06.19

Investor Data Room

Executive summary

The Data Room is an access-controlled due-diligence space with its own authentication domain, its own tables and its own hash-chained activity log. It carries the due-diligence edition of this specification — exact model identifiers and the full gaps list — generated from the same facts file as this page. Share packages give time-limited, token-based access to selected documents.

Overview

  • ProductionGovern · Investor Data Room
    Give investors and auditors the full picture under access control, from the same source of truth as the public specification.

Pipeline

  1. Visitors authenticate in a separate auth domain; share packages issue scoped tokens.
  2. Documents live in Cloud Storage; every view and download is written to an activity log.
  3. The activity log is hash-chained and verified on a schedule, like the clinical audit trail.
  4. An analytics snapshot job summarises engagement for the company.

Data owned

  • Data Room tables
    Holds
    Rooms, documents, members, share packages, activity chain, analytics snapshots

Models and engines

  • Document Q&A
    Model or engine
    Gemini 3 Flash-Lite (flash tier)
    Notes
    Behind an AI guard; answers only from Data Room documents

Guardrails

  • Separate auth domain from the clinical application.
  • Hash-chained activity log with scheduled verification.

Rollout and status

  • ProductionData Room
    Separate auth domain
  • ProductionDue-diligence edition generated from the specification
    Exact model identifiers and routing, served only through the Data Room document API

Interfaces

  • Consumes
    What
    Architecture facts (full edition)
  • Emits
    What
    Activity chain
  • Emits
    What
    Engagement analytics
SOURCE OF TRUTH
  • server/services/dataRoom/
  • server/db/dataRoomSchema.ts
  • src/data-room/
Every figure in this specification is generated from the repository and checked in CI.