Core Growth AI processes only data that is publicly available via SEC EDGAR plus contact data your firm explicitly imports or that we enrich via opt-in third-party providers (Apollo, Prospeo). We do not sell data. Your CRM credentials are stored encrypted at rest. Detailed privacy policy is available on request and ships with the Enterprise tier as part of the Vanta trust center.
Core Growth AI is sold via annual contracts to registered investment advisors. The deliverables and SLAs of your tier (Audit / Growth / Enterprise) are reflected in your master services agreement. Standard MSA template available on request before purchase.
Core Growth AI is built on SOC 2 Type II-aligned controls in preparation for full certification. All data in transit uses TLS 1.2+. Data at rest is encrypted via Supabase's underlying AES-256 encryption. Authentication is handled via Clerk (SOC 2 Type II certified) with optional SSO for Enterprise customers.