1. Commercial Proposal Acceptance & Platform Boundaries
DealNest is engineered to record unambiguous commercial alignment on project scope, deliverables, and package pricing between business entities:
| Dimension | DealNest Architecture | Commercial Impact |
|---|---|---|
| Assent Capture | 1-Click Executive Commercial Approval | Zero-friction commercial approval linked to verified email & company |
| Document Immutability | Frozen JSON Snapshot & SHA-256 Digest | Mathematical proof of agreed deliverables & pricing |
| Audit Record | PDF Acceptance Summary with Timestamps & IP | Downloadable receipt delivered to both buyer & vendor |
| Platform Scope | Digital Sales Room SaaS (Not a QTSP) | Presentation & engagement analytics; formal contracts remain direct |
DealNest provides presentation, engagement analytics, and workflow tooling for commercial proposals. DealNest is not a qualified trust service provider and does not issue qualified electronic signature certificates under statutory eIDAS trust schemes.
2. Cryptographic SHA-256 Audit Trail
Whenever a proposal is accepted, DealNest executes an automated cryptographic sealing routine that locks the document and produces an immutable audit record containing:
- Document Digest: SHA-256 cryptographic hash calculated from the complete frozen snapshot of deal scope, selected pricing tiers, and agreed terms at acceptance time.
- Approver Attribution: Approver’s full legal name, official title, and work email address.
- Temporal Proof: High-precision UTC timestamp recorded by our backend servers.
- Network Identity: Public IPv4/IPv6 address, browser user-agent, and verified device headers.
3. Infrastructure & Encryption Standards
DealNest architecture follows defense-in-depth principles across every component of the tech stack:
A. Encryption in Transit
All HTTP traffic is strictly forced to HTTPS with TLS 1.3 encryption. We employ HTTP Strict Transport Security (HSTS) with preloading to block man-in-the-middle downgrade attacks.
B. Encryption at Rest & Zero-Egress Storage
All client documents, contracts, and video assets are uploaded directly via presigned PUT URLs to Cloudflare R2 object storage with AES-256 encryption at rest. Uploads bypass application servers, eliminating server memory retention and data interception risks.
C. Multi-Tenancy & Access Isolation
Deal rooms are addressed using high-entropy cryptographic tokens (e.g. /r/k7X9pM2qR4) generated via cryptographically secure pseudo-random number generators (CSPRNG). This completely prevents incremental ID enumeration or unauthorized discovery.
4. Search Engine Privacy (Zero Crawling)
We recognize that proposals contain confidential pricing and competitive strategic information. All client deal rooms automatically serve strict HTTP headers preventing search engine indexing:
X-Robots-Tag: noindex, nofollow, noarchive, nosnippetYour proposals will never appear in Google, Bing, or public web archive indexes.
5. Instant Archival PDF Generation
Upon acceptance confirmation, our backend engine renders an archival PDF incorporating the complete agreed proposal, scope deliverables, selected tier breakdown, approver verification seal, and the dedicated SHA-256 Audit Certificate.
Both the seller and the buyer can immediately download this sealed document for internal records, accounting compliance, or procurement files.
6. Security Vulnerability Reporting
We welcome reports from independent security researchers. If you identify a potential vulnerability within DealNest infrastructure, please report it responsibly to:
DealNest Security Team
Email: [email protected]
Response SLA: Within 24 hours