Security and data trust
A practical overview of current production controls and data practices. This page does not claim certifications that Capital Radar has not obtained.
Platform access is account-based and invite-controlled. Authentication is provided through Supabase, and application roles separate standard, viewer and administrative access. Users are responsible for keeping credentials confidential and reporting suspected unauthorized access.
Capital Radar is hosted on Vercel with data services provided through Supabase. Production traffic is served over HTTPS. Hosting and database providers operate under their own security and contractual controls.
Stripe processes subscription payments. Capital Radar receives transaction and subscription references but does not store complete payment-card details.
Resend supports transactional and newsletter email. Subscription, confirmation and suppression records are retained as needed to operate the service and respect opt-outs.
Capital Radar can process structured public information, licensed or authorized data sources and operator-provided files. Imports pass through normalization, identity resolution, deduplication and confidence checks. Source rights and export restrictions still apply.
Where AI assists with a narrative or opportunity brief, the output is treated as an interpretation of available evidence—not a verified fact or recommendation. Users should inspect provenance and confirm material information.
Report a suspected security issue, unauthorized access, correction request or data-rights request to hello@capitalradar.vc. Include enough information to identify the account or record without sending passwords or complete payment details.
Last reviewed: 23 July 2026. Material changes to service providers or security practices will be reflected here and in the Privacy Notice where applicable.