Skip to content

Security and trust

Built to be trusted with the documents that matter.

Your agreements, your data room, your cap table. Here is how GetSweaty keeps them private, sealed and yours — in plain English.

What we promise

Four things you can count on.

  1. Nothing here is public

    The whole product sits behind a login. There is no public page listing you, your company or your deal, nothing for a search engine to index, and no way for someone to browse what you are working on.

  2. Your data room starts closed

    Nothing is shared until you share it. You open access file by file, to the people you choose, for as long as you choose — and you can take it back the moment a conversation ends.

  3. Signed means signed

    Every completed agreement is sealed the moment the last signature lands. Change a single character afterwards and the seal breaks, so a document is either exactly what was signed or visibly not.

  4. You see who saw what

    Every open, every download and every change of permission is recorded against a name and a time. That record is yours to read and to export, and nobody using the product can edit it.

How we protect you

The security is ours to worry about.

You should be thinking about the deal, not about whether the platform underneath it holds up.

  • Sign in the safe way

    Use a passkey — your face, your fingerprint or your device — or add a code from an authenticator app. Both are yours alone, and neither can be handed over by mistake.

  • Encrypted, always

    Everything is encrypted on its way to us and encrypted while we hold it, on infrastructure run by the same providers the world's largest companies use.

  • Private files stay private

    Confidential documents cannot be reached directly. Every view and every download passes a permission check first, and the links we issue open one file and expire within minutes.

  • We never see your card

    Payments are handled entirely by Stripe on their own pages. There is no card field anywhere in GetSweaty, and no card number ever reaches us to be stored or lost.

  • Never sold. Never fed to AI.

    We do not sell your data, we run no advertising trackers, and nothing you write on GetSweaty is sent to an AI company or used to train a model.

  • Guarded at the door

    Every sign-in, sign-up and password reset is screened for automated attacks before a password is even checked, so the scripted attempts that break into other platforms do not get started here.

Your agreements

A signed agreement is evidence, or it is just a file.

When the last person signs, GetSweaty seals the document with a digital certificate. The seal covers every character in it. If anyone alters so much as a date or a number afterwards, the seal breaks — and it breaks visibly, in ordinary PDF software, years later, in front of whoever is asking.

That is the difference between a document you hope is right and one you can put in front of an investor, an acquirer or a lawyer. It is also why no equity moves on GetSweaty until the paperwork is signed.

Trusted vendors

We build on the names you already trust.

Rather than roll our own, we run on the platforms behind some of the largest companies in the world — and we keep the list short on purpose.

  • Vercel

    Hosting and global delivery

  • Supabase

    Database, accounts and file storage

  • Cloudflare

    Protection against automated attacks

  • Stripe

    Payments and subscriptions

  • Mux

    Video hosting

  • Resend

    Email delivery

  • Google

    Address and location lookup

  • SSL.com

    Digital certificates

The privacy policy sets out who handles what, and we will send the full schedule to anyone running a vendor review.

Enterprise

Running this for your own community.

Accelerators, funds, universities and corporate venture arms want the same two things: the marketplace inside their own walls, and paperwork their organisation can sign off.

Your community, your terms

If you run a programme and you want GetSweaty for the founders and experts inside it — your members, your terms, your data, your reporting — talk to us. We will scope it with you, down to the controls and data residency your organisation needs.

Write to hello@getsweaty.com.

Compliance

For SOC 2 Type 2, ISO 27001, GDPR and HIPAA information, contact us and we will tell you exactly where we stand and share what we hold.

Security questionnaires, data processing agreements and vendor reviews go to legal@getsweaty.com. Tell us your deadline and we will work to it.

Found a security issue? Write to security@getsweaty.com and we will read it, answer it and credit you if you would like.

Ask us anything on this page

We would rather answer a specific question than be taken on trust. GetSweaty is open now in Australia and the United Kingdom.

Free for founders and experts. No equity moves until the agreement is signed.