About

Confidential by design.

Access controls are enforced server-side on every request, not only in the user interface.

Your deal, step by step.

Reviewed firms: Every borrower and lender firm is approved by hand before its members see a single listing or deal.
Anonymous teasers: Teasers never include the company’s name. Before one is sent, Arillum checks everything the lender will read for the name or website.
Two parties only: A teaser is visible only to the borrower who sent it and the lender it was sent to.
Fully executed NDA: Identifying details and confidential documents open only after the NDA for that deal and that lender is fully executed. Arillum confirms the status with DocuSign itself.
Per-lender sharing: Even after the NDA, a lender opens only the documents the borrower has shared with that lender. Nothing is shared by default.
Lender privacy: No lender can see which other lenders received the same deal, or how many.
Every view logged: Arillum records who viewed or downloaded confidential material, and when.

Verified email: Every account confirms its email address before it can sign in.
Strong passwords: At least 12 characters. Resetting a password signs out every other session.
Rate limits: Repeated sign-in attempts are rate-limited to prevent credential-guessing attacks.
Encrypted connections: Every connection to Arillum uses HTTPS (TLS). Plain HTTP requests are redirected to HTTPS.