Not certified. Venedon is working toward ISO 27001 and SOC 2 readiness. We do not claim ISO 27001 or SOC 2 certification on this page.
Security & trust
Last updated: 7 October 2026
Overview
Venedon CLM is a multi-tenant contract intelligence platform. Customer contract documents and derived analysis are confidential. We design for tenant isolation, least-privilege access, encryption in transit, and auditable administrator actions.
Controls (summary)
- Organisation-scoped Postgres row-level security and optional deal-level ACL
- Email verification, business-email signup policy, and MFA for Owner/Admin roles
- Auth security event logging (hashed identifiers) and governance audit exports
- Contract processing with Anthropic zero-data-retention headers on contract-text paths
- GDPR-oriented erasure pipeline (soft delete → scheduled hard delete)
- In-app DPA acceptance tracking per organisation
Data location
Application defaults target AWS eu-west-2 for object storage and OCR. Database and auth run on Supabase in your project region. LLM providers may process prompts in the United States — see Subprocessors and your Data Processing Agreement.
Reporting issues
Report suspected vulnerabilities to security@example.com. See also security.txt.