Security

Data Security at Elevix

Your financial data, business intelligence, and investor relationships are among the most sensitive assets you have. We treat them that way.

AES-256 Encryption

All data at rest is encrypted using AES-256. Financial documents receive an additional layer of envelope encryption.

TLS 1.3 in Transit

All data in transit is protected by TLS 1.3. We enforce HSTS and reject connections below TLS 1.2.

ISO 27001 Infrastructure

Elevix is hosted on ISO 27001-certified cloud infrastructure with data residency options in UAE and KSA.

Regular Penetration Tests

We conduct quarterly penetration testing with independent security firms and publish summary results.

Access Controls

Access to Elevix infrastructure follows a strict zero-trust model:

→Role-based access control (RBAC) for all internal systems
→Multi-factor authentication required for all team members
→Principle of least privilege — engineers access only what they need for their specific tasks
→All access is logged and reviewed weekly by our security team
→Privileged access (investor data, financial documents) requires dual approval

Financial Document Handling

Documents you upload to Elevix (financial statements, pitch decks, cap tables) are treated with the highest level of protection:

→Documents are scanned for malware on upload
→Documents are stored with investor-specific access keys
→Documents are automatically purged 12 months after a funding process completes
→Document access logs are available to you on request

AI Data Practices

When Elevix AI analyses your documents or generates your investor readiness score, your data is processed in an isolated environment. Your data is never used to train our AI models without explicit opt-in consent.

Incident Response

In the event of a data breach, Elevix will notify affected users within 72 hours of discovery, consistent with applicable data protection regulations. Our incident response team is on-call 24/7.

Security concerns or vulnerability disclosures: security@elevix.me