Data security
All data transmitted to and from Altaris is encrypted in transit using TLS 1.2+. Passwords are hashed using industry-standard algorithms and are never stored in plain text.
- HTTPS everywhere — All pages and API calls are served over HTTPS. HTTP connections are redirected automatically.
- Credential security — Passwords are hashed and salted. We never store or transmit plain-text passwords.
- Access controls — Your deal data is private to your account. No other user can access your deals, documents, or financial data.
- Session management — Sessions expire after 30 days of inactivity. You can sign out from any device at any time.
Your data
- No data sales — We do not sell your personal data or deal information to any third party.
- No AI training — Your documents and financial data are not used to train machine learning models.
- No broker commissions — We are a pure SaaS business. We do not receive commissions from lenders, brokers, or specialists listed in the platform.
- Data portability — You can export your deal data at any time from your account settings.
- Data deletion — When you delete your account, your personal data is removed within 30 days.
AI processing
- AI analysis features are powered by the Anthropic Claude API.
- Documents you upload for analysis are transmitted securely to Anthropic's API and are subject to Anthropic's data handling policies.
- We recommend not uploading documents containing personally identifiable information about individuals unless necessary for your due diligence.
- Your own Anthropic API key is used for AI analysis — ensuring your usage is subject to your own Anthropic account terms.
Infrastructure
- The Altaris platform is hosted on Netlify's global CDN infrastructure.
- Platform data is stored using browser localStorage during our current early-access phase. Full cloud database infrastructure (Supabase) is in active development.
- We maintain backups and monitor platform availability.
Third-party services
Altaris uses the following third-party services in delivering the platform:
- Anthropic — AI analysis engine (Privacy policy)
- Stripe — Payment processing (Privacy policy)
- Netlify — Hosting and CDN (Privacy policy)
Responsible disclosure
If you discover a security vulnerability in the Altaris platform, please report it responsibly to hello@altarishq.com before disclosing it publicly. We will acknowledge your report within 48 hours and work to address confirmed issues promptly.
Contact
Security and trust enquiries: hello@altarishq.com