Security

Security and data handling

Where your shop's data lives, which providers process it, and who can see it. The legal versions are the Privacy Policy, the Data Processing Addendum and the Terms. For export-controlled parts, see the ITAR vault.

Where your data lives

Quotes, parts and files

Stored by our database provider, Convex, on Amazon Web Services in the United States (AWS us-east-1): quotes, parts, CAD models, drawings, customers, orders, rates and settings.

The website and app

Static files served by Netlify from its global CDN. The pages hold no shop data; the app loads your data from Convex after you sign in.

Encryption

Data is encrypted in transit (HTTPS) and at rest by our hosting providers.

CAD measuring

STEP and IGES models are measured in your browser. The file is then stored with your shop so your team can open it later.

Who can see it

Every request is checked against your shop on the server, so only your team sees your parts, drawings and quotes. The shop owner decides who joins and with which role:

Owner

Everything: quotes, rates and pricing formulas, shop settings, the team, billing, export and the deletion request.

Estimator

Creates, prices and sends quotes; customers and orders; data export. No rates, team or billing.

Viewer

Reads quotes, parts, customers and orders. Changes nothing.

• A buyer sees only the quote page you send them, behind a long random link. Invite links are long random tokens too.
• Passwords are stored only as secure hashes.
• Our staff open shop data only to provide, support, secure and improve QuotedPart, for example to look into a problem you report (Terms section 10).
• API keys and sign-in tokens you save for a connected system are encrypted with AES-256-GCM before they are stored, under a key that exists only in the server's environment, and never sent back to a browser. JobBOSS² credentials stay in your browser and go only to ECI (how Send to JobBOSS² works).

AI

• QuotedPart sends these to Anthropic's Claude API to read them: drawings added to a part, RFQ emails forwarded to your shop's address, RFQ text pasted into the app, and quote PDFs and answers given during pricing setup.
• Anthropic processes them as our service provider, doesn't use them to train its models, and keeps them for a limited period under its commercial terms. We don't train AI models on your data either.
• What Claude read is shown next to the part for you to check. Prices come from your rates and formulas, and nothing reaches a customer until you send it.
• The text of AI requests and answers is kept in our analytics (PostHog, EU) to check and improve accuracy, with passwords and keys removed. PDF and image contents are not logged.
• Parts in the ITAR vault never go to our Anthropic account. A vault shop can read them with Claude in its own AWS GovCloud account instead (details).

Analytics

• We use PostHog in its EU cloud (Frankfurt) on the website, in the app and on shops' RFQ and quote pages: page views, clicks, performance, errors and session replays.
• Replays include what is typed into forms in the app. Passwords and everything buyers type on your RFQ and quote pages are masked, secret quote and invite links are removed, and file contents are not recorded. Card details are typed on Stripe's pages and never reach us.
• For a shop with the ITAR vault on, its devices turn off session replay, autocapture, heatmaps, console and error capture, the Google Ads tag and automatic feedback screenshots, and its AI logs keep no request or answer text.
• Session replays are kept up to 90 days. When we delete a shop, we also delete the analytics data linked to it and its users.

Export and deletion

• Owners and estimators download every quote, part and customer in Account settings: JSON with routings, price breaks, actual hours and your rates, or CSV with one file per table. Models and drawings download from each quote.
• When a trial or subscription ends, the shop turns read-only. Nothing is deleted, and you can still export everything.
• To delete the shop, the owner sends a deletion request in Account settings. We delete the shop and all its data within 30 days and confirm by email. The request can be cancelled until then. Copies in our providers' backups are deleted as the backups are overwritten.

Who processes your data

The providers that process shop content for us, as listed in the Data Processing Addendum:

Providers for our own billing and ad measurement, which don't receive shop content:

Card checkout for your own buyers uses your own Stripe account; payments go straight to it. Google Ads conversion measurement runs on our marketing pages as described in the Privacy Policy.

Questions, a security questionnaire, or a problem to report? Email support@quotedpart.com. The people who build QuotedPart answer.