MintmarkTarget room
Project Kestrel · you're signed in for the company being assessed · sample project, example dataWho has seen what

Nothing from your code goes to the investor until you've seen it.

We read your code and your cloud settings. We can't change either. We keep short excerpts, never your source code.

Read-only, everywhere
Nothing we're given can write to your repositories or your cloud account.
Four named people
One analyst and three members of the deal team. Every view is logged, and you can read the log.
Deleted on 15 January 2027
Or sooner if the deal ends. You get a signed certificate of what was deleted.
1

How should we read your code?

2

What we can read

RepositoriesConnected
3 of your 11 repositories, read-only, fixed at the version of 3 Nov.
kestrel-apikestrel-webkestrel-mobile
Cloud accountConnected
A read-only role that lists your settings. It can't read what's inside any database, storage bucket or queue.
Data room3 documents requested
41 documents received. Still needed:
  • Contractor agreements for the mobile app
  • The record of your last disaster recovery test
  • Your contract with the AI provider
Questionnaire28 of 34 answered
3

Check what the investor will see of your code

142 excerpts back 31 findings. Approve, redact or withhold each one. If you withhold one, the investor is told you withheld it and doesn't see it.

138approved
3redacted
1withheld
Excerpt · 5 of 142 shownLinesFindingStatusYour decision
services/reporting/queries/utilisation.tsThe report query that reads the whole jobs table41 to 50F-02Approved
config/prod.env @ 7ad21f0We never captured the secret values, only what kind they are3 to 4F-06Approved
services/payments/ledger.tsYou redacted two customer names in a comment112 to 139F-03Redacted
services/assist/prompt.tsThe prompt that includes customer job notes8 to 31F-05Approved
services/pricing/engine.tsYou withheld this as commercially sensitive60 to 97F-11Withheld
4

Reply to the findings

The investor sees your reply next to the finding, in your words, with the analyst's decision on it.

Reply by 10 Nov
The company doesn't own its mobile app
F-01 · 4 excerpts. Uploading the contractor agreements would settle it.
Reply by 10 Nov
Customer data goes to an AI provider with no contract covering it
F-05 · 7 excerpts.
Partly accepted by the analyst
The reporting database can't cope with the planned growth
F-02 · you replied on 7 Nov. Your planned replica is recorded. The threshold wasn't changed.
Read the decision