Security
- Signed updates. Every release manifest is signed with an Ed25519 key held in a key vault. Each installed desktop embeds the public key and verifies the signature before it will install an update; a missing or wrong signature is rejected, not offered. Installers are additionally checked against a SHA-256 checksum on download. Details on the changelog.
- Credentials. Secrets on the desktop are held in the operating system keychain. A keychain failure cannot carry a secret out of the store.
- Sign-in. Account sign-in runs through the console at console.quantifyterminal.com; the desktop completes sign-in through the browser and never holds your password.
- Audit. Every transition in the system stores provenance, point-in-time state, the permissions in force, the model version and an audit event.
Data handling
- We do not sell, rent or trade personal information. The website uses minimal, privacy-respecting analytics. The full statement is the privacy policy.
- Every source carries a machine-readable licence profile, enforced at the gateway on every request. See how we handle data rights.
- Private documents keep their own permissions. Embedding access is document access: nothing surfaces through an AI answer that a user could not open directly.
- Every fact carries point-in-time timestamps and an immutable source fingerprint, so anything the system produced can be reproduced from the same snapshot.
Export formats
Nothing is locked in. Models, watchlists, reports and tables export as PDF, CSV, XLSX and JSON. Workspace sheets import and export CSV, JSON and XLSX. Excel and Google Sheets can read the terminal directly; see agent access.
Private deployment
For banks, funds and sensitive environments, private retrieval, the document store, the policy and entitlement engine, immutable audit export and optional local inference run as a containerised deployment inside your network, receiving licensed public-market and model updates from Quantify Cloud.
Escrow
Source escrow is agreed per institutional contract. Raise it in the first conversation and it will be in the paper.
Security contact
Report a vulnerability or ask a security question at contact@quantifyterminal.com. We reply to every report.