Security, privacy & governance
Governance enforced by the platform, not just the interface
Permissions are checked on the server for every read and write. In this demonstration workspace, role rules are enforced by the database itself.
Data stored in Canada
Assets, metadata and backups stored in Canada under our hosting arrangement; locations and support dependencies documented.
Single Sign-On
SAML 2.0 with UVic Shibboleth preferred, OIDC where approved, with group-to-role mapping and session controls.
Granular permissions
Access by role, group, ownership, rights metadata and classification at library, folder, collection and asset level.
Locking & approvals
Administrators lock assets during review; approval, rejection and archiving restricted to authorised managers.
Audit logging
Uploads, edits, approvals, overrides and shares recorded for governance review.
FIPPA support
Access controls, audit logs and Canadian storage; QuickHands supports UVic's Privacy Impact Assessment.
Delivery protection
Signed URLs, domain restrictions, anti-hotlinking, rate limits and DDoS protections at CDN and application layers.
Redundancy & recovery
Redundant storage, backups and documented recovery; UVic witnesses a restore test before go-live.
Certifications — stated precisely
The platform is deployed on Google Cloud Platform using services covered by Google Cloud's independent assurance, including ISO/IEC 27001, SOC 2 Type II and CSA STAR, within the scope of those reports. These are Google Cloud's certifications; QuickHands Inc. does not itself claim them. The public demonstration contains no confidential UVic content — all sample assets are fictional.