Investor Portal — the reader experience for investor cyber diligence
Where the Diligence Room is the container, the Investor Portal is what the investor actually sees. Scoped external-reader access, passwordless authentication, document view analytics, letterhead on generated policies, time-bound access. For every founder assembling a Google Drive folder at midnight the night before a term-sheet call.
The Investor Portal lands as the reader-side experience for vCISO Lite customers who need to give investors, LPs, or lenders scoped access to security posture, policy library, and due-diligence interview content. Where the Diligence Room is the container the customer builds, the Investor Portal is what the investor actually sees when they open the link.
What’s in v1
- Scoped external-reader access. The customer picks which artifacts each investor can see. An investor invited to review one section cannot browse into another. Scoping is a first-class property, not a URL-obscurity trick.
- Passwordless authenticationfor the investor. Magic link + TOTP, same model as the rest of the platform. No shared passwords, no expired sign-in links, no “can you resend that Google Drive link” support thread.
- Document view analytics.The customer sees which investor opened which document, when, and for how long — so they know whether their prospective backer has actually read the material before the next follow-up call.
- Letterhead on generated policies.Policies generated by the platform render with the customer’s letterhead when they land in the Investor Portal — the professional presentation investors have quietly come to expect, without the founder having to do a Google Docs template pass at 11pm the night before.
- Time-bound access. Investor sessions expire on a schedule the customer sets. Renewal is one click; unauthorized access after expiration is impossible.
Why this shipped
Every founder raising a round hits the same 48 hours: the term sheet arrives, the diligence packet gets requested, and now someone is assembling a Google Drive folder of policies, questionnaires, prior audit reports, and posture summaries at midnight. It works, badly, until it doesn’t. The Investor Portal turns that scramble into a controlled, scoped, revocable, audited reader experience the investor can trust and the customer can defend.
Related reading
What Investors Look For in Security Diligence — the founder-side workflow the Investor Portal is built for.
Security Due Diligence in M&A — the both-sides framing the portal aligns to.