Security and confidentiality.
What happens to your draft, who sees it, and when it is deleted. Only what is true today.
From first call to deletion.
- 1
Conflicts check
Within one working day.
- 2
NDA
Signed before any draft.
- 3
Insider record
Your insider trading policy applies.
- 4
Secure transfer
Method agreed in writing.
- 5
Review
Assigned people only.
- 6
Delivery
To the CFO and the audit committee chair together.
- 7
Deletion
30 days after delivery.
What we commit to now.
Confidentiality before any draft
An NDA that expressly binds us to keep the draft confidential (the agreement Regulation FD Rule 100(b)(2)(ii) looks for), and our reviewer bound by your insider trading policy.
No drafts through the website or email
The site forms ask for no documents, and the enquiry forms warn against sending drafts. Anything sent before an NDA is not received in confidence and may be deleted.
Who sees your documents
Every report is reviewed by Sandeep Choudhary before release, and by the professionals assigned to your engagement. Access is limited to the people assigned to your engagement.
AI processing
Documents are processed by our AI model provider, Anthropic, under enterprise terms that do not allow training on customer data. The full processor list is below.
Where data sits
Enquiries made through this website are stored in Mumbai, India. Where engagement documents are stored and processed is agreed in the engagement letter before anything is shared. If you need the review done in the United States, say so at scoping.
Retention and deletion
Review documents you supply are deleted 30 days after delivery of the report, or earlier on request, unless the law requires us to keep them. The final report, its list of findings and its fingerprint are kept so that the report can be verified. Contract records are kept for 8 years.
Protection
Encryption in storage and in transfer, access limited to authorized people using multi-factor authentication, and review documents kept apart for each client, as our privacy notice commits.
If something goes wrong
We tell affected people without delay, in plain language, and keep a record of every breach and the steps taken, as our privacy notice sets out.
Proof the report was not altered
Each released report has a recorded SHA-256 fingerprint; your browser checks a copy on the verify page without uploading it.
How a draft reaches us
Through the secure transfer method agreed in writing for each engagement, before any draft is shared. Never through this website or by email.
Who processes data for us.
| Role | Provider | Where |
|---|---|---|
| Website hosting | Vercel | USA, with a global edge network |
| Website database (enquiries and requests) | Upstash Redis | India (Mumbai region) |
| AI model provider | Anthropic | Under enterprise terms that do not allow training on customer data |
| Zoho Mail | India |
What is not in place yet. We say so.
Third-party security certification
We do not hold SOC 2, ISO 27001 or any other third-party security certification today, and we do not claim one.
Running inside your own cloud
Pramanex Enterprise, where the draft never leaves your account, is in development and not yet available.
Professional indemnity insurance
Professional liability cover for US engagements is put in place before the first paid US engagement. Ask us for the current position when you scope a review.
This page summarizes our commitments. The privacy notice, the draft engagement terms and, for an engagement, the signed engagement letter and NDA govern. Not an audit, review or other attestation or assurance engagement, and not legal advice. Pramanex is not a CPA firm and is not registered with the PCAOB.
Every report is reviewed by Sandeep Choudhary before release.
Sandeep Choudhary, Founder, Pramanex. More than 17 years across treasury, record-to-report, finance centers of excellence for global groups, and finance transformation.
Book a 20-minute call.
Tell us your year end and your timetable. We tell you what we would read, what it would cost and what we need from you. No documents, no obligation.
Your next 10-K will be in draft before the audit is done.
Have it read before you file.
Start with three free findings on your latest 10-K, or book a fixed-price 10-K check. Drafts only under NDA, inside your insider trading policy.