The security of your data is part of the product.
Queiros turns your company's field operations into structured records. That means we process operational data that belongs to you. Here we explain, plainly, how we protect it, where it lives, and who can see it.
Per-organization isolation
Every customer's data is strictly separated at the architecture level. It is never mixed.
Your data does not train models
Neither Queiros nor our AI providers use your data to train models.
Official WhatsApp channel
We operate exclusively on Meta's official WhatsApp Business platform.
The data is yours
Your organization owns its data, always. We only process it to provide the service.
Infrastructure
Infrastructure and compliance
Queiros runs on top-tier cloud infrastructure providers such as Google Cloud. We do not operate our own servers: we inherit the physical, network, and operational controls of the most audited providers in the world.
The certifications listed belong to the infrastructure providers Queiros runs on. Queiros' own SOC 2 certification is part of our compliance roadmap; in the meantime, we answer security questionnaires and enable technical reviews directly with our team.
Managed infrastructure
We use managed cloud services: patching, physical security, and infrastructure resilience are handled by our providers, under their own audited security programs.
Continuous monitoring
Centralized logging and monitoring with alerts on errors and anomalous behavior, 24/7.
Backups and continuity
Daily automatic backups and redundant infrastructure for continuity in case of failure.
Data
Data protection and ownership
Simple rule: the data your team loads into Queiros belongs to your organization. We are the processor, never the owner.
Secure connections
Information travels over secure connections (HTTPS) and is stored encrypted at rest with our cloud providers.
Per-organization isolation
Every record is tied to a single organization, and isolation is enforced across every layer of the system. No user, integration, or model can access another organization's data.
Queiros team access
Our team's access to production data is limited, named, and follows the principle of least privilege, only for support and service operation.
Organizational continuity
If a member of your team leaves the company, their historical records stay with the organization. The data remains yours, always.
Retention and deletion
When the contract ends, we delete your organization's data on request, within 30 days, with written confirmation.
Integrations under your control
Integrations with your own tools are authorized with scoped permissions, and you can revoke them at any time from your own account.
Artificial intelligence
AI security
Queiros is an AI product, and we treat the security of intelligent processing with the same rigor as the rest of the stack.
Your data does not train models
Queiros does not train AI models with customer data, and we work with AI providers under enterprise terms establishing that submitted data is not used to train their models.
Context scoped by organization
Queiros' AI only accesses the context of the organization of the user writing to it. Per-organization isolation also applies to AI processing.
Traceability and reversibility
Every operation the AI executes is logged. Users can correct or revert any record in natural language. There are no silent changes.
Evaluation before production
Every change in AI behavior goes through a battery of automated evaluations before reaching production.
Messaging
How data flows through WhatsApp
Your team operates from WhatsApp, so we explain exactly what path each message travels before it becomes a record.
Your field worker
Sends an audio, photo, or text from their WhatsApp. WhatsApp encrypts the message in transit.
WhatsApp Business Platform
The message reaches Queiros through Meta's official platform for businesses (Meta Business API).
Queiros
The message is processed, structured, and stored encrypted, isolated within your organization.
We use exclusively the official WhatsApp Business infrastructure (Meta Business API). We do not use unofficial WhatsApp clients or automations outside Meta's platform.
Third parties
Subprocessors
Categories of third parties that process data on behalf of Queiros. We keep the list to the minimum needed to operate the service; the full detail is shared with customers as an annex to the data processing agreement.
| Provider | Purpose | Data processed |
|---|---|---|
| Google Cloud | Infrastructure, storage, and AI processing | Platform data |
| Meta Platforms | WhatsApp Business Platform (messaging) | WhatsApp messages, phone numbers |
| Other infrastructure providers | Platform support services | Depending on the service; detailed in the DPA annex |
Changes to this list? Customers with an active contract are notified before we add a new subprocessor.
Privacy
Privacy and legal framework
Clear roles
Your organization is the data controller; Queiros acts as the data processor, processing data solely under your instructions and to provide the service.
Regulatory framework
We operate under Argentina's Personal Data Protection Law 25.326 and align our practices with GDPR principles for customers with EU operations.
No sale or transfer of data
We do not sell, rent, or share customer data with third parties beyond the subprocessors required to operate the service. Period.
Data processing agreement
We sign a DPA (Data Processing Agreement) with every customer that requires one, complementing the confidentiality clauses of the service contract.
Individual rights
We facilitate the exercise of access, rectification, and erasure rights over personal data, channeled through the responsible organization.
Engineering
Secure development
Mandatory review
Every code change goes through review and automated checks before reaching production.
Controlled deployments
Deployments are reproducible and auditable, with immediate rollback capability in case of any incident.
Secret management
Credentials and API keys are managed in dedicated secret management services, never in code.
Vulnerability reporting
If you found a vulnerability in Queiros, write to us at matias@queiros.io. We respond to every good-faith report within 48 hours and take no legal action against responsible research.
FAQ
Security frequently asked questions
The answers your IT or procurement team usually needs to move forward. If you need a full security questionnaire completed, we do that: just write to us.
Where is our data stored?
With top-tier cloud infrastructure providers such as Google Cloud, encrypted at rest and with access restricted per organization.
Do you use our data to train artificial intelligence?
No. Queiros does not train models with customer data, and we work with AI providers under enterprise terms establishing that submitted data is not used to train their models.
Who can see my organization's data?
Only members of your organization, according to the permissions you define. Per-organization isolation is enforced across every layer of the system. Queiros team access is limited, named, and only for operation and support.
What happens to our data if we stop using Queiros?
We hand over an export of your data if you need it and delete it from our systems on request, with written confirmation.
Is the WhatsApp bot official?
Yes. We operate exclusively on Meta's WhatsApp Business Platform (Meta Business API). We do not use unofficial clients.
Do you hold SOC 2 or ISO 27001 certification?
Our infrastructure providers hold SOC 2 and ISO 27001 certifications, among others. Queiros' own certification is part of our compliance roadmap; in the meantime, we answer security questionnaires and offer technical sessions with our team for vendor reviews.
Do you share data with third parties?
Only with the subprocessors required to operate the service. We do not sell or transfer data to third parties for any other purpose.
Do you sign NDAs and DPAs?
Yes. We sign confidentiality and data processing agreements (DPA) as part of the commercial process, complementing the confidentiality clauses of the service contract.
Queiros · Buenos Aires, Argentina · This trust center is updated as our security program evolves. Last updated: September 2026