Security your procurement team can check.
Quorum keeps as little data as it can, keeps every workspace apart and publishes what a security review needs, with no NDA and no sales call first.
How your data is protected.
Governance, not surveillance
Org, team and series-level analytics only, and no individual rankings. The floors are published: no per-person figure for a group under 3 people, no response time over fewer than 5 conversations, no pulse result before 5 answers. Every threshold and its source: how Quorum measures.
Data minimization by default
Metadata-first. No message or comment text is stored — threads are counted, not read. Sensitive meetings stripped at ingestion. Transcripts off until an admin enables them, purged on a 30-day clock. Retention enforced by a job, not a promise.
Tenant isolation, encrypted credentials
AES-256-GCM for every provider token, signed requests on every Slack interaction, company-scoped queries on every route.
The sub-processor list, the control summary and our compliance status are public — no NDA, no sales call first. We state plainly that there is no SOC 2 report yet rather than implying one.
The documents, in public.
Public, with no NDA and no sales call first.
Security & sub-processors
Controls, hosting, the sub-processor list and our compliance status.
Works council & DPIA pack
What Quorum reads and keeps, for employee representatives and a data protection impact assessment.
Privacy notice
Which personal data is processed, why, by whom and for how long.
Company information
Who sells Quorum, with its registry details.
How Quorum measures
Every threshold Quorum uses, its value and the source behind it.
Send us your questionnaire.
Tell us what your security review or data processing agreement needs beyond the public documents, and we will work through it with you.