API standards
AUTHENTICATION
Authorization: Bearer <JWT>VERSIONING
/api/v1/
/api/v2/ERROR ENVELOPE
{
"success": false,
"error": {
"code": "FORBIDDEN",
"message": "Access denied."
}
}Permission model
Four primary roles, granular per-resource permissions. The authorization engine resolves both before any handler runs.
ROLES
AdminTeamInvestorPartner
GRANULAR PERMISSIONS
Project
project.readproject.writeproject.delete
Legal
legal.readlegal.write
Investor
investor.read
Partner
partner.readpartner.write
Vault
vault.readvault.write
Admin
admin.manageusers.managepermissions.manage
AI services layer
The AI capabilities exposed across portals — all calls are policy-checked, prompt-logged, and metered.
Knowledge search
Patent drafting assistance
Document summarization
Meeting intelligence
Investor analytics
Compliance automation
Semantic search
Agent orchestration
Mission-control dashboards
Each user lands on a dashboard contextual to their role. One product, four experiences.
TEAM
Dashboard
- Active sprints
- Product milestones
- Research queue
- Legal tasks
INVESTOR
Dashboard
- KPIs
- Financial updates
- Fundraising milestones
- Reports
PARTNER
Dashboard
- Pilot status
- Shared projects
- Sandbox access
- Support tickets
ADMIN
Dashboard
- Security alerts
- User activity
- System health
- Audit center