Security
Your records, your rules.
CAQA Ops is built so the right people see the right things, and nothing changes without a person deciding it should.
Separation by company
Every record belongs to a company, and only that company's team can see it. Being in one company gives no access to another.
Roles
Owners and admins manage the team and settings. Staff do the day to day work. Clients only see what has been shared with them.
One-time sign-in codes
People sign in with a code sent to their email, so there are no shared or reused passwords.
Two-step sign-in
Add a code from an authenticator app on top of the email code. A company can require it for every owner and admin.
The assistant asks first
It can read your records to answer questions, but every change or message is shown as a card that a person approves. Approved actions are logged.
Private links
Quote and invoice links use long random codes and stop working for drafts and voided documents.
Private files
Uploaded files need a signed-in team member to open them, unless you share a file with its client.
Keys kept server side
Payment and AI keys are stored on the server and never shown again after they are saved.
Encrypted connections
Every page and request uses HTTPS.
Backed up before every update
Data is backed up before each release, and a failed update rolls itself back.
Questions about security?
Email info@caqa.com.au and we will help.
See CAQA Ops on your own work
Book a short walkthrough. We will set up your company with you, invite your team and show you how the assistant fits your day.