Security
Security and data handling
Most of what NeuraCap reads is public. The part that is not — the financials a private company hands over to find out what it is worth — is the part this page is really about. What we do with it, who can reach it, how long we keep it, and how you get it deleted.
Infrastructure
Where the platform runs.
Hosted on AWS
The platform runs on Amazon Web Services. Infrastructure is managed rather than self-hosted, so the physical and network layers sit behind AWS controls instead of a cupboard somewhere.
Encrypted in transit and at rest
Traffic between you and the platform is encrypted in transit over TLS. Stored data — including documents you upload — is encrypted at rest.
Role-based access
Access is granted by role and on a least-privilege basis: an account reaches its own workspace, and internal access is limited to the people who need it to run or support the service.
Regional data residency
Data can be held in a specified region. If residency is a requirement of your policy or your regulator, raise it before you upload anything and we will confirm what we can support in writing.
Your data
What happens to what you give us.
- What you upload
- Company financials, operating detail and supporting documents you choose to provide for an evaluation. Nothing more is required, and the platform does not ask for banking credentials or payment details to run an analysis.
- Who can see it
- Your workspace is yours. Internal access is role-based and limited to staff who need it to deliver or support the work, and your material is not shown to other customers, published in the free research, or used to identify your business in any sector report.
- How long it is kept
- For as long as you need the analysis it supports, and no longer than your agreement provides for. We do not publish a single fixed retention window here because it depends on the engagement — ask and we will state yours in writing rather than leave you to infer it.
- How to delete it
- Ask. Write to us and we will delete the material you name, or your workspace in full, and confirm when it is done. You do not have to give a reason, and deletion is not conditional on staying a customer.
What we collect, why, and the rights you have over it are set out in full in the privacy policy, and the contractual position is in the terms of use.
Confidentiality
If you are a private company, read this bit.
A private business that wants to know what it is worth has to hand over the numbers that make it valuable. That is a real risk to take with a platform, and it deserves a straight answer rather than a paragraph of assurance.
Your financials are used to produce your analysis. They are not used to build a benchmark other customers can see, they do not appear in the free industry research, and they are not used to identify your business in a sector report. The public context we surround them with — the peer set, the multiples, the comparable transactions — flows in one direction only, from the market to you.
If your situation calls for a signed non-disclosure agreement before anything is uploaded, say so first. That is a normal request from a company considering a sale or a raise, and it is easier to sign one at the start than to renegotiate the position later.
Kept to your workspace
Uploads support your evaluation and nothing else. How the user-provided layer is used — and how it is kept separate from sourced data and calculated metrics — is set out on coverage and data.
Ask before you upload
Residency, retention, an NDA, a security questionnaire from your investors: bring all of it up front. Write to info@neuracap.ai and we will answer in writing before anything changes hands.
Honesty about compliance
What we do not claim.
No badges you have not earned
You will not find a SOC 2 or ISO 27001 badge on this site. Everything above describes practice — how the platform is hosted, how data is encrypted, how access is granted — and stops there.
Documentation on request
If your procurement or diligence process needs documentation of our controls, ask at info@neuracap.ai and we will tell you precisely what we can provide, and what we cannot.
The same instinct runs through the analysis itself: claims are made at the level the evidence supports, and no higher. That is set out in the methodology.
Questions
Security, answered plainly.
- Where is NeuraCap hosted?
- On Amazon Web Services. Infrastructure is managed rather than self-hosted, and data can be held in a specified region where residency is a requirement.
- Is my data encrypted?
- Yes. Traffic is encrypted in transit over TLS, and stored data, including documents you upload, is encrypted at rest.
- Who inside NeuraCap can see the financials I upload?
- Access is role-based and granted on a least-privilege basis, so it is limited to the people who need it to deliver or support your work. Your material is not shown to other customers and is not published in the free industry research.
- Is NeuraCap SOC 2 or ISO 27001 certified?
- We describe our practice rather than claim an attestation. You will not find a certification badge on this site. If your procurement process needs documentation of our controls, write to info@neuracap.ai and we will tell you exactly what we can provide.
- How do I have my data deleted?
- Write to info@neuracap.ai naming the material or the workspace you want removed. We will delete it and confirm when it is done.
Related
Before you share anything.
Privacy policy
What we collect, the basis on which we hold it, how long we keep it, and the rights you can exercise over it.
Private company evaluation
What actually happens to the financials you upload: the peer set they are measured against and the valuation range they produce.
For private companies
Why an owner would hand over the numbers in the first place, and what the finished analysis lets you do with a buyer, a board or a lender.
Get your custom-built strategic insights report today.
Public or private, any sector. Tell us the company and what you need to understand.