Book a demo
Product
Data roomsSecure sharingAccess controlActivity trackingRoom templatesDeck tracking
Use cases
Founders raisingM&A advisorsInvestment bankersAny confidential deal
Company
SecurityPricingChangelogSign inBook a demo
Security overview

How Octopus protects your deal.

What we run on, how your files are stored and served, and the controls you have over who sees what. No badges we don't hold, just how it works.

How it's built

Hosting
The app runs on Vercel. Every connection uses HTTPS (TLS); plain HTTP is never served.
File storage
Documents are stored in Cloudflare R2, encrypted at rest with AES-256. The storage bucket is private: no file has a public address.
Database
Workspace data lives in Supabase Postgres, encrypted at rest. Row-level security rules on every table keep each workspace's records separate at the database itself, not just in the app.
Serving files
Viewers never download from storage directly. Each request for a page goes through Octopus, which checks the link, the viewer's verification, the NDA and any folder limits before sending anything.
Payments
Billing runs through Dodo Payments as merchant of record. Card details go to Dodo, never to Octopus.
Your account
Two-factor sign-in with an authenticator app, and a workspace setting that requires it for every teammate. Roles separate owners, admins and members.

Your controls

Verified viewers
Require a one-time code sent to the viewer's email, a passcode, or both. Limit a link to named people or whole domains; anyone else can ask you for access.
NDA before reading
Viewers accept your NDA before the first page opens, and the acceptance is recorded. Founder and up.
Watermarks
The viewer's email across every page they read. Founder and up.
Downloads
Off by default: readers view in the browser unless you allow a copy. Every download is recorded.
Expiry and turn-off
Links stop working on the date you choose, and any link can be turned off instantly.
Per-party access
Give each buyer or investor their own link, limited to the folders you choose. Deal and up.
Audit log
Opens, downloads, invitations, access requests and access changes, filterable by room and exportable as CSV. Deal and up.
Ending a deal
Archive a room to switch off every link while keeping everything. Export it as a zip (Deal and up), or delete it for good. Deleted documents wait in Trash for 30 days first.

Questions from your counterparty

Buyers and investors often send a security questionnaire. Send it to hello@talkoctopus.com and we'll answer it with you. Certifications such as SOC 2 aren't in place yet; this page will say so the day they are.

Share your next deal on Octopus.

Private storage, access checks on every page, and the controls to decide who sees what.

Get started freeBook a demo