Security

This document is provided in English, which is the binding version.

Everything runs on our side

Your pricing rules, floor prices, the agent and the company checks run only on our servers. Your IT team adds a forwarding rule or connects to our API; nothing is installed in your network and no code is handed over. Through the price guardrails API, floor prices never leave our servers: your systems receive only a decision and an allowed price.

Pricing you can predict

Prices are calculated by your rules, not chosen by an AI model. The agent cannot go below your floor price, whatever a buyer or a buyer's bot writes.

Data protection

• Encryption in transit (TLS) for the site, API, MCP and email routing.
• Database in the EU (Frankfurt), not reachable from the internet; row-level security with no public access.
• Keys per customer and per partner; admin actions require a separate admin key.
• Rate limits and automatic blocking of abusive clients.
• Every quote, counter-offer, approval and order is written to a hash-chained audit log: changing an old entry breaks the chain and shows up in the check.
• Customer data is not used to train AI models.

People and access

Production access is limited to the people who run the service, with individual accounts.

Reporting a vulnerability

Write to hello@quotegateai.com. We confirm within 2 business days and do not take action against good-faith research that respects people's data. Details for researchers: /.well-known/security.txt.

Last updated: 5 November 2026.