Security
How Question Pilot Handles Deal Data.
The tracker holds the Q&A, never the documents. What we store, who processes it, and what leaves the platform, laid out in one place.
Architecture
Less to secure, by design.
Question Pilot is scoped to the Q&A around your deal. Files remain outside the tracker unless a user explicitly chooses the optional AI document-import flow, and Q&A access is partitioned by party.
-
No deal documents stored.
Files stay in your VDR. Question Pilot holds the questions, owners, answers, and history around them, so the tracker never becomes a second copy of the data room. If an authorized user explicitly chooses optional AI document import, the selected document content is sent for that processing as described below.
-
Isolated counterparty portals.
Each counterparty signs into its own portal and sees only the questions and answers you publish to it. No shared lists, no cross-party visibility.
-
Draft and publish control.
Client input and advisor review stay private to the deal team until an answer is explicitly posted. Nothing is shared by default.
-
A record that builds itself.
Who asked, who answered, and when stays attached to every question through close, ready to export when the deal wraps.
Data handling
What we store, and how it is protected.
- Encryption in transit
- All traffic between your browser and the platform runs over SSL/TLS encrypted connections.
- Row-level security
- Access rules are enforced on every database table, not just in the application layer, so a signed-in user can only reach the rows their role permits.
- Ownership
- Deal data remains the sole property of the subscribing firm at all times. We do not access, view, or use it except to provide the platform or as required by law.
- Retention and deletion
- Data is retained for the duration of the workspace's access period, held for up to 90 days in backups after termination, then permanently deleted. Deletion can be requested at any time.
- Cookies
- Session authentication only. No advertising cookies, no tracking cookies, no third-party analytics.
- The company
- Question Pilot is a product of Question Pilot LLC, built by deal advisors. Formal notices and requests run through the contact channel.
Subprocessors
Every provider that touches platform data, and the slice it processes. Each is bound by confidentiality obligations consistent with our Privacy Policy.
| Provider | Purpose | Data processed |
|---|---|---|
| Supabase, Inc. | Database infrastructure, authentication, and file storage | All user and deal data |
| Netlify, Inc. | Web application hosting and CDN | Web traffic logs, IP addresses |
| Stripe, Inc. | Payment processing | Payment card data, transaction records |
| Resend | Transactional email delivery | Email addresses, email content |
| Anthropic, PBC | AI document question extraction when explicitly requested | Entire selected PDF or extracted Word text, which may include sensitive deal information |
| Microsoft Corporation | Business email services | Support correspondence |
We do not sell, rent, or lease customer data to third parties.
Import assistance
You choose when a document is sent for AI assistance.
Spreadsheet column mapping happens locally in your browser. AI assistance is available only for a PDF or supported Word document after a file-specific consent step, and every suggested question must be reviewed against the source before import.
-
Sent
The selected document content, after consent.
The entire PDF, or text extracted from the supported Word document, is sent through Question Pilot to Anthropic to identify possible questions.
-
May be sensitive
Document content can contain sensitive deal information.
Use AI document import only when you are authorized to send the content. If you decline consent, the file is not read or sent for AI processing.
-
Review required
AI suggestions can be incomplete or wrong.
The preview shows the full suggested question text and requires source reconciliation before the user can commit an import.
The full commitments are written into the AI Terms of Use.
The record
The record is ready when the deal is.
Every question carries its owner, status, posted answer, and timestamps. At close, the full tracker exports as an Excel workbook and summary tables export as CSV.
To see what that record looks like without creating an account, download a sample prepared from the staged demo workspace.
PDF rendering of the demo workspace's Q&A record. Demo data only. In the product, exports download as Excel and CSV.
Inspect it from the inside.
Open the demo workspace and check the portals, publish controls, and record against your own bar.
Security questions before you start a deal? Write us at Email Question Pilot.