Security and data handling

Due diligence data is the most sensitive data a firm touches. This page describes exactly what leaves your machine, when, and where it goes.

Two ribbons, two data paths

ZAF Tools ribbon (formatting, consolidation, cleaning, model audit, concentration, flatfile): runs entirely inside Excel with VBA. No network calls.

ZAF AI ribbon (mapping suggestions, analysis, commentary, document extraction): sends the selected range, sheet or document to the ZAF backend over HTTPS, receives the result, and writes it to your workbook. Requests are processed and discarded; we do not retain workbook content, and we do not train models on it.

Data masking

Configure Data Masking before any AI call to replace entity names, customer names and identifiers with tokens. The mapping stays on your machine and is reversed when results are written back.

Corporate AI (Enterprise)

Enterprise plans route every AI call to your firm’s own Azure OpenAI deployment. ZAF Tools becomes a client of your tenancy; no data passes through ZAF infrastructure.

Code signing and installation

The add-in and installer are signed by Four Aces Education Private Limited, the company behind ZAF Suite Automation. IT can restrict macros to signed publishers and whitelist the certificate. The add-in installs per user and does not require administrative privileges.

Account and billing

Accounts hold your email, plan and usage counters. Payments are processed by Razorpay and Stripe; ZAF Tools never sees card details.

Logs and support

Export Support Bundle collects add-in logs (no workbook content) for troubleshooting. Nothing is sent unless you attach it to a support email.

Questions

Security questionnaires and DPAs: abhishek.bhandari@zaftool.com.