Know exactly what investors read and ask.
Product
Two sides of one room.
Founders run the room. Investors get a portal that answers their questions. Both see the same documents, filtered by permission.
For founders
Run the raise from one place
Upload what you already have
PDF, DOCX, XLSX and markdown go in as they are. Every document keeps its version history, and PDFs render inline for investors.
Share DocSend-style links
Gate each link by email, allow or block lists and password, set an expiry, control downloads, watermark text with the viewer's email, and revoke it the moment you change your mind.
See who read what
Opens, time spent per document and downloads, rolled up per investor and per firm.
Read what investors asked the AI
Every question, the answer it got and the documents it cited are logged to the investor's record and export to CSV. You learn what they care about before the call.
Curate the shared FAQ
Promote a good answer into the Q&A pool once, and every investor in the room sees it.
Bring your own AI key
Use your own AI provider key and model usage bills to you. Requests still go only to zero-data-retention endpoints.
For investors
Diligence without the back-and-forth
A portal under the company's name
Documents, company updates and models in one place, not a shared folder.
Ask the documents directly
AI answers come with citations to the exact document, and only draw on what that investor is permitted to see.
Choose the model
Claude Opus, Sonnet or Haiku, or GPT Sol or Astra. Every option is served on a zero-data-retention endpoint, and new versions appear as they become available.
A Q&A pool the founder curates
Common questions are answered once and shared with everyone who has access.
Company updates
Progress lands in the portal alongside the documents it refers to.
Models
Financial models sit beside the deck and the updates they support.
Share links
Links that behave the way you set them.
Each share link carries its own rules: who can open it, with which password, until when, whether files can be downloaded, and whether text is watermarked. Revoke it whenever you need to.
Share link
ai-dataroom.com/v/series-a-deck
Require email
Viewer enters an address before opening
Allowed domains
Only these addresses pass the gate
- @example-capital.com
Password
Asked before the first document loads
- ••••••••
Expires
Link stops resolving after this date
- 2026-11-14
Allow downloads
Off means view-only in the browser
Watermark
Viewer email stamped on text and exports
Status
Active · 3 viewers
- Revoke
Email gating
Viewers identify themselves before the first page loads, so every open has a name on it.
Allowlists and blocklists
Limit a link to named addresses or whole domains, or block the ones that should never get in.
Password
Require a password, on its own or together with the email gate.
Expiry
Set a date. After it passes, the link stops resolving.
Download control
Decide per link whether the file can leave the room or is view-only.
Watermarking
Stamp the viewer's email across text documents shown in the room and across the PDFs exported from them.
Revocation
Pull a link at any time. Access ends immediately, and the log keeps what happened before.
Analytics
Every view, logged. Every question, kept.
You see which documents each investor opened, how long they spent on each one, what they downloaded, and the exact questions they asked the AI.
Documents · last 30 days
per document
Pitch deck.pdf
41m read
- 9
- opens
- 2
- downloads
- 3
- AI questions
Financial model.xlsx
58m read
- 6
- opens
- 1
- downloads
- 5
- AI questions
Q3 investor update.md
12m read
- 5
- opens
- 0
- downloads
- 1
- AI questions
Cap table.xlsx
9m read
- 3
- opens
- 0
- downloads
- 2
- AI questions
Customer contracts.docx
17m read
- 2
- opens
- 1
- downloads
- 0
- AI questions
What investors asked
logged per investor
“How has gross margin moved since Q1?”
a.rivera@example.com
“What is the current runway at this burn?”
m.chen@example.com
“Which contracts renew in the next two quarters?”
j.okafor@example.com
Questions are tied to the investor record, so you walk into the next call knowing what they were trying to work out.
AI Q&A
Answers with receipts.
Investors ask in plain language. The answer comes back grounded in your documents, with citations, and you see the question in the log.
Ask the room
a.rivera@example.com
How has gross margin moved since Q1?
Gross margin rose from 61% in Q1 to 68% in Q3. The model attributes most of the change to hosting costs falling as a share of revenue; the Q3 update notes a renegotiated infrastructure contract.
Founder view
Promote to shared FAQPermission-filtered
The AI only reads documents the asking investor is allowed to open. A question cannot reach past the investor's own permissions.
Cited, every time
Each answer names the document it came from, so an investor can open the source and check.
Curated into a shared FAQ
When a question is worth answering once, you promote it to the Q&A pool and every investor in the room sees it.
AI privacy
AI that protects your documents.
Your documents never train AI. Every AI request runs only on zero-data-retention endpoints.
Request route
one question · one request
- question
- “How has gross margin moved since Q1?”
- documents
- only what this investor may open
- model
- Claude Sonnet · chosen by the investor
- served by
- Amazon Bedrock · zero-data-retention
- training
- denied
- data use
- collection denied
Closed routes
- Any endpoint that stores promptsrefused
- Any provider that trains on inputsrefused
No training on your documents
We never train on your documents, and neither do the model providers we route to.
Zero-data-retention endpoints only
Claude is served on Amazon Bedrock and GPT on Microsoft Azure, both under zero-data-retention commitments. A request that could only be served by a provider that stores prompts or trains is refused, not sent.
Investors choose the model
Claude Opus, Sonnet or Haiku, or GPT Sol or Astra. New versions appear automatically once they are available on a zero-data-retention endpoint.
Search is protected too
The embeddings that power document search also run only on a zero-data-retention endpoint.
Providers may still run automated abuse screening in real time and retain content only where the law requires it or their safety systems flag it.
Bring your own key
Your key, our guardrails.
Companies that already pay for AI can use their own AI provider key. Model usage bills to them, and requests still go only to zero-data-retention endpoints.
Usage bills to you
Add your company's own AI provider key and model calls are charged to your provider account, not bundled into ours.
Routing stays locked
Your key does not loosen the rules. Requests still go only to zero-data-retention endpoints, and the no-training rule still applies.
Answers and search alike
Every AI call made for your company uses your key, including the embeddings behind document search.
AI provider
Company AI key
API key
- Billed to
- your account
- Zero-data-retention routing
- enforced
- Training on documents
- never
Zero-data-retention routing has no off switch. A company key changes who pays, not where requests may go.
Security
Built so the audit trail is the product.
The same mechanisms that keep one company's room sealed from another are what make the analytics trustworthy.
- rls · per company
Row-level security per company
Every table enforces company isolation in the database itself. An investor's query cannot return another company's rows.
- sha256 · single use
Hashed, single-use invite tokens
Invite tokens are stored as hashes, work exactly once, and expire. A leaked database row is not a working invite.
- append only
Append-only audit log
Events can be added, never edited or deleted. The history of the room is the history that happened.
- view · logged
Every view logged
Each document open is recorded against the investor who opened it, in the same log you read your analytics from.
- csp · enforced
Enforced Content-Security-Policy
Every response carries a Content-Security-Policy that limits which scripts, frames and origins the page may load.
- at rest · encrypted
Encrypted at rest
Documents and database rows are encrypted at rest by the hosting provider. AI requests are covered separately, on zero-data-retention endpoints.
Enterprise · Dedicated instance
Your database. Your AI key. Your own instance.
For companies whose records must be stored in a database they control, we set up a dedicated copy of AI Dataroom connected to your own Supabase project and your own AI provider key. Contact us to scope it.
Your database
The instance connects to your own Supabase project. Documents, investors, questions and the audit log live in storage you administer.
Your AI key
Model calls run on your AI provider key and bill to you. Requests still go only to zero-data-retention endpoints.
Set up with you
A dedicated copy of AI Dataroom for your company, scoped and set up with your team rather than provisioned from a form.
How it works
Live before your next investor call.
01
Upload
Drop in the deck, the model, the contracts and your updates. PDF, DOCX, XLSX and markdown are all read as they are.
02
Invite or share
Invite investors to the branded portal, or send a gated link with its own expiry and download rule.
03
Watch and answer
Opens, time per document, downloads and AI questions arrive in the log. Promote the best answers to the shared FAQ.
14-day free trial
Open your room before the next investor call.
Upload today, share a gated link this afternoon, and read the first log entries tonight.