Documentation
Published pages, in one index
Links to documents we actually maintain. There is no separate knowledge-base subdomain and no unpublished runbook here.
Use this page when a DPO, IT reviewer or partner asks for “the docs”. Each item opens the source page. Gaps (no ISO, no SOC 2, no published pentest) are listed on the Trust Center and the security pack, not hidden here.
Product
How it works
Channel setup, designated person, 7-day acknowledgement automation, register and QR. The legal duty stays with the organisation.
How it works →Country hub for this language
Member-State landing for the current locale (or the EN international index). Not legal advice.
Country hub for this language →Compliance blog
Guides and comparisons. Marketing copy; cross-check legal pages for the binding text.
Compliance blog →
Legal
Terms of Service
Qreportly LLC identity, governing law, and the GDPR / Member State carve-out for channel data.
Terms of Service →Privacy Policy
Roles for account vs channel data. Report content is processed as a processor under Art. 28, not as Art. 6(1)(b) for whistleblowers.
Privacy Policy →Data Processing Agreement
Public Art. 28 DPA for Channel Data.
Data Processing Agreement →International Data Transfer Addendum
Completes SCC 2021/914 annex information. Module 2 for Customer → QReportly. Module 3 for QReportly → subprocessors. Does not reproduce the Commission text.
International Data Transfer Addendum →Subprocessors
Supabase (EU Frankfurt), Vercel, Stripe, Brevo, optional Google OAuth. Not an EU-only claim for every ancillary provider.
Subprocessors →Cookie Policy
Marketing site and necessary session cookies. The public reporting channel is designed not to persist reporter IP.
Cookie Policy →
Security and operations
Trust Center
TOMs, retention defaults, MFA, honest negatives (no ISO / SOC 2 / pentest report).
Trust Center →Security evaluation pack
Single DPO/IT checklist with source links.
Security evaluation pack →Responsible disclosure
contact@qreportly.com. Not a paid bug bounty.
Responsible disclosure →Application status
Live reachability probe on this site. Not a historical SLA dashboard.
Application status →
Partners
Partner program standard
What “QReportly Partner” means commercially — and the wording that is not a legal or ISO certification.
Partner program standard →