quartzspan
Home / Trust center
Trust center

Trust starts with
showing our work.

Clear source trails. Visible uncertainty. Straight answers about what is available today and what must be in place before customer files are accepted.

Your data deserves clear boundaries.

Quartzspan is pre-launch. This site uses fictional demonstration data, an assessment request form and optional email drafts. It has no confidential document uploads, live document processing, or customer accounts.

Available on this website

Fictional data and local interactions

The evidence demo uses a deterministic sample dataset. The assessment form submits your answers to the website server for follow-up and attempts an email notification to the founders. Its confirmation shows whether that notification was sent. Other contact forms prepare email drafts; you decide whether to send those.

Designed service method

Source lineage and human decisions

Document, location, excerpt, status, and review notes remain attached to each represented value. Missing and conflicting evidence stays explicit. Supplier contact requires customer authorization.

Required before customer files

Controlled access and processing

EU-region processing, encryption in transit and at rest, MFA, least-privilege roles, customer/project separation, secure upload quarantine, malware scanning, secrets management, and audit logs must be selected, implemented, and verified.

Required before customer files

Resilience and incident response

Backup and recovery tests, hostile-document and prompt-injection protections, a subprocessor register, incident ownership, containment procedures, and notification routes require verification.

Designed · review pending

Processing choices

Project policies are intended to support AI-assisted processing, redacted AI processing, deterministic processing, or human-only work. Availability is subject to the agreed service and verified infrastructure.

Professional review pending

Ownership, retention, and agreements

Customer data remains customer-owned. Processing purpose, lawful basis, access, confidentiality, location, retention, backup expiry, and deletion exceptions must be documented in the engagement and reviewed professionally. No security certification is claimed.

Planned production lifecycle

A defined beginning.
A controlled close.

This is a proposed workflow, not a live portal or a verified deletion guarantee. Final terms govern retention and any exceptions.

01Agree scope
02Secure upload
03Process & review
04Deliver & download
05Confirm receipt
0648-hour reversible grace period
07Controlled deletion

The proposed grace period lets a customer reopen the project or cancel closeout. Active-storage deletion, backup expiry, and legal retention must be technically verified and contractually agreed.

A clearer starting point

Your next step doesn’t need
another spreadsheet.

Start with one battery family. We’ll help you understand the evidence work ahead.