xRoom: Split-Channel Virtual Data Room

The Problem

M&A virtual data rooms store the most sensitive corporate documents in a single location, protected only by access controls that can be bypassed by insiders or breaches.

VDRs contain financial statements, IP documentation, customer lists, and strategic plans. A single breach or insider leak during a deal process can destroy billions in enterprise value.

Traditional VDR security relies on access control lists and watermarking. Neither prevents a determined insider from exfiltrating complete documents.

The Old Way

The PRIVATE.ME Solution

xRoom uses XorIDA to split VDR documents so no single storage location or participant holds complete files. Access is enforced cryptographically via threshold reconstruction and DID-scoped permissions.

Documents are XorIDA-split at upload. Bidder access is controlled via DID-scoped permissions in the Trust Registry. Viewing requires threshold reconstruction, and each reconstruction is logged in an HMAC-chained audit trail.

Deal stages gate document availability: preliminary info (stage 1), detailed diligence (stage 2), final documentation (stage 3). Stage transitions require threshold authorization from deal principals.

The New Way

How It Works

xRoom provides a split-storage VDR with DID-scoped access, threshold reconstruction, and stage-gated document release.

Use Cases

Integration

import { SplitVDR } from '@private.me/vdrsplit';

const vdr = await SplitVDR.create({
  dealDid: dealDid,
  stages: ['preliminary', 'diligence', 'final'],
  threshold: { k: 2, n: 3 }
});
await vdr.uploadDocument(doc, { stage: 'diligence' });

Security Properties

Verifiable Data Protection

Every operation in this ACI produces a verifiable audit trail via xProve. HMAC-chained integrity proofs let auditors confirm that data was split, stored, and reconstructed correctly — without accessing the data itself.

Ready to deploy xRoom?

Talk to Ren, our AI sales engineer, or book a live demo with our team.

Ship Proofs, Not Source

xRoom generates cryptographic proofs of correct execution without exposing proprietary algorithms. Verify integrity using zero-knowledge proofs — no source code required.

Use Cases