Security and compliance
Your customers trust you. You can trust Quellbook.
How we protect the conversations you keep in Quellbook, and what to send your security team.
SOC 2 Type II
Quellbook is audited every year against the SOC 2 Trust Services Criteria for security, availability and confidentiality: SOC 2 Type II report on request (under NDA). Write to security@quellbook.com.
Data location
AWS us-east-1 (Virginia, US) by default; EU (Frankfurt, eu-central-1) on Scale. With EU data residency, tickets, attachments and backups stay in the EU.
Single sign-on
SAML 2.0 single sign-on with any SAML identity provider (Okta, Microsoft Entra ID, Google Workspace, JumpCloud); on Scale. Admins can enforce SSO for every member of the workspace.
What Scale adds for security reviews
Scale includes everything in Growth plus SAML single sign-on (SSO enforcement), audit log, EU data residency, custom roles, 99.9% uptime SLA.
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Daily encrypted backups, kept for 30 days
- Audit log of sign-ins, exports and settings changes (Scale)
- Custom roles and per-inbox permissions (Scale)
- Personal access tokens that can be revoked at any time
- Annual third-party penetration test
- Data processing addendum with standard contractual clauses
Report a vulnerability
Found a security issue? Email security@quellbook.com. We answer within two business days and do not take action against good-faith research.
Legal documents: Data processing addendum · Privacy policy · Terms of service
Try Quellbook with your team
14-day free trial with Growth features for up to 3 agents. No credit card.