Your data, on your terms
Avenzor runs on documents you choose to share — company profiles, audited accounts, management accounts. This page explains exactly what happens to them, what we will never do with them, and how to take them back.
Last updated · 11 June 2026
01Consent comes first
Nothing is analysed without your action. We only process documents that you (or someone authorised by your company) explicitly upload, and we use them solely to produce the outputs you request:
- Financial health checks in plain language.
- Lending-readiness and lender-ready reports.
- Monthly CFO actions and monitoring you have enabled.
Uploading a document is your consent to process it for these purposes. We do not repurpose your documents for anything else without asking first.
02Source-linked processing
Every figure in an Avenzor report traces back to a document you provided. Where data is insufficient, reports say so rather than guessing. Our analysis pipeline is designed so that:
- Documents are encrypted in transit and stored with access controls.
- Processing is scoped to your company workspace — your data never trains models for other customers.
- Generated reports are reviewed against their sources before they are treated as lender-ready.
04Withdrawing consent & deletion
You can change your mind at any time:
- Delete individual documents from your workspace, which removes them from future analysis.
- Request deletion of your whole workspace, including generated reports.
- Email enquiry@avenzor.io to withdraw consent for any processing.
Withdrawal does not affect processing that happened while your consent was active, and we may retain minimal records where Malaysian law requires it.
05Your responsibilities
Business documents often contain personal data about other people — directors, shareholders, employees, customers. By uploading, you confirm that:
- You are authorised by your company to share the documents.
- You have any consents needed for personal data they contain.
- The documents are genuine and have not been altered.
06Where to read more
The full picture of how we handle personal data is in our Privacy Notice, and the rules of using the service are in our Terms of service. Both are governed by the laws of Malaysia, including the Personal Data Protection Act 2010.