open-close open-close

Clewed Security Statement

Effective Date: September 2026

At Clewed, safeguarding our customers' data, platform infrastructure, and privacy is our highest priority. We maintain a multi-layered security framework designed to protect sensitive information, maintain high platform availability, and comply with modern security standards.

1. Governance & Compliance Framework

  • Data Classification Standard: Clewed classifies platform data into three tiers (Confidential Personal, Confidential Commercial, and Public/Unrestricted), and access to each tier is limited according to its sensitivity.
  • Infrastructure Hosting: Core application servers and database environments are hosted in SOC 2 Type II and ISO 27001 certified data center facilities provided by Summit Hosting / HorizonIQ. Physical access to data centers is strictly restricted to authorized facility personnel and monitored 24/7.
  • Access Control & Least Privilege: Administrative access operates under the Principle of Least Privilege and Role-Based Access Control (RBAC). Multi-Factor Authentication (MFA) is required for access to hosting and infrastructure management consoles, and production infrastructure management is restricted to authorized engineering leads.

2. Technical & Application Security

  • Vulnerability Management: We review our code and third-party dependencies for security vulnerabilities and remediate identified issues prior to production release.
  • Secure Development Life Cycle (SDLC): All source code changes are tracked against tickets in version control (Git), developed in isolated environments, and tested in a staging environment before production deployment.

3. Financial & Payment Data Protection

  • Out-of-Scope Architecture: Clewed does not collect, process, or store raw credit card numbers, bank account details, or routing credentials on our database or server infrastructure.
  • Third-Party Payment Processing: Online payments and bank account connections are handled by PCI-DSS compliant third-party providers (such as PayPal and Plaid). Card and bank credentials are entered directly on the providers' own secure pages or widgets and never pass through our servers.

4. Encryption & Business Continuity

  • Data Encryption in Transit: All network traffic between client browsers and the platform is encrypted using Transport Layer Security (TLS 1.2 or higher) with standard HTTPS enforcement.
  • Data Encryption at Rest: Platform databases, sensitive application records, and backup repositories are encrypted at rest using industry-standard AES-256 encryption.
  • Backups & Recovery: Automated daily system and database backups are transferred to isolated secondary storage, maintaining a defined Recovery Point Objective (RPO) of less than 24 hours.

5. Vulnerability Disclosure Policy

We welcome reports from security researchers and users to help maintain platform safety. If you believe you have identified a vulnerability within Clewed's application or infrastructure, please disclose it to us responsibly.

Reporting Guidelines:

  • Submit findings directly to security@clewed.com.
  • Provide step-by-step instructions, logs, or proof-of-concept details to help our engineering team reproduce the issue.
  • Do not attempt to view, alter, or delete customer data, or interrupt platform availability (e.g., through volumetric DDoS testing or automated spam).
  • Allow our team a reasonable timeline to evaluate and address the issue prior to public disclosure.

6. Contact & Escalations

For questions regarding this Security Statement, enterprise compliance inquiries, or security disclosures, please contact:

About us
Our Offering
  • Clewed.com is a website operated by Maenna & Company LLC, a New York Limited Liability Company. The site, along with all information and materials contained herein, is provided to you on an “as is” and “as available” basis without warranty of any kind, either express or implied—including, without limitation, the implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement to the fullest extent permitted by law. While the data utilized on this platform is obtained from sources believed to be reliable, Clewed makes no representations or warranties as to the accuracy, reliability, or completeness of any information on this site. Content is subject to change without notice.
  • Nothing contained herein shall be used or considered as an offer to sell or a solicitation of an offer to buy the securities or services of Clewed or any other issuer, or to purchase any interest in any investment vehicle managed by Clewed or any company in which Clewed or its affiliates have invested. An offer or solicitation will be made only through a final Private Placement Memorandum (PPM), subscription agreement, and other related definitive documents with respect to a particular investment opportunity. Any such offer will be subject to the terms and conditions contained in those documents, including the specific investor qualifications necessary to participate.
  • Any financial projections or returns shown on the website are hypothetical, are not based on actual investment results, represent estimated predictions of performance only, and are not guarantees of future results. Financial metrics, calculations, and third-party industry market data or benchmarks (including historical growth and private equity asset-class indices) cited on this platform are for informational and educational purposes only regarding general market opportunities, have not been independently verified or audited, and may differ from actual performance results. Past performance is not indicative of future results; no representation is being made that any investment will or is likely to achieve profits or losses similar to those shown, those achieved historically by the broader market, or that significant losses will be avoided.
  • Clewed is not utilizing this website to provide investment, legal, accounting, tax, or other professional advice. No information or material on the website is to be deemed a recommendation to buy or sell any securities, or relied upon for the purpose of making or communicating investment decisions. The information contained herein does not constitute a comprehensive or complete statement of the matters discussed or the law relating thereto. If you require investment, accounting, tax, or legal advice, you must consult with your own independent professional advisors with respect to your individual circumstances and needs.
  • Clewed makes no representations that transactions, products, or services discussed on the website are available or appropriate for sale or use in all jurisdictions or by all investors. Those who access the website do so at their own initiative and are solely responsible for compliance with local laws and regulations. Any case studies or transactions listed on this website are included strictly as representative market examples and are not necessarily reflective of overall performance.


Clewed. | 2459 Railroad Street #3801, Pittsburgh PA 15222

Investments@Clewed.com

©2026 clewed. All Rights Reserved.