Capital & Project Finance · Pan-African · 2026 · Client work

LIVE

Krestline Group

Deal infrastructure for $5M–$50M African project finance

Krestline Group: the live website
Client
Krestline Group
Location
Pan-African
Year
2026
Stack
Next.js · TypeScript · Prisma · PostgreSQL · S3 storage · Server-sent events · Vercel
Deal size
$5M – $50M
Sectors
Infrastructure & energy
Delivered
Phases 1–3
Architecture
Documented ADRs

01 · Challenge

Krestline introduces investors to pan-African infrastructure and energy projects in the $5M–$50M range. Deals involve confidential documents, many parties and a facilitator who has to prove who saw what, and when.

Email threads and shared folders could not enforce NDAs, separate parties, or produce an audit record that would stand up to scrutiny.

02 · Approach

We built one application covering the marketing site, public intake for investors and project owners, a facilitator admin and the full deal pipeline. Investors and project owners get their own portal with invitations, search and notifications.

Each deal gets a room with private threads, an NDA gate before anything is shown, live message delivery and a hash-chained message log, so any tampering is detectable. Every data access goes through a single permission-checked layer, backed by a CI-blocking authorisation test suite.

UsersWEB · MOBILENext.jsAPPLICATIONPrismaDATATypeScriptSERVICEPostgreSQLSERVICEServer-sent …SERVICEVercelSERVICEACCESS-CONTROLLED BOUNDARY · HOSTED ON S3 STORAGE
Simplified architecture

03 · The live site

Krestline Group: full page

Hover to scroll the full page

Krestline Group on a phone
Krestline Group homepage

What shipped

Key capabilities.

01

Deal pipeline

Facilitator view of every opportunity from intake to close, with search and notifications.

02

NDA-gated deal rooms

Nothing confidential is visible until the NDA is accepted. Private threads per party.

03

Verifiable message chain

Messages are hash-chained so any alteration of the record can be detected.

04

Investor & owner portal

Invitations, password reset, deal access and live updates for each party.

05

Permission-first data layer

Every read or write takes the acting user as a required argument; the database client is never imported anywhere else.

06

Authorisation test suite

Negative-case tests that block CI, plus append-only and hash-chain integrity tests.

Next case

OSOMEC Global Tech

Get in touch

Need something like Krestline Group?