Built the way an investor would want it built.
Fund data is sensitive by default, so the trust features are not add-ons. They are how the product works. This page says plainly what we commit to, without the implementation detail that belongs in a security review.
Your data is yours
Every firm gets its own isolated workspace. No other customer, and no one at Investryx without your permission, can see your companies, deals, funds or LPs. You can ask for a full export at any time and take it with you when you leave.
Encrypted everywhere
Data is encrypted in transit and at rest. Encryption keys are managed by the platform, never stored in the application, and never handled by people.
Least access, full audit
Team members see what their role allows. Every change to fund data is recorded with who made it and when, including changes the agent applied on someone’s behalf, and the trail is visible to the whole team.
Privacy by design
Google connections are read-only and per member: contacts you review before import, and the time, title and attendees of your own calendar events. Email is never requested; event descriptions and attachments are never read. There is no hidden full-access mode.
AI you can trace
Every AI-written field carries its source and a confidence level. Memos and letters wait for your review. The agent proposes and you apply. Your data is used to answer your requests, not to train models.
LP portal safeguards
Investors sign in with single-use email links, so there are no passwords to leak. Downloads are watermarked with the downloader’s identity. Every view and download is logged, and documents can be restricted to specific LPs.
How we operate
- Sign-in links expire, sessions refresh silently and end when you sign out everywhere.
- Secrets and credentials are managed outside the codebase and rotated when people or vendors change.
- Backups run continuously and restores are tested; demo and test data can never reach production.
- Dependencies are monitored for vulnerabilities and patched on a regular cadence.
- If we ever learn of an incident affecting your data, workspace owners are notified promptly with what happened and what we did.
- Responsible disclosure is welcome: report a suspected vulnerability through the contact form and we will respond within two business days.
Security review or LP questionnaire?
Institutional LPs often ask their managers for a questionnaire, and larger firms ask us for one before signing. Send it through the contact form and we will complete it with you, section by section.
Common questions
Can my fund administrator or auditor have access?
Yes. Invite them as team members with the access level you choose. Seats are unlimited, so there is no cost to giving your administrator their own login instead of sharing yours.
Do you offer single sign-on?
Email and password, one-time email links and Google sign-in are available to every workspace. SAML single sign-on and an exportable audit log come with the Institutional plan.
Can I export or delete my data?
Yes. Ask for a full export at any time, and for deletion when you leave. Deletion removes your workspace and its files; billing records are retained only as long as the law requires.
Where is my data stored?
In a major cloud provider’s data centres in the United States, under contracts that meet the requirements of the laws named in our privacy policy. Details are available in a security review.
Is Investryx SOC 2 certified?
Not yet. We run on certified infrastructure and document our controls in security reviews. A formal audit is planned as the customer base grows.
Run your fund from one calm place.
Fourteen days free. Card required, charged only when the trial ends. Cancel anytime.