Security documentation

Where processing happens

Document processing runs in our Microsoft Azure environment. Client financial documents are uploaded through the secure intake workflow, processed within Azure, and used to populate the draft workbook your analysts review.

Documents are encrypted in transit and at rest using the platform encryption Azure provides, and application secrets are held in Azure Key Vault.

Azure and the AI services we use within it carry Microsoft's own compliance certifications. Those are Microsoft's assurances about Microsoft's platform. They are not a certification of Valuationz, and we do not present them as one.

Access controls

Access to the production environment is limited to the people who need it to operate and support the service, with role-based access and audit logging in the platform.

Firm environments are kept separate from one another. One firm's documents, models, and engagement data are not visible to another firm.

Client intake links are single-purpose and time-limited, so a link shared with one client is not a general door into the system.

What the system does and does not decide

Valuationz produces a draft workbook populated from the documents your client provides. Values that cannot be reconciled against the source are left blank and flagged for review rather than guessed.

Your analysts review the draft, resolve flagged fields, and remain responsible for the valuation and the opinion of value. Nothing the system produces is a professional conclusion on its own.

Data handling

Client financial documents belong in the secure intake workflow agreed with your firm — not in public website forms or email attachments.

Discuss retention, access, deletion, and any firm-specific requirements with us during onboarding. We confirm handling expectations with each firm directly.

Current assurance status

SOC 2 Type I is planned. Contact us for the latest assurance status and available security documentation. Valuationz does not hold a SOC 2 attestation today, and nothing on this site should be read as claiming one.

Certifications held by Microsoft Azure and the services we use within it apply to those provider services. They do not certify Valuationz.

If your firm runs a vendor security review, we work through your questionnaire directly. Bring your information-security, IT, or compliance stakeholders to a demo and we will walk through the details with them.