Security Is Not a Feature.It Is a Foundation.

enQuesta holds SOC 1 Type II and SOC 2 Type II certifications. SOC 1 Type II validates financial control procedures that affect revenue reporting and billing accuracy. SOC 2 Type II validates data security, system availability, and confidentiality. Both are audited annually by independent third parties. These certifications demonstrate security and control maturity that utility auditors and evaluation committees expect.

Single-tenant means your database, application instance, and infrastructure are completely isolated from all other enQuesta customers. You do not share resources with other utilities. Your security team can audit and verify this isolation. This approach provides stronger data separation than logical multi-tenancy where data lives in separate schemas within shared systems.

Data is encrypted in transit using TLS 1.2+ standards and at rest using AES-256 encryption. Access controls limit system access to authorized staff with role-based permissions. Audit logging tracks all access to sensitive data. Multi-factor authentication protects administrative access. These controls combine to create defense-in-depth across the platform.

enQuesta maintains continuous backup and replication across geographically separated US-based data centers. Recovery Time Objective (RTO) is measured in hours, not days. Recovery Point Objective (RPO) minimizes data loss. Full recovery procedures are tested regularly and documented in SOC 2 audit reports.

enQuesta maintains a documented incident response plan that addresses detection, investigation, and notification procedures. Security events are logged and monitored by our security team. For incidents affecting customer data, we notify affected customers promptly and work with law enforcement as required by regulation.