Founded in 2024
LPs entrust us with sensitive fund data, GP relationships, and investment pipelines. That trust depends on us handling information properly at every layer.
This page is where we show our work. It covers the controls we operate, the standards we're certified against, the subprocessors we rely on, and the practices we follow to keep customer data confidential, available, and intact.
If you need something that isn't published here, please request access below.
Founded in 2024
Subproviders (12)
Here are the subproviders that FundFrame ApS uses to deliver its service and host its infrastructure.
Supabase
IT infrastructure
Germany
Hosts the FundFrame database and file storage, including all Customer Data, uploaded documents and backups. Used across all modules.
Railway
IT infrastructure
Netherlands
Runs the FundFrame application and its background jobs. Customer Data passes through Railway while the platform processes requests, but is stored in Supabase. Used across all modules
Auth0
Security Software
Germany
Handles sign-in, multi-factor authentication and user accounts. Processes Authorized Users’ names, email addresses and login data. Used across all modules.
Extend
AI subprocessor
Artificial Intelligence
Germany
Extend is a specialized Data Parsing and Extraction provider. They support FundFrame's Screening, Diligence and Monitoring Modules with parsing and extraction of Customer Uploaded PDF's.
Mailgun by Sinch
IT infrastructure
Belgium
Sends platform emails to Authorized Users, such as sign-in links and notifications. Also receives emails that users forward to the platform, so they can be logged in Investment CRM. Used across all modules.
Sentry
Analytics
Germany
Monitors the platform for errors. An error report can include the affected user’s ID and details of the request that failed. Used across all modules.
Microsoft
Collaboration & Productivity
Denmark
FundFrame’s own email, file storage and Teams. Customer Data reaches Microsoft only when a customer sends it to FundFrame, for example in support requests or documents shared during onboarding. Not part of the platform itself.
Sprinto
Security Software
Germany
Runs FundFrame’s ISO 27001 compliance monitoring and hosts this trust center. Monitors FundFrame’s own systems and accounts and does not process Customer Data.
Cloudflare
Hosting Providers
Protects the platform with DNS, encryption in transit, DDoS protection and a web application firewall. All traffic to the platform passes through Cloudflare, but it does not store Customer Data. Used across all modules.
Anthropic
AI subprocessor
Artificial Intelligence
United States of America
AI model that checks and analyses the data extracted from fund reports. Used only in Portfolio Monitoring, for customers who have the Monitoring managed service.
Google Gemini
AI subprocessor
Artificial Intelligence
Germany
AI model behind AI Search. Receives the search queries users type and answers from public information about fund managers. It does not access the customer’s stored data. Used only in Investment CRM.
OpenAI
AI subprocessor
Artificial Intelligence
AI model used to enrich fund manager profiles with public information, such as strategy, location and fund history. Receives fund manager and fund names, not documents or notes. Used only in Investment CRM.
