Data Security

Your Data Is Yours. Period.

Quinn is built from the ground up to keep your organization's data private and secure, and we don't train AI models on it.

We Don't Train AI on Your Data

Quinn uses AI to power course generation, assessments, and the Ask Quinn assistant. As our Terms of Service put it, Quinn "does not use Customer Data to train, fine-tune, or improve any general-purpose or foundation machine learning model."

To deliver those features, your content is processed by the AI services behind them: OpenAI, Anthropic, and Google Gemini (text), ElevenLabs (voice), Deepgram (transcribing recordings), HeyGen (video avatars), Pinecone (search over your knowledge base), and LangSmith, where our engineers trace AI requests to fix problems.

All AI interactions are scoped to your organization and never shared across tenants.

Complete Tenant Isolation

Quinn is a multi-tenant platform with strict organization-level data isolation. Every piece of data — courses, progressions, learner profiles, analytics, knowledge bases — is scoped to your organization.

There is no cross-tenant data access. One customer can never see, query, or infer another customer's data. Role-based access control (RBAC) ensures that within your organization, users only see what they're authorized to see.

You Own Your Content

As stated in our Terms of Service: "As between you and Quinn, you retain all right, title, and interest in and to any content, data, files, or materials you submit or upload to the Services."

Quinn does not claim ownership over your training content, uploaded documents, learner data, or any other customer-generated material. We access and process your content solely to provide, maintain, and secure the Services for you.

Enterprise-Grade Infrastructure

Hosted on Amazon Web Services (AWS), leveraging AWS's industry-leading security infrastructure. All data stored in our databases is encrypted at rest using AWS-managed encryption. All data in transit is encrypted via TLS 1.2 or higher.

Our application runs on Kubernetes. Our servers and databases sit in a private AWS network that the internet can't reach; only our load balancers face it. Infrastructure is defined as code, so every change is recorded and reproducible.

Authentication & Access Control

Single Sign-On (SSO): Quinn supports SSO via Google, Slack, and LMS OAuth, so your team signs in with the accounts it already uses.

HRIS Integration: Seamlessly sync employee data from 60+ HRIS providers (BambooHR, Workday, ADP, Gusto, Rippling, and more) with webhook signature verification for data integrity.

Role-Based Permissions: Granular roles (member, owner, admin, content creator) ensure least-privilege access throughout the platform.

Responsible AI Practices

AI-generated content (courses, assessments, interactive slides) is always reviewable and editable by your team before it reaches learners. Quinn's AI features are tools for your L&D team — not autonomous agents making decisions about your people.

Organization-specific AI context is stored within your org's configuration and never leaked to other tenants.

Compliance & Privacy

Quinn processes personal data on behalf of our customers as a data processor, not a data controller. Our processing is governed by the written agreements we execute with each customer.

We comply with applicable data privacy laws and regulations. We do not sell personal data. For enterprise customers, we're available to complete security questionnaires, walk your team through our security controls, and discuss data retention, data processing agreements, and custom data handling requirements.

Have Questions?

We're happy to discuss our security practices in detail. Reach out to legal@meetquinn.ai or book a demo to learn more.

Book a Demo