Technology & Security
Enterprise Security & Infrastructure Built for Scale
SAVA-P is a privacy-first, relationship-driven platform for sharing investment opportunities, running invite-only investor campaigns, and managing secure, branded data-rooms — with visibility into engagement and due diligence activity. Built by institutional investor-relations practitioners, SAVA-P is designed to be the single source of truth for deal sharing and investor engagement.
Zero-Trust Security Architecture
Our platform operates on a strict Zero-Trust model: no implicit trust, no shared credentials, no standing access. SAVA-P is designed to protect highly sensitive deal materials and investor data through:
- Encryption in transit and at rest using industry-standard protocols
- Role-based access controls with granular permissions
- Secure, branded data-rooms with invitation-only access
- Document controls (e.g., watermarking and viewing restrictions) to deter misuse
- Audit trails and activity logs for accountability and oversight
- Multi-factor authentication and strong session controls
Designed for confidential deal sharing to investors
Deal distribution and due diligence are high-trust workflows
- Invitation-only access: data-rooms and campaigns are accessible only to authorised participants
- Granular permissions down to individual document sections
- Time-bound credentials with automatic expiration
- Segregated client environments: each client operates within a separate, branded ecosystem, reducing cross-tenant risk
Document protection & traceability
- AES-256 encryption for all data at rest
- Dynamic watermarking to discourage unauthorised redistribution
- Controlled viewing options to reduce copying and casual forwarding
- Detailed access history showing who accessed what, when, and from where (subject to client configuration and applicable law)
Monitoring, logging & auditability
- Comprehensive audit logs for user actions and key platform events
- Support for TOTP, SMS, biometric, and hardware keys
- Smart session management with device fingerprinting
- Automatic session timeouts and concurrent login restrictions
Dynamic Document Protection
- Real-time PDF watermarking: Every document view generates a unique, watermarked PDF with user identity, session ID, timestamp, and IP address embedded
- Screenshot traceability: Leaked documents are forensically traceable to exact user sessions
- No native downloads: Users view secure, watermarked previews—preventing unauthorised distribution
- Access session tracking: Complete audit trail of who accessed what, when, and from where
Secure development practices
- Peer review and approval for production changes
- Automated scanning for vulnerabilities in code and dependencies
- Ongoing patching and remediation aligned to risk and severity
- Environment separation between development, testing, and production
Privacy & data protection posture
- Our Privacy Policy applies across multiple regions, refer to our Privacy Policy and Terms
- We provide the platform infrastructure for clients to manage data-rooms and communications; clients control their content and recipients
- A Data Processing Agreement (DPA) forms part of our Terms of Service and is available for customer review
- 7-year retention for regulatory compliance
AWS Well-Architected Framework Integration
AWS best practices for security, reliability, performance, cost optimization, and operational excellence.
Network Security
- Private VPC isolation: All workloads run in isolated Virtual Private Clouds
- Multi-layer network segmentation: Private subnets with NAT gateways—zero direct internet exposure
- AWS GuardDuty: Real-time threat detection monitoring for suspicious activity
- Network ACLs & Security Groups: Defense-in-depth firewall rules at every layer
Identity & Access Management
- Least-privilege IAM policies: Every service, user, and role has minimum necessary permissions
- CloudTrail logging: 100% auditability of every infrastructure action
- Service Control Policies (SCPs): Organization-wide guardrails preventing misconfigurations
Continuous Compliance Monitoring
- AWS Security Hub: Centralized security posture dashboard with automated findings
- AWS Config: Continuous compliance checking with automatic remediation
- Custom compliance rules: Tailored to industry requirements (SOC 2, HIPAA, GDPR)
Built for Trust & Transparency
Security isn't bolted on—the platform is designed to protect sensitive investment information and the relationships built around it, supporting secure deal sharing across the investor journey—from initial introduction through diligence and ongoing engagement.
our architecture delivers:
- Investor-grade security ready for the most rigorous due diligence
- Zero-compromise document protection with forensic traceability
- Defense against evolving threats with continuous monitoring and updates
- Infinite scalability without sacrificing security or performance
- Full auditability for compliance and legal requirements