Data security
An impenetrable fortress for the security of your data
Hector is a cloud SaaS solution built to protect your sensitive information. Your data is hosted, encrypted and accessible only to authorized people. We manage the security infrastructure for you.
How Hector secures your data
Hector stores your data on servers located in your region, within Canada for american organizations, or within Europe (Paris or Geneva) for European organizations. All data moving through the platform is encrypted using private keys, preventing any unauthorized access to your transactions.
Our database engines are kept continuously up to date with the latest protections. Your credentials and passwords are stored securely, and the confidentiality of your data in the cloud is ensured at all times. And because nothing is ever completely foolproof, we do not keep your credit card details, so this highly sensitive data is never exposed to anyone who might try to breach the fortress.
Our security pillars
Regional hosting, in your jurisdiction
Your data stays within its region and is never transferred outside it. European data is hosted in the EU (Paris) and Switzerland (Geneva), under European data-protection law (GDPR); Canadian data is hosted in Canada, under applicable Canadian data-protection law. Primary servers are in-region, and backups are held under contractual agreement.
Data encryption
All data, including backups, is encrypted using industry-standard algorithms. The encryption keys are kept confidential by our infrastructure team, with strictly controlled access.
Strictly controlled access
Access to data is limited to authorized staff only, through authentication and role-based permissions. Our vendors access no data without prior written authorization.
Secure payments, no card storage
Hector does not collect or store your credit card information: payments are processed directly by Stripe, a secure payment provider. Your card details are never visible to our teams.
Our security measures at a glance
| Area | What Hector puts in place |
|---|---|
| Hosting | Servers in your region: Canada, or Europe (Paris EU, Geneva Switzerland) |
| Backups | Held in-region under contractual agreement |
| Encryption | Data and backups encrypted, private keys with restricted access |
| Access control | Authentication + role-based permissions; vendors have no access without written authorization |
| Payments | Processed by Stripe; no card data stored by Hector |
| Patches & vulnerabilities | Critical flaws fixed within 1 business day; serious ones within 1 day to 1 week |
| Logging | Daily logs captured and analyzed by the security team, restricted access |
| Compliance | GDPR (Europe) and applicable Canadian data-protection law |
Software built for every industry
Hector adapts to your needs, whatever your industry.
Everything you need
Asset Tracking
Get an instant overview of all your hardware and software assets, with a flexible tool that adapts to your needs.
Equipment Loans
Automate equipment check-in and check-out, and keep clear track of your loans and rentals.
Mobile App
Access Hector anywhere: track your assets, scan your items and reserve equipment securely.
Report Generation
No more manual reports. Generate your inventories and equipment audits in just a few clicks.
Notifications & Reminders
Get alerted automatically whenever an action, an overdue return or a maintenance task needs your attention.
Data Security
Your sensitive information is protected and stored in a highly secure environment.
Barcodes & QR Codes
Generate and scan barcodes and QR codes to track your assets quickly and without errors.
RFID Inventory
Identify your assets by radio frequency (RFID): no more manual entry or time lost during inventory counts.
See more features
User Synchronization
Import your employees, students or clients so they can access Hector and act autonomously.
Single Sign-On (SSO)
Log in instantly with single sign-on, without re-entering your credentials every time.
Operations Module
Manage your daily activities: procurement, preparation, delivery and repair of your equipment.
Cloud Solution
Your inventory hosted in the Cloud, synced and accessible anytime, anywhere.
Inventory Reconciliation
Compare your physical inventory against your Hector data, spot discrepancies and make your stock reliable fast.
Iris Module
Link your QR codes to specific actions and trigger creation, movement or consumption in a single scan.
Accounting Module
Centralize invoices and payments in Hector: templates, documents and clear tracking of your transactions.
Transfer order
Move equipment between stockrooms and sites, with full traceability of every transfer.
Purchase Orders
Order from your suppliers, receive equipment and enter serial numbers right at receipt.
Requisitions
Let your users request equipment from a catalog and track each request until fulfilled.
Work Orders
Plan and track repairs on your equipment, from the initial request to completion.
Maintenance
Schedule preventive maintenance by subcategory or asset and get alerted before each due date.
Customization
Adapt fields, grids, email templates and printouts so Hector fits your processes.
Artificial Intelligence
Generate subcategory images, sort imported models and rename technical references into names your teams recognize.
Rental rate
Apply hourly, daily, weekly or monthly rates automatically to every loan, all the way to the invoice.
Your questions, answered
Where is my data hosted?
All your data is stored on servers in your own region : within Canada for Canadian organizations, or within Europe (Paris for the EU, Geneva for Switzerland) for European ones. It is encrypted (including backups), with keys kept confidential and strictly controlled access. Primary servers are in-region; backups are held under contractual agreement.
Is my bank card information stored?
No. Hector does not collect, store or process any bank card data. Payments and subscription renewals are handled directly by Stripe; your details never pass through our teams.
How do you handle patches and vulnerabilities?
Vulnerabilities are identified through automated scans, manual tests and audits, then fixed by priority: critical flaws within one business day, serious flaws within one day to one week, medium and low levels in our regular updates.
How is data logging handled?
Daily logs of system activity and security events are captured automatically, retained according to applicable regulations and analyzed by our security team. Access is limited to authorized staff.
Do you have a security assurance plan?
Yes. Our security assurance plan is available for download here.