Security and control
How QuotifAI protects your data and your systems
Quote automation security in plain terms: where your data runs, who can see it, and what the AI is allowed to do on its own.
Trusted by
How it is protected
Your environment is yours alone
Every customer runs in a dedicated environment, on its own database, in the cloud region you choose. Access is controlled per role and per page, and sign-in supports passkeys. Where you use customer portal automation, the logins QuotifAI signs in with are encrypted and kept out of every log.
QuotifAI processes quote requests, customer data and pricing, so the questions your IT team will ask are reasonable ones. These are the answers.
A dedicated environment per customer
Each customer runs on their own instance with their own database and their own credentials. Nothing is shared between customers, and no customer's data is used to process another's work. Your environment runs in the cloud region you choose: if you want it in Europe, we run it in a European region.
Access control down to the page
Roles, permissions and departments decide what each person can open and what they can change. Someone who reviews quotes does not see configuration, pricelists or user management unless you give them that.
Sign-in that resists phishing
Two-factor authentication is built in. A user can register a passkey on their own device and sign in with it, or fall back to an authenticator code. Both are available on every account.
Portal logins stay encrypted
This applies where you use customer portal automation. The credentials QuotifAI signs in to your customers' portals with are stored encrypted, and decrypted only on the machine running the portal agent, at the moment it signs in. Password values are never written into job logs.
Every attachment is scanned
Files that arrive by email are virus scanned before QuotifAI opens them or uses them in a quote. So are files the portal agent downloads, where you use customer portal automation.
Every decision is recorded
QuotifAI stores why it classified a message, matched a product or flagged a line, so you can check the calls it made and correct the ones you disagree with.
Staying in control
The AI never has the last word
Review happens per line
When QuotifAI is confident across every line it completes the quote. When one or two items are ambiguous it flags those lines, not the whole request, so your team checks two items instead of forty.
A person can take over mid-job
Where you use customer portal automation, a running portal job can pause and hand the live session to an authorised operator, who completes the step and hands control back. The job carries on from the same page.
You decide what runs unattended
Which steps run automatically and which wait for approval is configuration, set per department and per customer, not a fixed behaviour of the product.
Questions
What your IT team will ask
Where is our data stored?
In the cloud region you choose. If your data needs to stay in Europe, we run your instance in a European region, and the same applies to any other region you need. Your QuotifAI environment is a dedicated instance with its own database rather than a shared tenant, so your data is not mixed with another customer’s at any layer.
Who on our team can see what?
You decide. QuotifAI uses roles, permissions and departments, and every page and action is gated on them. A reviewer sees the quotes they need to check. Configuration, pricelists, user management and logs are separate permissions you grant deliberately.
How do users sign in?
With a password plus a second factor. Users can register a passkey on their own device and sign in with that, or use a code from an authenticator app. Both options are available on every account.
How are the logins for customer portal automation protected?
This applies if you use customer portal automation, where QuotifAI signs in to your customers’ portals for you. Those credentials are stored encrypted and decrypted only on the machine running the portal agent, at the moment it needs to sign in, and password values are never written into job logs or downloaded artifacts.
What happens to files that arrive by email?
They are virus scanned before QuotifAI opens them. If you use customer portal automation, the same applies to files the portal agent downloads: they are checked before they are used in the quote workflow.
Can we see what the AI actually did?
Yes. QuotifAI records the reasoning behind each classification and each match, so you can review its calls and correct them. Where you use customer portal automation, each portal job is recorded as well, and can be replayed as video to see exactly how the portal agent moved through the site.
Want your IT team to look at it properly?
We will walk them through the setup, the access model and the hosting choices.