Trust & Security at Altss
Altss is built for institutional allocators, enterprise GPs, and regulated fund managers. Our security posture, compliance roadmap, and data methodology are published openly so your InfoSec team has what they need before the first call.
SOC 2 roadmap
Altss is currently undergoing SOC 2 Type II readiness and control monitoring through Vanta. Our control environment is being formalized for enterprise diligence, and we can share the current security posture directly with qualified prospects during review.
How we handle customer data
Workspace activity and customer inputs
- Customer research activity, notes, and saved lists are handled within access-controlled Altss systems.
- Encrypted data handling in transit and at rest.
- Workspace-scoped controls, authentication, and audit-oriented monitoring.
- Customer data is not sold or shared with third-party marketing companies.
- Customer data is not used to train external models.
How Altss builds public and product intelligence
- Platform intelligence combines independently collected public-source business information, Altss-developed research and derived analysis, and commercially licensed professional contact enrichment.
- No scraping of protected, gated, or authenticated content.
- No purchase of breached or leaked datasets.
- Public facts use source-category defaults, provenance and relevant source restrictions. Licensed enrichment uses recorded provider or dataset permissions for the intended delivery; eligible requests inherit that scope. Privacy duties, factual verification and redistribution authority remain distinct. Required attribution and material qualifications remain with the result.
- Source-specific verification is described in detail on How We Collect.
Account security & access
- Permissioned access controls govern internal workflows and sensitive admin actions.
- Authentication and account-security controls are enforced for operational users.
- Audit-oriented logging supports security review and incident investigation.
- Session and credential controls are maintained as part of the broader application security posture.
Our data methodology
Altss data is built on open-source intelligence. Every record is designed to remain grounded in public sources, disciplined verification workflows, and professional fundraising context. We do not scrape gated content, purchase breached data, or aggregate private personal information outside professional market context.
- Sources include SEC filings (Form ADV, Form D, 13F), pension disclosures, Form 990/990-PF, endowment reports, sovereign wealth disclosures, verified corporate registries, and public statements.
- Verification combines OSINT sourcing, AI-assisted review, and human validation.
- Altss surfaces professional fundraising context, not personal information outside professional context.
Data subject rights & removal requests
- Correction, access, objection, restriction, erasure and complaint requests can be sent to privacy@altss.com without an account or payment; the contact page and postal route are also available.
- Personal-information requests are assessed under applicable law. An objection does not automatically remove an accurate, relevant and lawfully published organization page or unrelated facts.
- Customer-private workspace and connected-account information is separate from independently maintained intelligence licensed to authorized customers.
Subprocessors
Altss publishes a full list of third-party sub-processors that may process customer personal data in connection with the Services, including infrastructure, business operations, and AI model providers. Each sub-processor is bound by written agreements consistent with our Data Processing Addendum (DPA) and applicable privacy laws.
Incident response
Altss maintains a documented incident-response process aligned with enterprise review expectations. In the event of a security incident materially affecting customer data, Altss will notify affected customers in line with applicable law and contractual commitments.
Business continuity & uptime
- Operational monitoring and recovery planning are maintained as part of the Altss platform baseline.
- Encrypted backups and restoration workflows are part of the broader security review program.
- Enterprise security documentation can be shared during diligence conversations where appropriate.
Talk to our security team
Security posture, diligence requests, and security-review follow-ups.
Profile corrections, removal requests, and privacy-policy questions.
Route procurement, legal, and InfoSec conversations before a full sales cycle.