Security and your data

How your documents are protected

Only the people you choose can open your documents

Your documents belong to you and your organization. Our servers check who is asking every time a file is opened, and only you, your organization’s administrators, and the people or organizations you share with get through. No document is ever reachable by a public link.

Sponsors see the scoreboard, never the work

If your organization joined through an enterprise or cohort sponsor, that sponsor sees who its members are and how they are progressing. It cannot open your documents or proposals. You can choose to share a specific file with them, and that share is yours to make and yours to revoke.

Your data stays in the United States

Your files are stored in the United States, on managed enterprise cloud infrastructure, encrypted in transit and at rest.

Sign-in built for institutions

You can sign in without a password at all, and two-factor authentication is yours to turn on. Enterprise plans support your institution’s single sign-on, so access follows your identity provider and offboarding happens where your IT team already does it.

We never touch your card

A PCI-compliant payment processor handles payment entirely. Quillify does not see or store card numbers.

If you are the person doing diligence

The privacy policy sets out what is collected, what it is used for, and the categories of processor involved, along with your rights as a California resident or under GDPR. The FAQ answers the shorter versions of most of this.

Send your security questionnaire to our team and we will work through it in the same detail as this page, including anything here you want evidenced. Higher-education buyers can request our completed HECVAT the same way.