Security
How we protect your data and ensure platform security
Security is fundamental to everything we build
TrueValue is designed for M&A professionals handling sensitive financial data and confidential deal information. We implement industry-leading security practices to ensure your data remains private, secure, and available when you need it.
Security Features
Encryption at Rest
All data is encrypted using AES-256 encryption while stored in our databases and storage systems.
Encryption in Transit
All data transmitted between your browser and our servers is protected with TLS 1.3 encryption.
Row-Level Security
Database access is controlled at the row level, ensuring users can only access data they're authorized to view.
Multi-Factor Authentication
Optional MFA adds an extra layer of security to protect your account from unauthorized access.
Role-Based Access Control
Granular permissions ensure team members only access features appropriate to their role (Owner, Admin, Editor, Viewer).
Automated Backups
Your data is automatically backed up with geographic redundancy, ensuring business continuity.
Virtual Data Room Security
Our virtual data rooms are built with bank-grade security for sharing sensitive deal documents:
- Access Tokens: Time-limited, revocable access links
- Password Protection: Optional password requirements for document access
- Audit Logging: Server-side logging of file downloads and access changes, with a unique trace ID on every download
- Granular Permissions: Control view, download, and upload rights per user
- File Versioning: Full version history with change tracking
- Expiring Access: Automatic revocation of access after specified dates
Infrastructure Security
Compliance & Certifications
GDPR Compliant
CompliantWe adhere to the General Data Protection Regulation requirements for processing personal data of EU/UK residents.
Data Processing Agreement
AvailableWe provide a comprehensive DPA for enterprise customers requiring formal data processing documentation.
View Document →SOC 2 Type II
In ProgressOur infrastructure provider (Supabase) maintains SOC 2 Type II certification. We are pursuing our own certification.
ISO 27001
PlannedWe are working towards ISO 27001 certification for our information security management system.
Our Protection & Your Recourse
We maintain comprehensive protections to safeguard your data and provide clear recourse in the unlikely event of a security incident.
Insurance Coverage
- Professional Indemnity Insurance
- Cyber Liability Coverage
- Data Breach Response Coverage
Client Protections
- 24-hour breach notification commitment
- Penalty-free termination for material breaches
- Forensic investigation at our cost
Responsible Disclosure
We take security vulnerabilities seriously. If you discover a security issue, please report it responsibly by emailing our security team. We commit to:
- Acknowledging receipt within 24 hours
- Providing regular updates on our investigation
- Crediting researchers who help improve our security (with permission)
- Not pursuing legal action against good-faith security researchers