Trust, security and infrastructure
Most market tools are a thin layer over someone else's API. This page is the specific, checkable version of what sits behind ours — so you can judge it rather than take our word for it.
Where it runs
- Our own hardware. Source ingestion, indexing and the language models all run on machines we own and operate, not on a rented inference API. Nothing you read here was produced by sending our sources — or your interests — to a third-party model provider.
- Models in the EU. The models that write the reads, the radar interpretations and the analysis run inside the EU on that same hardware. No prompt leaves it.
- No third-party trackers. These pages load no analytics script, no ad pixel and no external font or CDN. It is enforced rather than promised: the content-security policy we serve is default-src 'self', so your browser would refuse to load one even if it appeared.
- Sources are read politely. Our collector honours each site's robots.txt as its opt-out, keeps only what it needs, and drops scraped text on a retention timer rather than hoarding it.
Is it up right now?
The status page is generated from health snapshots recorded every minute — not from a status we type in by hand — and it shows the rolling 30-day uptime for the website and the content pipeline separately.
What we hold about you
- Payments. Card details go to Stripe and never reach our servers. We store the subscription state Stripe reports back, and the receipt it issues.
- Your account. An email address, a password hash, the markets and themes you follow, and what you have bookmarked or asked. You can delete the account and its data yourself from your account page.
- Never used to train a model. Your questions and your reading habits are not sent to any third-party AI provider and are not used to train anything. The models run on our hardware, so there is no provider to send them to.
The full detail, including our processors and how long each thing is kept: Privacy · Data processing agreement · Terms
The company behind it
- InvestWhen is part of Docutati, registered in the Netherlands.
- Dutch business register (KvK): 42095190
- Dutch VAT id (BTW-id): NL005492040B03
- Transport security, independently graded: SSL Labs report for investwhen.com
What we do not claim
We hold no SOC 2 report and no ISO 27001 certificate today, and we would rather say so than imply otherwise on the page you came to for exactly this kind of answer. If a formal audit is a requirement on your side, ask us where we stand before you buy.
Everything InvestWhen publishes is general, audience-wide market information. It is not investment, tax or legal advice, and it is never a personal recommendation.