Where your visitors' data lives, and who can see it.
Plain answers to the questions a district IT director or a city clerk asks. The free plan runs on exactly the same infrastructure and controls as the paid ones.
Hosting
EduQueue runs on Amazon Web Services in the United States (us-east-1, Northern Virginia). The database is Amazon RDS for PostgreSQL with encryption at rest; application servers are EC2 instances behind Nginx. Photos and documents are stored in Amazon S3.
Tenant isolation
Every organisation is a separate tenant. Isolation is enforced in the database itself with PostgreSQL row-level security: the application's database role cannot read a row that belongs to another tenant, whatever the application code does. That is the same mechanism that keeps the school district's records and the city's records apart today.
In transit
All traffic is HTTPS (TLS 1.2 or better). There is no HTTP fallback. Badges print locally from the browser; nothing is sent to a printing service.
Visitor photos
Photos are stored in Amazon S3 under unguessable identifiers, the bucket cannot be listed, and they are shown only inside the tenant's signed-in pages. They are used for the visit record, the badge and the evacuation list and for nothing else. Photo deletion is handled on request as part of a data-removal or export request.
Screening data
Sex-offender registry data is collected and maintained by us from state registries for all 50 states. A screening compares the visitor's name (and date of birth where you collect it) to that data at check-in and shows the desk a possible match for a person to confirm. It is a screening aid, not a determination; the policy for what happens next is yours.
Access and logins
Staff sign in with a password or, for organisations that use Google Workspace, with Google. Password attempts are throttled. Accounts are per person; shared desk logins are discouraged and the free plan's three logins are meant for three people.
Retention and export
Visit history is kept for as long as the account exists. The free plan shows 90 days of it on screen; nothing is deleted at that line. Ask and you receive a CSV export of your visitors and visits; close the account and ask, and the tenant's data is deleted.
Who publishes this
Asan Digital LLC, the makers of EduQueue. Security questions go to hello@eduqueue.com. We answer vendor security questionnaires for paid plans; for the free plan, this page is the questionnaire.