Security

Investors read your documents. They never get the files.

A Struck dataroom shows each investor a picture of the page with their email drawn across it, logs every page they turn, and keeps the original in Sydney where only your team can reach it.

0

original files sent to investors

Sydney

where your data is held

5 min

life of a download link

What happens when an investor turns a page.

If someone can open a file, they can keep a copy. So investors are never sent one.

  1. 01

    The file stays put

    Your original sits in private, encrypted storage in Sydney. There is no public link to it, and no way to make one.

  2. 02

    We draw the page

    When an investor opens a page, our server checks they may see it, draws that one page as an image, and writes their email and the time across it.

  3. 03

    They get a picture

    The investor's browser receives an image of the page, told not to keep it. The file itself never leaves our servers.

Your own team can still download originals when they need to. Those links are made on our server after checking who is asking, expire after five minutes, and every download is written to the trail.

What protects a room.

Every item on this page is switched on today, for every room.

Who can see what

  • Every table in the database refuses a read unless a rule allows it.
  • Folders and documents open to groups of investors, not the whole room.
  • Confidential folders stay locked until the investor accepts your NDA.
  • Access is checked on every page, so removing someone takes effect on their next page.

How documents are read

  • Investors see page images, never the original file.
  • Each page carries the reader's email and the time, drawn in by our server.
  • Investors see the current version only. Earlier versions are for your team.
  • Only your team can download originals, through links that expire in 5 minutes.

Accounts and sign-in

  • Two-factor sign-in with an authenticator app for company and advisor accounts.
  • Passwords known from public data breaches are turned away.
  • Anything reachable without signing in is rate limited.

Where it all lives

  • The database, file storage and document search all run in Sydney.
  • Encrypted in transit and at rest.
  • Uploads limited to documents, sheets, slides, text and scans. Archives are refused.
  • Admin keys never reach a browser, and every code change is scanned for known flaws.

A record that cannot be quietly edited.

Opening a document, turning a page, downloading and changing who can see what all go on the record as they happen.

Each entry records who, which document and version, which page, when, and from where. It also carries a fingerprint of the entry before it, so removing or changing one breaks the chain for everything after. Nobody can write to the trail directly, including your own team.

  1. Viewed page 4 Financial model

    10:42
    j.chen@harbourcap.com.au9f3a…c2e1
  2. Viewed page 3 Financial model

    10:41
    j.chen@harbourcap.com.au4be0…17d9
  3. Opened Financial model

    10:40
    j.chen@harbourcap.com.aue71c…0a4f
  4. Accepted NDA Mutual NDA, v2

    10:38
    j.chen@harbourcap.com.au2d95…b8e3
  5. Folder opened to Confidential

    09:15
    Harbour Capitala06b…5f72

More than a shared folder.

Plenty of raises start in Google Drive, Box or Dropbox, and they are good at storing files. They were not built for showing confidential material to investors, and the table shows where that matters.

Struck compared with Google Drive, Box and Dropbox
FeatureStruckGoogle DriveBoxDropbox

Each viewer's email watermarked on every page

Drawn in as they read, so a leaked page names its reader.

Yes
NoFixed watermarks only
Only on a higher plan or paid add-onEnterprise
NoFixed watermarks only

NDA to accept before confidential folders open

Yes
No
Only on a higher plan or paid add-onAccount-wide terms, Business Plus
No

A page-by-page record of each investor's reading

Yes
NoWho and when only
NoWho and when only
NoWho and when only

Tamper-evident audit trail

Each entry is chained to the one before, so an edit shows.

Yes
NoEnterprise log, none claimed
NoReports, none claimed
NoActivity log, none claimed

Data held in Australia

Yes
NoUS or Europe
Only on a higher plan or paid add-onBox Zones, Enterprise Plus
Only on a higher plan or paid add-onOn request, team plans

Every control above on every plan

Yes
No
No
No

Part of the raise itself

Investor certificates, signing and the share register, in the same place.

Yes
No
No
No
IncludedHigher plan or paid add-on onlyNot offered

From each company's own help centre and plan pages, checked 28 September 2026. Plans change, so check with them before you rely on a cell. DocSend, which Dropbox sells separately, is not included.

What no dataroom can stop.

Some datarooms advertise screenshot blocking. In a browser it does not work, and we would rather say so than sell you a switch that does nothing.

So we make a leak easy to trace. The reader's email is on every page they saw, the trail shows when they saw it, and they accepted your NDA before they saw any of it.

Screenshots

They happen in the operating system, outside any web page.

Printing the screen

Every browser can print what it shows.

A photo of the screen

The phone is on the other side of the glass.

Copying out the numbers

Someone who can read a page can retype it.

A leaked page carries the email of the person who read it.

Run your next raise from a room like this.

Create an account, set up the room, and invite investors when you are ready.