ASTRANOSSecurity
How Astranos keeps a deal safe
In plain words, including what is not done yet. A firm's compliance team can ask for the full security packet at hello@astranos.app.
Signing in
- Every account needs a password and a 6 digit code from an authenticator app on your phone. The database itself refuses everything without both.
- You are signed out after 12 hours, and the app locks after 15 minutes away. You can see your signed in devices and sign any of them out.
- A lost authenticator is reset only after an admin confirms it's you by phone and reads you a one time code.
Encryption
- Everything travels encrypted (HTTPS) and is stored encrypted on disk by our database provider.
- It is not end to end encrypted: the service can read what is stored, and so could its database administrator. That access is limited to Astranos's founder.
Who can see what
- Nobody sees a room without being in it, and each person has an access level: full, investor, counsel or escrow.
- Investors never see each other: not names, messages, amounts, documents or questions.
- These rules live in the database, on every row, not just in the screens. Astranos staff can see a room's contents only by joining it as a party, which is announced in the room's chat and written to its audit log.
Wire instructions
- Astranos never holds or moves money. It shows masked instructions (last 4 digits only).
- A change needs escrow to propose it and a second person to confirm it after a phone call, and every party gets a red warning.
- The waits are fraud protection. A proposed change can't be confirmed for 24 hours, so everyone in the room sees it first and can object. Someone newly given escrow access, or newly named the approver, waits 72 hours before they can propose or confirm, because a new or taken over account is how this fraud usually starts. The app counts each wait down, and the emails about new escrow access, a new approver or a proposed change give the exact time it ends. Nobody can shorten them in the app: the database refuses anything early.
- Got an email asking you to send funds somewhere new? Report it from the room's chat or Help. Every party can, and the whole room is warned.
- Always confirm instructions by phone, at a number you already have, before sending money. Never trust an email about a new account.
The record
- Every view, upload, download, approval and funding step made in the app goes in the room's audit log, written by the database. Nobody can edit it, and it is only ever deleted with a whole client, 30 days after the client is closed.
- The log is a hash chain: a change or removal shows when the chain is checked. Documents carry your name as a watermark, and downloaded PDF, Word and Excel files are stamped with who downloaded them and when.
Where data lives
- Data is stored by Supabase in the United States (US East). The app is served by Cloudflare. Email alerts are sent by Resend and never contain document contents or wire details.
- No third party analytics, advertising or tracking, and nothing loaded from anyone else.
What isn't done yet
- No outside penetration test yet (planned before real deals), and no SOC 2 report or other certification yet.
- Screenshots can't be prevented; the watermark shows who was looking.
A firm's compliance team can ask for the full security packet: architecture, access control, encryption, backups, incident response and subprocessors.