Preview: Pellucis is in active development. Demo data is synthetic.
Security & trust

Your renewal data, handled the way your IT expects.

Quoin works from your own files, keeps your leverage data away from the tenant, and never sends anything on its own. Here is exactly what that means — and what we don’t claim.

Data residency

Canadian at rest. A North-American processing boundary.

Your leases, ledgers, and analysis are stored in Canada at rest (Supabase ca-central-1, Montréal). Documents analyzed by an LLM are processed via a US API today — a North-American processing boundary — under standard provider retention. We do not train on your data. No Canadian-inference path is enabled yet, and we won’t claim one until it is.

Canadian data residency at restNorth-American processing boundaryNo training on your data
The firewall

Your leverage never reaches the tenant.

The internal Fact Brief and the external tenant notice are generated from separate data scopes that never cross — enforced at the data layer, not by a prompt. A leverage field reaching the external notice fails closed and is logged. This is the structural protection behind “it writes; a human sends.”

What’s backed today

Claims we can stand behind.

What we don’t claim (on purpose)
  • SOC 2 Type II: in progress — not yet certified.
  • No “zero retention,” no “data never leaves Canada,” no Canadian-inference path — none of these are true yet, so we don’t say them.
  • SSO / SAML and enterprise insurance: available for enterprise deployment, not claimed as shipped.
  • Pre-launch, zero customers — so no logos, metrics, or testimonials we can’t back.
For your security review

We’ll walk your team through the posture.

Subprocessors and regions available on request.

Request a security overview