Security
Deal information is shared on purpose, and on the record.
A deal puts your accounts, contracts, customer names and people's salaries in front of outsiders. Synerger is built around three plain controls: each person sees only what their role allows, every action is recorded, and personal data is kept to what the deal needs.
Who can see deal documents?
Only the people you invite, and only the folders their role allows. Roles are set per deal and per folder, and every upload, view and answer is recorded with the person and the time. Synerger claims no security certifications.
Control
Access by role
Each person sees only what their role allows.
Control
Audit trail
Every upload, view, answer and change is recorded.
Control
Personal data
Kept to what the deal needs, then deleted or returned.
Access by role
Who sees what, decided by you.
Roles are set per deal, and permissions per folder, so a buyer's lawyer can read the legal folder without seeing payroll, and a second round bidder never sees what the preferred bidder sees.
Swipe across to see every folder
| Role | Financial | Legal | Operational | Technical | HR |
|---|---|---|---|---|---|
| Seller team | Manage | Manage | Manage | Manage | Manage |
| Seller CA | Answer | View | View | Closed | Answer |
| Preferred bidder | View | View | View | View | View |
| Buyer counsel | View | Answer | View | Closed | Closed |
| Second round bidder | View | Closed | View | Closed | Closed |
Sample permissions for one deal workspace
- A workspace per dealEach deal or engagement lives in its own workspace under a code name. People are invited to one workspace and see nothing outside it.
- Roles for each sideSeller, buyer, advisers and your own team get roles that match what they need: view, upload, answer questions or manage.
- Permissions per folderFinancial, legal, operational, technical and HR folders can be opened or closed for each role, and changed as the deal moves on.
- Removing accessWhen a bidder drops out or an adviser's work ends, their access is removed in one step and the removal is recorded.
- Questions routed by areaA question about the lease goes straight to the person who owns legal answers.
- Your own team tooInternal access follows the same rules, so a deal can stay confidential from colleagues who do not need to know.
Audit trail
A record of who opened what, and when.
Every upload, view, answer and permission change is recorded with the person and the time. When a buyer says they never saw the customer contract, the record settles it. When a regulator or a court asks later, you have the history.
- Uploads, with who added them and when
- Who opened which document, by person and folder
- Questions asked, answered and closed
- Invitations, role changes and removals
- 8 Oct 09:12Seller CFOUploaded · Financial / Audited accounts FY25
- 8 Oct 10:40Buyer CAOpened · Financial / Audited accounts FY25
- 8 Oct 11:05Buyer CAAsked · Q-041, related party sales FY25
- 8 Oct 16:28Seller CFOAnswered · Q-041, with two linked documents
- 9 Oct 09:30Seller MDOpened access · Legal folder to buyer counsel
- 9 Oct 18:02Seller MDRemoved · Second round bidder, all folders
Confidentiality
Habits that keep a deal quiet.
Most leaks come from habits, so these are built into every engagement.
A deal rarely leaks through a system. It leaks through a forwarded email or a name said in the wrong room.
Code names
Deals carry a made up name in every document, email and folder, so a forwarded file does not reveal the company.
NDA before access
Nobody outside your team enters the data room before an NDA is signed and recorded against their name.
Information in stages
Teaser, then information memorandum, then the data room, then sensitive folders only to the preferred bidder.
Summaries before detail
Customer names, prices and salaries are shared as summaries until the buyer genuinely needs the detail.
One channel
Questions and answers go through the question log, where each one has an owner and a record.
Clean closing
At the end, access is closed, the archive is kept and data that is no longer needed is deleted.
DPDP and diligence data
Personal data in a data room is still personal data.
Employee records, customer lists, patient files and student records often end up in diligence. Under India's Digital Personal Data Protection Act, 2023, the business that holds them stays responsible for how they are used and shared.
- Share what the buyer needs to decide: summaries, bands and samples with names removed
- Keep identifiable data in restricted folders, opened only to named people
- Record why each set of personal data was shared and with whom
- Delete or return personal data when the deal ends or the buyer walks away
For the wider duties under the Act, the Code Colonies group runs TrustOS, a DPDP compliance platform. Our guide on diligence documents and the DPDP Act covers the deal side. This is general information; your lawyer can advise on your own case.
Questions
What security teams ask us.
Which security certifications does Synerger hold?
If your process needs a security questionnaire or evidence of specific certifications, we answer it in writing for your deal, including where the answer is no.
Can we hold back sensitive folders from a bidder?
Yes. Access is set per role and per folder, so payroll or customer contracts can stay closed to a bidder until the later rounds.
What happens to the data room after the deal?
You decide. Usually the buyer's access is closed at signing or closing, the seller keeps an archive with the audit trail, and personal data is deleted once it is no longer needed.
Do Code Colonies advisers see our documents?
Only if they are working on your deal and you invite them, with the role you choose. Their actions appear in the same audit trail as everyone else's.
Related
Where to go next.
- PlatformThe security and access moduleRoles, folder permissions and the audit trail in the product.
- GuideDiligence documents and the DPDP ActWhat to share, in what form, with whom, and what happens afterwards.
- PlatformDue diligence and the data roomRequest lists, folders and the question log.
- LegalPrivacy noticeHow this website handles what you send us.
- Next stepBook a thirty minute callA confidential first conversation with an adviser, with an NDA first if you want one.
Next step
Send us your security questionnaire. We answer it in writing for your deal.
A confidential call with an adviser about who will see what, and how the record is kept from the first NDA to the archive.