Skip to main content

Security

Built for the most sensitive files a firm has.

Provenance holds live models, diligence material and the decisions attached to them. The architecture treats all of it as need-to-know by default.

Material non-public information, handled like it.

Deal data is treated as MNPI from the moment it arrives.

  • Access

    Being in the firm is not the same as being on the deal.

    Access is granted per deal, not per organization. Someone who is not staffed on a deal cannot open its models, documents or history. The boundary is enforced on every request that serves deal data, with database row-level security behind it, not only hidden in the interface.

  • Encryption

    Encrypted in transit and at rest.

    AES-256 at rest across databases, file storage and backups. TLS 1.2 or higher in transit, with HSTS on every connection. Keys are held in hardware-backed key management and rotated regularly.

  • Record

    A history that cannot be quietly rewritten.

    Every captured version keeps its author, timestamp and reason. Review decisions are recorded against the exact version they were made on, in an append-only trail you can export as a PDF for any model version.

  • Isolation

    One firm never reaches another firm.

    Each organization is a separate tenant. Data, membership and permissions are scoped to it, and access is checked on every read rather than assumed from a session.

  • AI

    AI that sees only what you can see.

    AI features run with zero retention, never train any model, and only see data the signed-in user is already allowed to see.

  • Identity

    Your sign-on, your MFA.

    Sign-in runs through Microsoft or Google single sign-on with your firm's MFA enforced. Deal roles are Admin, Analyst and read-only Viewer, and any grant can be revoked at any time.

  • Retention

    Kept while you use it. Deleted when you leave.

    Data is kept while the account is active, then purged from active systems within 30 days and from backups within 90.

  • Hosting

    Hosted in the United States.

    Managed PostgreSQL, network isolation, automatic TLS and DDoS protection at the edge.

What we hold

You decide what becomes a record.

Provenance is not a drive crawler. It reads only the folders you connect and the files you add to a deal, and captures the versions you save. Each captured version is stored with what makes it reviewable later: who, when, why and what changed.

When the Assistant answers a question, it answers from those same permissioned records and links back to the exact version it drew on.

Compliance

SOC 2 Type II
In progress
ISO 27001
In progress
Continuous monitoring
Vanta

Certification work is under way and monitored continuously with Vanta. The SOC 2 Type II observation period began in July 2026. We publish status rather than claim a badge we have not finished earning, and the current state is always in the Trust Center.

Open the Trust Center

Monitoring and response

How we find and handle problems.

  • SOC 2 controls monitored continuously through Vanta, not only at audit time.
  • Automated vulnerability scanning, uptime and synthetic checks.
  • Periodic third-party penetration testing.
  • Reported issues acknowledged within two business days and triaged by severity.
  • Business continuity and disaster recovery plans tested at least once a year.

Reviewing us for your firm?

Send your security questionnaire to security@provenancexl.com and we will work through it with you. We would rather answer specifics than hand over a brochure. We can also start a pilot in a scope your security team approves.