Controlled disclosure.

Data-room registration records name, business email, organisation, role, stated purpose, approval status and NDA confirmation. Security logs record sign-in, document views and downloads with timestamp, IP address, user agent and document identifier.

These records are used only for access control, security, compliance and project-finance diligence. Access logs are restricted to authorised administrators. Raw IP and user-agent data should be retained for no longer than 90 days unless a security incident, legal hold or contractual requirement justifies longer retention.

Applicants may request correction or deletion where this does not conflict with legal, security or audit obligations. No confidential document is made publicly accessible.