Security

Share sensitive documents with confidence.

Verified viewers, tiered access, watermarks and a tamper-evident audit log. And a plain account of what no data room can prevent.

Controls at every step.

From the moment a link is opened to the last page read.

1. 1Link is active
2. 2Work email
3. 3Allow and deny rules
4. 4Six-digit code
5. 5Password, if set
6. 6NDA, if required
7. 7Room, at their tier
Gates in a fixed order. Every viewer passes the same checks, in the same order, before anything loads.
TiersAcme · Series A
1Teaser31 people
2Deck12 people
3Diligence4 people
Priya Shah · DeckPromote to Diligence
Tiers, not link settings. Access is decided per person. Promote someone and the new pages open at once.
Financial model · FY26
Download offLink expires 30 Nov
Watermarked pages. The reader's email and the time on every page. Downloads off unless you allow them.
Audit logAppend-only
9f3a…NDA signedPriya Shah
c71e…Tier changedDeck → Diligence
04bd…Document viewedCohort model
e258…Access revoked[email protected]
An audit log you can trust. Append-only and hash-chained, so a changed or missing entry is visible.

In detail

Email-verified viewers
A six-digit code to a work email. No accounts, no shared passwords.
Tiered access
Teaser, Deck, Diligence. Each person sees only their tier.
NDA gates
Require a click-through NDA before a tier opens. Signatures are recorded.
Watermarks
Every page carries the reader's email, so a leak traces to a person.
Instant revocation
Expire a link, revoke a person, or close a tier. Effective at once.
Tamper-evident audit log
Hash-chained and append-only. Export as CSV or a signed PDF.
No original files served
Viewers get page images through links that expire after 60 seconds.
Download control
Off by default. Turn it on per tier or per document.
Malware scanning
Every upload is scanned before it is converted or shown.
Roles and SSO
Workspace roles for your team. SAML, OIDC and SCIM on Team are coming soon.
Custom domains
Serve rooms from your own domain, verified through DNS.
Self-hosting
Run every feature on your own infrastructure. No vendor account needed.

Plainly

Screenshots, and files already downloaded. We don't pretend otherwise. Watermarks make a leak traceable to a person, and you can turn downloads off.

Where are documents stored?
On our cloud, or on your own servers if you self-host. Viewers see page images served through links that expire after 60 seconds, never the original file.
Can I revoke access after sharing?
Yes, instantly. Revoke a person, a link or a whole tier, and their next request is refused.
Are uploads scanned?
Yes. Every upload is scanned for malware before it is converted or shown to anyone.
Can I export the audit log?
Yes, as a CSV or a signed PDF. Each entry is chained to the one before it, so a changed or deleted entry shows.