Security & data

How we handle files and tickets

As of: Tuesday, October 7, 2026

UW-agent is MCA underwriting software from Kouko LLC (doing business as Quantum of Solutions). This page is a plain-language overview of how we handle shop files and tickets. It is not a certification badge wall.

We do not claim SOC 2, ISO 27001, or similar certifications on this page.

Privacy details: /legal/privacy · Terms: /legal/terms

What we process

To run underwriting and return a shop ticket, we may process:

Bank statements and related extracts
Application and deal fields
Ticket output (Express: Declined: [reason] or Approve: [amount] / [term] [frequency]; Explanation: same first line plus breakdown)

Marketing-site demo requests are covered under the Privacy Policy (name, company, work email, optional deal volume, message).

UW-agent applies versioned rules and drafts a shop-facing ticket. AI models (Google Gemini API and Anthropic Claude API) are used only to extract data from submitted documents. Approve/decline outcomes, amounts, terms, frequencies, and decline reasons are produced by versioned rules, not by AI. Customer data sent to these providers is not used to train their models. We are not the funder, lender, or broker; your shop (or its funding entity) decides whether to fund.

The standard Service uses draft-only email paths (including Gmail draft reply-all where enabled). It does not auto-send underwriting results to merchants or auto-fund deals.

Who can access it

Only authorized Kouko LLC personnel with a need-to-know may access Customer Data to operate, secure, or support the Service.

Marketing and sales do not access merchant bank files.

How we protect it

In transit: HTTPS for the website and Service connections we operate.
Access: Need-to-know access for authorized personnel.
Processors: We use service providers under contracts (see subprocessors in the Privacy Policy), including Vercel, Cloudflare, Resend, Google (email/Workspace path), Google (Gemini API), Anthropic (Claude API), and Stripe when billing is live.

We do not display SOC, ISO, or similar badges.

Retention / deletion

We keep Customer Data while your account is active. After termination, upon written request within thirty (30) days, we will make Customer Data then in our possession available for export, then delete or de-identify it per our retention practices, except copies retained for legal compliance or backups that rotate out. See the Privacy Policy and Terms.

Security reports

Report security issues to support@quantumofsolutions.com.

Security incidents / breach notification

If a security incident affects Customer Data, we will notify affected customers and regulators as required by applicable law. Questions: support@quantumofsolutions.com.

support@quantumofsolutions.com
Kouko LLC, 7901 4th St N, STE 300, St. Petersburg, FL 33702

For a walkthrough of ticket flow in your shop, request a demo.