Recipient-linked LP copies
One PDF in, one unique copy per limited partner out. Import up to 100 recipients from a CSV and download the set as a ZIP.
For private equity & venture funds
Quarterly reports, capital-account statements, deal memos and IC papers go to limited partners, co-investors and advisers who each have their own reasons to forward them. ExactMark gives every recipient a copy that is quietly theirs, marks signed-in sessions on your investor portal, and tells you which copy or session a leaked page most likely came from.
One PDF in, one unique copy per limited partner out. Import up to 100 recipients from a CSV and download the set as a ZIP.
One script tag on the investor portal. Every signed-in session carries its own covert, redundant tiled signal.
Screenshots at any resolution, browser zoom, crops, resizing, JPEG and messaging-app recompression, small rotations.
The most likely source and ranked candidates, or an honest inconclusive result. Never a guess dressed up as a finding.
The exposure
A quarterly report goes to every LP, their advisers and often their auditors. Capital-account statements go to family offices with small teams and long forwarding chains. A deal memo goes to the IC on Monday and to co-investors on Wednesday. Portfolio dashboards sit in a portal that anyone with a login can screenshot.
When a page turns up on an anonymous forum, in a competing bidder's data room or in a journalist's inbox, every recipient received the same file. There is nothing to point to, and the relationship cost of asking is high.
The ExactMark answer
How it works
Upload the LP report, capital statement or IC paper to Imprint. Name each recipient manually or import a CSV of up to 100. Download recipient copies individually or as a ZIP and send them through your existing distribution.
Add <script src="https://exactmark.com/script.js"> to your investor portal and call exactmark.identify(...) for the signed-in LP. Dashboards and documents viewed in the browser now carry a session-specific signal.
Upload the leaked page to Evidence Lab or forward it to your Web App's private evidence email address. Review ranked candidates, add notes, and download the PDF evidence report. Add Lighthouse for session intelligence and Recovery+ for human-led follow-up.
Capabilities
Recipient-linked copies of PNG, JPG, WEBP and PDF files. Each copy carries the spatial signal plus signed, non-identifying file metadata and an opaque filename reference. PDFs keep their original content and text.
A single script tag and an identify call. Covert by default, with visible and combined modes when you want investors to see that the portal is protected.
Normalises the submitted image, searches across crop position, continuous scale, small rotation, colour, brightness and compression, and correlates against candidate copies and sessions.
Optional network and session intelligence for protected sessions: VPN, proxy and Tor indicators, provider, coarse location and changes from earlier sessions. The raw IP address is never stored.
Optional human-led investigation when the detector returns an inconclusive result and the matter is serious enough to warrant a closer look.
Owner, Admin, Developer, Analyst and Viewer roles with invitations, so investor relations, compliance and the portal engineers each see what they need and nothing more.
Questions
Honest answers matter more than reassuring ones. If something here does not cover your situation, talk to us.
No. ExactMark is not DRM and does not block screenshots, downloads or forwarding. It tells you which recipient copy or session a leaked page most likely came from, and recipients who know copies are linked to them tend to think twice.
By default the spatial signal is low-opacity and covert; the report reads exactly as it did before. A visible mode exists if you prefer recipients to see that the document is marked.
Yes. Recipients and portal viewers can be pseudonymised, and the mapping between a pseudonym and a real investor can stay entirely inside your own systems.
Evidence Lab reports it as inconclusive rather than naming a weak candidate. The case, notes and original asset are retained, and Recovery+ is available as an optional human-led investigation.
The SDK never captures or records the page. Only evidence files you submit are ever received. ExactMark is hosted in Dublin with Supabase in Ireland, and forensic data is encrypted at the application level with AES-256-GCM.
Next quarter is closer than it looks
Self-serve sign-up, USD plans via Stripe Checkout, and a one-time testing plan if you want to trial it on a single report first.