RaiseAxis
    FeaturesAboutBlogPricingSecurityFAQContact
    Sign In
    Get Started
    Security architecture

    The controls behind your raise, documented in plain English.

    How a shared link is checked, which controls live on which surface, and where we are on compliance.

    Request lifecycle

    Four checks on every request.

    Each check is server-side and cannot be disabled from the UI.

    1. 01

      TLS 1.3 termination

      Every request terminates over TLS 1.3 with HSTS - no plain-HTTP fallback.

    2. 02

      Token validated at the edge

      A serverless function resolves the 12-character token and checks expiry, password or PIN before any database query runs.

    3. 03

      Row-level security on every read

      All Postgres queries are filtered through RLS policies keyed on workspace ownership.

    4. 04

      Event written to the audit log

      Open, view and download events are persisted with timestamp, IP and user-agent.

    Controls by surface

    Different surface, different control.

    Authentication

    • Email + password with HIBP leaked-password detection
    • Google OAuth as an alternative sign-in
    • Stripe-gated £1 trial - no anonymous accounts

    Database

    • Row-level security enabled on every table
    • Workspace and owner_id enforced at the policy layer
    • Security-definer functions pinned with SET search_path

    File storage

    • Bucket-scoped access by data-room ID and company prefix
    • 5 GB per-workspace cap
    • Branded PDF viewer - no public bucket URLs

    Shared links

    • 12-character random tokens, revocable in one click
    • Optional password or email-PIN gate
    • Dynamic watermarks on every PDF page

    Email & notifications

    • SPF, DKIM and DMARC on sending domains
    • Notification payloads scoped server-side per workspace

    Background jobs

    • pg_cron handles link expiry, digests and session cleanup
    • Daily security scan of database and policies

    Compliance, honestly

    What we have today, and what's on the roadmap.

    • In place
      EU-hosted infrastructure (eu-west)
    • In place
      GDPR - UK and EU data subject support
    • In place
      All payments via Stripe - no card data on our servers
    • In progress
      SOC 2 Type I - targeted for 2026
    • In progress
      Annual third-party penetration test - scheduled
    Hosted in the EU.Quarterly access reviews.Daily automated security scan.

    Pricing

    Try every layer for £1.

    7 days of full access to all 8 modules. Auto-bills £89/month on day 8. Cancel anytime from the dashboard in one click.

    Monthly

    £1 trial
    £89/month

    All 8 modules, every security layer on this page, included from day one.

    Start £1 trial

    Annual

    Save £120
    £79/month, billed yearly

    One payment of £948. Same modules, same security posture, lower monthly rate.

    View pricing details

    UK-based. EU-hosted. Card required for the £1 trial. No setup fees, no per-seat charges.