Investors (how does your firm share data with its portfolio?)
Six capabilities for investor operations) vaults the host cannot read, a write-only link for founders, and a licence to operate for each agent a portfolio company runs before it becomes your risk.
Source: https://sgit.ai/summit/investors.html↗ · site v0.6.8 · this file is generated from the same content as the page, so the two cannot drift. Every page on this site has a .md twin; internal links below point at them.
Home↗ / Summit sheets↗ / Investors
Sheet 03 of 04: written for investors. The other three →↗
Investors, How does your firm share data with its portfolio?
Most of the data investors share is insecure, decks, data rooms, updates, diligence files, sent in the clear. Vaults fix that, and the same stack gives you something new to ask of every company you back.
A licence to operate for each agent a portfolio company runs, before it becomes your risk.
Download the PDF ↓ ↗The sheet as handed out in Lisbon. The table below is the same content, in a form a search engine and an agent can read.
What exists
| The capability | What exists today | |
|---|---|---|
| 02 | Share deal data, documents and updates in vaults the host cannot read, with full history, and a write-only link for founders to send you material. Powered by sgit, transfer protocol & browser vault | Live. CLI in beta; write-only intake built, never sold. |
| 07 | Behaviour policies for the agents your portfolio companies already run. Powered by Risk product & free behaviour-policy library | Site v1.10, library and store live. No payment link. |
| 04 | A security review of a company you back, delivered as a vault rather than a PDF. Powered by Report vault on the vault runtime | Designed 26 May. Deliverable shape built; demo specified. |
| 05 | Explain a specialist domain to a board in its own words and at its own altitude. Powered by Boardroom, agent rooms & persona machinery | Original product existed. Persona generator built in August. |
| 06 | Briefings for your role, with the evidence behind every line. Powered by Role-aware briefings on semantic graphs | Live; commercial state not verified in the brief. |
| 03 | Manage and distribute sensitive portfolio data with per-recipient access. Powered by Vaults on the same runtime | An MVP is built on it. |
One product to discuss
A security review of a company you are backing, scored against a published framework, signed by a named professional, at a fixed price, delivered as a vault. Apply the scorecard during due diligence, with particular attention to business context and model survivability.
Also: companies to fund somebody to build, the rows on the founders sheet, plus seven company seeds written up in full and given away under attribution licensing.
Write to dinis.cruz@owasp.org, or explore the network↗.
The sheet itself
Proof 02 · 14 September 2026. Fact set: brief v0.33.70, 13 September 2026, revised with the 14 September comments. Code: permissive software licence. Documents: CC BY 4.0. ← All four sheets↗ · Explore the network↗