Overview
SecureDocs VDR is an enterprise Virtual Data Room platform designed to enable companies to securely transmit and share sensitive documents with governance bodies, regulatory authorities, boards, legal counsel, and external stakeholders. The system provides a controlled, auditable environment for confidential document exchange in compliance-critical scenarios such as M&A due diligence, regulatory reporting, board governance, and legal review.
Key Achievements
Secure Document Transmission to Governance
Built a dedicated governance submission workflow allowing companies to securely deliver sensitive documents — board materials, compliance reports, regulatory filings, legal packages — to external governing bodies with enforced access control, NDA acceptance, and tamper-proof audit trails.
Granular Access Control
Implemented a multi-level RBAC/ABAC permission model covering room, folder, document, and action levels (view, print, download, upload, sign, manage Q&A, export logs) — ensuring the principle of least privilege for all internal and external participants.
Full Audit Trail & Activity Analytics
Developed a comprehensive audit and analytics layer tracking every user action: document views, downloads, time-on-document, folder traversals, and Q&A interactions — providing governance teams with full evidentiary logs and real-time activity dashboards.
Document Security & Compliance
Integrated 256-bit AES encryption at rest, TLS 1.2 in transit, dynamic watermarking, view-only rendering, and IP allowlist controls — meeting SOC 2 Type 2 requirements and supporting multi-region data residency (EU/US).
MFA, SSO & Identity Federation
Implemented Multi-Factor Authentication (MFA) and SAML 2.0 SSO via Keycloak federation — enabling seamless onboarding for enterprise clients using Entra ID or existing IdP infrastructure without compromising security posture.
E-Signature & NDA Flows
Built built-in electronic signature and automated NDA acceptance flows, enabling governance workflows that require legally binding confirmation before sensitive document access is granted.
Technical Details
- Backend: .NET 8, ASP.NET Core Web API, C#
- Architecture: CQRS + MediatR, Domain-Driven Design, modular monolith → microservices-ready
- Database: PostgreSQL (transactional data), Redis (cache & queues)
- Storage: AWS S3 / MinIO (document blobs, versioning, lifecycle policies)
- Search: OpenSearch (full-text metadata and document content indexing)
- Auth & Identity: ASP.NET Core Identity, Keycloak, SAML 2.0 SSO, MFA/TOTP
- Background Jobs: Hangfire (async processing: watermarking, notifications, archive generation)
- Observability: Serilog, OpenTelemetry, structured logging, distributed tracing
- Security: 256-bit AES encryption, TLS 1.2, dynamic watermarks, IP allowlists, bcrypt
- Compliance: SOC 2 Type 2 alignment, evidentiary audit logs, data residency controls
- Timeline: Jan 2024 – Present