The AI reads only what each participant may see and cites the exact page or cell. Every action, by a person or the AI, lands in a hash-chained audit log.
Real product, fictional deal. Open Project Horizon as a view-only buyer: ask the AI, click a citation, and see what the permission fence keeps from you. No email, no card, 15 AI questions a day.
The room
Upload, sort into folders, invite by name, or share one link bound to a group, and every participant gets a clean portal on your own subdomain. The AI panel is one click away, and it only reads what that participant may read.

The shipped product, rendered with a fictional Series A room.Project Juniper · 5 documents · 4 folders
Cited answers
Ask “What is the indemnification cap?” and the answer cites page 23 of the merger agreement. Open the citation and the viewer jumps to the clause. Spreadsheet answers cite the sheet and the cell range. If the documents do not say it, the AI says so.

1. The answer, with its source

2. One click: page 23, the clause itself
The permission boundary
Buyer A was given the financials and gets the figure with its source. Buyer B was not, and the AI says it has no such document. The boundary is enforced by Row-Level Security in the database, not by a prompt, so the AI cannot see, quote or learn from anything outside it.

Buyer Ahas the financials

Buyer Bdoes not
Security
Mechanisms, not adjectives. The full list, the sub-processors and the compliance status are on the Trust Center and the security page.
The audit log, as a room admin sees it

A fictional Series A room’s log. People and assistants, each attributed.Export CSV · filters · 27 events
The chain, rendered
Each entry references the hash of the one before it, over the event's who, what, and when, and a database trigger blocks updates to audit records. Break one link and every hash after it fails: tampering is detectable. (Illustrative hashes.)
The rest of the room
Branded portals on your own subdomain, time per page, per visitor, passwordless invitations by email or phone, bulk download, and a REST API with an OpenAPI spec on every plan. Developer docs →

Each citation shows the passage it came from and a View in Document link to the page or cell range.

Five permission levels per document, folder or group. The AI inherits the participant's fence.

Viewer name, email, timestamp and IP on every view and download, set per room.

Drag in a folder tree or let the AI sort uploads into folders; review its suggestions before they apply.

Decide what an AI assistant may do alone, what waits for an admin, and what is off.
Who viewed what and for how long, who has gone quiet, and a question box over your room's activity data.

Settings → Agents & API, the defaults for a new organization
Programmable & governed
Connect an assistant and say “set up a room for the Series B from this folder”. It creates the room, sorts the files, invites the people you name and answers their questions from the documents. Under your rules:
Pricing
Flat plans, no per-page fees, no quote call. Every plan includes the AI.
Four of eight plans shown. Business, Premium, Unlimited and Enterprise are on the pricing page.
Flat-rate plans. No per-page fees, no usage surprises.
Every new account starts with a 14-day Data Rooms trial, no credit card required. Continue on the free plan afterward or upgrade.
Get started
Cited answers, a permission fence enforced in the database, and a hash-chained audit log. Free to start.
Free to start · No credit card required · Prices published