KoiQuanta Data Security: How Your Koi and Compliance Records Are Protected

By KoiQuanta Editorial Team|Updated Mar 2026

USDA regulations require koi dealers to maintain compliance records for a minimum of 2 years - cloud storage in KoiQuanta guarantees this without physical filing. Paper compliance records can be destroyed by fire, flood, or simple misplacement. A filing cabinet that burns in a facility fire takes your USDA compliance records with it. A box of koi quarantine program logs that gets lost in an office move leaves you unable to respond to an inspection request. Cloud-stored records in KoiQuanta survive any physical event at your location.

This guide covers how KoiQuanta protects your data and why dealers' compliance records and hobbyists' insurance documentation are secure in KoiQuanta's infrastructure.

TL;DR

AES-256 is the same encryption standard used by banks and government agencies for sensitive data storage.
If data were somehow incorrectly modified or deleted, it can be restored to any point within the past 30 days.
If you cancel your KoiQuanta subscription, your data is retained for 90 days before deletion, during which time you can log back in to export all records.
With 2FA enabled, an attacker who obtains your password cannot access your account without also having access to your second factor (authenticator app or SMS code).
For the USDA 2-year retention requirement, records created in KoiQuanta are retained in your account indefinitely - there's no automatic purging of old lot records, koi pond water quality tracker logs, or treatment documentation.
Point-in-time recovery capability covers the past 30 days for incident response.
After canceling your subscription, your account remains accessible for 90 days, during which you can log in and export all your data using the full data export function in account settings.

Encryption: At Rest and In Transit

Data at rest: All KoiQuanta data - your pond records, fish health history, water quality logs, compliance documentation, and attached documents - is stored encrypted using AES-256 encryption. AES-256 is the same encryption standard used by banks and government agencies for sensitive data storage. The encryption key management uses hardware security modules (HSMs) and key rotation practices that prevent key exposure.

Data in transit: All communication between your device (phone, tablet, computer) and KoiQuanta's servers uses TLS 1.3 encryption. This means the data transmitted when you log a water test, generate a compliance export, or access any KoiQuanta feature is encrypted in transit and cannot be intercepted in readable form.

Attachment security: Documents attached to lot records - health certificates, import permits, purchase receipts - are stored in encrypted object storage with the same AES-256 encryption as database records.

Backup: Automated and Continuous

KoiQuanta's automated backup system creates continuous data backups with the following characteristics:

Continuous replication: Your data is replicated to geographically separated data centers in real time. If the primary data center experiences any issue, the replicated data is immediately available - there is no gap between your last action and the current backup state.

Point-in-time recovery: KoiQuanta's backup system supports point-in-time recovery for up to 30 days. If data were somehow incorrectly modified or deleted, it can be restored to any point within the past 30 days. For the 2-year compliance records that USDA requires, records are retained in their primary storage with continuous replication - the 30-day point-in-time recovery is for incident response, not the primary retention mechanism.

Geographic redundancy: Data is stored in multiple geographically separated regions. A natural disaster, power failure, or connectivity issue affecting one region does not affect the availability of your data from other regions.

Compliance Records Retention

For koi dealers with USDA 2-year records retention requirements, KoiQuanta's data retention policy ensures compliance:

Your records are retained in your account indefinitely unless you specifically delete them. There is no automatic purging of old records. Lot records from two years ago, five years ago, or the day you started your account are all accessible from your dashboard.

If you cancel your KoiQuanta subscription, your data is retained for 90 days before deletion, during which time you can log back in to export all records. For dealers concerned about long-term records retention even after a potential subscription cancellation, the data export function allows you to download all your KoiQuanta data in standard formats that can be stored independently.

Access Control and User Security

Account security: KoiQuanta accounts support two-factor authentication (2FA), which we strongly recommend enabling. With 2FA enabled, an attacker who obtains your password cannot access your account without also having access to your second factor (authenticator app or SMS code).

Staff account permissions: For dealer accounts with multiple staff users, each account has permissions configured to the minimum necessary for that user's role. A staff member who needs to log daily treatments doesn't have access to billing information or account settings. This principle of least privilege reduces the risk of accidental or unauthorized data access.

Audit log: Every significant action in KoiQuanta - record creation, modification, deletion, compliance export generation, document upload - is logged with the user account, timestamp, and action details. This audit trail is available to account administrators for security review and provides the documentation of system activity that compliance audits may require.

Data Ownership and Portability

Your data in KoiQuanta is your data. KoiQuanta does not sell your data to third parties. Your fish health records, compliance documentation, and business information are used only to provide the service to you.

Data export: You can export all your KoiQuanta data at any time from the account settings. Available export formats include CSV for parameter and observation data, PDF for compliance and vet consultation reports, and a full account data archive in JSON format for complete data portability.

Your quarantine documentation guide covers how KoiQuanta's stored records satisfy USDA compliance requirements. The quarantine software overview provides context on the features that generate the compliance records KoiQuanta protects.

Frequently Asked Questions

How does KoiQuanta protect my koi compliance records?

KoiQuanta protects compliance records through AES-256 encryption at rest, TLS 1.3 encryption in transit, continuous geographic replication to multiple data centers, and indefinite retention of records unless you specifically delete them. For the USDA 2-year retention requirement, records created in KoiQuanta are retained in your account indefinitely - there's no automatic purging of old lot records, water quality logs, or treatment documentation. The geographic redundancy ensures that physical events at any single location (fire, flood, hardware failure) don't result in data loss, which is precisely the protection that paper-based records can't provide.

Are my koi health records backed up in KoiQuanta?

Yes. KoiQuanta uses continuous real-time backup replication to geographically separated data centers. Unlike scheduled backup systems where data created between backup events is at risk, KoiQuanta's continuous replication means every record you create is replicated immediately. Point-in-time recovery capability covers the past 30 days for incident response. For long-term records, the primary data is retained indefinitely in your account with continuous replication - the backup system is an additional layer of protection, not the primary retention mechanism.

Can I export all my KoiQuanta data if I cancel?

Yes. After canceling your subscription, your account remains accessible for 90 days, during which you can log in and export all your data using the full data export function in account settings. Available formats include CSV for parameter data, PDF for compliance documents and reports, and a complete JSON data archive that includes all records in a portable format. After the 90-day retention period, data is deleted. If you need to maintain USDA-required compliance records after canceling KoiQuanta, export your data before the 90-day period expires and store the exports in your own secure location.

What is KoiQuanta Data Security: How Your Koi and Compliance Records Are Protected?

KoiQuanta Data Security refers to the suite of protective measures KoiQuanta uses to safeguard your koi management records and USDA compliance documentation. This includes AES-256 encryption, cloud-based redundancy, 30-day point-in-time data restoration, and two-factor authentication. For licensed koi dealers required to maintain compliance records for a minimum of 2 years under USDA regulations, KoiQuanta eliminates the risk of physical record loss from fire, flood, or misplacement.

How much does KoiQuanta Data Security: How Your Koi and Compliance Records Are Protected cost?

KoiQuanta's data security features are included as part of your KoiQuanta subscription rather than sold separately. Pricing depends on your chosen plan tier. Given that losing USDA compliance records can result in inspection failures and potential penalties, the cost of a subscription is modest compared to the financial and legal risk of inadequate recordkeeping. Contact KoiQuanta directly or visit the pricing page for current plan details.

How does KoiQuanta Data Security: How Your Koi and Compliance Records Are Protected work?

KoiQuanta stores your koi and compliance records in encrypted cloud infrastructure using AES-256 encryption—the same standard used by banks and government agencies. Records are automatically backed up with 30-day point-in-time restoration capability. Two-factor authentication adds a second layer of account protection. If you cancel, your data is retained for 90 days so you can export everything before permanent deletion.

What are the benefits of KoiQuanta Data Security: How Your Koi and Compliance Records Are Protected?

KoiQuanta's cloud security eliminates the vulnerabilities of paper-based recordkeeping. Your USDA compliance records survive fires, floods, and office relocations. Instant retrieval means you can respond to inspection requests without searching filing cabinets. AES-256 encryption protects sensitive data, 2FA blocks unauthorized access even if your password is compromised, and 30-day restoration protects against accidental deletion or corruption.

Who needs KoiQuanta Data Security: How Your Koi and Compliance Records Are Protected?

Licensed koi dealers who must maintain USDA compliance records for import, quarantine programs, and inspections benefit most from KoiQuanta's security infrastructure. Serious hobbyists storing insurance documentation for high-value koi collections also benefit significantly. Anyone relying on paper records stored in a physical location—a facility vulnerable to fire, flood, or loss—should consider migrating to KoiQuanta's cloud-based system.

How long does KoiQuanta Data Security: How Your Koi and Compliance Records Are Protected take?

Setup is immediate upon account creation. Migrating existing paper compliance records into the system depends on your volume of historical documentation, but ongoing record creation is real-time. Restoring data to a previous point takes minutes. The 90-day post-cancellation retention window gives you ample time to export records if you ever need to transition away from the platform.

What should I look for when choosing KoiQuanta Data Security: How Your Koi and Compliance Records Are Protected?

Look for AES-256 encryption as a baseline standard, automatic cloud backups with documented retention periods, and point-in-time restoration to recover from accidental changes. Two-factor authentication is essential for account security. Confirm the platform retains your data after cancellation to avoid losing records mid-subscription. For USDA compliance specifically, verify the platform can store and export records in formats acceptable for regulatory inspection.

Is KoiQuanta Data Security: How Your Koi and Compliance Records Are Protected worth it?

For licensed koi dealers, secure cloud-based compliance recordkeeping is not optional—USDA regulations require 2-year minimum record retention. The risk of losing paper records to fire or flood is real and the consequences are serious. For serious hobbyists, protecting insurance documentation for valuable koi is equally important. KoiQuanta's encryption, backups, and 2FA deliver institutional-grade protection at a fraction of what a compliance failure would cost.

Sources

Associated Koi Clubs of America (AKCA)
Koi Organisation International (KOI)
University of Florida IFAS Extension Aquaculture Program
Fish Vet Group
Water Quality Association