Security & Trust
Straight answers on how we handle your data — who can see it, where it lives, and what happens if you leave.
Handing a technology partner access to your business is a big deal, and you should ask hard questions before you do. This page collects the answers in one place. For how security is built into the way we work, see governance and security, and for the longer form, security and your data.
Who can see your data?
Only the people and agents working on your account, and only your data. Every client sits in a completely separate silo, and nothing crosses over between clients. Access is controlled per team and per client, so people see what they need for the work in front of them, and no more.
Where does your data live?
Your information stays in your own space on Notio, our platform. Often we don't hold the original file at all, only a vectorised version, which is enough for the AI to find what it needs without the raw document sitting anywhere it shouldn't. Where data legally cannot leave your building, we can run everything on an on-premise server with its own GPU, so nothing leaves your control.
Is it safe to connect our email and files?
Yes, and you choose what is connected. You are not handing over a master key. You connect the sources you want us to work from, and you can see what is in scope. Your context sits in one governed place rather than scattered across a dozen tools and personal accounts.
Do people still check the AI's work?
Always. AI clears the routine work and flags anything it is unsure about, and a person makes the judgement calls. Nothing important goes out on autopilot.
What happens to your data if you leave?
It is your data and your knowledge. If you ever move on, you are not held back by us holding your context. We believe a partner earns the next month by the value they deliver, not by locking you in.
Reporting a security issue
If you believe you have found a vulnerability in a QuantalAI system, email hello@quantal.ai with the details. We will acknowledge your report and keep you updated while we investigate. Please give us a reasonable opportunity to resolve the issue before disclosing it publicly.
Talk to us about your requirements
Every business carries different obligations. If you have specific compliance, data residency or audit requirements, get in touch and we will tell you plainly what we can and cannot meet.