Your data. Our responsibility.

The security of your financial information is at the heart of every technical decision we make.

Core principles

Confidentiality

Your data is never shared, never resold, never used to train our artificial intelligence models.

Encryption

TLS 1.2+ in transit, AES-256 at rest. Each financial document is individually encrypted upon import.

Isolation

Each user only accesses their own data. Strict separation at application and database level.

Compliance & governance

GDPR

Documented compliance: processing registry, explicit legal bases, right to erasure, data processing agreements (DPA) signed with every subprocessor.

Retention policy

Defined and transparent retention periods. Complete deletion of your data upon simple request, at any time.

Audit trail

Every valuation is logged: user actions, modifications, calculation versions. Complete and verifiable traceability.

Infrastructure

Hosting and infrastructure

Platform operated by Wix.com Ltd. (Israel — EU adequacy decision), running on Google Cloud Platform infrastructure in the us-west1 region (United States). Transfers are covered by Standard Contractual Clauses.

Secure authentication

Two-factor authentication (2FA) available. Sessions secured with HTTP-only cookies and automatic expiration.

Continuous monitoring

Real-time infrastructure monitoring. Automatic alerts and anomaly detection across the entire platform.

Subprocessors

Vendor	Usage	Location
Google Cloud Platform	Server infrastructure, database, file storage	United States (us-west1)
OpenAI	Document extraction, financial analysis	United States *
Anthropic	Advanced AI analysis and reasoning	United States *
Stripe	Payment processing	EU / United States

* Data sent to AI providers is anonymized before transmission. No customer data is stored or used for training purposes by these providers.

Have a question about your data protection?

Our team answers any question regarding security, compliance, or the processing of your information.

security@usevaluence.com