Trust Center

Capital Command runs on a live, multi-tenant Supabase database with real user authentication and Row Level Security enforced at the database level — a department's data is only ever visible to signed-in members of that department, verified end-to-end (a real signed-in session cannot read or write another department's records, confirmed by automated tests that check this directly against the database, not just the application). Capital Command is still in controlled pilot development, and some workflows (self-service sign-up, real file/document storage, email notifications) are not built yet — see “What's not built yet” below.

Departments own the organizational data, documents, and materials they submit. Wood Capital LLC owns Capital Command's software, code, architecture, workflows, and brand, subject to applicable third-party and open-source licenses. Generated outputs (reports, funding strategies, board materials) are intended for broad use by the department that generated them.

Capital Command uses AI-assisted drafting in one feature today: SOP/SOG drafting. It uses only the department's own already-entered Department Profile information — never invents a department fact, never fabricates a regulatory requirement — and every AI-suggested standards citation is stored as unverified until a real person confirms it; it is never silently treated as verified. Every other calculation in the product (funding matching, financial calculations, readiness checks, manufacturer matching, apparatus recommendations) remains a deterministic, rule-based computation against recorded facts — never a generated or inferred claim. If Capital Command adds further AI-assisted features, this page will disclose exactly what data that involves before the feature is available to any department.

Capital Command runs a real, scheduled ingestion pipeline against authoritative public funding sources (currently Grants.gov's public API) — discovered opportunities are stored with full source attribution and start out marked “unverified,” never presented as confirmed until a human reviews them. This product uses the Grants.gov API but is not endorsed or certified by the U.S. Department of Health and Human Services. Every funding program record carries a verification status and, where applicable, a source URL and last-checked date, so it's always clear whether a figure is verified, unverified, or a range-based estimate. Coverage today is limited to a small number of federal categories/agencies — broader source coverage is ongoing work, not yet complete.

Capital Command is a research and organizational tool. It never guarantees eligibility for a funding program, an award outcome, or an award amount — every eligibility check states its basis and flags what's unknown rather than assuming the best case. Capital Command does not provide legal, financial, tax, or grant-writing advice; a department should independently confirm anything important with the actual funding source and its own advisors before relying on it for a real decision or submission.

Being direct about gaps matters more than sounding finished: there is currently no self-service sign-up (a new department can't create its own account yet), no real file/document storage (documents are metadata records today, not uploaded files), no email or in-app notifications when a new funding match is found, and eligibility-matching against automatically-discovered opportunities is still coarse — it correctly avoids guessing at a rejection when information is missing, which currently means most discovered opportunities show as a potential match pending closer review, not a confirmed strong fit.

Draft Terms of Service and Privacy Policy are available for review. Both are marked as drafts pending attorney review and are not yet in effect.

Security or data questions about a pilot engagement should go through your Capital Command point of contact directly.