Stakeholders ask questions in plain English and get answers with citations. You see every question they asked. A role-based data room where confidentiality is enforced on the server, not just hidden in the UI, and every action is written to a trail nobody, including admins, can forge.
Built for high stakes
Investors and advisors see exactly what you allow, nothing more. Every guard lives in the database and the API, not only in a dismissible modal.
Magic-link or password sign-in via Supabase Auth. Optional TOTP two-factor, with an admin toggle to hard-enforce it for every user once the room holds signed term sheets.
Every login, view, download, search and permission change is written by the database itself. A trigger overwrites who the actor is from the session, so no one can forge an entry, not even an admin.
Accepting the confidentiality terms is checked again on every data-egress call, chat, search, download, not just gated once in the UI. Script the API directly and you still hit the same wall.
Every PDF preview and download is stamped server-side with a faint confidentiality mark plus the viewer's identity and timestamp baked into the file itself, so a copy still carries who saw it.
Mark a document view-only and downloads are refused server-side. Give it an expiry date, soft-delete it, or supersede it with a new version, and the audit history survives every change.
Restrict a sensitive folder to named users only. Everyone else sees it is locked and can request access, with a reason, for an admin to approve or decline.
Every upload is scanned on ingest for stale dates, unsigned signature blocks, missing expiry and placeholder text, and surfaced in a per-project diligence brief, most-flagged first.
Ask a plain-English question and get an answer grounded only in the room's own documents, with every claim traceable to a source.
One click freezes uploads and marks the room closed, reads stay open so nothing disappears. A second click builds a ZIP evidence pack: the full audit log, the document index, and every confidentiality acceptance, as the deal's permanent closing binder.
Signatures, settled
Send a PDF for signature and get a court-defensible signed copy back, without the document ever leaving the data room's audit trail.
Each signer receives a unique, single-use link and proves control of their email with a one-time passcode before the document opens. They draw their signature and give explicit consent, so every signed copy rests on a verified signer, not a forwarded attachment.
The signed PDF carries an E-SIGN Act / UETA consent statement and a full audit page: signer name and email, timestamp, IP address, and the document's SHA-256 fingerprint, so any later tampering is evident from the file itself.
Linked to the Elevaition CRM, the data room hands the document over and the CRM runs the signing ceremony. Standing alone, the data room runs the whole flow itself. Either way, nothing extra to buy or bolt on.
Configure a signing certificate and each signed PDF can also carry an embedded cryptographic signature (PAdES / PKCS#7), verifiable in any standards-compliant PDF reader.
The signed copy is stored back in the room as a new version that supersedes the original, with the audit history intact. PDFs only, by design: what was signed is exactly what is kept.
How a room lives
Six stages, the same lifecycle every deal actually goes through.
One Vercel project, one Supabase project, your brand and domain.
Bulk-invite stakeholders with per-project read, upload and delete permissions.
New sign-ins hit the confidentiality gate, then MFA enrolment if it's required.
Every upload is chunked, embedded, summarised and scanned for red flags.
Restrict sensitive folders; approve or decline access requests as the process stages.
Freeze uploads, export the evidence pack, hand it to counsel as the closing record.
A closer look
Search across every document you can read, report on engagement, sync where your team already works, and wear your own brand end to end.
Exact matches and meaning-based matches combined, ranked together, so close wording still surfaces.
An admin across several mandates searches once and sees hits ranked across every room they administer.
Image-only PDFs and photographed pages are read with OCR, so even a scanned signature page becomes searchable text.
Views, downloads, searches, logins and active users, per document and per stakeholder.
One click builds a boardroom-ready engagement report in your own colours, not a generic export.
See who has opened the financial model versus who has only logged in, and call the right people first.
Every upload can mirror automatically into a configured SharePoint library, if your IT policy mandates it as the system of record.
Files land at a predictable path by project code and folder, so nothing gets lost in translation.
Admins see exactly which files have synced, and which have not, on the document itself.
Wordmark, tagline, accent colours and logo resolve per deployment, by domain or by a single environment variable.
The sign-in screen, the room itself, watermarks and even the branded PDF export all carry the same identity.
Each client gets a dedicated deployment, so stakeholders see your name and your colours, not ours.
Answers to diligence questions in seconds, with a verifiable trail back to the source, instead of a week of email back-and-forth.THE PROMISE OF EVERY DEAL DATA ROOM, ACTUALLY KEPT
Two sides of the room
A data room only works if both sides actually want to use it. One side needs control and evidence. The other needs to find things quickly without being handed a password list.
Before you ask
Tell us about your deal and we will have a branded, role-based data room ready for your documents within days, with the AI already reading for red flags.
Deployed under your own domain and brand · invite-only access