Trust and security

Know how your funding data is handled.

Venturly protects workspace access and private documents, explains how public investor data is sourced, and gives investors a direct removal process.

Controls in place

Encryption in transit and at rest
All traffic is served over TLS and stored data is encrypted at rest by our infrastructure provider.
Row-level access control
Every table carries policies that scope records to the owning account - isolation is enforced in the database, not just the app.
Secrets stay server-side
Provider API keys are stored encrypted, never exposed to the browser, and shown only as masked hints.
Authenticated access
Email and Google sign-in, session-scoped requests, and server-side verification on every protected operation.
Private document storage
Data room and grant documents live in a private bucket, reachable only through short-lived signed links.
Your sending domain
Outreach goes through your own email provider account, so your domain reputation and logs remain yours.

Investor data, handled responsibly

Investor records are compiled from publicly available professional information and partner sources for the legitimate purpose of connecting founders with capital. We honour removal requests promptly and suppress opted-out contacts across discovery and outreach.

Investors can submit a removal request through our opt-out form, linked in the footer of every page.

  • Self-serve investor opt-out with immediate suppression
  • Provenance recorded for every discovered record
  • No sending to suppressed or unverified addresses
  • Deletion of your workspace data on request
  • Least-privilege access for internal operations
  • Dependency and configuration scanning on every release

What our controls do not mean

Venturly does not claim a security certification unless it is explicitly listed here. Match scores and AI-generated content are not financial, legal or investment advice, and every user should review content before sending or submitting it.

For privacy rights, retention and international processing, read the privacy policy. For investor record removal, use the dedicated opt-out form.

Reporting a vulnerability

If you believe you've found a security issue, please contact us through the contact form with the details and steps to reproduce. We investigate every report and will keep you updated on the outcome. Please don't publicly disclose an issue before we've had a chance to fix it.

Questions from your security team?

Send them over - we're happy to walk through our architecture and controls.