Yes. QR Planet uses applications to transmit, process and store Scoped Data. This happens in accordance with common best practices and all our relevant internal policies.
Yes. But only during client setup and support, and restricted to defined roles. The approval of access rights is segregated from the implementation.
Yes. Both physical and remote access to all of QR Planet's systems, whether storing or processing scoped or other data, is restricted on a need-to-access-basis.
Yes. Access rights are reviewed periodically and also when a Constituent's role changes, and are adjusted if necessary, especially privileged access rights.