ledgerdata Secure data rooms
For insolvency & business rescue practitioners

One day you will be asked who saw it.

A data room for estates and disposals. Every document a viewer opens is stamped with their name, and every view is written to a record that cannot be edited — not by them, not by you, not by us.

Two-step sign-in Watermarked per recipient Append-only audit trail
Access log — Northfield Estate
A. Bidder opened valuation.pdf09:14
A. Bidder downloaded plant register.csv09:22
M. Reddy opened creditors list.pdf11:03
M. Reddy opened valuation.pdf11:07
You uploaded offer received.pdf14:41
Append-only — this record cannot be edited or deleted
The problem

Every interested party means another transfer link that expires, or another shared folder to build and keep current. It is hours of administration — and at the end of it, no record of who read what.

Ledger Data

One room per matter, set up once. Invite each party in seconds, give them only the folders they should see, and change that whenever you like. Their name is on every page they open, and every view is recorded.

01 — GETTING IT IN

Put the records in, however you have them.

Drag in files, or a whole folder straight off your machine — the structure comes with it. If the client sent you a zip, drop that in exactly as it arrived and it is unpacked for you. Nothing to rename or reorganise first.

Then AI file and folder organisation proposes where everything belongs, and you accept or reject each suggestion — nothing moves on its own. Only filenames are ever read; no document leaves the room.

AI organisation is subject to cost and the practitioner’s requirements, and is switched on per firm.

Northfield Estate — data room
Drop files, a folder, or a .zip
Asset Register14
Financials21
Correspondence6
plant register.csv
valuation.pdf
creditors list.pdf
02 — WHAT THEY CANNOT SEE

Nothing leaks while you are still sorting.

Anything not yet filed is invisible to every viewer, whatever access they hold. The appointment letter and court orders live on an internal side no viewer ever reaches. You get everything in first and organise it afterwards.

Northfield Estate
What you hold
Asset Register
Financials
Correspondence
Unfiled
Internal
What A. Bidder sees
Asset Register
Financials
Correspondence
Unfiled
Internal
03 — LETTING A VIEWER IN

On your terms, one viewer at a time.

Choose the folders they see. Decide whether they may download or only read in the browser. Require a signed NDA before the room opens at all. They set their own password from a link that works once.

Invite a viewer
Only the folders you chooseon
Signed NDA before entryon
Downloadsoff
WatermarkedPDFs, images & Word
04 — ON EVERY PAGE THEY OPEN

Watermarked on the way out.

Every PDF, image and Word document is stamped as it is served: your own watermark — your wording or your logo, whichever you set — and along the foot of the page the name, email and date of the party who opened it. A page marked only with your firm tells you nothing when it turns up somewhere it should not. Your stored file is never touched, so the clean original stays clean for the court file.

A Word document is delivered as a stamped PDF. There is no honest way to mark a .docx the recipient can simply edit out, so the copy they receive is converted on the way out. Your .docx stays exactly as you uploaded it.

Spreadsheets are the deliberate exception. A PDF of an asset register cannot be sorted or totalled, which is the only reason a viewer opens one — so Excel files go out unmarked and usable, the room shows not marked against each, and the download is recorded either way. Convert anything sensitive to PDF before you upload it.

What A. Bidder opens
YOUR WATERMARK A. Bidder · bidder@example.com · 12 March
SECURITY

Built for documents you would be asked about in court.

An estate's papers are not ordinary files. These are the measures that are actually in place — not a roadmap, and not a badge on a page.

Nobody shares an account

Each person has their own, with a twelve-character minimum checked against the passwords that top every breach list. Two-step sign-in by authenticator app or emailed code, and a session that ends after thirty minutes untouched.

A viewer sees only what you grant

Folder by folder, and never anything internal or still unfiled — whatever access they hold. Every query is scoped to your firm by the signed-in session, never by anything sent in a request.

Every copy is marked as it is served

With the reader's own name, email and the date. Your stored original is never altered, so the clean document stays clean for the court file — and a leaked page points back to one login.

The record cannot be rewritten

Every view and download is written to an append-only trail the database itself refuses to update or delete. Not by a practitioner, not by a script, not by us.

Encrypted in transit and in backup

Every page over TLS with certificates that renew themselves. Backups are encrypted before they leave the machine, so a copy is useless to anyone who reaches the storage without the passphrase.

POPIA, in writing

Your firm is the responsible party for its data room and we are its operator. The operator agreement section 21 requires is published, not requested — along with where the data sits and who else touches it.

What it does not do.

Worth knowing before you ask, rather than after. A data room that oversells itself is not one you would put a client's estate into.

Spreadsheets are not watermarked

PDFs, images and Word documents are — a Word file is converted to a stamped PDF as it is served. Excel is left unmarked on purpose: a PDF of an asset register cannot be sorted or totalled, which is the only reason a viewer opens one. Spreadsheets reach a viewer exactly as you uploaded them, the room says so against each one, and the download is recorded either way. Convert anything sensitive to PDF before you upload it.

Scanning is a filter, not a guarantee

Every upload is scanned and an infected file is refused outright, but scanning recognises malware that is already known. Something written last week may not be in the signatures yet. Files are stored and never run, and the only kind the application opens is a Word document, converted to a watermarked PDF by LibreOffice sandboxed as an unprivileged user. If a client sends you something you would not open yourself, do not put it in the room.

It cannot stop a photograph

No data room can. Watermarking makes a leak traceable to one login; it does not make one impossible.

Accounts are opened by hand,
one firm at a time.

Tell us who you are, the kind of matters you run, and when you would want to start. Someone reads every request by hand.

Read the Operator Agreement and the Privacy Policy before you ask, not after.