All topics
Security and privacy: questions and answers
Where QuoteCloud keeps your data, how documents and signatures are protected, who can access what, and how privacy requests are handled.
26 questions
The short answer
QuoteCloud runs on Amazon Web Services, with personal information stored on servers in the USA. Documents are protected with 256-bit encryption, data is encrypted in transit and at rest, and QuoteCloud is GDPR compliant. eSignatures are eIDAS compliant, with optional passcode verification and a certificate of authenticity and audit trail. Enterprise adds SSO and IP range filtering.
Hosting and encryption
How secure is my data in QuoteCloud?
QuoteCloud runs on AWS with 256-bit encryption, encrypts data in transit and at rest, is GDPR compliant and controls access by role.
Most asked
Full answer
QuoteCloud is hosted on Amazon Web Services and protects documents with 256-bit encryption in your own private cloud workspace. Data transferred between you and QuoteCloud is encrypted, and personal data is encrypted at rest on the hosting servers. QuoteCloud is GDPR compliant. Custom roles, team access settings and content locking control who can view, edit and send documents, and Enterprise adds single sign-on and IP range filtering.
Where is my QuoteCloud data hosted?
On Amazon Web Services, with personal information stored on servers located in the USA.
Most asked
Full answer
QuoteCloud runs on the Amazon Web Services (AWS) cloud, and personal information is stored on servers located in the USA. That information remains within the effective control of Corporate Interactive Technology Pty Limited, the Sydney, Australia company that provides QuoteCloud. The hosting provider's role is limited to hosting and storage, and it is not permitted to access or use your personal information except for that limited purpose.
Is my data encrypted in QuoteCloud?
Yes. Documents use 256-bit encryption, data is encrypted in transit, and personal data is encrypted at rest.
Full answer
Yes. Your quotes, proposals and contracts are protected with 256-bit encryption and stored in your own private cloud workspace, and each completed document carries a unique document ID. According to the privacy policy, personal information is stored on secure servers with SSL certificates from leading certificate authorities, all data transferred between you and QuoteCloud is encrypted, and personal data is encrypted when stored on the hosting servers.
Can I choose to keep my QuoteCloud data in Australia or the EU?
QuoteCloud does not publish data residency options; personal information is stored on AWS servers in the USA.
Full answer
QuoteCloud does not publish a choice of data region. Its privacy policy states that personal information is stored on Amazon Web Services servers located in the USA, and that if you do not want your personal information transferred to a server in the USA you should not provide it or use the service. If data residency is a requirement for your organisation, contact the QuoteCloud team to discuss it before you commit.
Does QuoteCloud store credit card details?
No. Card details are handled by third-party payment gateways and cannot be accessed by QuoteCloud staff.
Full answer
No. When your clients pay a quote, card payments are taken through third-party payment gateways such as Stripe and PayPal. When you pay for your own QuoteCloud subscription, your card is processed through Stripe and held by the payment gateway so it can be billed on a recurring basis. In both cases QuoteCloud does not store the credit card details, and QuoteCloud staff cannot access them.
Sending and signing securely
How do I know the right person signed?
Turn on optional recipient verification and the signer must enter a one-time passcode sent to their email before signing.
Full answer
Turn on optional recipient verification and QuoteCloud sends a one-time passcode to the signer by email. They must enter it before they can sign, so only someone with access to that inbox can complete the signature. The completed document then includes a certificate of authenticity and an audit trail as a record of the signing.
What record do I get when a document is signed?
Every completed document includes a certificate of authenticity, an audit trail and its own document ID.
Full answer
Every completed document includes a certificate of authenticity and an audit trail, and each document has its own unique document ID. The document's history timeline also shows its views, edits, status changes, recipient activity and revisions, with the person behind each entry. Revisions and full version history are part of the Business plan.
Can I password-protect a document I share with a client?
Yes. Use Send Via Link, open the link's security settings and turn on Password Protection.
Full answer
Yes. In the document editor click Send, choose Send Via Link, make sure the link is active and click Edit security settings for this link. Turn on Password Protection, enter and confirm a password and click Save. Anyone opening the link must enter the password before the document appears. Each recipient can have their own unique link, and you should share the password through a different, secure channel.
Can I keep internal notes, costs or margins out of what the client sees?
Yes. Hide sections from the recipient, and choose which price table columns, such as cost and margin, the client sees.
Full answer
Yes. Use Hide from Recipient on a section or container in the editor: it is shaded so your team knows it is hidden, and the recipient does not see it. In price tables you decide which columns and totals appear in the client-facing document, so internal costs, supplier prices and margins stay hidden while the client sees the final price. Price tables are included from the Essentials plan.
Access control and sign-in
How do I control who can see and change what in my QuoteCloud account?
Custom roles, teams and library permissions from Essentials; content locking, approval workflow and version history from Business.
Plan: Essentials and above
Full answer
From Essentials you can create custom user roles, organise people into teams, choose whether each team has full or view-only access to shared documents, and restrict content libraries by role. From Business you can also lock content blocks so they cannot be edited, route documents through an approval workflow, and keep revisions and version history. Enterprise adds single sign-on, IP range filtering and other advanced security controls.
What permissions can a QuoteCloud user role control?
Users and teams, content libraries, system settings, documents, the address book, campaigns, data import and export, and workflows.
Plan: Essentials and above
Full answer
Each custom role has permission toggles grouped into User Controls, Content Libraries, System Config, Document Controls, Address Book Controls, Campaign Controls, Import/Export Data and Workflow Controls. Document Controls, for example, set who can view, edit, delete and send documents and access the product catalogue. A user with several roles receives every permission granted by any of them, so you can follow the principle of least privilege.
Can I stop people from changing approved wording?
Yes. Lock content blocks in the content library so they can be used in documents but not edited.
Plan: Business and above
Full answer
Yes. In the content library, turn on the lock for any block, such as legal terms or service levels. A lock icon shows its status. Locked blocks can still be dragged into documents but stay non-editable there, and only administrators or users whose roles allow it can unlock them. You can also restrict who can add or edit library content by user role. Content locking is part of the Business plan.
Does QuoteCloud support single sign-on (SSO)?
Yes, on Enterprise. Single sign-on is part of the Enterprise plan's security controls.
Plan: Enterprise plan
Full answer
Yes. Single sign-on (SSO) is included on the Enterprise plan, alongside IP range filtering, a custom URL, custom user reports and other advanced security controls, plus implementation support. SSO is not part of the Free, Starter, Essentials or Business plans. Contact sales to talk through your identity provider and what your organisation needs.
Can I restrict QuoteCloud access to our office IP addresses?
Yes, on Enterprise. IP range filtering is one of the Enterprise plan's advanced security controls.
Plan: Enterprise plan
Full answer
Yes, on Enterprise. IP range filtering lets an organisation limit access to QuoteCloud to the IP address ranges it approves, and it is included with Enterprise together with single sign-on, a custom URL and other advanced security controls. It is not available on the Free, Starter, Essentials or Business plans. Contact sales to discuss how it would fit your network setup.
What sign-in options does QuoteCloud have?
Email and password, a Magic Link or 6-digit code sent by email, or a passkey; Enterprise adds single sign-on.
Full answer
You can sign in with your email address and password, with a Magic Link that emails you a secure link and a 6-digit code, or with a passkey on a registered device such as a phone or tablet. Enterprise adds single sign-on. Keep your password safe, and if you think it has been misused, change it straight away and let QuoteCloud know.
Does QuoteCloud support two-factor authentication (MFA)?
QuoteCloud does not publish a two-factor authentication feature; ask the team about your requirements.
Full answer
QuoteCloud does not publish a two-factor or multi-factor authentication feature. The sign-in options it documents are email and password, a Magic Link or 6-digit code sent to your email, and a passkey on a registered device, and Enterprise adds single sign-on. If MFA is a requirement in your security review, contact the QuoteCloud team so they can answer it directly for your organisation.
Privacy and your data
Is QuoteCloud GDPR compliant?
Yes. QuoteCloud states that it is GDPR compliant.
Full answer
Yes. QuoteCloud states that it is GDPR compliant. Its privacy policy explains how personal information is collected, held and used, that it is stored on AWS servers in the USA under Corporate Interactive's effective control, and how you can request access to, correction or removal of your personal information through the Data Protection Officer.
How do I access, correct or delete my personal information?
Send a written request to QuoteCloud's Data Protection Officer at hello@corporateinteractive.com.au.
Full answer
Set out your request in writing and email it to the Data Protection Officer at hello@corporateinteractive.com.au. You can ask to access the information held about you, or to update, correct or remove it. Corporate Interactive processes requests as soon as reasonably practicable unless prevented on legal grounds, and explains why if it cannot meet a request. Personal information is kept only as long as needed to provide the service.
Will QuoteCloud tell me about a data breach?
Yes. QuoteCloud will advise you at the first reasonable opportunity if a breach involves your personal information.
Full answer
Yes. QuoteCloud's privacy policy commits to advising you at the first reasonable opportunity after discovering, or being told of, a security breach in which your personal information is lost, stolen, accessed, used, disclosed, copied, modified or disposed of by unauthorised persons or in an unauthorised way. To raise a security concern yourself, contact the team through the support contact page.
Does QuoteCloud share my data with third parties?
Only where needed to provide the service, with your express consent, or when required by law.
Full answer
QuoteCloud discloses personal information outside the Corporate Interactive group only where necessary to provide the service, otherwise with your express consent, or when legally required, for example by a court order. It may use aggregated data that does not identify you to improve the service. If you connect third-party apps such as a CRM, data you send to them is covered by those apps' own privacy policies.
How do I make a privacy complaint to QuoteCloud?
Send full details to the Data Protection Officer by email at support@quotecloud.net or by letter to the Sydney office.
Full answer
Give the Data Protection Officer full details of your complaint and any supporting documents, either by email to support@quotecloud.net or by letter to The Data Protection Officer, Corporate Interactive Technology Pty Limited, Suite 1204, 109 Pitt Street, Sydney NSW 2000, Australia. The privacy policy describes the complaints process, and significant changes to the policy are communicated by email or in QuoteCloud.
Can I export my document data or recover a deleted document?
Yes. Export Document Data from the dashboard settings, and restore deleted documents from Trash.
Full answer
Yes. On the dashboard, click the settings icon at the top right and choose Export Document Data; QuoteCloud prepares a report you receive by email and download for analysis, auditing or record-keeping. Deleted documents go to Trash first, where you can restore them to your document list from the More Actions menu. Emptying the Trash or deleting from it permanently removes the documents.
Certifications and security reviews
Is QuoteCloud SOC 2, ISO 27001 or HIPAA certified?
QuoteCloud does not publish SOC 2, ISO 27001 or HIPAA certification; contact the team for your security review.
Full answer
QuoteCloud does not publish SOC 2, ISO 27001 or HIPAA certification. What it does publish is hosting on Amazon Web Services, 256-bit encryption, GDPR compliance, eIDAS-compliant eSignatures with a certificate of authenticity and audit trail, and Enterprise controls such as SSO and IP range filtering. If your review needs a specific certification or a security questionnaire completed, contact the QuoteCloud team.
What uptime and backup commitments does QuoteCloud make?
QuoteCloud does not publish an uptime percentage or backup schedule; check the System Status page and ask the team for details.
Full answer
QuoteCloud does not publish an uptime percentage or a backup schedule. You can check the current status of QuoteCloud services from the Help menu by choosing System Status. The guaranteed SLAs in Premium and Enterprise support relate to support response times, such as Enterprise's 4-hour response. If your organisation needs availability or backup commitments, contact the QuoteCloud team before you buy.
How do I request a security review or raise a security concern?
Contact sales to have a security questionnaire completed, or raise a concern through www.quote.cloud/quotecloud-demo.
Full answer
If you need a security questionnaire completed as part of a vendor review, contact the QuoteCloud sales team and they will work through it with your team. To raise a security concern, contact the team through the support contact page. Requests to access, correct or remove your personal information go to the Data Protection Officer, as described in the privacy policy.
Who provides QuoteCloud?
Corporate Interactive Technology Pty Limited, based in Sydney, Australia, which has built QuoteCloud since 2013.
Full answer
QuoteCloud is provided by Corporate Interactive Technology Pty Limited, Suite 1204, 109 Pitt Street, Sydney NSW 2000, Australia, which has been building QuoteCloud since 2013. QuoteCloud is rated 4.2 on Capterra and 4.2 on Software Advice. The company's privacy policy and terms of use are published on the QuoteCloud website and can also be opened from the Help menu inside the app.
No questions match
Try a shorter word or another topic, or ask the QuoteCloud team below.
Still have a question?
Talk to a person, or find step-by-step help in the user guide.
Rated, secure and in business since 2013.
- 4.2Capterra rating
- 4.2Software Advice rating
- 2013Building QuoteCloud since
Questions answered? Try QuoteCloud free.
Free for 14 days. No credit card required.
Questions? Try it freeFree 14 days · no card
Start free trial