Résumé
At Bodic, we build the platform fund managers use to run their funds and their investor relations. That means handling some of the most sensitive data there is: passports, proof of address, source-of-wealth documents, compliance decisions.
This week we shipped five production releases. A large share of the work was about one thing: making sure that data stays safe, at every step.
🔒 Documents are checked before they enter the vault
Every file an investor uploads is scanned by an antivirus and checked for integrity before it is encrypted and stored. Empty, unreadable or malformed files are rejected at the door.
🔐 Encryption and traceability by design
KYC documents are encrypted individually and served only to authorised users. Every access is logged in a tamper-evident audit trail.
🗑️ Data minimisation, enforced
When the legal retention period ends, documents and the data extracted from them are erased automatically. No orphan copies, no forgotten fields.
🛡️ Continuous security reviews
We run regular in-depth reviews of our own code. This week’s reviews led to a series of hardening fixes, all shipped to production within days.
🏢 Access by fund, now live
Each user now sees only the funds they work on. Access can be restricted team by team, with a Chinese wall between fund strategies. Data governance in one click, enforced everywhere: CRM, Dataroom, Business Intelligence and the MCP server.
Beyond security, our clients also got:
- new Deal flow capabilities: indicator time series, imports, and region and city on every deal;
global search across custom fields;
- simpler KYC campaigns, with investor accounts created in one go and follow-up campaigns in one click.
For a fund manager, trust is not a feature you add at the end. It is the foundation everything else sits on. Sovereign, hosted in France, built as a Société à Mission: that is how we build Bodic.