Security & Trust

Your data, your control

Cashflow Verdict only holds what you choose to upload. We do not pull data from third parties. You can delete individual analyses or your entire account at any time; deletion removes the associated uploaded documents, subject to a limited backup window for disaster recovery.

Encryption

Data is encrypted in transit with TLS and encrypted at rest by our cloud database provider. Access to production systems is restricted and authenticated.

Service providers

We operate on vetted infrastructure providers and share data with them only as needed to run the Service:

• Cloud database & authentication — sign-in, database, and application storage (SOC 2 infrastructure).
• Payment processor — subscription billing and the customer portal (PCI DSS).
• AI analysis provider — document classification and analysis under the provider's API terms; where those terms apply, submissions are not used to train its models.
• Transactional email provider (optional) — email delivery when report email is enabled.

Access & retention

Analyses are retained while your account is active so you can revisit past reports. Access is governed by authentication and role-based controls. You may request deletion at any time; backups may persist for a limited period.

What we are not

Cashflow Verdict is an analytical tool, not a credit bureau or consumer reporting agency. Reports are analytical aids; they are not credit decisions, funding guarantees, or a source of consumer credit information.

Contact

Security questions or reports: security@cashflowverdict.com

This page is a starter template and should be reviewed by qualified counsel before production use.