Your quotes, prices and customer details are commercially sensitive. Here is how Quoterium protects them.
Each organisation is kept separate
Every quote, client, contact, library item, template and setting belongs to one organisation. Every request the app makes is limited to the organisation you are working in, so nobody can see or change another organisation's data, even if they belong to several organisations themselves.
Encrypted connections
The app and your customers' quote pages are served over HTTPS, so everything travelling between the browser and our servers is encrypted.
Passwords and connection details
- Passwords are stored only as a one-way hash. Nobody, including us, can read your password.
- Your SMTP password (if you send through your own mail server) and your Xero connection are stored encrypted, and the SMTP password is never shown again once saved.
- Connecting Xero signs in to your own Xero account; nothing is shared with other organisations.
Card payments
Subscriptions are paid through Stripe. Card details are entered on Stripe's pages and stored by Stripe, never by Quoterium. We only see the card brand, the last four digits and the expiry date, which we show on your billing page. See Payment method, invoices and billing email.
Uploaded files
Your logo, images in quotes and attached documents are stored with your organisation and given long, random addresses, so they can be shown in emails and PDFs without a login. Anyone who has the exact address of a file can open it, so treat a file's link with the same care as the file itself.
Customer links
Each recipient gets their own quote link containing a long random code. Customers don't need an account, which also means anyone with the link can view the quote. For extra assurance when quotes are accepted, you can require email verification before signing. See Branding and layout.
More information
Last updated 16 October 2026