Security & Trust
Deal data is the most sensitive data you hold
Lens is built for material non-public information: scoped access, recorded activity and AI that reads only what a human has explicitly allowed it to read.
Governance
The exposure starts before any of this
Most deal information never reaches a controlled system at all. It sits in inboxes, Teams and Slack threads and private spreadsheets, and increasingly gets pasted into general AI assistants with no project scope and no record. Security controls only protect what has been brought inside a governed record — which is why Lens is that record first, and a set of controls second.
Data handling
Where the data sits, and what happens to it
Project-level isolation
Evidence, requests, notes and generated output belong to a single project. Nothing crosses between engagements or clients.
Encryption
Data is encrypted in transit and at rest, with documents read in place rather than distributed as downloads.
No training on your data
Your documents and notes are not used to train third-party models. AI processing is scoped to answering the question in front of it.
Retention and deletion
Engagement data is retained per the agreed retention period and removed on request at the end of the mandate.
Access control
Who can see what, deliberately
Role-based permissions
Lead, contributor and read-only roles scoped to a project and, where needed, to a workstream.
Target-side access
The target's team can respond to information requests without seeing internal observations or analysis.
Private journal
Consultant notes stay private to the author until deliberately shared with the project.
Audit trail
Every material action is recorded
Uploads, reads, request responses, observation changes and generated AI artefacts all carry an actor and a timestamp. When a conclusion is questioned months later, the record of how it was reached still exists.
Document activity
Who uploaded, who read and when, across the dataroom.
Request history
Full response history on each information request.
AI provenance
Every generated artefact is versioned with its source set and reviewer.
Diligence on us
Happy to answer your security questionnaire
If your team needs a completed security questionnaire, a data processing agreement or detail on subprocessors and hosting regions, ask and we will provide it.
Ask us the hard security questions
A 30-minute walkthrough of diligence, integration and value creation in one system.