Security
Your documents stay inside your company until you share them.
Each company's data is walled off from every other customer. Nothing is visible outside your company until you create a ReadiLink, and when you revoke one, the recipient loses access on their next click.
Encrypted everywhere
Documents are encrypted in transit and at rest. Payment details never touch Vanward; Stripe handles them.
One company, one boundary
Every record is tied to your company and every request is checked against that boundary before any data is returned. Another customer cannot see your data by any route.
You decide who sees what
Nothing is visible outside your company until you create a ReadiLink. Each link is scoped to a named recipient with its own expiry and its own item list.
Revoke a link, and it stops working
Revoke a link, hide an item, or remove a document, and the change applies on the recipient's next request. Documents open for a short window each time, from the current record, so there is no lingering copy to chase.
Visible watermark
Every shared view carries the recipient's name, the company, and the time. Anything photographed or forwarded is attributable.
No AI training on your data
Automated document checks read one document at a time to answer narrow questions. The model provider does not use what it reads to train its models, and Vanward never trains models on customer data.
Practices
- Infrastructure runs on Supabase (on Amazon Web Services) and Vercel, in the United States.
- Sign-in is by password or a one-time email link.
- Access inside Vanward is limited to what is needed to operate and support the service.
- Team seats have roles. A viewer reads; a member works; only the billing contact can change billing or delete the company. In FinReadi Close the person who prepares a step cannot be the one who reviews it.
- Shared documents open through short-lived links from the current record. There is no static copy to expire.
- The tenant boundary and the sharing path are reviewed against a written checklist before each release; findings are fixed before the release ships.
- If we learn of unauthorized access to customer data we tell affected customers without undue delay.
- Export everything as a zip at any time; deletion on request or after cancellation.
Security questions or a disclosure to report: hello@vanward.ai.
Who handles your data
Vanward runs on a small number of providers, each with its own security program. This is the complete list; it changes only with notice on this page. A system you connect, such as your accounting system or file store, is not on this list: those send records to Vanward and never receive anything from it.
| Provider | What it does for you | Where |
|---|---|---|
| Supabase (on Amazon Web Services) | Database, file storage, sign-in | United States |
| Vercel | Runs the application and serves every page | United States |
| Stripe | Billing; card details never touch Vanward | United States |
| Resend | Sends sign-in links and notices from hello@vanward.ai | United States |
| Anthropic | Automated document checks, one document at a time, when enabled | United States |
| Google Workspace | Receives support email sent to hello@vanward.ai | United States |
What founders and investors ask
- Can Vanward staff read my documents?
- Only to resolve a support request you raise, and then only the document in question. Routine operation does not involve opening customer files.
- What happens to my data if I cancel?
- Export everything as a zip from Settings at any time. After cancellation you have 30 days to export, and then we delete your data as the Terms of Service set out.
- Can another customer ever see my data?
- No. Every record carries your company, and every request is checked against your membership before anything is returned. Recipients of a ReadiLink see only the items on that link, only while it is live.
- Is my data used to train AI?
- No. The automated checks read a document to answer a narrow question and do not retain it for training. Vanward does not train models on customer data.
- Where can I send a security question or a report?
- hello@vanward.ai. A person reads it, and a reported issue gets a reply with what we found.
Ready to see where you stand?
Try CapReadi Founder free for 30 days, no card needed: upload, score and share live ReadiLinks with investors. After the trial it is $300 a month, or $3,000 a year paid up front.