Skip to main content

FMV Data & Privacy Commitments

Effective November 1, 2026 · A letter from our founders

A letter from our founders

Public companies have always had an advantage most private businesses never get: information. A public company CEO can see how peers perform, where the industry is trending, and which drivers create value or destroy it. That visibility lets them spot risks early, plan with confidence, and prove their strength to lenders and investors, who reward it with better terms and cheaper capital. The owner of a $30 million manufacturer, the founder raising a first round, the investor pricing a lower middle market deal have mostly had to guess.

We started FairMarketValue to change that. Private companies make up roughly half of the U.S. economy, yet the people who build and back them make some of their biggest decisions with the least information. They deserve the clarity public markets take for granted: what a business is worth, how it performs against true peers, where its industry is heading, and what drives its value. A business that can show it is healthier or more stable than its peers can negotiate from strength.

Transparency does something bigger, too. It builds trust, and trust creates liquidity. When buyers, sellers, lenders and investors can all see fair value clearly, prices are discovered faster, capital moves more freely, and deals get done on better terms. Bringing that price discovery to the private markets will transform how private companies are bought, sold, financed and valued. That is the future we are building, and every company in our community helps build it.

That mission only works if the companies and advisors who trust us with their financials can rely on us completely. Financial statements, tax returns and general ledgers are among the most sensitive information a business has. We don't take for granted that you share them with us, and we built FMV around one principle that will never change:

We never sell, share or disclose company-identifiable data.

The rest of this page explains, in plain language, how data comes to FMV, how we use it, the commitments we make, and how we protect it. Where we go further than this letter, our Privacy Policy, Terms of Use and Trust Center set out the details.

Brandon Mills and Ray Landgraf, Founding Partners

How data comes to FMV and how we use it

Data reaches FMV in three ways, and always with permission:

  • Uploads. A business, or the accountant or advisor it works with, uploads financial statements, tax returns or other documents.
  • Accounting connections. A business authorizes a connection to its accounting platform through OAuth. The connection only reads data, and FMV never writes to or changes your books. FMV never sees your accounting login, and the access tokens we hold are encrypted and can be revoked at any time.
  • Professional referrals. A lender, CPA firm, attorney or other advisor sends us materials to complete an engagement on their client's behalf. Advisors who share client data confirm they are authorized to do so.

We use that data for five purposes, and only these:

UseWhat it meansIs a company identifiable?
Credentialed engagement workBusiness valuations, gift and estate work, ASC 805, ASC 820 and other engagements you hire us to performOnly to you, the engagement team and anyone you direct us to deliver to
Delivering data you direct us to shareWe act as a secure conduit: when you authorize a lender or partner to receive your data through our Unified Accounting API, we send only what you permissionOnly to the recipient you authorize
Standardizing financialsNormalizing and mapping statements and ledgers so financial analysis is accurate and comparableNo. This runs inside FMV's systems
Benchmarking and aggregate insightsPeer benchmarks, multiples and market statistics built from anonymized, aggregated dataNever. Only summary statistics are shown
Improving our technologyBuilding and refining FMV's workflows, rules, quality checks and own private models, including machine learning, so our analysis and deliverables are stronger, faster and more accurateNever. Data never trains a public or third-party AI model

When you direct us to share your data, we often need the complete ledger to do the work. A lender may ask for a single ratio or schedule, but calculating it accurately means normalizing the full financials first. We perform the analysis inside FMV and deliver only the output you authorized.

Our commitments

  • We never sell, share or disclose company-identifiable data. This commitment is permanent. When your data reaches a lender, advisor or partner, it is because you directed us to send it, and we send only what you authorized.
  • Your data is permissioned. Every upload, connection and referral happens with the owner's consent. For purchases under our standard terms, that consent covers the uses on this page. For negotiated engagements, data rights are set in the contract, including whether a company's data is excluded from aggregate datasets.
  • Aggregates never reveal a company. Benchmarks and market data show only summary statistics. Minimum peer-group sizes and statistical safeguards prevent any result from being traced back to one business.
  • We collect only what the work requires. When we machine-read a document such as a tax return, personal identifiers like Social Security numbers aren't stored in our databases, analyses or aggregate datasets. Source documents are stored encrypted in AWS and processed by AI running inside our own AWS account.
  • Your data never trains a public AI model. FMV uses AI to standardize financials, build and refine FMV's workflows, rules, quality checks and own private models, including machine learning, so our analysis and deliverables are stronger, faster and more accurate. That AI runs inside our own AWS environment under zero data retention, so it does not store or learn from your data.
  • People review all AI-assisted work. AI and machine learning help us work faster, but people stay accountable for every result. For software products such as benchmarking, we validate accuracy and reliability through evaluations, testing and human quality control. For engagement work, a credentialed professional reviews the entire work product as reviewer and approver, and is responsible for every judgment call, quality assurance, auditability and the defensibility of the conclusions.
  • Access is limited, logged and auditable. Access is limited to the engagement team and approved FMV staff, and changes and administrative access are logged and auditable.
  • Connections only read your data. FMV never writes to or changes your books. Connections use OAuth or similar secure authentication protocols. FMV never sees your password, the access tokens we hold are encrypted, and you can disconnect at any time.
  • We tell you when things change. We will be transparent about any change to how we handle data and will give notice before material changes take effect. Commitment 1 will never change.

Why your data matters to the whole community

Every company that contributes to FMV will make the picture sharper for everyone else. FMV's network today draws on 1.24 million annual financial statements from more than 450,000 private companies, alongside dozens of public data sources. No single business could build that view alone. Together, the community can, and every contribution helps move the private markets closer to the transparency, trust and liquidity public markets enjoy.

As customer contributions are added, benchmarking will work on a give-to-get basis: companies that use FMV's benchmarking will contribute their anonymized data to the network that powers it. In return, participants will get what public companies have always had:

  • Peer benchmarks that show how margins, growth, leverage and efficiency compare with similar businesses by industry, size and region.
  • Better valuations and transactions, grounded in how comparable private companies actually perform rather than in public-company proxies.
  • Earlier, clearer decisions for owners, lenders, advisors and investors: spotting risks sooner, understanding the trends and drivers behind performance, and planning with confidence.
  • Stronger negotiating position, because a business that can prove its health and stability against peers can win better terms and financing rates.

Case study: [Company type or name, with permission]

[One or two sentences on the business and the decision it faced, e.g. a $[X]M [industry] company preparing for [a sale / a refinancing / a growth investment].]

[What FMV's benchmarks showed, e.g. gross margin of [X]% versus a peer median of [Y]% across [N] comparable companies, with the confidence interval our data scientists report.]

[What the company did with it and the result, e.g. [action taken], leading to [measurable outcome].]

How we protect your data

FMV SOC 2 Type II and ISO 27001 audits are underway and in progress. Reports will be available through our Trust Center once issued.

  • Hosted on AWSHosted on AWS
  • SOC 2 Type II, audit in progressSOC 2 Type II, audit in progress
  • ISO 27001, audit in progressISO 27001, audit in progress
  • AES-256 encryptionAES-256 encryption
  • GDPRGDPR
  • CPRACPRA
  • IRSIRS
ControlHow FMV handles it
EncryptionAES-256 at rest and TLS 1.2+ in transit
HostingEnterprise-grade, SOC 2–certified cloud infrastructure, including Amazon Web Services, in U.S.-only regions
AccessLeast privilege; engagement team only, support access by documented approval; MFA and SSO required for all FMV personnel
Logging and auditChanges and administrative access are logged and auditable; logs retained for [X]
AI providersAI runs inside FMV's own AWS environment under zero data retention; customer data is never used to train third-party models
Engagement documentsStored in a secure data room with access controls
TestingIndependent penetration testing is performed annually and industry standard vulnerability scanning is applied
PeopleBackground checks for all employees with data access; security and privacy training at hire and annually
VendorsSub-processors reviewed for security before onboarding and listed in our [Sub-processor List]
Business continuity[Daily] backups; continuity and disaster recovery plans tested [annually]
Incident responseAffected customers notified within [X hours/days] of confirming an incident that affects their data
Visit the Trust Center

Your controls and our retention obligations

  • Disconnect at any time. You can revoke an accounting connection whenever you choose, and FMV stops receiving new data from it immediately. Data synced before you disconnect is retained as described below.
  • Professional retention standards. Credentialed work is governed by the professional and regulatory standards that apply to each engagement, which may include the SEC, FINRA, AICPA, NACVA, USPAP, ASA and IRS. Those standards require us to retain engagement workpapers and supporting documents for set periods, so historical data and workpapers are kept in line with our [Data Retention Policy].
  • Anonymized data stays anonymized. Data that has already been anonymized and aggregated cannot be traced back to your company, and it remains part of aggregate datasets.
  • Questions. Contact us at support@fairmarketvalue.com about your data, your rights or this page.

Related policies

Common questions

Does FairMarketValue sell client data?

No. FairMarketValue (FMV) never sells, shares or discloses company-identifiable data. When data reaches a lender, advisor or partner, it is because the client directed FMV to send it, and FMV sends only what the client authorized.

Does FairMarketValue use client data to train AI models?

Client data never trains a public or third-party AI model. FMV's AI runs inside its own AWS environment under zero data retention. FMV uses data to build and refine its own workflows, quality checks and private models, and people review all AI-assisted work.

What security certifications does FairMarketValue hold?

FMV's SOC 2 Type II and ISO 27001 audits are underway, and reports will be available through the FMV Trust Center once issued. Data is encrypted with AES-256 at rest and TLS 1.2+ in transit, on U.S.-only cloud infrastructure.

Can a client disconnect or delete its data?

A client can revoke an accounting connection at any time, and FMV stops receiving new data from it immediately. Data synced before disconnecting and engagement workpapers are retained as professional standards require, in line with our [Data Retention Policy]. Anonymized, aggregated data cannot be traced back to a company and remains part of aggregate datasets.