Security Architecture

All data transmitted between your device and our servers is protected using TLS 1.3 encryption. At rest, your personal information, course data, and progress metrics are secured using AES-256 encryption, the standard adopted by the U.S. government and security experts worldwide.

ExamQuest infrastructure is hosted on enterprise-grade cloud providers. Our architecture is designed for high availability and resilience, featuring:

• Automated daily backups of all critical databases, stored in geographically distributed, isolated environments.
• Continuous monitoring and intrusion detection systems to identify and neutralize threats in real time.
• Strict firewalls and network segmentation preventing unauthorized access to internal resources.

As a verified partner, we utilize Stripe for all payment processing. ExamQuest does not store, process, or transmit your raw credit card data. All financial transactions are handled by Stripe's PCI-DSS Level 1 compliant infrastructure, ensuring the highest level of security available in the payment industry.

Access to user data within ExamQuest is strictly limited on a "least privilege" basis. Only authorized personnel with a legitimate business need can access production systems, and all access is logged and audited. We employ multi-factor authentication (MFA) for all internal administrative accounts.