Data & consent

Your data, on your terms

Avenzor runs on documents you choose to share — company profiles, audited accounts, management accounts. This page explains exactly what happens to them, what we will never do with them, and how to take them back.

Last updated · 11 June 2026

02Source-linked processing

Every figure in an Avenzor report traces back to a document you provided. Where data is insufficient, reports say so rather than guessing. Our analysis pipeline is designed so that:

  • Documents are encrypted in transit and stored with access controls.
  • Processing is scoped to your company workspace — your data never trains models for other customers.
  • Generated reports are reviewed against their sources before they are treated as lender-ready.

03Sharing is always your call

Reports and documents are visible only to your workspace until you decide otherwise.

  • We share a report with an advisor, banker, or lender only on your explicit instruction.
  • Every share is logged, and you can see who received what.
  • We never sell your data, and we never give lenders bulk access to customer information.

Avenzor produces information to support your conversations with financial institutions — it does not make or automate lending decisions about you.

04Withdrawing consent & deletion

You can change your mind at any time:

  • Delete individual documents from your workspace, which removes them from future analysis.
  • Request deletion of your whole workspace, including generated reports.
  • Email enquiry@avenzor.io to withdraw consent for any processing.

Withdrawal does not affect processing that happened while your consent was active, and we may retain minimal records where Malaysian law requires it.

05Your responsibilities

Business documents often contain personal data about other people — directors, shareholders, employees, customers. By uploading, you confirm that:

  • You are authorised by your company to share the documents.
  • You have any consents needed for personal data they contain.
  • The documents are genuine and have not been altered.

06Where to read more

The full picture of how we handle personal data is in our Privacy Notice, and the rules of using the service are in our Terms of service. Both are governed by the laws of Malaysia, including the Personal Data Protection Act 2010.