Ciiimple Security and Access Controls — Document Protection for Fundraising

Ciiimple protects every document in your investor data room with enterprise-grade encryption, server-side watermarking, and per-investor access controls — so you always know who has access and can revoke it instantly.

Encryption and Data Security

All documents stored in Ciiimple are protected with:

• AES-256 encryption at rest — industry-standard encryption for stored files
• HTTPS/TLS in transit — all data in motion is encrypted end to end
• Server-side processing — watermarking and document extraction happen on Ciiimple's servers, not the viewer's device

Server-Side PDF Watermarking

This is Ciiimple's most distinctive security feature. Every time an investor opens a PDF:

• A watermark is burned into the document server-side containing the viewer's email address, the date, and your company name
• The watermark cannot be stripped by the viewer — it is not a browser overlay
• If a document leaks, you know exactly who shared it
• You can revoke that person's access in one click immediately

This is the same discipline applied in later-stage deals — Ciiimple makes it accessible from pre-seed day one.

Per-Investor Access Controls

Every share link in Ciiimple is configurable:

• Password protection — require a password before the room can be opened
• Expiration dates — links auto-expire on a date you set
• Email restriction — limit access to a specific email address
• Domain restriction — limit access to anyone at a specific company domain
• NDA gating — require the investor to accept an NDA before viewing any document
• Instant revocation — remove any investor's access with one click, effective immediately

NDA Management

Founders can gate their most sensitive materials — financials, cap table, customer data — behind a built-in NDA requirement. The investor must accept before any document is viewable, and the acceptance is logged in your full audit trail.

Audit Trail

Ciiimple maintains a complete record of every upload, view, share, download, and access revocation — giving you a timestamped log of all activity in your data room.