# Investors — how does your firm share data with its portfolio?

> Six capabilities for investor operations — vaults the host cannot read, a write-only link for founders, and a licence to operate for each agent a portfolio company runs before it becomes your risk.

*Source: <https://sgit.ai/summit/investors.html> · site v0.2.80 · this file is generated from the same content as the page, so the two cannot drift. Every page on this site has a `.md` twin; internal links below point at them.*

---

[Home](../index.md) / [Summit sheets](index.md) / Investors

**Sheet 03 of 04** — written for investors. [The other three →](index.md)

# Investors — How does your firm share data with its portfolio?

Most of the data investors share is insecure — decks, data rooms, updates, diligence files, sent in the clear. Vaults fix that, and the same stack gives you something new to ask of every company you back.

A licence to operate for each agent a portfolio company runs — **before it becomes your risk.**

[Download the PDF ↓](pdf/sgit-ai__03-investors.pdf)The sheet as handed out in Lisbon. The table below is the same content, in a form a search engine and an agent can read.

## What exists

|  | The capability | What exists today |
|---|---|---|
| 02 | **Share deal data, documents and updates in vaults the host cannot read — with full history, and a write-only link for founders to send you material.** Powered by sgit, transfer protocol & browser vault | Live. CLI in beta; write-only intake built, never sold. |
| 07 | **Behaviour policies for the agents your portfolio companies already run.** Powered by Risk product & free behaviour-policy library | Site v1.10, library and store live. No payment link. |
| 04 | **A security review of a company you back, delivered as a vault rather than a PDF.** Powered by Report vault on the vault runtime | Designed 26 May. Deliverable shape built; demo specified. |
| 05 | **Explain a specialist domain to a board in its own words and at its own altitude.** Powered by Boardroom, agent rooms & persona machinery | Original product existed. Persona generator built in August. |
| 06 | **Briefings for your role, with the evidence behind every line.** Powered by Role-aware briefings on semantic graphs | Live; commercial state not verified in the brief. |
| 03 | **Manage and distribute sensitive portfolio data with per-recipient access.** Powered by Vaults on the same runtime | An MVP is built on it. |

## One product to discuss

A security review of a company you are backing, **scored against a published framework, signed by a named professional, at a fixed price, delivered as a vault.** Apply the scorecard during due diligence, with particular attention to business context and model survivability.

Also: companies to fund somebody to build — the rows on the founders sheet, plus seven company seeds written up in full and given away under attribution licensing.

**Write to [dinis.cruz@owasp.org](mailto:dinis.cruz@owasp.org)**, or explore [the network](../network/index.md).

## The sheet itself

**Proof 02 · 14 September 2026.** Fact set: brief v0.33.70, 13 September 2026, revised with the 14 September comments. Code: permissive software licence. Documents: CC BY 4.0. [← All four sheets](index.md) · [Explore the network](../network/index.md)


---

*[Site index for agents](../llms.txt) · [HTML version](https://sgit.ai/summit/investors.html)*