Qbox managed appliance terms.

The Qbox is a Quantum-managed hardware appliance deployed at a dealership site to run approved automation for that dealership only. These terms supplement the Terms of Service and any signed dealer agreement or security addendum. Where a signed agreement conflicts with this page, the signed agreement controls.

• The appliance, its operating image, configuration, certificates, and embedded software remain the property of Quantum Connect AI, LLC unless a signed agreement states otherwise.
• The dealership receives a limited, non-transferable right to host and use the appliance for the approved workflows during the term.
• Quantum administers the operating system, software, certificates, and configuration. The dealership does not receive administrative access.
• The appliance may not be modified, reimaged, cloned, opened, relocated to another rooftop or entity, resold, leased, or reverse engineered.

The dealership provides a suitable hosting environment and approves placement before install.

• A physically secure location with controlled access, stable power, and adequate ventilation.
• A dedicated vendor or IoT network segment, or an independent cellular connection, so the appliance is separated from dealership production systems.
• Default-deny access to dealer internal subnets, DMS, finance systems, printers, file shares, cameras, and point of sale systems.
• No inbound internet exposure, public IP assignment, or port forwarding to the appliance.
• Notice to Quantum before any change to appliance location, network segment, addressing, or firewall policy.

One of the following models is agreed before deployment.

• Dealer network deployment on a dedicated vendor or IoT VLAN, or a restricted SSID with internet-only access.
• Independent cellular deployment using a managed LTE or 5G router and business SIM, which avoids the dealership network entirely.

In both models the appliance initiates outbound encrypted sessions to approved Quantum services. It does not accept inbound connections from the internet or from the dealership network.

• Each appliance carries a unique certificate, cryptographic key, or equivalent identity issued only after authenticated enrollment.
• Dealer-specific configuration and credentials are never embedded in a shared device image or copied between appliances.
• Credentials, tokens, and certificates are held in an approved secrets manager and never shared with dealership personnel.
• Password-based SSH and root login are disabled. Administrative access runs only through an approved identity-aware path with named accounts and multifactor authentication.
• Quantum maintains an asset record for each appliance covering serial number, MAC address, dealer group and rooftop, location, installer, deployment date, support owner, connectivity type, and status.

The following are prohibited for both parties and for anyone acting on their behalf.

• Inbound internet access to the appliance.
• Public SSH, RDP, VNC, or web-based management interfaces.
• Port forwarding, public IP exposure, or direct inbound remote control.
• Network scanning, port scanning, or broad probing of dealer networks.
• Routing, bridging, Wi-Fi access point operation, DHCP service, or DNS service.
• Unapproved access to dealer internal subnets, DMS, finance systems, printers, file shares, cameras, or point of sale systems.
• Use of the appliance as a shared gateway, remote access relay, or proxy for dealership personnel.
• Using the appliance to process social security numbers, credit applications, payment card data, banking information, or driver license images.
• Connecting unapproved peripherals, storage, or software to the appliance.

The appliance processes only the data required for approved workflows, and local storage is encrypted where supported. Highly restricted finance and identity data is out of scope by design and is routed to the dealership's approved secure process or a trained employee. Device, application, and administrative activity is logged to protected Quantum logging for monitoring, support, and investigation. Data handling follows the Privacy Policy, the Data Processing Addendum, and the security program.

• Quantum performs patching, configuration management, health checks, drift detection, and staged software updates remotely.
• Updates may restart appliance services. We schedule disruptive work outside peak hours where practical.
• The dealership provides reasonable physical access for installation, replacement, or removal on request.
• Fleet inventory and privileged device access are reviewed at least quarterly.

The dealership must promptly report a lost, stolen, damaged, tampered, or relocated appliance, and any suspected unauthorized access. Quantum may take any of the following actions immediately when a device is suspected of compromise, misuse, or policy violation.

• Revoke the appliance certificate or device identity.
• Invalidate device tokens and integration credentials.
• Disable associated proxy or egress access.
• Stop the service from accepting or initiating appliance activity.
• Trigger secure wipe of Quantum-managed local data where technically supported.
• Place the appliance in a non-operational state pending investigation, replacement, or disposal.

Revocation is a protective control. It may interrupt appliance-dependent workflows until the device is restored or replaced.

• On termination, or on written request, the dealership makes the appliance available for return or on-site collection within a reasonable period.
• Quantum revokes the device identity and tokens, then wipes or securely disposes of the appliance and its storage.
• The dealership may not retain, repurpose, resell, or dispose of the appliance without written authorization.
• Asset records are retained through the approved post-decommissioning audit period.

Quantum maintains and replaces appliances that fail in normal use during the term. The appliance is provided as part of the Service and carries no separate hardware warranty. Quantum is not responsible for loss or damage caused by unauthorized modification, relocation, unapproved network changes, power events, physical damage, or use outside these terms. Liability is governed by the limits in the Terms of Service or the signed dealer agreement.

For appliance support, deployment questions, or a security review, contact support@quantumconnectai.com or security@quantumconnectai.com.