Scoped customer links
Survey links use an opaque capability token, are bound to one organization and survey, and are checked again at each customer operation.
Security and control
Security boundaries you can inspect.
QuoteCortex is designed around scoped access, tenant isolation, and explicit review. This page describes current verified controls only; it does not claim a certification or an independent test that is not documented.
Verified controls
Designed to keep the next action obvious.
Tenant boundaries
Company sessions resolve organization membership and role at the database and application boundary; browser clients do not receive service-role or provider credentials.
Reviewable evidence
Inventory lines retain evidence references and status so operators and movers can review uncertainty instead of receiving a hidden confidence claim.
Explicit approval
Customer inventory approval, mover approval, pricing, booking, and CRM handoff are separate states.
Data boundaries
What the system keeps separate.
| Boundary | Current behavior | What is not claimed |
|---|---|---|
| Customer media | Private storage and scoped signed access; deletion runs through an explicit job and receipt workflow. | Immediate provider-side or backup erasure. |
| AI provider | Worker-side, versioned evidence frames are sent only when the configured provider path is enabled. | Real-time camera analysis, published accuracy, or a fixed provider retention promise. |
| CRM | Capabilities are shown from the evidence registry; export fallback remains available. | Automatic synchronization or native support from a logo alone. |
| Communications | Email and SMS paths are feature-gated and server/worker-only. | Active SMS/A2P approval or a marketing-consent commitment. |
Current boundary
A transparent boundary is part of security.
Current verified controls. This trust center describes evidence-backed application controls. It does not claim a certification, independent audit, provider availability, or a legal conclusion about which jurisdictional obligations apply.
Deferred communications
SMS readiness stays behind a separate legal gate.
SMS is not active. Activating messaging requires a reviewed decision on informational versus marketing use, sender identity, frequency, STOP/HELP behavior, carrier-fee disclosure, opt-out handling, consent source, quiet hours, retention, and whether the mover or QuoteCortex owns each communication.
This page does not imply Twilio/A2P approval or publish generic marketing-text consent language. The legal center describes the current communications boundary.
Open the legal centerQuestions
Need a control mapped to your process?
- Ask how a survey link is scoped and revoked.
- Ask which CRM capability is proven for your account.
- Ask how a deletion request is reviewed and evidenced.