Security

Your documents are the product. Protecting them is the job.

Vanward is built so that nothing leaves your company unless you send it, nothing is visible to another customer, and nothing you shared keeps circulating after you withdraw it.

Encrypted everywhere

Documents are encrypted in transit and at rest. Payment details never touch Vanward; Stripe handles them.

One company, one boundary

Every record is tied to your company and every request is checked against that boundary before any data is returned. Another customer cannot see your data by any route.

You decide who sees what

Nothing is visible outside your company until you create a ReadiLink. Each link is scoped to a named recipient with its own expiry and its own item list.

Withdraw means withdrawn

Revoke a link, hide an item, or remove a document and the change applies on the recipient's next request. Documents open for a short window each time, from the live source, so there is no lingering copy to chase.

Visible watermark

Every shared view carries the recipient's name, the company, and the time. Anything photographed or forwarded is attributable.

No AI training on your data

Automated document checks read one document at a time to answer narrow questions. The model provider does not use what it reads to train its models, and Vanward never trains models on customer data.

Practices

Infrastructure runs on Supabase (on Amazon Web Services) and Vercel, in the United States.
Sign-in is by one-time email link; there are no passwords to leak.
Access inside Vanward is limited to what is needed to operate and support the service.
Team seats have roles. A viewer reads; a member works; only the owner seat can change the company, its billing, or delete it. In FinReadi Close the person who prepares a step cannot be the one who reviews it.
Shared documents open through short-lived links, a minute at a time, from the current record. There is no static copy to expire.
The tenant boundary and the sharing path are reviewed against a written checklist before each release; findings are fixed before the release ships.
If we learn of unauthorized access to customer data we tell affected customers without undue delay.
Export everything as a zip at any time; deletion on request or after cancellation.

Security questions or a disclosure to report: hello@vanward.ai.

Who handles your data

Vanward runs on a small number of providers, each with its own security program. This is the complete list; it changes only with notice on this page. A system you connect, such as your accounting system or file store, is not on this list: those send records to Vanward and never receive anything from it.

Provider	What it does for you	Where
Supabase (on Amazon Web Services)	Database, file storage, sign-in	United States
Vercel	Runs the application and serves every page	United States
Stripe	Billing; card details never touch Vanward	United States
Resend	Sends sign-in links and notices from hello@vanward.ai	United States
Anthropic	Automated document checks, one document at a time, when enabled	United States
Google Workspace	Receives support email sent to hello@vanward.ai	United States

What founders and investors ask

Can Vanward staff read my documents?: Only to resolve a support request you raise, and then only the document in question. Routine operation does not involve opening customer files.
What happens to my data if I cancel?: Export everything as a zip from Settings at any time. After cancellation your data is deleted on request, and in any case within the window set out in the Terms of Service.
Can another customer ever see my data?: No. Every record carries your company, and every request is checked against your membership before anything is returned. Recipients of a ReadiLink see only the items on that link, only while it is live.
Is my data used to train AI?: No. The automated checks read a document to answer a narrow question and do not retain it for training. Vanward does not train models on customer data.
Where can I send a security question or a report?: hello@vanward.ai. A person reads it, and a reported issue gets a reply with what we found.

Ready to see where you stand?

Upload once, see your readiness, share when you choose.

Place your first cairn