Plan Your Deal Room Controls

Before rollout, agree how your firm’s information will be handled, who can access it and what evidence you need. Security and assurance work is in progress.

Request a Demo

Protecting Your Deal Information

Define the Rollout Requirements

Start with your firm’s requirements for sign-in, permissions and activity records. We’ll review the proposed controls and their availability before deployment.

Choose Where Information Lives

Discuss hosting location, retention and deletion during setup. The agreed deployment should reflect your data residency and information-handling requirements.

Agree How Models Use Information

Shared model training is outside the intended use of your deal information. Any firm-specific training needs separate approval of the data, purpose and scope.

Scope Access to Each Deal

Identify the people who should see each set of documents and contribute to the review. Workspace permissions are being developed around those responsibilities.

Document Who Is Responsible

Agree the responsibilities for operating the environment, responding to incidents and managing access. Confirm these arrangements in the relevant service documentation.

Review the Evidence

Ask which tests and assessments have been completed and what remains outstanding. Independent testing and certification initiatives are in progress.

Security and Control for Your Firm

Review the security requirements for your rollout with us. Identity, access and data handling controls are being developed; the assurance initiatives below remain in progress.

In progress

  • SOC2 II

    In progress

  • ISO 27001

    In progress

  • GDPR

    In progress

Security at every stage
of the deal

Sensitive transactions call for clear boundaries around information. Our security work focuses on how deal materials are stored, accessed, reviewed and shared.

We’re building the controls and supporting documentation that help your firm assess Zylox against its requirements. Here are the questions guiding that work.

Discuss your requirements
What information does Zylox protect?

Our security work covers uploaded deal documents, the questions your team asks, generated findings and draft outputs, together with workspace and account information. The scope of data handling will be documented in the applicable agreement.

How is deal information kept private?

We’re developing layered safeguards covering authentication, document permissions, workspace isolation and activity records. Our security and assurance initiatives are in progress; confirmed controls should be reviewed with your firm before deployment.

Where will our information be hosted?

Dedicated cloud and VPC deployment options are being developed to accommodate firm-specific requirements. Hosting location, processing arrangements and operational responsibilities will be agreed before deployment.

Who can access documents and shared workspaces?

Our permissions work is designed to let firms define who can access documents, contribute to reviews and share outputs. Workspace and document access should follow the authorisations established by your firm.

Will our information train shared models?

The intended policy is that your documents, questions and outputs are not used to train shared models. Provider commitments and technical safeguards are being established as part of this work.

Can we request a model tailored to our firm?

Firm-specific model work would use explicitly approved datasets and agreed quality standards. Any training scope, data rights and deployment requirements would need to be agreed separately before work begins.

What is the status of audits and certifications?

Our independent testing and certification initiatives are in progress. The standards shown on this page are targets, not completed certifications. Evidence and assessment details will be shared as they become available.