Security & compliance
Regulated data deserves boring, verifiable handling. This page will grow as certifications land; everything below is true today.
This page is a scaffold — content is being written. It is not indexed and is hidden from the production footer until live (PRELAUNCH.md).
EU data residency
Fund data lives in an EU Postgres region; documents in EU object storage.
Human approval, always
Nothing publishes without an explicit approval by a member of your organisation.
Validator-gated publishing
Deterministic cross-checks (periods reconcile, series sum, dates coherent) block publishing until resolved or explicitly acknowledged.
Locked disclaimers
The disclaimer block cannot be removed from any rendered page or widget.
Audit trail
Every upload, edit, approval and publish is recorded with who and when, exportable as CSV.
Scoped tokens
Public embed tokens are read-only and scoped to your organisation’s published data only.