audit chain. Outside: your key material, your workloads, and your infrastructure. Attestations are evidence of what we served, not an assertion about how you used it.
Audit chain
Audit events are append-only and hash-linked. The console exposes a verification action that recomputes the chain for your organization and reports how many events were checked and whether the chain is intact.
What we do not claim
We make no guarantee of preventing interception, no claim of certified compliance we have not obtained, and no projection of transaction volumes. Copy across this site is limited to disclosed sources, NIST-aligned algorithm references, and modeled figures labelled as models.
Report a vulnerability: security@efupal.ai — EFUPAL LLC, 1001 S. Main St. #7973, Kalispell, MT 59901, United States.