QEHSCapabilities
- BYO S3 bucket per tenant
- KMS-managed encryption (Enterprise)
- Object Lock WORM retention
- Lifecycle rules + Glacier archive
Integrations / Storage + documents
Amazon S3
Attachment storage + evidence mount.
Storage + documentsGenerally availableEnterprise only
Store record attachments in your own S3 bucket with server-side encryption, tenant-scoped prefix, and optional Object Lock for WORM retention.
Other Storage + documents connectors
Every integration is auditable
HMAC-signed webhooks, OpenAPI 3.1, SDKs in every major language.
Integrations layer sits on top of the same audit log your security team already reviews — nothing bypasses the tenant boundary.