Sifrsys is an AI-native virtual data room and secure content intelligence platform. It is used for M&A due diligence, fundraising, board portals, investor relations, client portals, and any workflow requiring secure document sharing with AI-powered intelligence. Ask questions about your documents and get cited answers — the AI only retrieves from documents within each user's permission boundary.

Is my data used to train AI models?

No. Your documents, queries, and AI conversations are never used to train AI models — ours or our providers'. Conversation history is stored encrypted inside your own data room, governed by the same Row-Level Security as your documents.

What can I use Sifrsys for?

Sifrsys is used for M&A due diligence data rooms, startup fundraising, board portals and investor reporting, law firm client portals, VC deal flow management, legal discovery rooms, real estate transactions, and any scenario requiring secure document sharing with AI intelligence. The platform adapts to any use case involving sensitive documents and multiple stakeholders.

How is Sifrsys different from traditional virtual data rooms?

Traditional VDRs store and share documents securely but lack intelligence. Sifrsys adds permission-fenced AI document Q&A with cited answers, Room Intelligence AI deal advisor, page-level engagement analytics, and branded white-label portals on top of full VDR security features like 5-level permissions, dynamic watermarking, and tamper-proof audit trails. No per-page fees.

What security features does Sifrsys have?

Sifrsys includes AES-256 encryption at rest, TLS encryption in transit, row-level database security that enforces AI permission boundaries, hash-chained tamper-proof audit logs, two-factor authentication, 5-level granular permissions (none, fence, view, download, full), and dynamic watermarking on document views and downloads.

Can I use Sifrsys as a board portal?

Yes. Sifrsys works as a board portal with branded portals for each board, engagement analytics showing who read board materials, AI Q&A so board members can ask questions about documents, granular permissions to control what each member sees, and a complete audit trail for governance compliance. It is significantly more affordable than enterprise board portal software.

Does Sifrsys charge per page?

No. Sifrsys uses flat monthly pricing with no per-page fees, no per-user fees, and no overage charges. Plans start free (1 room, 100 MB, AI included) and scale to enterprise. Unlike legacy VDRs that charge $0.50–2.00 per page, Sifrsys pricing is predictable.

How quickly can I set up a data room?

You can create a data room and start uploading documents within minutes. Documents are automatically parsed and indexed for AI retrieval. Invite participants with passwordless magic link access — they click a link and are in immediately. No sales call required to get started.

Can I use Sifrsys for fundraising?

Yes. Startups use Sifrsys data rooms to share pitch decks, financials, and legal documents with investors. Engagement analytics show which investors are most engaged with your materials. Permission groups let you share different materials with different investor tiers. AI Q&A helps investors find answers without back-and-forth emails.

What is Room Intelligence?

Room Intelligence is an AI deal advisor built into every data room. It tracks who viewed what documents and for how long, identifies which contacts at which organizations are most engaged, detects when parties go cold, and generates automatic engagement alerts. You can ask it natural-language questions like 'Which buyer group is most engaged this week?' and get data-backed answers.

Can I use Sifrsys as a client portal for my law firm?

Yes. Law firms use Sifrsys as a branded client portal. Clients can ask AI questions about their case documents and get cited answers, reducing routine calls. The portal appears under your firm's brand with custom subdomain, logo, and colors. The audit trail and watermarking meet compliance requirements, and granular permissions control what each client sees.

Trust Center

How we protect your deal.

Sifrsys is a virtual data room built for the most confidentiality-sensitive transactions. This page states our security posture plainly — what is in place today, and what is on the roadmap — with no claim we cannot back up.

For a deeper technical walk-through, see our security overview.

Compliance & certifications

Area	Status	Detail
SOC 2 Type II	Readiness in progress	Controls built and mapped; engagement not yet signed. Roadmap available on request.
Encryption at rest	In place	AES-256 on all stored data (Supabase / AWS KMS).
Encryption in transit	In place	TLS 1.3 on all connections.
Tamper-evident audit log	In place	SHA-256 hash-chained, verified on a schedule.
AI data handling	In place	Permission-fenced at the database level; zero provider retention; never used for model training.
GDPR / DPA	DPA available on request	Data Processing Agreement and SCCs available; not represented as a certification.
Penetration test	Planned	Independent test scheduled ahead of the SOC 2 engagement.

We do not display a certification badge until the corresponding engagement is complete.

Security architecture

Database-enforced isolation. Every tenant's data is separated by Row-Level Security in the database, not just in application code — so a bug in the app cannot cross the boundary.
Permission-fenced AI. The AI can only retrieve what the asking participant is authorized to see; the same database rules that protect documents protect the AI's answers.
Tamper-evident audit log. Every access and permission change is written to a SHA-256 hash-chained log whose integrity is verified on a schedule; tampering is detectable.
Forensic watermarking. Documents are stamped per viewer at access time, so a leak traces back to its source.
Zero training, zero provider retention. Your content is never used to train models and is not retained by our AI providers.

Subprocessors

We use the following third parties to operate the service. We provide advance notice of material changes to this list.

Provider	Purpose	Location
Supabase	Database, authentication, storage	United States
Vercel	Application hosting / CDN	United States
Hetzner	Document processing (transient)	Germany (EU)
Stripe	Payments (billing data only)	United States
Resend	Transactional email	United States
Twilio	SMS / WhatsApp invitations	United States
Anthropic	AI responses (zero retention, no training)	United States
Voyage AI	Text embeddings (zero retention)	United States
Google	OAuth sign-in	United States

To be notified of subprocessor changes, email security@sifrsys.com.

Availability

Sifrsys runs on managed, highly-available infrastructure. A public status page is being stood up; in the meantime, report any availability issue to security@sifrsys.com.

Request our security documentation

For your vendor review, we can share — under NDA where appropriate — our security whitepaper, subprocessor list, Data Processing Agreement, and completed security questionnaire (CAIQ / SIG). Email security@sifrsys.com and tell us what your team needs.

To report a vulnerability, see our disclosure policy.

Start Free