The only operating system & institutional data platform your firm needs.

Strata is built for investment firms of all kinds, from digital-asset and venture funds to family offices. Our usual clients work across several systems, run recurring workflows across investments, portfolio, operations, and reporting, and rely on a small-to-medium internal team.

No. The intended value is not general conversation; it is permissioned and contextualized access to firm information, connected to defined workflows such as IC preparation, LP reporting, diligence, and portfolio-risk analysis.

Not by default. Strata is a vendor-neutral operating layer that connects your existing CRM, administrator, custodian, portfolio, and communication systems while they remain the official systems of record.

Where suitable API or MCP access is available, Strata can connect to your current tools and coordinate context and workflows across them.

If you do not yet have the required systems, or an existing tool is not suitable, we can recommend compatible solutions that work effectively with Strata.

There is no single starting workflow for every firm. During discovery, we identify the recurring process with the strongest user demand, greatest operational friction, clearest gap in existing tools, and most measurable potential value.

Common starting points include:

• Weekly investment-committee briefs
• Monthly LP-reporting packs
• Portfolio or book-risk Q&A
• Counterparty or investment diligence

Yes. Strata is asset-class agnostic and can work across private, liquid, and other asset classes by connecting the systems, tools, and data sources used across the firm. Integration requirements may vary, so the relevant systems, asset types, valuation sources, data frequency, and risk models are confirmed during the pilot.

Strata is able to provide the source context used to produce an answer. Our current terms explicitly state that AI output may be inaccurate or incomplete and must be reviewed before reliance or action.

No. It can summarize information, surface previous decisions, run configured scenarios, and prepare drafts. Investment, risk, and allocation decisions remain with authorized professionals.

Strata enables investment teams to spend more time on analysis rather than data reconciliation and gathering.

Yes, but there is always a human in the loop before any action. The platform can prepare messages and records, but automations and taking any action require explicit approval before execution.

No. Strata does not use client data to train AI models. We access Anthropic, OpenAI and Google through commercial APIs under terms that prohibit client inputs and outputs from being used to train shared models.

Google Workspace data is additionally handled in accordance with Google's Limited Use requirements and is not used to train general-purpose AI models.

Strata can be deployed in any AWS region selected to meet the client's data-residency and regulatory requirements, subject to regional service availability.

For clients with stricter security or infrastructure requirements, Strata can also support a fully private or on-premises deployment, including locally hosted LLMs. The appropriate architecture is agreed during technical scoping, as it may affect implementation time and cost.

Yes. Strata encrypts data both in transit and at rest:

• In transit: All network traffic is protected using TLS.
• At rest: Database data and stored files are protected with AES-256 encryption through Neon and Vercel.
• Connected accounts: OAuth tokens for Google Workspace and other integrations receive an additional application-level layer of AES-256-GCM encryption. The encryption key is held in Vercel's encrypted secret store.

Further requirements relating to key management, rotation, privileged access, or customer-managed keys can be reviewed during the client's security and technical assessment.

Permissions are assigned to named users and enforced server-side, not simply hidden in the interface. Strata applies the firm's approved roles and connected-system permissions to determine which funds, portfolios, data sources, workflows and outputs each user can access.

Designated administrators manage user access, integrations, and approval rights. Material actions, such as sending external communications or writing to the CRM, remain subject to the required approval controls. Access can be reviewed periodically and revoked as part of the firm's offboarding process.

During implementation, Strata documents the agreed role matrix, administrator capabilities, access-review process, offboarding procedure, and available audit records.

Strata follows an incident-response process to contain the incident, investigate its cause, assess its scope and impact, and complete the required remediation. Affected clients are notified without undue delay and within the timeframe agreed in the DPA; our standard contractual notification window is 72 hours.

Clients receive a named security contact, relevant updates throughout the response and a written post-incident report covering the impact, root cause and corrective actions.

Most certainly yes. Beyond our regular integrations, Strata can connect to any tool that offers an API or MCP server. Connections to unique tools are scoped individually for each deployment.

Yes. Strata can support deployment within a client's private cloud or on-premises environment, including the option to host the application, database, and approved LLMs within the client-controlled infrastructure.

The architecture is agreed during technical scoping based on security, data-residency, networking and integration requirements. Private deployments may require additional implementation, maintenance and support arrangements, which can affect delivery time and cost.

Yes. Clients retain ownership of their data and can request an organizational export during the engagement or when the agreement ends. Where a self-service export is not available, Strata will manage the export process with the client.

The contract and DPA should define the export formats, delivery timeframe, transition assistance, deletion schedule, and treatment of backup copies. Once the agreed retention period expires, Strata will delete the remaining client data and provide written confirmation where contractually required.

General-purpose AI tools are valuable for individual tasks, but they are not designed to provide a permissioned operating layer across an investment firm's systems, carrying the full context across each conversation and workflow. Strata connects meetings, CRM, communications, portfolio data, and reporting to preserve investment-decision context, coordinate recurring workflows, and control actions across the firm.

Building this internally is possible, but it requires ongoing investment in integrations, data architecture, permissions, security, model management, monitoring and maintenance. Strata provides this fund-specific infrastructure while remaining model- and vendor-neutral, allowing firms to benefit from leading AI models without building and maintaining the complete operating layer themselves.

You do. Your firm keeps all rights in the content you submit to Strata and in everything Strata produces for you, including notes, summaries, briefs, drafts, analyses, and records ("Your Content").

• Our license: We receive only a limited license to host and process Your Content so we can provide and secure the service.
• AI training: We do not use Your Content to train AI models.
• Sale of data: We never sell it.
• Our IP: Strata's software, models, and workflows remain ours.
• Export and deletion: Because your firm has its own dedicated database, we can provide a full export of Your Content at any time on request. When the agreement ends, we return it to you and then delete it within 30 days.