Security
Written down, and locked up.
The pages your team writes are the ones that matter most. Here is how they are stored, who can see them, and how you can check.
How we keep it safe
Your handbook is the most honest thing your company writes.
So we treat it that way. Here is what we do with it, in plain words, and what we never do.
- SOC 2 Type II
- HIPAA BAA on Premium
- Pen-tested twice a year
- Encryption Encrypted everywhere
- TLS 1.3 in transit and AES-256 at rest, with keys rotated every 90 days and held apart from the data.
- Hosting Stored in the United States
- Primary data in Virginia, encrypted backups in Oregon, restored and tested every month.
- Access Permissions down to the page
- Spaces, groups and single pages each carry their own access, and guests see only what you share.
- Identity SSO and SCIM
- Sign in through your identity provider, and people lose access the minute they leave it.
- Record An audit log of every change
- Who viewed, edited, shared or exported what, kept for 400 days and exportable to CSV.
- Promise Never used to train anything
- Your pages are not used to train models, ours or anyone's, and no one at Quill reads them without your ticket.
- Rae Lindqvist verified Parental leave 9:14 AM PT
- Theo Park shared with a guest Q4 vendor review 8:52 AM CT
- Marlow Chen exported Decision log · Q3 8:30 AM ET
- Sam Okafor changed access on On-call rotation 7:47 AM MT
- Noor Haddad restored a version of Brand guidelines 7:15 AM PT
Export ready
audit-log-oct-2026.csv, 1,284 events, sent to the security channel.
Audit log
Every view, edit and export, on the record.
Admins on Premium see who touched what and when, filter it by person or page, and send it to the tools their security team already watches.
- Kept for 400 days, exportable to CSV at any time
- Streams to your SIEM over a signed webhook
- Guests and integrations are logged like people
Security review
What your security team will ask
And the answers we send them. Anything else goes to [email protected], read by an engineer within a business day.
Can we get your SOC 2 report?
Yes. Ask from Settings → Security and we send the latest Type II report under a short NDA, usually the same business day.
Will you sign a BAA?
On Premium, yes. Larchmont Health and two other clinic networks keep patient-adjacent procedures in Quill under one.
Who at Quill can read our pages?
Nobody, unless you open a support ticket and grant access to a named engineer for a set number of hours. Every grant shows in your audit log.
What happens to our data if we leave?
Export everything as Markdown and HTML with its page tree. Thirty days after you close the workspace, it is deleted from production and, 35 days later, from backups.
How do you handle a security incident?
We tell affected admins within 48 hours, by email and in the app, with what we know and what we are doing. Our last pen test summary is on request.
Bring it to your security review.
Start on Free while the questionnaire makes its rounds. Premium adds SSO, SCIM, the audit log and a BAA.