Security
Classified:Institutional Grade.
Zurvek processes pitch decks, financial models, cap tables, and business plans — documents containing unpublished financial data and proprietary business strategies. This is not consumer software. The security architecture reflects that.
Data Architecture
Zero Retention by Default: Documents are processed in ephemeral containers. The original document is not retained beyond the processing window unless explicitly saved.
Data Residency: User data stored on Supabase infrastructure with AES-256 encryption at rest. Processing via Zurvek AI Engine over TLS 1.3. No document data used for model training.
Encryption Standards
| Layer | Standard |
|---|---|
| Data in transit | TLS 1.3 |
| Data at rest | AES-256 |
| Authentication tokens | JWT with RS256 |
| Session management | Rotating tokens, server-side invalidation |
| Password storage | bcrypt with adaptive cost factor |
Access Controls
- All evaluation data behind authentication. No public access.
- Role-based access for Syndicate and Institutional tiers.
- Sessions expire after inactivity. Concurrent limits by tier.
- Internal staff access logged, audited, and limited to essential personnel.
Third-Party Sub-processors
| Provider | Data |
|---|---|
| Supabase | User accounts, evaluation metadata, encrypted outputs |
| Zurvek AI Engine | Document content during processing window |
| Razorpay | Payment data only — never touches evaluation data |
| Resend | Email address, notification content |
Vulnerability Disclosure
Contact: support@zurvek.com · PGP key available on request.
- • Acknowledged within 48 hours
- • No legal action against good-faith researchers
- • Credit provided with permission
- • Critical vulnerabilities remediated within 72 hours
What We Do Not Do
- • We do not sell user data to any third party
- • We do not use uploaded documents for AI model training
- • We do not share evaluation outputs with any party other than the authenticated account holder
- • We do not store payment card data
- • We do not benchmark documents against other users' documents
Last updated: 8 July 2026 · VentureSense Technologies LLP · LLPIN: ACR-5230 · support@zurvek.com