Privacy

Dalil holds the financial figures a portfolio company submits for a reporting period, the documents those figures were taken from, the questionnaire answers that accompany them, and the record of every screening run, board determination and signature that followed.

A portfolio company needs no account. It receives one link per quarter, sent to one email address, and confirms that address with a one-time code before it can enter anything. The link expires on a stated date, and it never shows another company's data.

Every read that matters and every create, update, delete, grant, export, signature, status change and AI suggestion is written to an append-only audit chain, with the actor, the object and the time. That chain is what an auditor or a regulator is given; it cannot be edited after the fact.

Source documents are stored immutably and identified by a SHA-256 hash, so every figure attributed to a document points back to the exact file it came from.

The deployment's operator chooses the region its data is stored in and decides how long records are kept. Ask your org admin where this deployment runs, and who to contact about a record that concerns you.