Built to protect your deals, your clients, and your reputation
Transaction work demands discretion.
Deal Pros is architected from the ground up with security controls that match the sensitivity of the deals you manage.
Your data is yours. Period.
Every organization's data is separated at the database level — not just filtered in the application. But isolation doesn't stop there — within each organization, every user's workspace is wrapped in its own hard boundary. Your data is invisible to colleagues unless explicitly shared.
- Hard boundary around every user — your data is private by default
- Hard boundary around every organization — enforced by row-level security on every database table
- Row-Level Security enforced at the database layer, not the application layer
- Per-module privacy controls for additional granularity
Proven infrastructure, with our controls on top
Deal Pros runs on Amazon Web Services in the United States.
Our own protections sit on top of that foundation.
Every permission is intentional
Access isn't granted broadly — it's structured by role, by organization, by deal room, and by workspace.
Role-Based Tiers
Owners, admins, agents, and external guests each see only what their role allows.
Deal Room Membership
Document access is controlled by explicit membership — not by being part of an organization.
Sensitive Data Restricted
Confidential fields are stored in isolated tables accessible only to authorized administrators.
Portal Scoping
External portal users see only the deal rooms they've been granted access to — nothing else.
Every file interaction is tracked
Documents aren't scattered across email threads and shared drives.
They're organized, controlled, and audited.
Structured Deal Rooms
Auto-generated folder structures (NDAs, Financials, Due Diligence, etc.) replace ad-hoc file sharing.
File Audit Trail
Upload, download, move, delete — every interaction is logged with who, when, and what.
Controlled External Uploads
File request links with token-based authentication let external parties upload securely without an account.
Nothing happens without a record
Significant actions are logged in a server-side audit trail, recording who acted, when, and the before-and-after values.
Recent Audit Events
Document downloaded
CIM_Draft_v3.pdf
Deal room member added
Buyer Group LLC
Role changed
jane@example.com
Bulk export initiated
Contacts (142 records)
- Server-side recording of who performed each action
- Severity-tagged events: info, warning, error, critical
- Resolution tracking for flagged events
- Data diffs capture before-and-after values
Enterprise-grade foundation
Deal Pros runs on Amazon Web Services infrastructure.
The providers that process data for Deal Pros are listed on our subprocessor list; how we process Customer Data is set out in the Data Processing Addendum.
AES-256 Encryption
Our database provider states that all customer data is encrypted at rest with AES-256.
TLS In Transit
Connections to Deal Pros use HTTPS (TLS), and our database provider states data in transit is encrypted via TLS.
Where your data lives
Our primary database is hosted on AWS in the United States (us-east-1, Northern Virginia).
Backups
Backups: daily database backups retained for 7 days.
AI features with clear boundaries
Every AI request is checked against your organization's policy before it reaches an AI provider.
AI providers are listed on our subprocessor list.
Data Rooms protected from AI by default
Documents in a Data Room can't be sent to AI unless your Organization Owner explicitly authorizes it.
Enforced before AI, not by prompts
Every AI request passes a policy check in our application before anything reaches an AI provider.
Organization-isolated
AI cannot access data across organizations. Every request is scoped to your tenant and enforced at the database layer.
Usage tracked and capped
AI usage is logged and capped per user.
Support access you control
Platform support views your organization's data only when you grant temporary access.
Consent-based access
Platform support can only view your data when you explicitly grant temporary access. You choose the duration: 1 hour, 24 hours, 3 days, or until you turn it off.
Audit trail
Audit log entries record support and administrative sessions, so your Owners and Admins can see who acted and when.
File & Storage Policy
Clear limits on what can be uploaded and how files are stored.
- 5 MB maximum for branding images (image types only).
- All standard business file types are welcome — documents (PDF, Word), spreadsheets (Excel, CSV), presentations, images, video, and compressed archives.
- Deal documents are stored in private storage, and reading a file requires access to that specific file, not just to the deal room.
Deal Pros vs. traditional broker methods
Most brokers still rely on email attachments, shared drives, and trust.
Here's how that compares.
Security checklist
A structured overview of the security controls Deal Pros delivers across every practice — mapped to the standards professionals should expect.
Data Protection
- AES-256 encryption at rest (database provider statement)
- TLS encryption in transit
- Database-level tenant isolation (RLS)
- Workspace-scoped data boundaries
- Sensitive fields stored in isolated tables
Access Controls
- Role-based access tiers (Owner → Guest)
- Deal room membership-gated documents
- Portal scoping for external users
- External members limited to view-only on shared files and folders
- Token-based file upload authentication
- AI governed by organization policy and credit-capped
- Support access requires explicit consent
Audit & Compliance
- Server-side recording of who performed each action
- Severity-tagged audit entries (info → critical)
- Before-and-after data diffs on changes
- Resolution tracking for flagged events
- Daily database backups retained for 7 days
- AI usage logged and tracked per user
- Administrative sessions recorded in audit trail
Infrastructure
- Primary database on AWS in the United States (us-east-1)
- Row-level security on every database table
- Every AI request checked by policy before it reaches a provider
How we run the platform
Careful with changes. Careful with your data.
We treat the platform the way you treat a deal: with clear rules and a record of who did what.
Actions leave a record
Significant actions, such as changes to records, settings and access, are written to an audit log with who did it and when.
Your account is separated from everyone else's
Each firm's data is separated by row-level security on every database table, so one firm's users can't query another firm's records.
AI only where it's permitted
Every AI request passes a policy check in our software before anything reaches an AI provider, and Data Rooms are protected from AI by default.
Support access only with your consent
Our support team sees your data only when an Owner grants temporary access, and that access ends when you choose.
Your responsibility. Deal Pros provides the platform and the controls. Your firm decides how they are set. You are responsible for configuring controls appropriately and for using AI in line with your brokerage's requirements and all applicable laws and regulations. Deal Pros does not provide legal or compliance advice, and its records are not brokerage approval.
Last reviewed 2026-10-01