What auto-capture actually solves
A CRM only earns trust if it's current, and the classic failure mode is well known: an analyst forgets to log a call, a partner's inbox has three months of context nobody transcribed, and by the time anyone checks the relationship graph it's already stale. Affinity's answer is to stop asking humans to do the logging. Email, calendar and meeting activity flow into records automatically, enrichment pulls in data from 40-plus sources, and relationship-strength scoring turns raw activity into something a sourcing team can actually act on, a warm path to an intro instead of a cold outreach. That's a real product decision, well executed, and it's the reason the tool has stuck at firms like Bain Capital and Lightspeed.
Two products that both speak MCP, reaching different things
Affinity's April 2026 hosted MCP server is a meaningful move: it connects ChatGPT, Claude, Gemini and Copilot directly to a firm's relationship graph, so a model can be asked "who at our firm knows someone at this target" and get a real answer. DealSage's MCP connection reaches further, not by being a smarter protocol, but by connecting to a wider ontology. The same relationship data sits alongside the documents, models and memos that produced it, and every field carries lineage back to its source. Ask a model "what did we assume in the last model on this sector" through DealSage's MCP and it can answer with the actual cell, not just the fact that a model exists somewhere.
Security, published plainly
Affinity's trust centre is genuinely thorough: SOC 2 Type 2, SOC 3, and ISO 27001, 27017, 27018 and 27701 certification are all verifiable on trust.affinity.co. What isn't published anywhere in that documentation is a VPC or on-premise deployment option, Affinity runs cloud-only. That's a reasonable choice for a relationship-graph product and won't matter to most firms. It matters more once the record in question includes unreleased models, board memos and diligence documents, which is why DealSage offers DealSage Cloud, a private VPC, or fully on-premise as an explicit choice rather than a single cloud path. Our own posture is verifiable the same way, at trust.dealsage.io.


