Controls a fund CFO would sign off on.

The facts below are the ones already written into the data processing agreement, plus the controls the product enforces. A claim that is still a blank in that agreement is not filled in here.

Where it runs

The application is hosted on Railway. The database, authentication and file storage run on Supabase. Encryption at rest is the provider's. We do not operate our own.

Assurance

As of 29 August 2026 there is no SOC 2, ISO 27001, or independent penetration-test report. Wire release stays off until a SOC 2 Type I report exists.

Sign-in and duties

A firm can sign in through its identity provider by entering its domain. The person who books a trade cannot approve it and cannot settle it. A valuation is stamped after two approvals. Full role segregation beyond these controls is not claimed.

Audit log

Consequential actions are written to an append-only audit log. The compliance tools include a JSON download of that trail for a date range.

AI and documents

Extracted terms wait for a person to approve them. Approving the terms is what books a position and posts the journal. The model does not post on its own. A model-training rule is not stated here: the data processing agreement still marks those commercial terms as unconfirmed.

Sub-processors

The list, including Anthropic for document extraction, is in the data processing agreement. This page does not keep a second list.