Security is infrastructure, not a feature.
Every QR code you publish is a public-facing entry point into your brand. WaypointQR treats security as the foundation — encryption, access control, and quishing protection are not line items on a pricing page, they are how the product is built.
Security infrastructure
Data Encryption
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Media assets inherit Cloudflare R2 encryption defaults.
Access Control
Workspace isolation, role-based permissions, and audit logging on every action. Enterprise plans add SSO/SAML and SCIM provisioning.
Quishing Protection
Every destination URL is screened against known phishing and malware domains before a code goes live. Continuous re-checking catches destination drift.
Compliance Roadmap
Audit exports, data residency options, and DPAs for Enterprise customers. SOC 2 Type I planned for 2026 with Type II to follow.
Responsible disclosure
Found a vulnerability? We welcome responsible disclosure from security researchers. Reports that lead to verified fixes may be eligible for rewards.
We commit to acknowledging reports within 24 hours and to keeping reporters informed throughout the remediation process.