Private launchEffective 3 November 2026 · Analivo Technologies
Analivo Technologies (“Analivo”, “we”) provides a deal room and due diligence platform for investment firms. For personal data in customer deal rooms, the customer firm is the controller and Analivo acts as processor. For waiting-list signups and account details, Analivo is the controller.
Waiting list: name, work email, firm and optional role you submit.
Accounts: name, email, firm membership and role, sign-in records.
Customer content: documents uploaded to deal rooms, text extracted from them, findings, notes, memos and chat messages.
Technical data: request logs and audit records needed to secure and operate the service.
We use data only to provide, secure and support the service, to respond to early-access requests, and to meet legal obligations. We do not sell personal data. We do not use customer content to train AI models.
Documents are analysed by AI models through a gateway on behalf of the signed-in user, solely to produce findings for that customer. Every AI finding carries a source citation and must be verified by an analyst before it is shared with investors.
We share data only with subprocessors that host and operate the service (cloud hosting, database and storage, AI model providers and email delivery), under contractual confidentiality and security obligations. A current subprocessor list is available on request. Within a customer firm, access is controlled by that firm’s administrators; outside investors see only what a firm explicitly shares.
Data is encrypted in transit (TLS) and at rest (AES-256, as provided by our hosting provider). Each firm’s data is isolated by database policies enforced on every request, and access-relevant changes are recorded in a tamper-resistant audit log. See our SOC 2 controls page for detail.
Customer firms set retention periods per firm and per deal; documents, extracted text and findings past that period are deleted automatically each night. Waiting-list entries are kept until early access is resolved or you ask us to delete them. Account data is deleted within 30 days of account closure, except where law requires longer.
You may request access to, correction of, export of or deletion of your personal data, and may object to or restrict processing where applicable law provides. Requests about data in a customer deal room are routed to that firm. We respond within 30 days and verify identity before acting.
If we confirm unauthorised access to customer data, we will notify affected customer administrators without undue delay and within 72 hours of confirmation, describing the data involved, likely consequences and measures taken.
Where data is transferred across borders, we rely on appropriate safeguards such as standard contractual clauses offered by our subprocessors.
We will post changes here with a new effective date and notify customers of material changes. Contact us about privacy through the request form on our home page.