Security & Privacy
Privacy is a fundamental right.
So we built Quba to keep it. Sensitive data is masked before any AI model sees it, and restored in your answer.
Our promises
Three promises, every product
Never stored
Quba cloud processes your text and never stores it.
Placeholders only
AI models get placeholders instead of the names, IDs and card numbers Quba detects.
Encrypted
Data is encrypted in transit and at rest.
How it works
Processed. Never stored. Returned to you.
Every Quba product follows the same four steps.
Detect
Quba finds names, IDs, health and card details in your text.
Mask
Each value is swapped for a placeholder before it reaches the AI model.
Answer
The AI model works with placeholders only.
Restore
The real values go back into the answer. The AI model never sees them.
What we keep
What we keep, and what we don’t
In Quba cloud, we keep only what billing needs, encrypted at rest.
We keep, for billing
- The time of each request
- The size of each request
We never keep
- Your prompts and text
- Documents you check
- Sensitive values Quba detects
- AI answers
Access control
Only the right people get in
Passwordless sign-in
You sign in with a one-time code sent to your email. There’s no password to leak.
Roles
Owners, admins and members. Only owners and admins manage API keys and policies.
Separate organizations
Every request is scoped to your organization. No one outside it sees your data.
Hashed API keys
Keys are stored hashed and can be set to expire.
Session control
See every device signed in to your account and sign any of them out.
Limited staff access
Only a few Quba staff can view account data, behind a second sign-in, and they can’t change it.
By product
What each product touches
Quba for Teams
A browser extension that checks text areas, search boxes, rich-text editors and Google Docs. It skips passwords, login and sign-up forms, identity fields, and hidden or code-editor fields.
Learn moreDeployment
Your data stays where you put it
Quba cloud runs in the EU. Private cloud and on-premises deployments are available on enterprise plans.
Quba cloud
Hosted by us in the EU. Your text is processed, never stored.
Your private cloud
Run Quba in your own cloud account or VPC. Enterprise plans only.
On-premises
Run Quba in your data center. Enterprise plans only.
Service providers
Who helps us run Quba
| Provider | What it does |
|---|---|
| Cloudflare | Hosting, network and database |
| Google Cloud | Detection engine |
| Amazon Web Services | Sign-in emails |
| Stripe | Payments |
| PostHog | Product analytics |
We update this list before a new provider starts processing customer data. To be told about changes, email security@quba.ae.
Responsibility
Who answers for what
The data you protect
Text you send through Quba for Teams, Systems and AI Agents. You decide what’s masked.
Data about you
Your account, billing and visits to our website, covered by our privacy policy.
Privacy policyFAQ
Questions reviewers ask
Is Quba safe to use?
Quba masks sensitive data before any AI model sees it, and Quba cloud never stores your text. Data we do keep is encrypted in transit and at rest.
Does Quba store my data?
No. Quba cloud processes your text and never stores it. Quba keeps only usage records, the time and size of each request, for billing.
Is my data encrypted?
Yes. Data is encrypted in transit with TLS and at rest with AES-256.
Does Quba train AI models on my data?
No. Quba cloud never stores your text, so there is nothing kept to train on.
Can Quba miss sensitive data?
Yes, sometimes. We work hard to make detection accurate, but no detection is perfect. It may miss sensitive data or flag something that isn’t sensitive.
Does the AI provider see my sensitive data?
Not the data Quba detects. The AI provider receives placeholders instead of names, IDs, health or card details.
Does Quba see my passwords?
No. Quba for Teams skips password fields, login and sign-up forms, and fields made for identity data like email, phone, address, card numbers and one-time codes. Site owners can opt any field out with data-quba="off".
Where is my data processed?
In the EU. Enterprise plans can also run Quba in their own cloud or data center.
How do I report a security vulnerability?
Email security@quba.ae. We read every report.