An ordinary raise treats the data room as a container. A defence or dual-use raise cannot. Transmitting controlled technology electronically can be an export. The money is screened because of who the investor is, down to the ultimate owner and the source of funds. And years later someone official asks who accessed which document, from where, on whose authority. Exedra Gate is the rail on which those answers are produced by the work itself, as dated, signed entries.
A reviewer can confirm, with free standard tools, that the documents are unchanged and existed at the stated moment. The timestamp comes from an independent authority.
Each entry below is a published rule with its primary source attached. Whether a given item, investor or document falls under any of them is a question for the exporter, the acquirer and their counsel, never for a platform.
Showing rules for European Union
The argument on this page does not change with the selection. The citations do.
Every jurisdiction is shown below, grouped and labelled.
Export control reaches the sending of information, and it keeps receipts. The EU dual-use regime controls exports, brokering, technical assistance, transit and transfer, and requires exporters to keep registers and documents for at least five years from the end of the calendar year of the export, produced to the authority on request.
A catch-all reaches items on no list at all. A catch-all reaches items on no list at all, on end-use grounds, where the exporter has been so informed. "Not listed" is therefore a fact about a list, never a conclusion about an obligation.
The Union rewrote its screening regulation, and the successor is adopted. The Union adopted a successor foreign-investment screening regulation on 17 June 2026, replacing the 2019 framework. A filing wants the ownership chain to the ultimate owner, the governance rights and the funding of the specific investment, reproducible as filed.
Sanctions bind every operator, not only banks. The asset-freeze regime prohibits making funds or economic resources available, directly or indirectly, to listed persons. It applies to nationals wherever located, to entities incorporated in a member state, and to any business done in whole or in part within the Union, and it separately prohibits knowing circumvention. What survives a later question is the record of what was screened, when, against which list version, and who reviewed the result.
Classified information has its own architecture, and a ceiling for everyone else. Systems handling EU classified information undergo formal accreditation, with approved cryptography and cleared facilities and personnel. No commercial data room, this one included, holds material at those levels without the accreditations the law names.
The buyer documents the award; the supplier had better mirror it. Defence and security procurement requires a written report per contract, with named candidates, reasons and subcontracting shares. The supplier’s own mirror of what it submitted, and when, is the record it will argue from.
Investor eligibility is a documented test. Professional-client status runs on the directive’s Annex II test, with its written warning and its separate written acknowledgement. Eligibility is a documented test, not a judgement anyone recalls later.
Weapons exposure is a disclosure duty, not a policy statement. The sustainability-disclosure framework forces funds to disclose exposure to controversial weapons: anti-personnel mines, cluster munitions, chemical and biological weapons. Broader exclusions are contracts, and the issuer’s position on both is a document set.
Indicator 14, Table 1, Annex I of Delegated Regulation (EU) 2022/1288
Even showing the opportunity can need a licence. Brokering a contract over war weapons outside federal territory, and even demonstrating the opportunity to conclude one, are acts requiring authorisation. A platform that "connects" parties in this sector is describing a licensed act; this one does not.
The money is screened, and the trigger sits low. Acquisitions are reviewed at 10, 20 or 25 percent of voting rights depending on the target’s category, counting indirect holdings and de-facto control rights. The trigger sits low, and it is arithmetic on a cap table rather than a judgement about intent.
The defence-specific track sits lower still. The defence-specific track triggers at 10 percent of voting rights.
The filing falls due immediately after signing. The notification duty falls immediately after signing and includes the shareholding structures. Assembling an ownership chain after signing is late by definition.
Germany grades material in four levels. Material is graded in four levels, each with its own handling regime.
Every taking of cognisance is a record. Records must trace a classified document’s existence, its classification, its location, every taking of cognisance and its destruction.
The award record runs continuously, from the first step. A continuous award record is required from the first step of the procedure, not assembled at the end of it.
Switzerland’s retention clock runs twice as long. Export documents are kept for ten years after the customs assessment. The retention clock runs twice as long as the Union’s, and the questions arrive later still.
Brokering war-material know-how is a licensed act. Brokering, trading and the contractual transfer of war-material know-how to foreign recipients are licensed activities. A platform that "connects" parties in this sector is describing a licensed act; this one does not.
Switzerland’s screening act is adopted and not yet in force. The Investment Screening Act was adopted by Parliament on 19 December 2025, introducing an approval requirement for state-controlled foreign investors in particularly critical sectors, with entry into force foreseen for 2027 and the ordinance consultation opened on 12 June 2026.
Admissible, and nothing beyond admissible. In any legal proceedings an electronic signature, and the certification of that signature by a person, are each admissible in evidence on the question of the authenticity or the integrity of the communication or data.
Granting access is on the same footing as shipping goods. Transferring military software or technology by electronic means out of the United Kingdom is prohibited unless it is licensed or an exception applies, which puts the act of granting access on the same footing as shipping the goods.
Export Control Order 2008 (SI 2008/3231), art. 3(b), subject to arts. 13 to 18 and 26
The definition reaches a description given out loud. The Order defines transfer by electronic means to include transmission by facsimile, by telephone or by other electronic media, and expressly includes describing the technology orally over the telephone.
Export Control Order 2008 (SI 2008/3231), art. 2, definition of "transfer by electronic means"
A general licence comes with a register attached. A person acting under a general licence must keep registers or records naming the act, the technology, the date, the recipient and, so far as known, the end user, for at least four years from the end of the calendar year for trade-controlled acts and at least three years otherwise.
The third limb of the definition is the evidential one. Information is a trade secret only while it is secret, has commercial value because it is secret, and has been subject to reasonable steps in the circumstances by the person lawfully in control of it to keep it secret.
The organisation carries the burden, in the past tense. Where an associated person bribes to win business for a commercial organisation, it is a defence for the organisation to prove it had adequate procedures in place designed to prevent that conduct.
The sanction is voidness, not a fine. A notifiable acquisition completed without the Secretary of State’s approval is void, and notice must be given before control is gained.
National Security and Investment Act 2021, s. 13(1) and s. 14(1)
Seventeen schedules define what has to be notified. The mandatory notification regime is specified by seventeen sector schedules, among them artificial intelligence, quantum technologies, satellite and space technology, synthetic biology, cryptographic authentication, computing hardware and military and dual-use.
Ten years, and it reaches parties that are not banks. Every person engaging in a transaction subject to the sanctions regulations must keep a full and accurate record of it, available for examination for at least ten years after the transaction, whether or not the transaction was licensed.
31 CFR 501.601, Reporting, Procedures and Penalties Regulations
A release inside the country is still an export. Releasing or otherwise transferring controlled technology or source code to a foreign person inside the United States is itself an export, treated as an export to that person’s most recent country of citizenship or permanent residency.
15 CFR 734.13(a)(2) and (b), Export Administration Regulations
Handing over the means of access is the controlled act. Technology and software are released by visual or other inspection that reveals them to a foreign person, or by oral or written exchange, and any act causing a release, including through use of access information, needs the same authorisation the export would need.
The clock starts at the latest event, not the first. All records required to be kept by the Export Administration Regulations must be retained for five years from the latest of the export, any known reexport or transfer, or any other termination of the transaction.
The requirement is that a change cannot happen silently. A registrant keeping records electronically must store them so that none of the information can be altered once it is first recorded without also recording all the changes, who made them, and when they were made.
Some filings are mandatory rather than voluntary. A declaration to the Committee on Foreign Investment in the United States is mandatory where a foreign person in which a foreign state holds a substantial interest acquires a substantial interest in a TID U.S. business, and separately where the transaction involves critical technologies for which a U.S. regulatory authorization would be required to export to the person concerned.
The operative word is "solely". For a transaction in or affecting interstate or foreign commerce, a signature, contract or record may not be denied legal effect, validity or enforceability solely because it is in electronic form.
15 U.S.C. 7001(a), Electronic Signatures in Global and National Commerce Act
Self-authentication removes a witness, not an objection. A record generated by an electronic process that produces an accurate result, and data copied from an electronic device that is authenticated by a process of digital identification, are each self-authenticating on a certification by a qualified person, so no extrinsic evidence of authenticity is required to admit them.
The offence reaches conduct before the subpoena arrives. Knowingly altering, destroying, concealing, falsifying or making a false entry in a record, with intent to impede or influence a federal investigation or the administration of a federal matter, carries up to twenty years, and the offence reaches conduct in contemplation of such a matter.
The books-and-records duty reaches registered and reporting issuers. An issuer with securities registered under section 12, or required to file reports under section 15(d), must make and keep books, records and accounts that in reasonable detail accurately and fairly reflect its transactions and the dispositions of its assets.
Ongoing integrity, and a process for testing that it holds. Controllers and processors must implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including the ability to ensure the ongoing integrity of processing systems and a process for regularly testing and evaluating whether those measures are effective.
Data Protection Regulations 2021, sections 30(1)(b) and 30(1)(d)
Modification is named alongside access. An organisation must make reasonable security arrangements to prevent unauthorised access, collection, use, disclosure, copying, modification or disposal of the personal data in its possession or under its control.
The safeguards follow the information into any format. Security safeguards must protect personal information against loss or theft and against unauthorised access, disclosure, copying, use or modification, regardless of the format in which it is held.
Personal Information Protection and Electronic Documents Act, Schedule 1, clause 4.7.1
Ledger entries are published in English only, and cite each instrument by its own official name.
Controlled technology placed where a person in a third country can open it is an export question, asked after the fact. The issuer that cannot say who could reach which document, from where, during which weeks, answers a licensing question with a shrug. The one that can produce the access record per person and per document answers it with a file.
The notification wants the parties, the business and the shareholding structures, immediately. The ownership chain to the ultimate owner, with the voting arithmetic at each tier and the board seats and veto rights that count like votes, exists in fragments across counsel and fund admin. Assembling it after signing is late by definition.
Screening was done; everyone says so. Against which list version, with which query, returning what, reviewed by whom? A strict-liability prohibition with a criminalised circumvention ban is answered with a reconstructable record or with an assertion, and only one of those survives scrutiny.
Sensitive-but-unclassified material moves on need to know. Years later the question is who granted access, on what justification, and whether the person's role at the time supported it. A grant recorded in a messaging thread is a memory; a grant recorded as a dated entry beside the access it authorised is an answer.
The contracting authority documents the award in its own file, for its own purposes. The supplier who disputes a rejection, or defends a win, argues from its own record of what it submitted and when. If that mirror was never kept, the counterparty's file is the only file.
A generic data room logs links, not people; a mailbox dates nothing anyone can rely on; the cap table lives in a spreadsheet whose voting arithmetic nobody re-derives; and the screening evidence is a PDF from a vendor whose list version is not in it. Every control layer in this sector asks for the same thing, an attributable record produced at the time, and the ordinary toolchain produces it nowhere.
On Exedra Gate the issuer, the fund, counsel and the investors work inside one system rather than around it. Identity is verified per person; access is per-document and per-person under the issuer's own rules, including jurisdiction gating; and every step becomes an entry as it happens: sent, opened, read, signed and independently timestamped under RFC 3161. Nobody writes the protocol afterwards.
Set against the five situations above: the sensitive annex sits behind a narrower door than the deck, and the record shows each grant beside each access. The ownership chain and source-of-funds documents behind a screening filing are signed versions with dates, reproducible as filed. The screening evidence records what was checked and when, for a named human to judge. And the supplier's mirror of a procurement submission is an evidence pack, not a folder of copies.
The boundary is stated, not implied, because in this sector it is load-bearing. Exedra Gate classifies no item, determines no licence requirement, clears no screening, makes no sanctions determination, and brokers, introduces or shows the opportunity to conclude no transaction; those judgments and acts belong to the issuer, the acquirer, their counsel and the authorities the law names. Classified material at the levels the law protects stays in accredited systems; this platform's target is the unclassified raise around it, with rigorous access evidence. And a record here attests what happened and when, never that an export was lawful or a party is clear.
A document is fingerprinted, the fingerprints are chained and signed, and the record carries a timestamp from an independent authority. Years later, a different reviewer runs the same check with free standard tools and confirms the documents are unchanged and existed at that moment.
Five years in the Union, ten in Switzerland, and the questions arrive later still. The record exports in standard formats, in one shape, and is checked on the holder's own machine with free tools; deployment and residency follow the issuer's requirements. Deployment mechanics, the export and the verification are described once, for every sector: how the rail is deployed.
A workspace per raise. Each round is its own room with its own clocks, its own document versions and its own counterparty list, held beside the others.
The tiered room under the issuer's rules. The deck for the wide audience, the technical annex behind a narrower door, jurisdiction gating on, every grant and every access recorded per person as it happens.
The ownership and screening files. The chain to the ultimate owner with its arithmetic, the governance rights that count like votes, and the source-of-funds documents, versioned and signed so a filing is an export, not a scramble.
Contracts and signatures. Generated in the room, signed on the phone and independently timestamped as they are signed, with who opened what recorded alongside them.
The export. One evidence pack per raise, in one shape, handed to an authority's request, a dispute or a diligence rather than assembled for it, and checked on their own machine with free standard tools.
The compliance rail is live in production today. The mobile app is arriving and is named as arriving wherever it appears. What runs today, in full.
Who did not see the annex. Which access did not happen. Why the filing was complete on the day. In this sector the hard questions are negatives, and negatives are proven from records kept at the time or not at all. An issuer that prepares answers from the record. Exedra Gate exists for it.
Access is by invitation. A short note on the raise and its constraints is enough; where there is a fit, the walkthrough happens on a live system, using the issuer's own scenario.
Exedra Gate is a technology platform, not a broker, dealer, custodian, escrow provider, or investment adviser. It never holds, routes, or settles investor funds, does not recommend offerings to investors, and charges no success-based fees on raises. It does not classify items under any export-control list, does not determine whether a licence, filing or screening is required, does not make sanctions determinations, and does not broker, introduce, or demonstrate the opportunity to conclude any transaction in controlled goods; those judgments and acts belong to the parties, their counsel and the competent authorities. It does not hold classified information at the levels the law protects; such material belongs in systems accredited for it. Records and timestamps attest integrity and existence as of a date, not the lawfulness of any export, investment or party; that judgment remains with the parties and their counsel.
Regulatory references on this page are orientation, not legal advice: see Sources & verification.