Your fund's data, treated like it's ours to protect

Tenant isolation

Every workspace is logically isolated at the database layer. Navium enforces row-level security on every table: a query can only ever return rows belonging to your workspace, and that rule is enforced by the database itself — not by application code that could be bypassed. One fund can never see another fund's contacts, deals, or LPs.

Access & authentication

• Authentication is handled by a dedicated, industry-standard auth provider — we never store raw passwords.
• Access to your workspace is limited to the team members you invite.
• On the Sovereign plan, single sign-on (SSO) and self-hosted deployment are available for funds that require data to stay on their own infrastructure.

Hosting & infrastructure

Navium runs on enterprise-grade cloud infrastructure (Vercel for the application, Supabase/Postgres for data, both hosted in US regions). These providers maintain SOC 2 and comparable compliance programs for the underlying platform. Backups and point-in-time recovery are handled at the database layer.

Data ownership & portability

• Your data is yours. We do not sell it, and we do not use your fund's data to train models or for any purpose other than operating the product for you.
• You can export your data and request deletion at any time.
• If you cancel, we retain your data only as long as needed to wind down the account, then delete it.

Responsible disclosure

If you believe you've found a security issue, please email us at security@naviumcapital.com. We take reports seriously and will respond promptly.