How We Handle Your Data

Data at rest is encrypted with AES-256. Data in transit uses TLS 1.3. Access to production data is role-scoped and logged, and every administrative action writes to an immutable audit trail.

Blind Review

Founder identity, cap table ownership and investor names are stripped from a file before it reaches a reviewer.

Certifications

We do not claim SOC 2, ISO 27001, or any other certification. When we complete an audit, we will publish the report reference on our Trust page.

Retention and Deletion

You can export your data at any time and request deletion. We delete on request, except where records must be retained to meet legal or anti-money-laundering obligations.