AventasD

Loading

Information
Security & data handling
For the person doing the diligence

What happens to your documents

If you are the COO or compliance officer who got sent this link after a sales call, this page is for you. It is written to answer a vendor questionnaire without a meeting, and it states where we fall short as well as where we do not.

Controls in place

What we do today

Encrypted in transit

All traffic to and within our systems runs over TLS. The public site enforces HTTPS with HSTS, and older TLS versions are refused at the edge.

Access is short and named

Your documents are reachable by your dedicated filer and a small operations team. We are an eight-person company — we can name every person with access on a call.

Filing actions are logged

Every filing action is recorded, so what was submitted, when and by whom is reconstructable rather than remembered.

Your licenses, your portal accounts

We file strictly under your active authority, through your own state portal accounts. Nothing is filed under our paper, and revoking our access is entirely within your control.

You own the data and the code

Your documents, your extracted data, and any pipeline or dashboard we build for you are yours. We export on request. Nothing is held hostage if you leave.

No training, no resale

Your documents are processed to do your work. They are not sold, not shared, and not used to train models for anyone else.

Enquiries stay off the public web

Contact and demo submissions are written outside the public web root, not to a guessable URL.

US-based

We work from Houston, Texas. Your filings are handled by our own staff, not resold to an unnamed third-party processor.

Being straight with you

Where we are not there yet

A security page that only lists strengths is a marketing page. These are the gaps we would rather you hear from us than discover in month three.

SOC 2

We are not SOC 2 certified today. We have a remediation and readiness plan in progress, and we would rather tell you that than point at a badge we have not earned. If your procurement process requires a report, tell us early so we can be straight with you about timing.

We are a small company

Eight people is a real operational risk factor and you should weigh it. Our answer is that you get a named filer who knows your account rather than a queue, that we run a shadow cycle in parallel before you switch anything, and that you keep your own licenses and portal accounts throughout — so moving away from us is a decision, not an extraction.

Ask us anything this page does not cover

If your questionnaire asks something we have not addressed here, ask it directly and we will answer it plainly, including when the answer is no. We would rather lose a deal on an honest answer than win it on a vague one.

Questions we get asked

Frequently asked

Are you SOC 2 certified?

No, not today. We have a readiness and remediation plan in progress. We would rather say that than imply a certification we do not hold.

Whose licenses are the filings made under?

Yours. You keep your producer licenses current and your own state portal accounts; we file strictly under your active authority. We never file under our own paper.

Who owns the data and anything we build?

You do. Your documents, your extracted data and any pipelines or dashboards built for you belong to you, and we will export them on request. Nothing is held hostage.

Do you use our data to train models?

No. Your documents are processed to do your work and are not sold, shared or used to train models for anyone else.

Who at AventasD can see our documents?

Your dedicated filer and a small operations team. We are an eight-person company, so the honest answer is that the list of people with access is short and we can name every one of them on a call.