Trust & Security
We empower over 4,000 organizations around the world to win more business. Learn how seriously we take the trust and security you place in us.
Security operations and industry best practices
We protect your data with encryption in transition and at rest and provide enhanced security features such as SSO and rolebased permissions. We provide SSO, email verification and password support for limiting buyer page access. We follow industry best practices for security in our operations, with strict policies and controls for production systems access, proactive monitoring and maintenance of infrastructure and a commitment to rapid incident response and resolution.
Performance and reliability
Qwilr is designed for performance and availability based on best in-class infrastructure such as AWS. We have standard data backup and retention practices. We actively monitor system availability and publicly share our systems status.
View system status
Quality and compliance
Qwilr is PCI-DSS compliant and has successfully completed a SOC 2 Type 1 audit. We have controls in place for quality, security and data management, and seek excellence in practice with our engineering and operations. We openly respond to questions from inquiring customers regarding our security and operational practices.
Data handled with care
We are committed to protecting the privacy of your and your customers' data. We seek to segregate data of different classes wherever possible and our team only accesses identifiable data to troubleshoot particular issues in communication with you, our customer. At all times we process your data with care and respect so you can use Qwilr with confidence.
View privacy policy
Certifications
Qwilr obtains industry-proven certifications and accreditations, and complies with current industry standards and regulations so you can feel confident that your company and customer data remain secure and compliant.
SOC 2
Qwilr has successfully completed a SOC 2 Type 1 audit with automated monitoring of controls, policies and infrastructure powered by Drata. Qwilr is working with their audit partner to complete a SOC 2 Type 2 audit in late 2024.
PCI-DSS
Qwilr uses Stripe to process payments. Stripe has been audited by a PCI-certified auditor and is certified to PCI Service Provider Level 1.
GDPR
Qwilr is compliant with GDPR requirements. We have established and closely follow internal controls and policies that address the requirements of that regulation in so far as they apply to Qwilr.
Legally binding e-signatures
Qwilr esignatures are a secure way to get deals signed and closed, ensuring your customers have a secure way to sign and pay in one place. Our esignatures meet global laws for enforceability and security.
UETA
Qwilr is compliant with UETA requirements. Users in more than 50 countries trust Qwilr to sign contracts, legal documents, MSA’s and more.
eIDAS
Qwilr is compliant with the requirements for Electronic Signatures. Users in more than 50 countries trust Qwilr to sign contracts, legal documents, MSA’s and more.
E-SIGN
Qwilr is compliant with the E-SIGN Act requirements. Users in more than 50 countries trust Qwilr to sign contracts, legal documents, MSA’s and more.