Is there available a general security ""White Paper"" that is a document that describes the site and record security provided by Quickbase?

Yes, QuickBase has always been secure and uses state of the art RSA 2048 bit encryption:

https://www.ssllabs.com/ssltest/analyze.html?d=quickbase.com

Additionally, QuickBase has consistently passed SAS70 and SSAE 16 audits. There is report available:

We�re pleased to report that the auditors found �no exceptions� during their testing, which means they can verify that QuickBase does what it says it will do! We are happy to share the detailed SSAE 16 report with customers who sign a Non-Disclosure Agreement with us. If you�re interested in obtaining the report, please contact your business development manager, QuickBase Coach, or submit a support ticket.

http://quickbase.intuit.com/blog/2011/08/23/quickbase-completes-ssae-16-audit-huh/

The only weak area of security is email notifications which are set up at the discretion of administrator. This lone security issue is easily addressed by only sending a hyperlink in the email notification so that a user clicking on the hyperlink will have to authenticate to QuickBase before accessing a report or record details.