Security

What's hardened. What isn't.

Quire is alpha. This page is honest about what that means.

Hardened

01TLS for all traffic. HSTS, secure-cookies, CSP headers.
02Uploaded contracts are processed in-memory per session; no persistence without sign-in.
03PII redaction pass on every upload before the model reads it.
04Every redline draft signed with pipeline version + playbook hash.
05Workers + Static Assets — no long-lived servers, no databases on the edge.

Alpha caveats

01Alpha: the model sometimes paraphrases a clause incorrectly. Every flag cites its playbook rule — please check the rule before sending the counter.
02Quire is not a law firm and does not provide legal advice. For the final 20% of clauses, retain outside counsel.
03No SOC 2, no ISO 27001 yet. Not for contracts that require a vendor-risk review.
04OCR is limited on scanned PDFs. Upload text-native PDFs where possible.
05No multi-user workspaces in v0.9. One uploader = one playbook.

This is a portfolio pilot. Do not use it on a contract you can't afford to be wrong about.