← Overview ・ 日本語

FAQ and safety

No ISO 27001 / SOC 2 (not obtained), no SAML, zero production customers, one trial-grade server (public, no production track record), no 24-hour monitoring, one operator. Answers below are self-reported as of 2026-11-05.

What does 'approval' mean concretely?

Every write, send or delete API call needs approval=true, and the default is a dry-run that only shows what would change. We have not built any switch that removes approval. In flows such as purchasing, the requester cannot approve their own request.

Can we audit it?

The audit log is a hash chain, so edits are detectable. It can be exported with a signature and verified with a separate tool on the receiving side. Admins can read it with filters. It has not been audited by a third party.

Is our data kept apart from other companies' data?

Yes, storage is separated per company. Secrets live only in a dedicated vault and stay out of logs and results. This is checked by our own tests; no third-party assessment or penetration test has been done.

Do you have ISO 27001 or SOC 2?

No. We have only our own tests and self-assessment. If you have a security questionnaire, we can return our current answers, which are self-reported.

Is SAML single sign-on supported?

No. Only OIDC is supported, and we have never tested against a real identity provider such as Okta or Entra ID.

Which companies use it?

We have zero production customers. We publish no references or endorsements; the pilot lets you check for yourself.

What does the server look like?

One trial-grade VPS. We verified startup, login, data persistence across a restart, and a restore test of the built-in backup. It is public over HTTPS with a Let's Encrypt certificate, but there is no redundancy, no RTO/RPO is set, there is no 24-hour monitoring, and no third-party assessment.

Can it automate any kind of work?

No. The scope is what the 'What it does' table shows. Accounting, tax, labor and legal judgment, physical work and face-to-face decisions are out of scope, and we cannot produce the real data behind keyed third-party services.

What if we want to stop?

You can stop at any time. On exit we delete your data and give you a record of the deletion.

Will problems be handled quickly?

There is one operator and no 24-hour monitoring or on-call. We cannot promise response or recovery times. If that is unacceptable, please do not apply.

Is data sent to AI or external services?

Outbound connections are disabled by default. If enabled, only to destinations you allow (we give you the list before the pilot).

Price?

Setup JPY 1,000,000 + JPY 500,000 per month. Consumption tax and the charging of the pilot period are stated in the quotation email.

How do I stop marketing emails?

Reply 'unsubscribe' to any email from us. We will not write again.

Business details

Business nameQuickReach (sole proprietor, one operator)
OperatorShogo Muda
Postal addressDisclosed promptly on request (please email us)
PhoneDisclosed promptly on request (please email us)
Contact emailinfo@quickreachhq.com