QR code security and data handling
Security, permissions and scan data
Autessa QR Codes keeps codes private by default, shares them only inside your company at the access each person needs, encrypts each scan’s visitor details at rest, and lets you stop any code instantly by pausing it.
Data handling
What is recorded when someone scans?
Each scan passes through the code’s short link, which records the scan and then redirects. Scanners do not sign in and never see Autessa.
| Recorded per scan | Why | How it is protected |
|---|---|---|
| Time of the scan | Counts, the daily chart and the scan log. | Visible only to people with access to the code. |
| Device group (iOS, Android, Other) | The device breakdown and filter. | Read from the scanner’s browser; visible only to people with access. |
| Location (country) | The location filter. | Resolved from the IP address. |
| IP address | Shown in the scan log; used to resolve location. | Encrypted at rest. |
The code itself stores only what you give it: a private name, a destination, a design and optional campaign tags. Scan details belong to your company’s Autessa account and do not leave it.
Permissions
Who can do what with a QR code?
| Level | View and download | Analytics | Destination, design, tracking | Rename, pause | Share, delete |
|---|---|---|---|---|---|
| Viewer | Yes | Yes | No | No | No |
| Editor | Yes | Yes | Yes | No | No |
| Manager | Yes | Yes | Yes | Yes | No |
| Admin | Yes | Yes | Yes | Yes | Yes |
| Owner and company admins | Yes | Yes | Yes | Yes | Yes |
Private by default
A new code is visible only to its creator (and your company admins) until it is shared.
Shared inside your company only
Share with a person, a team, a role or everyone at your company. Never outside it.
Checked on every action
Access levels are enforced on the server for every view, edit, pause, share and delete, in the web app and the CLI alike.
Control
Stop a code in one click
- Pause stops a code redirecting immediately, and keeps everything for later.
- Delete is permanent, asks for confirmation, and is limited to Admins, owners and company admins.
- The slug is assigned by Autessa and cannot be edited, so a code cannot be quietly swapped for another.
Trust Center
Autessa’s security program
For Autessa’s security practices, policies and documentation, visit the Autessa Trust Center.
FAQ
Security questions
Who can see a QR code’s scan data?
Only people who can see the code: its owner, your company admins, and anyone it is shared with. Scanners never see analytics.
Is scan data encrypted?
Yes. The visitor details recorded for each scan, such as the IP address, are encrypted at rest.
What happens if a printed code falls into the wrong hands?
A QR code only ever redirects to the destination you set. If you need to stop a code, pause it and it stops redirecting immediately; activate it again when you are ready.
Can I share QR codes outside my company?
No. Sharing always stays inside your company. People outside your company only ever reach the destination when they scan.
Where can I read about Autessa’s security program?
The Autessa Trust Center at trust.autessa.com covers Autessa’s security program and documentation.
100% customizable, code and all
Make Autessa QR Codes fully your own.
Use it out of the box, then change anything. Ask Autobot, Autessa’s AI builder, for a new field, screen, report, workflow or agent and it builds it into your copy of the app. Or open the code and edit it yourself. Nothing is locked: the app, its data and its code are yours.
Start free and make it yours