TRUST
How we keep your leaders’ data safe.
The short version, for the person who has to sign off before your leaders take a seat.
WHAT WE STORE
A name, a work email, an organization, and lesson progress. That is the whole list.
WHAT WE NEVER STORE
Patient information. In any form, anywhere.
There is none in the system and none may enter it. Every example in every lesson is written with synthetic names, and the AI tutor refuses a message that looks like real patient data rather than answering it.
CONTROLS IN PLACE
- Entitlement is written only by a signature verified payment webhook. Nothing else can grant access.
- AI spend is capped per learner and per account, server side, and degrades to a cheaper model rather than failing open.
- Row level security on every table.
- Server side rate limiting on every public form.
- Continuous monitoring by an automated security agent. 21 checks across 5 cadences.
- An audit log on every meaningful action.
SUBPROCESSORS
| Vendor | Purpose | Region |
|---|---|---|
| Anthropic | The AI tutor | United States |
| Supabase | Database and sign in | United States |
| Vercel | Hosting | United States |
| Stripe | Payments | United States |
| Resend | United States | |
| Gemini Notebook, curriculum research only, never learner data | United States |
INDEPENDENT REVIEW
Last independent review: August 19th, 2026. Next: quarterly.
Questions your vendor management office needs answered go to info@thequadco.ai. We send the full questionnaire, the subprocessor list and the draft agreements the same day.