Security

Effective Date: August 4, 2026

Your Data Matters to Us

VentureOut helps business owners understand what their company is worth and how ready it is for a transition. That means you trust us with sensitive financial and personal information — and we take that responsibility seriously. This page describes the measures we use to protect it.

For details on what information we collect, how we use it, and your rights, please see our Privacy Policy. For the terms governing your use of our services, see our Terms & Conditions.

Infrastructure & Hosting

Our platform is hosted on cloud infrastructure providers that maintain SOC 2 Type II compliance. Data is encrypted at rest using AES-256 and encrypted in transit using TLS.

Encryption

All data transmitted between your browser and our platform is encrypted using TLS (Transport Layer Security). Sensitive data — including your financial information, valuation results, and personal details — is encrypted at rest in our database.

Access Controls

Access to client data is restricted to authorized personnel who need it to deliver our services. We use role-based access controls, multi-factor authentication, and activity logging to safeguard your information.

Data Retention & Deletion

We retain your information only as long as it is needed to deliver our services or as required by law. You may request deletion of your personal and financial data at any time by contacting us. For full details on our retention practices and your rights, see our Privacy Policy.

AI & Third-Party Services

Our platform uses AI to help generate elements of your valuation report. We want to be clear about how that works:

• We do not use your identifiable financial data or personal information to train AI models.
• Any AI service we use is bound by contractual terms that prohibit training on your data.
• Client data is never sent to unapproved external tools or services.

Security Testing

We periodically audit our platform against the OWASP (Open Worldwide Application Security Project) framework, which is a widely recognized standard for identifying and addressing web application security risks.

Incident Response

In the event of a security incident, we have a defined response process. If a breach occurs that poses a real risk of significant harm, we will notify affected individuals and the applicable regulator(s) as required by law, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta’s Personal Information Protection Act (PIPA), and applicable U.S. state breach notification laws.

Questions

If you have questions about our security practices, please contact us at privacy@getventureout.com.

VentureOut Inc.

Edmonton, Alberta, Canada