Security

Sensitive data.Protected by default.

Cap tables, term sheets, theses and your own secret sauce sit at the centre of every decision. Caplia is built so that information stays encrypted, controlled and accountable.

AES 256 at restTLS 1.3 in transitRole-based accessFull audit trailISO 27001 in progress

Protection at every layer

Four layers.One coherent system.

Security isn't a feature added on top of Caplia. It is how the platform is built, from the infrastructure up to every individual share.

01Infrastructure

Hardened, isolated production environments on enterprise-grade infrastructure, monitored around the clock.

Isolated production systemsLeast-privilege internal accessContinuous monitoring and rate limitingSecure credential vaultingFMECA analysis on every deployment

02Data

Every Passport, document and data point is encrypted, and separated from every other customer's data.

AES 256 encryption at restTLS 1.3 encryption in transitRow-level security between customersPrivate encrypted document storage

03Access

Every person sees exactly what they should, and nothing more. Access can be revoked instantly.

Role-based permissionsGoogle or Microsoft sign in with two-factorStrong passwords, compromised credentials blockedTime-limited signed links for shared files

04Accountability

Every view, share, edit and export is recorded, so you always know who saw what, and when.

Timestamped activity logFull access history per companyEngagement visible to Passport ownersExports and shares always logged

Access, controlled

Different users.Different permissions.

Founders, funds and accelerators work in the same system, but never see the same things. Each side controls what it shares, and every action leaves a record.

FoundersDecide who sees your Passport, data room and cap table, at what depth, and for how long. Revoke access in one click.

FundsYour pipeline, notes, scores and decision logic stay inside your workspace. Portfolio companies and other funds never see them.

AcceleratorsProgramme teams see cohort progress and readiness, with roles for staff, mentors and partners set by you.

Activity logLive

Northfield Ventures viewed Passport FinancialsLoggedjust now

Kelvra revoked access for Ostrafield CapitalLogged2m ago

Halden Labs shared data room with Tidewell PartnersLogged6m ago

Quillmark Accelerator added mentor Cohort 4Logged11m ago

Norvane exported Cap table · v3Logged18m ago

Illustrative example. Names are fictional.

Phronel privacy

Your data never trains a model.

01Hosted privatelyPhronel runs on Caplia's own hardware, inside an environment we control and secure, or inside your own perimeter.

02Never used for trainingYour thesis, criteria, prompts and company data are never used to train or improve Phronel, or any external model.

03Your logic stays yoursEvery organisation runs its own private Phronel model. Your decision logic, data and edge remain yours alone.

See the architecture

Privacy and compliance

Your data.Your ownership.

01Customer-owned dataCustomers keep full ownership of their data. It is used only to provide the service, and never sold or shared.

02Privacy-first handlingDefined data handling practices limit access to what is needed, with documented processing, retention and access controls.

03Enterprise controlsSingle sign on, data residency options and compliance reporting are available on Enterprise plans.

ISO 27001In progress

We are working towards ISO 27001 certification, the international standard for information security management.

FAQ

Security questions, answered.

Is my data encrypted?+

Yes. All data is encrypted at rest using AES 256 and in transit using TLS 1.3, on every plan.

Is my data used to train AI models?+

No. Customer and founder data is never used to train Phronel or any external model. Phronel runs privately, on Caplia's own hardware or inside your own environment.

Who can see my company's information?+

Only the people you choose. Access is role-based, shares can be time limited, every view is logged, and you can revoke access at any time.

Is Single Sign On supported?+

Accounts support Google or Microsoft sign in with two-factor authentication. Organisation-wide SSO is available on Enterprise plans.

Is Caplia ISO 27001 certified?+

ISO 27001 certification is in progress. Talk to our team if you need detail on our controls for your own due diligence.

Can I choose where my data is stored?+

Data residency options are available on Enterprise plans, depending on infrastructure availability and compliance needs.

Security

Security questions? Talk to our team.

Talk to our team Contact support