Built for organizations that need control
Enterprise SSO, dedicated static IPs, self-hosted deployment, and a security posture designed for regulated industries.
Security-first by design
QVA is an interface, not a data store. Every architectural decision is built around minimizing what we touch.
No data storage
Voice audio and transcripts are never written to disk. Quickbase records pass through, never cached.
Read more →Encryption at rest
Quickbase tokens encrypted with AES-256-GCM via Cloud KMS, bound to each user's identity.
Read more →OAuth only
No passwords. Google Workspace and Microsoft Entra ID only. Personal consumer accounts blocked.
Read more →Your permissions
QVA uses your Quickbase user token. It can only see and do what you can. Audit trails name you.
Read more →US data residency
All infrastructure runs in us-central1. No data leaves the US in the SaaS deployment.
Read more →Compliance-ready
Architecture built around SOC 2 and ISO 27001 control families. Self-hosted inherits your existing attestations.
Read more →Enterprise add-ons
Available on any SaaS plan. Or included when you self-host.
Enterprise SSO
SAML 2.0 and OIDC federation with your identity provider — Okta, Microsoft Entra ID, or any compliant IdP. Enforces your existing MFA policies, conditional access rules, and session controls. Users authenticate through your IdP; QVA never sees a password.
Dedicated Static IP
A fixed outbound IP address for all QVA traffic from your organization. Your Quickbase admin adds one IP to the realm allowlist, and all API calls route through it. No shared egress, no rotating addresses.
Self-Hosted
Run QVA on your own infrastructure. You control the cloud, the network, the database, the identity provider, and the LLM keys. We provide containerized releases, deployment guides, and ongoing support. Your data never leaves your environment.
Your infrastructure. Your rules.
Self-hosted QVA runs entirely within your environment. If your cloud is already SOC 2 attested, QVA inherits that posture.
Your cloud / VPC
Deploy in AWS, GCP, or Azure. Your networking rules, your firewall, your egress controls.
Your AI keys
Use your own Gemini, OpenAI, or Azure OpenAI API keys for speech-to-text and LLM processing. Usage billed directly to your account.
Your database
Run PostgreSQL in your own managed service. Full control over backups, retention, and access.
Your identity provider
Connect your existing IdP via SAML 2.0 or OIDC. Enforce your MFA and conditional access policies.
Your networking
Private subnets, VPN, IP allowlisting — whatever your security posture requires.
Your update cadence
Versioned releases with upgrade notes. Pin to a version and update on your schedule.
Enterprise support
Dedicated channel
A private Slack or Teams channel with the QVA engineering team for your organization.
Implementation assistance
We help you deploy, configure SSO, set up IP allowlisting, and onboard your team.
Priority resolution
Issues from enterprise customers are triaged ahead of the general queue.
Quarterly reviews
Scheduled check-ins to review usage, discuss roadmap, and address any concerns.
Ready to evaluate QVA for your team?
Tell us about your environment and requirements. We'll walk you through the architecture and answer your security questionnaire.