Security & Architecture

Security designed for controlled engineering environments

Quartz Works minimises data retention, enforces tenant isolation and keeps important activity traceable. Customer information is processed using controlled, documented workflows designed for regulated organisations.

Data flow overview

How your information moves through Quartz Works: Project documents and content are indexed when a project is connected. Quartz stores vector representations and limited metadata required for retrieval, rather than retaining original document files on Quartz infrastructure. When a question is asked, relevant information is retrieved and processed transiently. AI requests are handled according to the configured provider's enterprise data-handling terms. Generated documents are downloaded directly to the user and stored wherever the organisation chooses.

Quartz Works security architectureHub-and-spoke diagram showing multiple input types flowing into the Quartz Works platform and outputs delivering to the client Microsoft environmentQuartz WorksAI PlatformTransient · Zero data retentionINPUTSOUTPUTSOneDrive docsFiles & drawingsForm inputProject detailsVoice inputSpoken briefText promptContext & scopeEmail / notesPaste any contentGenerated docsSOW · Work Pack · PEPClient OneDriveSecure destinationAudit trailTimestamped logProject intelligenceActions · risks · status
Zero data retention policy: Project inputs and content are processed transiently in memory and immediately discarded after document generation. Outputs are delivered directly to your OneDrive. AI processing is performed under a zero data retention agreement with our AI provider — your data is not stored, logged, or used for model training.
🔐
Microsoft or Google identity
Engineers sign in using approved Microsoft or Google identities. This reduces password administration and allows access to follow the organisation's existing identity controls.
🔁
Minimised data retention
Quartz stores vector representations and limited retrieval metadata rather than retaining original document files. Customer content is not used to train the underlying AI models. AI requests are processed according to the configured provider's enterprise data-handling terms.
📋
Activity logging for traceability
Important system activity is recorded for traceability, including document generation, project changes and source retrieval. Audit records are restricted to authorised users and managed according to the organisation's retention settings.
🏠
Tenant isolation
Customer data is separated using tenant-aware access controls at the application and database layers. Authorisation is enforced before information is retrieved or sent to the AI model. Cross-tenant isolation is covered by automated security testing.
Designed for recognised security standards
Quartz Works is built around established security and AI-governance principles, including those defined by SOC 2, ISO 27001 and ISO 42001. The platform’s architecture and controls are being developed to support formal certification.
“Project management tracks the work. Quartz helps engineers understand what the work means.”
Quartz Works is a product of Quartz Global Engineering Solutions Ltd · hello@quartzworks.ie