One agentic platform for your back and middle office. Learn more →
Security

Built for institutional-grade security and controls

Camley is built with security and compliance at the core. Fund managers trust us with their most sensitive information, from LPAs to capital accounts and investor records, so we protect it with the controls enterprise teams expect.

Adhering to the standards of
SOC 2 Type II Certification in progress
ISO
ISO 27001 Certification in progress
GDPR Aligned

Your data, protected

Your fund data stays yours: kept apart from every other client, encrypted, and hosted where you need it.

01

Never used to train models

Your fund data is never used to train AI models. AI works on your data to do your work, and nothing more.

02

Isolated by client

Each client's data is isolated, so your funds, investors and documents are never mixed with another firm's.

03

Encrypted in transit and at rest

Data is encrypted as it moves between you and Camley, and while it is stored.

04

Hosted in your region on request

Your data is hosted in the UK by default. On request, we can host it in your region, to meet your firm's and your investors' data-residency requirements.

Enterprise controls

The controls enterprise teams expect, so access to Camley follows your firm's own policies.

05

Granular role-based access

Give each person access only to the funds and data their role requires.

06

Audit logs

See who did what, and when, across your workspace.

07

IP allow-listing on request

On request, we can restrict access to Camley to your firm's approved networks.

08

Configurable data retention

Decide how long data is kept, in line with your firm's retention policies.

Infrastructure and development

Secure foundations, and a disciplined process for every change we ship.

09

Built on AWS

Camley runs on Amazon Web Services, with separate development and production environments.

10

Peer-reviewed changes

Every change is reviewed by another engineer before it reaches production, and automated tests run on every change.

11

Continuous vulnerability scanning

Our code and its dependencies are continuously scanned for known vulnerabilities.

Reporting a vulnerability

If you believe you've found a security issue in Camley, please email contact@camley.ai with the details. Please don't access other people's data or disrupt the service while investigating. We'll acknowledge your report and keep you updated as we look into it.

Security questions or due diligence?

We're happy to walk your team through our controls and answer your security questionnaire.

Get in touch