Enterprise-Grade Security

Your cap table data is protected with the same security measures used by banks and financial institutions.

Encryption at Rest

All data is encrypted using AES-256 encryption. Your cap table information is protected even when stored.

Encryption in Transit

TLS 1.3 ensures all data transmitted between your browser and our servers is fully encrypted.

SOC 2 Compliant

Our infrastructure meets SOC 2 Type II standards for security, availability, and confidentiality.

Role-Based Access

Granular permissions let you control who can view, edit, or administer different parts of your cap table.

Two-Factor Authentication

Optional 2FA adds an extra layer of security to protect your account from unauthorized access.

Regular Backups

Automated daily backups with point-in-time recovery ensure your data is never lost.

Our Security Practices

Infrastructure Security

We host on AWS with secure VPCs, private subnets, and strict network access controls. Our infrastructure is monitored 24/7 for suspicious activity.

Regular Security Audits

We conduct quarterly penetration testing and annual security audits by third-party firms. Vulnerabilities are addressed within 24-48 hours of discovery.

Employee Access

CapTableFree employees cannot access your data without explicit consent. All access is logged and reviewed. We never share your information with third parties.

Compliance

We maintain compliance with GDPR, CCPA, and other data protection regulations. You own your data and can export or delete it at any time.

Have security questions?

Contact our security team for more information about our practices.

Contact Security Team