C CONVICTION

Security & data handling

Diligence is sensitive. We treat it that way.

Conviction is designed around isolated workspaces, explicit evidence provenance, and clear choices about where analysis runs.

01

Workspace isolation

Every workspace is completely separate from every other one on Conviction — enforced by the platform itself, not just the app's interface, and backed by private, organization-scoped document storage.

02

Private document storage

Uploads are stored in a private bucket and accessed through authenticated, workspace-scoped policies. Materials are not publicly addressable.

03

Evidence provenance

Factual claims in committee reports require document and page citations. Assumptions and judgments are classified separately and cannot masquerade as cited facts.

04

Model transparency

When a hosted model is selected, relevant deal data and extracted text are sent to that provider for analysis. Provider and retention requirements are evaluated before production use.

Where we stand today

Clear about what is ready—and what comes next.

Conviction is an early-stage product. Production readiness work includes formal retention controls, malware scanning, signed document URLs, audit exports, and provider-specific zero-retention agreements.

We will not imply certifications or controls that have not been completed. If you have a security questionnaire or a specific data-handling requirement, talk with us before uploading confidential material.

Start a security conversation →

Have a specific requirement?

Review the security posture with us.

We'll walk through your workflow, provider requirements, and the controls you need.

Contact us →