| Where | Protection | What it covers |
|---|---|---|
| Browser ↔ Analivo | TLS (HTTPS only) | Every page, sign-in, upload and download travels over an encrypted connection. |
| Analivo ↔ database & file store | TLS | Server requests to the database and document store are encrypted in transit. |
| Analivo ↔ AI model | TLS | Document text sent for analysis or OCR is encrypted in transit to the model provider. |
| Database at rest | AES-256, managed by our hosting provider | Deals, extracted page text, findings and audit logs sit on encrypted disks. |
| Documents at rest | AES-256, managed by our hosting provider | Uploaded files are stored encrypted in a private bucket with no public links. |
| Backups | Encrypted by our hosting provider | Database backups inherit the same at-rest encryption. |
Who holds the keys
Encryption keys are managed by our infrastructure provider. Customer-managed keys (bring your own key) are not offered today.
Encryption is not access control
Encryption protects disks and networks. Who can read a document is decided separately, by database policies checking your firm and role on every request.
Secrets stay on the server
Service and AI credentials are server-side only and never sent to a browser.
Downloads are checked each time
There are no shareable file links. Each download is authorized against your membership at that moment.
Management statement · for signature
Statement on encryption of customer data
Analivo transmits all customer data over TLS and stores deal documents, extracted text, findings, audit logs and backups on infrastructure that encrypts data at rest with AES-256, managed by our hosting provider.
Encryption keys are held and rotated by the hosting provider. Customer-managed keys are not offered. Access to decrypted data is controlled separately by per-firm database policies checked on every request.
This is a statement by Analivo's management. It is not an independent auditor's opinion or a SOC 2 report.
Signed
Title
Date
2026-11-12
Typing your name acts as your signature. Choose "Save as PDF" in the print dialog, then publish the file.