Security and your data

Companies hand Aventro cap tables, financials and contracts. Here is how that material is protected, in plain language.

The controls

• Evidence is encrypted at rest with AES-256-GCM, under per-deal derived keys.
• Access is private by default and enforced in the database itself, not only in the app.
• Files are served only through short-lived signed links, issued after a permission check. Never a public URL.
• Every AI model call runs with zero data retention at the provider.
• Sensitive actions, such as visibility changes, shares and exports, are written to a security audit log.
• Analytics run only with your consent, and the product works the same if you decline.

Deletion

Delete your account and your data goes with it.

The formal version

The full measures are in the Security Overview, alongside the Privacy Policy, the Data Processing Agreement and the list of subprocessors.