Security and governance

Control who sees what, and prove what happened

Investment data is sensitive and audit-critical. CapLens is designed so access is granular, postings are approved, every change is recorded, and the data validates itself.

Role-based access control

31 resources, 17 actions and 17 roles. Assign roles to users, add scoped permissions and direct grants only for exceptions, and see each user’s effective permissions.

Approval workflow

New transactions are saved as drafts and posted only after approval, separating who prepares an entry from who releases it. An approval queue tracks what is waiting.

Complete audit log

Every change is recorded with timestamp, user, entity and the exact fields changed, from transaction posts to snapshot runs.

Self-validating data

400+ automated checks in 15 groups validate lots, cash, FX, corporate actions, snapshots, reports and access control, and scheduled scans flag exceptions.

Event-based history

Positions are built from lot events (buy, sell, split, dividend) rather than overwritten balances, so history can be replayed and reconciled to any date.

Read-only AI

The assistant reads data to answer questions and cannot post or change anything. It can run on a local model so prompts stay inside your network.

Governance in practice

Permissions that mirror how your organisation works

Access control

Permission groups bundle related rights (transactions, dividends, reports, private equity) so roles are quick to build, while individual permissions keep exceptions precise. Modules and tabs are hidden when a user lacks access, and rights to create, approve, post and export are separate.

Audit trail

The audit log can be filtered by entity, action and user, with the before and after values of each change, so you can answer who changed what, and when.

Deployment and data

Your data stays under your control

Deployment options

CapLens can run on infrastructure you control, such as your own servers or a private cloud. We cover deployment, backup and access design with you during onboarding.

Market data and AI providers

Prices and FX are fetched from market-data providers and stored in your database. If you choose a hosted AI model, queries go to that provider; a local model keeps them in-house.

What we do not claim. We do not claim third-party certifications we have not earned. A security overview and questionnaire responses are available on request, so your risk team can assess CapLens on facts. Ask for the security pack.

Bring your security questions

We are happy to walk your IT and risk teams through the controls above.