Security and data handling for deal teams
Acquisitions holds private deal data for sellers and buyers, so access is narrow by design. Connections are read-only, private details sit behind an NDA, and teams on Fund get roles, single sign-on and an audit log that records who saw what.
How we handle deal data
- Read only what a listing needs, and only with read-only scopes.
- Show buyers aggregated metrics, never individual customer records.
- Keep identity and documents behind an NDA the seller accepts.
- Give every team member the least access their role requires.
- Record access to sensitive items in an audit log.
- Delete data on a clear schedule when it is no longer needed.
Read-only scopes for payment and analytics connections
Sellers connect their payment processor and analytics with read-only access. We request only the scopes needed to calculate revenue, churn, refunds and traffic. We never move money, change settings, contact customers or write to analytics. Sellers can revoke access at any time from their own accounts. The full list of what we read is on Revenue verification.
NDA gate on every listing
Business names, domains, documents and data rooms stay hidden until a buyer signs an NDA in the app and the seller accepts the request. Each NDA is stored with its date, the buyer's account and the listing, so both sides have a record. Sellers can withdraw access to documents after an NDA, and the change takes effect immediately.
Seats and roles for teams
The Fund plan includes 5 seats with roles. Portfolio sellers get team seats too. Each role opens only what that person needs.
| Role | What the role can do |
|---|---|
| Owner | Manages billing, seats, roles, SSO and data export |
| Partner | Signs NDAs, sends offers and LOIs, sees all pipeline items |
| Analyst | Screens listings, works on checklists and notes, cannot sign NDAs or send offers |
| Viewer | Reads shared pipeline items and notes, cannot change anything |
Owners can remove a seat at any time. Access ends at once and the audit log keeps the history.
Single sign-on on Fund
Fund teams can require single sign-on through their identity provider. Members sign in with company credentials, and leaving the company removes access to Acquisitions when the account is disabled at the identity provider. Teams on other plans sign in with email, password and a 6 digit code sent by email.
Audit log
On Fund, the audit log records sign-ins, NDA requests and signatures, document views and downloads, offers and LOIs sent, role changes and data exports. Each entry shows the person, the time and the item. Owners can filter the log and export it.
Encryption in transit and at rest
All traffic to Acquisitions uses TLS. Stored data, including connection tokens, documents and metrics, is encrypted at rest. Connection tokens are kept separate from listing data and are never shown in the interface or exports.
Data retention
- Connection tokens are deleted as soon as a seller disconnects.
- Synced metrics are deleted within 30 days after a listing is closed, unless a deal is in escrow.
- Documents shared under NDA are deleted within 30 days after the listing is closed.
- NDA records and audit log entries are kept for as long as the law requires for proof of agreements.
- Account data is deleted within 30 days after an account is closed, apart from records we must keep for billing.
You can ask for deletion of your data at [email protected].
Service providers
We use a small number of service providers for hosting in secure data centers, transactional email, payment processing for subscriptions and escrow through an independent licensed escrow provider. Each receives only the data needed for its task. The full description is in our privacy policy.
Built for fund and corp dev teams
Fund brings 5 seats with roles, SSO, audit log, shared pipeline, data export, invoicing, priority verification requests and 500 valuation estimates per month, at 399 USD per month or 199 USD per month billed annually. Details are on Pricing for buyers and sellers.
FAQ
Documents are shared only with buyers whose NDA you accepted. Our support team opens a document only when you ask for help with it, and that access is recorded.
Yes. Fund includes data export of the pipeline, notes, checklists and the audit log.
No. We read aggregated revenue data with read-only scopes. We never read or store full card details or bank account numbers.
The owner removes the seat, or the account is disabled at your identity provider when SSO is on. Access ends at once and the audit log keeps the history.
Email [email protected] with the details. We confirm receipt and keep you updated until it is resolved.
No. Acquisitions is a listing and deal-workflow platform, not a broker-dealer and not an investment adviser, and it does not hold funds.
Screen AI deals with controls your team expects
Start with Fund for seats, roles, SSO and the audit log, or browse verified listings first.