Governance & data sovereignty

Built for institutions that can't compromise on trust.

Your intelligence is yours — isolated, consented, auditable, and always under human control.

Logical tenant isolation

Each request is scoped to your institution inside our shared platform and database. Customer records are not pooled across firms.

Your network, consented

Your private relationship graph comes from sources your team provides or authorizes. Separately, research tools can use public web and licensed data sources.

Auditable intelligence

Research workflows retain source links and provenance where the underlying source provides them. The product shows missing evidence instead of inventing a citation.

Human-in-the-loop

Review-required agent work is staged for a person to approve or deny. Direct user actions and automated operational writes follow their documented workflow.

Access control

Role-based access (GP, Ops and read/write roles), a separate platform-admin boundary, and sign-in through your identity provider.

Encrypted in transit

All traffic between your team and CapitalCoda is served over encrypted TLS connections.

Service providers

The services we use, and why.

This inventory covers services that can process customer-derived data. Which services are active depends on platform configuration, enabled capabilities and the integrations your team authorizes.

Vercel
Application hosting and serverless execution.
Neon
Managed PostgreSQL database infrastructure.
Configured object storage
Documents and generated files through an S3-compatible service.
PostHogconditional
Product analytics when analytics is configured.
Arizeconditional
AI observability when tracing is configured; content recording can be disabled.
Anthropicconditional
AI-assisted research, analysis and drafting.
OpenAIconditional
Selected AI evaluation and memory-comparison workflows.
Google Geminiconditional
Selected AI and real-time voice workflows.
AWS Bedrockconditional
Alternative model execution when selected by an administrator.
Parallelconditional
Live web research, extraction and monitoring.
Exaconditional
Web and company research.
Aktaconditional
On-demand company headcount, hiring, website and social signals.
Firecrawlconditional
Web search, mapping and page extraction.
Apifyconditional
Configured public-web data collection actors for events and watches.
UseTranscribeconditional
Timestamped transcripts for public YouTube episodes in Podcast Pulse.
Vee3conditional
Web and social research for briefs.
Mistralconditional
OCR and document text extraction.
Mem0conditional
Retired memory experiment; historical copies may remain subject to vendor retention.
Resendconditional
Authentication, invitation and approved outbound email.
Recall.aiconditional
Meeting participation and media transport when enabled.
Stripeconditional
Billing workflows when self-service billing is enabled.
Composioopt-in
Connection layer for integrations authorized by a user.
Gmailopt-in
Agent mailbox and email-driven actions after authorization.
Google Calendaropt-in
Meeting context after authorization.
Dropboxopt-in
Document import after authorization.
Granolaopt-in
Meeting-note synchronization after authorization.
Notionopt-in
Workspace import and synchronization after authorization.
Tracxnopt-in
Private-market research after user OAuth authorization.

Have specific security or compliance requirements?

Data residency, retention, encryption details, questionnaires — request a security briefing and we'll walk your team through our controls.

Request a security briefing.

We'll walk your team through isolation, access, auditability and our data-handling practices — and answer your questionnaire.