How we protect your data
An overview of the controls protecting accounts and information on VenturePath.
Encryption in transit & at rest
All traffic uses TLS, and data stored in our managed databases and object storage is encrypted at rest by the cloud provider.
Authentication
Passwords are hashed with bcrypt. Sessions use short-lived JWTs with refresh tokens. Optional TOTP-based two-factor authentication is available from Settings.
Access controls
Role-based permissions gate every record. Founders, shareholders, and admins see only what their role allows.
Infrastructure
Production runs on Google Cloud with isolated environments, automated backups, and audit logging on privileged operations.
Privacy & compliance
We align with PDPL principles and the GDPR. Data handling, retention, and user rights are detailed in our Privacy Policy.
Responsible disclosure
Found a potential vulnerability? Report it confidentially to security@venturepath.com