We treat it that way. Here's exactly what protects it, in plain terms, not just a compliance checkbox.
Your deck and report are never shared with, forwarded to, or made visible to any third party, including any investor, fund, or introduction service. There is no automated investor matching or routing. Nothing leaves this system unless you explicitly request it.
Every upload is covered by a mutual confidentiality agreement, signed before you upload, that legally commits us not to disclose or misuse your deck.
Upload access sits behind email verification, phone verification, and a bot-check, before anyone can submit a deck. This isn't friction for its own sake, it stops spam uploads, keeps the notification channel reliable, and protects your deck and feedback from ending up in front of anyone but you.
90 days by default, or up to 36 months if you explicitly opt in for a stated purpose. Deletion is available on request at any time, regardless of which option you chose.
Every PDF is scanned before it's processed. Files that fail a scan are blocked and never reach the analysis engine.
Deck text is sanitised and structurally separated from the analysis instructions before it reaches the model, and the output is validated against an expected format before it's shown to you. A deck can't talk its way into a fake score or leak how the scoring works.
Upload and analysis requests are rate-limited per user, protecting against both cost abuse and systematic attempts to reverse-engineer how scoring behaves.
The scoring methodology, prompts, and category weightings never reach your browser. Only the result does.
Deck Gap is a diagnostic tool, not a regulated financial service. It doesn't provide investment advice, doesn't arrange or broker investment transactions, and doesn't introduce or match you with investors. See the terms of use for the full detail.
This page describes the security posture of the product as built. It isn't a substitute for your own diligence, and no system is unbreakable, if you have questions about a specific threat model, ask before you rely on it.