generated: '2026-07-19'
method: searched
source: https://www.hqo.com/trust-and-security/
url: https://www.hqo.com/trust-and-security/
certifications:
- SOC 2 Type II
- ISO 27001:2022
- CSA STAR Level 1
- GDPR
- CCPA
- PIPEDA
- EU-U.S. Data Privacy Framework
security_practices:
  encryption_in_transit: TLS 1.2+
  encryption_at_rest: AES-256
  penetration_testing: at least annually
  vulnerability_scanning: every 2 weeks (automated third-party)
  authentication: username/password + SSO via SAML
evidence:
- source: https://www.hqo.com/trust-and-security/
  keywords: [soc 2, iso 27001, csa star, gdpr, ccpa, pipeda, data privacy framework]