MandateRoom is virtual data room infrastructure for deals where the process itself has to hold up to scrutiny — every disclosure decision, every watermark, every security change, accounted for at the database layer and recorded so that it can be checked later.
Every deal room is isolated at the database layer, not only in the application: row-level security is forced on every table, so a mistake in a screen cannot show one room's data to another.
Every security-relevant action is written to an append-only, hash-chained ledger that is cryptographically sealed once a day, so a change to history can be detected. Anchoring each day's seal outside our own database is built and switches on with the production service.
Every access decision, grant or denial, is made for one of a fixed set of specific reasons and is logged with it. Room administrators can see why a person can or cannot open a document; a refused bidder is told only the steps they can act on.
Turning off multi-factor authentication, turning off a room's watermarking or narrowing its scope, or clearing an IP allowlist requires a second, independent administrator's sign-off on every plan, enforced by the database, not a checkbox. Enterprise adds dual-control approval of high-risk access grants; on Starter and Pro those grants need a fresh second-factor check instead.
Every download is watermarked to the individual viewer by default, and so is every view beyond the first, teaser stage, deterring and attributing unauthorized redistribution. Where a plan includes native download, an administrator can grant the original file, which carries no watermark.
Prove a specific party did not access specific documents in a specific window, and let anyone, with no account, check that the certificate is genuine. Certificates are a preview feature: they are not yet signed by an independent key service.
Every claim on this page traces to something you can verify — starting with the architecture itself.
Read the security architecture