QuillBot

AI-powered paraphrasing, grammar checking, and writing assistance tool

by QuillBot

United States🌐US-based cloud infrastructure

TrustKit ScoreRated across 5 compliance dimensions: data residency, legal jurisdiction, data retention, certifications, and regulatory fit.Caution

About QuillBot

QuillBot is an AI-powered writing assistant founded in 2017, now owned by Course Hero (acquired 2023). The platform's core feature is its paraphrasing tool, which rewrites text in multiple modes (standard, fluency, formal, creative, and more) while preserving meaning. It also includes a grammar checker, summariser, plagiarism detector, citation generator, and translator. QuillBot serves a massive user base of over 50 million people, spanning students, academics, content writers, and business professionals. The platform is available as a web app, browser extension (Chrome, Edge), and integrations with Microsoft Word and Google Docs, making it accessible across common writing workflows. For business use, QuillBot offers a Teams plan with admin controls, centralised billing, and usage analytics. The platform supports over 30 languages for its paraphrasing tool. QuillBot uses a combination of proprietary and third-party AI models optimised for language understanding and generation. From a privacy standpoint, QuillBot processes text on US-based infrastructure. The free tier has usage limits, while the Premium plan ($9.95/month) unlocks unlimited paraphrasing, advanced grammar checks, plagiarism detection, and all paraphrasing modes.

TrustKit Score Breakdown

?44% Caution

Data Residency

Where is your data stored and processed?

All data processed on US-based infrastructure. No EU data residency option. No regional hosting controls.

2/5

Legal Jurisdiction

Which laws govern the company and your data?

US corporation subject to US jurisdiction. GDPR compliance page available but no EU legal entity. Standard privacy policy.

2/5

Data Retention & Training

Is your data used for model training?

Text processed for the service is not retained long-term or used for training. Basic data deletion available through account settings.

3/5

Certifications

ISO 27001, SOC 2, Cyber Essentials, etc.

No SOC 2, ISO 27001, or other enterprise security certifications publicly disclosed. GDPR compliance stated but no formal DPA publicised.

2/5

Regulatory Fit

Suitability for regulated industries and professional services

Consumer and education-focused tool. Not designed for regulated industries. Limited enterprise compliance features. Suitable for general business writing tasks.

2/5

Pricing

FreemiumFree tier

FreeFreeBasic paraphrasing (125 words) · 2 paraphrasing modes · Basic grammar checker

Premium$9.95/mo($4.17/mo annual)Unlimited paraphrasing · All paraphrasing modes · Plagiarism detection · …

TeamsContact SalesCentralised billing · Admin dashboard · Usage analytics · …

Full pricing details →

Quick Facts

Starting PriceFree / $9.95/mo PremiumData HostingUS-based cloud infrastructureTrains on Your DataUser text is processed for the service but not used to train models.Founded2017Employees51-200

Visit QuillBot

Frequently Asked Questions

Is QuillBot GDPR compliant?

QuillBot has a TrustKit compliance score of 44% (Caution). Data Residency: All data processed on US-based infrastructure. No EU data residency option. No regional hosting controls.. Legal Jurisdiction: US corporation subject to US jurisdiction. GDPR compliance page available but no EU legal entity. Standard privacy policy..

Where does QuillBot store data?

QuillBot hosts data in: US-based cloud infrastructure. All data processed on US-based infrastructure. No EU data residency option. No regional hosting controls.

Does QuillBot train on user data?

QuillBot: User text is processed for the service but not used to train models.. Text processed for the service is not retained long-term or used for training. Basic data deletion available through account settings.

What certifications does QuillBot hold?

No certifications have been confirmed for QuillBot yet. No SOC 2, ISO 27001, or other enterprise security certifications publicly disclosed. GDPR compliance stated but no formal DPA publicised.