Your data
Your clients' documents, handled carefully.
What happens to the documents your agency uploads during the pilot: who can see them, who processes them, and how to delete them. The pilot terms are the binding version.
At a glance
- Your own workspace. Only the people you invite can open it. Other agencies never see your clients.
- Never used to train AI. Not by Quillon, and not by the providers below under their business terms.
- Virus-scanned on arrival. Every file is scanned before anything reads it.
- Originals kept exactly as uploaded. Every value Quillon shows links back to the page it came from.
- Delete a client anytime. Workspace owners can permanently delete a client in Quillon.
- Stored in the United States. Encrypted in transit; our database provider also encrypts it at rest.
Who processes your documents
- Render (United States) runs the Quillon application.
- Supabase (United States, East) stores the database, including the original files.
- Cloudmersive scans each upload for viruses. It processes the file in memory to return a verdict and does not keep it.
- Microsoft Azure AI Document Intelligence (United States) reads scanned pages. Microsoft deletes the file and its result within 24 hours.
- Anthropic (the Claude API) double-checks values the automatic reading is unsure of, and answers questions you ask in Ask Quillon using your book's organized data. Anthropic does not train on API data.
We will tell pilot agencies before adding a new provider.
What we don't do
- Sell your data or share it with other customers.
- Send anything to carriers, clients or anyone else on your behalf.
- Bind, quote or change coverage. Everything Quillon reads stays a proposal for you to review.
- Use advertising trackers or analytics scripts on this website.
Deleting data
One client: a workspace owner opens the client, goes to Documents and chooses "Delete this client". Its files, everything read from them and its portfolio are removed right away.
Your whole workspace: email henry@quillonrisk.com. We delete it within 30 days, usually much sooner, and confirm in writing.
Database backups are kept for 7 days, so deleted data leaves the last backup within a week.
Where we are
Quillon is in a design-partner pilot. We don't have a SOC 2 report yet. If your agency needs a security questionnaire answered, send it to henry@quillonrisk.com and we'll answer it in writing.
If we learn your data was accessed without authorization, we tell you within 72 hours.