Security
Built for the most sensitive files a firm has.
Provenance holds live models, diligence material, and the decisions attached to them. The architecture treats all of it as need-to-know by default.
Visit our Trust CenterMaterial non-public information, handled like it.
Access
Being in the firm is not the same as being on the deal.
Access is granted per deal, not per organization. Someone who is not staffed on a deal cannot open its models, documents, or history — the boundary is enforced on every request that serves deal data, not just hidden in the interface.
Encryption
Encrypted in transit and at rest.
Models, decks, and source documents are encrypted on the wire and in storage. Files are reachable only through authenticated, permission-checked requests.
Record
A history that cannot be quietly rewritten.
Every captured version keeps its author, timestamp, and reason. Review decisions — approved, rejected, or changed — are recorded against the exact version they were made on, so the record still holds months later.
Isolation
One firm never reaches another firm.
Each organization is a separate tenant. Data, membership, and permissions are scoped to it, and access is checked on every read rather than assumed from a session.
What we hold
You decide what becomes a record.
Provenance is not a drive crawler. It captures the versions you checkpoint and the documents you add to a deal — nothing is ingested silently in the background. Each captured version is stored with the metadata that makes it reviewable later: who, when, why, and what changed.
When the Assistant answers a question, it answers from those same permissioned records and links back to the exact version it drew on, so an answer can always be traced to a document you already control.
Compliance
- SOC 2 Type II
- In progress
- ISO 27001
- In progress
- Continuous monitoring
- Vanta
Certification work is underway and monitored continuously with Vanta. We publish status openly rather than claiming a badge we have not finished earning — current state is always in the Trust Center.
Visit our Trust CenterReviewing us for your firm?
Send your security questionnaire to support@provenancexl.com and we will work through it with you. We would rather answer specifics than hand over a brochure.