Capital & Project Finance · Krestline Group

Krestline Group: NDA-gated deal rooms with a record no one can quietly change

A deal pipeline, portals for investors and project owners, and deal rooms where nothing confidential shows before an NDA is accepted.

Krestline Group: the delivered work

What changed

Nothing confidential is shown before an NDA is accepted, and any alteration of the message record can be detected.

Deal size
$5M – $50M
Sectors
Infrastructure & energy
Delivered
Phases 1–3
Architecture
Documented ADRs

01

The situation

Confidential deals on email threads

Krestline introduces investors to pan-African infrastructure and energy projects in the $5M–$50M range. Each deal involves confidential documents, many parties, and a facilitator who has to prove who saw what, and when.

  • Email threads and shared folders could not enforce NDAs
  • Parties could not be kept apart from one another
  • There was no audit record that would stand up to scrutiny

02

What we built

One application, from intake to close

We built the marketing site, public intake for investors and project owners, a facilitator admin and the full deal pipeline as one application, with a portal for each party.

  • Facilitator view of every opportunity from intake to close, with search and notifications
  • A room per deal with private threads per party, and an NDA gate before anything is shown
  • Live message delivery, with messages hash-chained so any alteration of the record can be detected
  • Investor and owner portals: invitations, password reset, deal access and live updates
  • A permission-first data layer: every read or write takes the acting user, and the database client is used nowhere else

03

How it runs

How it was built and kept safe

  • Delivered in phases, 1 to 3, with architecture decisions documented as ADRs
  • Negative-case authorisation tests block any release that would let the wrong party see a deal
  • Append-only and hash-chain integrity tests guard the message record

Built with

  • Next.js
  • TypeScript
  • Prisma
  • PostgreSQL
  • S3 storage
  • Server-sent events
  • Vercel

Let’s build
yours.

Tell us what the business needs: a site, a security review, growth, or the work you want off your plate. An engineer replies within one business day.