Your searches are confidential.
The platform treats them that way.
Where your data lives
Venteja runs on Amazon Web Services. The application is hosted in AWS US East (Northern Virginia), and the main database, authentication, and application storage run on Supabase in US East (Ohio). Some processing uses specialist subprocessors, and the list is available on request. Because hosting is in the United States, international transfers are covered contractually, including standard contractual clauses where applicable.
Data is encrypted in transit and at rest. Recording storage carries server-side AES-256 encryption, and sensitive connection credentials are encrypted again at the application level.
Who can see what
Each firm’s data is logically separated using company and user identifiers, database row-level security, and access controls. Your records are not visible to other firms and are never combined with another firm’s data to produce their results.
Call recordings stay in your connected meeting account. Transcripts are stored in Venteja with the candidate’s record, and access is restricted to the users authorised for that meeting rather than open to the whole firm. Redaction is built into reports, so what a client sees is decided by you, not by the export button.
What the AI works from
Venteja’s research runs on the live web and on your own search data. Only the information a requested feature needs is sent to our AI subprocessors, and our primary language-model accounts have model training and data sharing disabled. Some AI processing may be retained by providers for up to 30 days; we won’t claim zero retention until it is true everywhere. The AI assists the work; final decisions stay with the consultant.
Candidate data and GDPR
Search firms process candidate personal data, and Venteja is built with that duty in mind. Venteja is operated by The Succession Plan Limited, registered in England and Wales. Individuals can access, correct, or delete their personal data, request portability, or object to processing, and we aim to respond within 30 days. Data is kept only as long as the work requires, then deleted or anonymised. We do not sell personal data. A current subprocessor list is available on request.
For anything this page doesn’t answer, ask us directly:
info@thesuccessionplan.com
If your firm has a security questionnaire, send it:
info@thesuccessionplan.com
