Security and trust
Protection starts at the core of the system.
Fund data is protected by design. Encryption, access control and an audit trail are part of every component, from the first vehicle to the last LP report.
AWS hosting
GDPR
SOC 2 Type II
AuditingISO 27001
Coming soon
Controls
Security built into every layer
Encryption, access control, verification and an audit trail are part of the platform, not features added on top.
Encrypted in transit and at rest
TLS between your browser and NeoVC. Databases and file storage are encrypted at rest with managed keys.
Role-based access, per fund and per investor
Each person sees the vehicles, documents and accounts they are entitled to. LPs see their own accounts and nothing else.
An audit trail on every financial entry
Who created or changed an entry, and when. Financial records are voided, never erased, so the history stays complete.
Hosted on AWS
Application, database and file storage run on Amazon Web Services managed services, with separate environments for testing and production.
KYC, KYB and AML built in
Investors and entities are verified inside the platform, with sanctions screening, and the result is reused across the funds they join.
Data handling
Where fund data lives, how it is protected, and how you take it with you.
- Hosting
- NeoVC runs on Amazon Web Services. Application, database and file storage live in AWS managed services, with production separated from every other environment.
- Encryption
- Traffic between your browser and NeoVC is encrypted with TLS. Stored data is encrypted at rest by the managed services that hold it.
- Retention and export
- You own your data. Every table and report can be exported, and you can request a full export at any time.
- No hard deletes of financial data
- Financial records are voided, never erased, so the audit trail stays complete.
Access model
Who can see what, and how we know who they are.
- Roles per fund, per vehicle and per investor
- Each person sees only the vehicles and documents they are entitled to. LPs see their own accounts and nothing else.
- Verifications
- KYC, KYB and AML checks on investors and entities, with sanctions screening built in.
- Audit trail
- Every financial entry records who created or changed it and when.
- Staff access
- NeoVC staff do not access fund data without a written request from you.
How we operate
The discipline behind the controls.
- Separate environments
- Changes are tested on a prerelease environment with its own database before they reach production.
- Managed infrastructure
- Compute, databases and storage are AWS managed services, patched and monitored by the provider.
- Secrets outside the code
- Credentials and keys live in the deployment configuration, never in the repository.
- Reviewed changes
- Every change to the platform goes through a pull request and an automated review before it is merged.
Responsible disclosure
Found a vulnerability? Email support@neovc.com and we will respond within two business days.
Compliance program
A compliance program mapped to SOC 2 Type II and ISO 27001, with controls operating and evidence collected as part of daily operations.
FAQ
Security questions
On AWS, encrypted in transit and at rest. Access is role-based per fund, per vehicle and per investor. NeoVC staff do not access fund data without a written request from you.
Multi-vehicle and multi-manager structures, including feeder and parallel vehicles, in USD and local currencies. NeoVC is used by funds in Chile and Latin America and supports funds domiciled elsewhere.
You do. Every table and report can be exported, and you can request a full export at any time. Financial records are never hard-deleted, so your history stays complete.
Venture capital, on one system
Free to start. Set up in an afternoon. Migrate in days.