Security
- Signed updates. Every release manifest is signed with an Ed25519 key held in a key vault. Each installed desktop embeds the public key and verifies the signature before it will install an update; a missing or wrong signature is rejected, not offered. Installers are additionally checked against a SHA-256 checksum on download.
- Credentials. Secrets on the desktop are held in the macOS keychain, and on Windows and Linux in an encrypted file in the app's data folder. A keychain failure cannot carry a secret out of the store.
- Sign-in. Account sign-in runs through the console at console.quantifyterminal.com; the desktop completes sign-in through the browser and never holds your password.
- Audit. A recorded decision stores its evidence, the moment it was taken and the model version; rights decisions, private-library access and account events go to append-only logs.
Data handling
- We do not sell, rent or trade personal information. The website loads a third-party analytics script on every page. The full statement is the privacy policy.
- Every source carries a machine-readable licence profile, applied on every read from the canonical store. See how we handle data rights.
- Private documents keep their own permissions. Retrieval access is document access: nothing surfaces through an AI answer that a user could not open directly.
- A fact in the canonical store carries point-in-time timestamps and a source fingerprint, so the screens that read it can be reproduced from the same snapshot.
Export formats
Exports are open formats, and every paid plan includes them. Tables export as CSV, JSON and PDF, watchlists as CSV, and reports as PDF or Markdown. Workspace sheets import and export CSV, JSON and XLSX. Excel and Google Sheets read quotes and indicators from Quantify Terminal Cloud, not the terminal's own store; see agent access.
Private deployment
The document store, the rights engine and its audit log run on your own machine; the account and entitlement service is hosted by Quantify Terminal, and every AI answer is generated by a hosted service. A containerised deployment inside your own network is not built today; ask about it in the first conversation.
Escrow
Source escrow is agreed per institutional contract. Raise it in the first conversation and it will be in the paper.
Security contact
Report a vulnerability or ask a security question at contact@quantifyterminal.com. We reply to every report.