Security at DealForge

Security and confidentiality are at the heart of DealForge. We design our infrastructure to protect sensitive deal information for brokers, sellers, and buyers.

1. Infrastructure

DealForge is hosted on secure, SOC 2–compliant cloud infrastructure provided by Supabase and our VPS environment. All data is stored in encrypted PostgreSQL databases with TLS enforced.

2. Encryption

All data in transit is encrypted via HTTPS/TLS 1.3. Sensitive credentials and files are stored using AES-256 encryption in Supabase Storage.

3. Access Control

Access is role-based (RBAC) and scoped by organization. No user can view another organization’s data without explicit permission or NDA authorization. Tokens are short-lived and rotated automatically.

4. Data Retention & Backups

Data is backed up daily and retained securely with limited access. Users may request deletion of their data at any time via support@dealforge.ai.

5. Responsible Disclosure

If you discover a security vulnerability, please contact us responsibly. We appreciate the work of ethical researchers who help us maintain trust and integrity.

Last Updated: October 2025