Trust Centre
Continuity & Exit Package
Our commitments on data ownership, export, recovery targets, and structured offboarding — designed for teams where data lock-in is a compliance risk.
Core commitments
You own your data
All data you create, upload, or process within ChemCapital belongs to you. ChemCapital acts as a data processor on your behalf under our DPA. We do not use your data to train AI models, sell insights, or share information with third parties outside the sub-processor list.
Export at any time
You can request a full data export at any time — not only at end of contract. Enterprise customers can trigger exports from the admin dashboard or via our support team. Structured records are returned in JSON today; audit log CSV export and handover manifest JSON export are also live. A full XLSX / ZIP bundle is on the roadmap.
Offboarding process
On contract termination, ChemCapital provides a structured offboarding window (minimum 30 days) during which you can export all your data. No data is deleted until you confirm receipt of a complete export. We provide a deletion confirmation certificate on request.
Incident notification
If a security incident affects your data, you will be notified within 72 hours of a confirmed breach. We will provide a root cause analysis within 14 days and cooperate with any regulatory reporting requirements.
Export formats
The table below lists the export formats available today and on our roadmap. JSON export and audit log CSV export are available now. PDF and ZIP partial support is live for specific artefacts. XLSX is on the roadmap.
| Format | Scope | Status |
|---|---|---|
| JSON | All structured records (RFQs, quotations, POs, VDR, audit log, handover manifest, SOC 2 evidence, signature manifests) | Available |
| CSV | Audit log export (up to 5,000 events with tamper-evident digest header). Additional tabular exports are on the roadmap. | Available |
| Signature manifest (printable from the e-signature viewer), Infrastructure Qualification Pack, handover manifest (print-ready). Full document PDF renderer is on the roadmap. | Partial | |
| ZIP archive | Handover manifest is exportable as a signed JSON package today. Full ZIP bundle including all attached supplier documents is on the roadmap. | Partial |
| XLSX | Validation pack, compliance backlog, tabular audit log | Roadmap |
Recovery targets
The metrics below are targets based on our infrastructure architecture. They have not yet been validated by a formal DR exercise. Contact us if your procurement process requires tested RTO/RPO evidence.
| Metric | Value | Note |
|---|---|---|
| Recovery Time Objective (RTO) | 4 hours | Targeted. Based on Supabase infrastructure restore procedures. |
| Recovery Point Objective (RPO) | 1 hour | Targeted. Supabase automated backups with point-in-time recovery. |
| Backup frequency | Continuous (WAL) | Write-Ahead Log streaming to AWS eu-west-2. |
| Backup retention | 7 days (standard) / 30 days (enterprise) | Enterprise tenants can request extended backup retention. |
| DR test frequency | Annual (roadmap) | Formal DR exercises are planned for 2026. Not yet completed. |
Source code escrow
A source code escrow arrangement allows customers to receive a copy of the ChemCapital codebase in the event of company insolvency or platform discontinuation. This provides a form of continuity assurance for large regulated deployments.
Source code escrow is on our 2026 roadmap. We are evaluating escrow providers and can discuss terms with enterprise customers as part of contract negotiations.