How FundQuill works

Every model you open is audited and recomputed entirely inside your own browser. The file, the formulas and the numbers are never uploaded. This page shows what paid users need to do to get set up, and how you can prove the privacy claim for yourself in about a minute.

Pro setup Firm admin Firm member Verify the privacy →

Getting set up

The free tier needs nothing: open a model and the audit, the dependency trace and what-if all work. Pro and Firm unlock scenarios & stress testing, sensitivity and tornado tables, Monte Carlo, the model templates and the signed report. Here's the one-time setup for each.

FundQuill Pro (individual)

  1. Subscribe. Pick Pro in the pricing section and check out. Payment is handled by Lemon Squeezy (our Merchant of Record).
  2. Get your key. Your Pro licence key arrives in the Lemon Squeezy email receipt right after checkout (check spam if you don't see it).
  3. Activate. Open Your licence, paste the key, and click Activate. Pro unlocks on that device immediately.

One subscription covers up to 3 devices. Pro re-checks online every few days and keeps working offline in between. Moving to a new machine? Use “Sign out this device” on the licence page to free a slot.

Changed your mind? Refund within 14 days; see the refund policy.

Firm admin

  1. Buy a Firm plan. On the Firm page, choose your number of seats (3 minimum), monthly or yearly, and check out. Firm is priced per seat.
  2. Sign in to the admin console. Go to Firm admin and sign in with the order number from your receipt plus the email you bought with. There is no separate account to create.
  3. Generate join codes. Create one code per seat and hand a code to each member (Slack, email, however you like).
  4. Manage anytime. Add or remove seats, revoke a seat to cut off a member, and reset a device that's been lost or replaced.

Firm adds shared assumption libraries and the exportable audit trail on top of everything in Pro. Each seat activates up to 3 devices, the same as Pro.

Firm member

  1. Get a join code from your admin. You don't need an account, and you don't need the billing email.
  2. Redeem it. Open Your licence and enter the code. Your seat activates on that device.
  3. That's it. Everything still runs on your machine; your admin can see how many devices a seat uses, never what you model.

Verify the privacy yourself

We say your models never leave your browser, but you shouldn't have to take our word for it. Because everything runs on your device, you can check it yourself. Two simple tests, easiest first.

Test 1 · easiest

Pull the plug

  1. Open FundQuill and let the workstation finish loading.
  2. Now turn off Wi-Fi / unplug the network, or switch on airplane mode.
  3. Open an .xlsx and keep working: run the audit, trace a formula's precedents, flex an assumption and watch the outputs recompute.

Why this proves it: if your workbook were being sent to a server to be recalculated, nothing would work with the internet off. It all keeps working, because the calculation engine is running on your device.

Test 2 · see it for yourself

Watch the network

  1. Open your browser's developer tools: press F12, or right-click the page and choose Inspect. Then click the Network tab.
  2. With the Network tab recording, open a model, run the audit, and flex an assumption.
  3. Watch the list of requests: you'll see the app's own code and assets load, but no request that uploads your workbook.

Why this proves it: a tool that uploaded your model would show a large outgoing request carrying it. There isn't one; your file never becomes network traffic.

The things that do cross the network

Being straight with you, there are three, and none of them carries your model:

  • Licensing. Pro and Firm talk to our licensing server when you activate and during the periodic online re-check. Those requests carry your licence key (or join code) and a device fingerprint: a one-way hash that identifies the device without revealing anything about it. The free tier makes no licensing calls at all.
  • Downloading a template. The model templates are a Pro feature, so they are served from us: your licence token goes up in the request header, and an .xlsx comes back down. That's a file arriving on your machine, nothing of yours going out.
  • Feedback you choose to send. If you use the feedback form, your message, plus your email if you add one for a reply, is sent to us, along with the page you sent it from and your browser's user-agent. That is only what you decide to type; your workbook is never attached.

Your workbook, its formulas, its numbers, and everything the audit finds in it are never part of any request.

That's what we mean by evidence, not a promise: the privacy claim is something you can check, not something you have to trust.

Questions, or something didn't work as described?

Your licence Set up a Firm Send feedback