apokto
Deal execution platform for private capital

Run the entire transaction in one place. Prove every step of it.

A data room holds one side’s documents. apokto runs the deal itself — diligence, Q&A, bids, committee, close, and everything after it. Buyer, seller, counsel, bankers and accountants work in the same record, and every action in it is provable to an outside party.

See a live deal

Twelve transaction types

Buy-side, sell-side, credit, fund and LP work — one platform, not four tools.

Every party in one room

Counterparties and advisors get scoped seats. No shared logins, no side channels.

Custody you control

Six modes up to air-gapped. Your keys, lease-gated decrypt, witnessed break-glass.

Kurt, scoped to one deal

Drafts memos and Q&A with citations. Cannot read across a wall, and says so.

Harbourway Partners · firm console
Live processesEvery deal, fund and portfolio company on one pane — each cell clicks through, scope-checked.
PROCESSFUNDSTAGENEXT GATEOPENEXPOSURE
Meridian HealthAPK-M-114IVDDBids 08 May3$432M
Kestrel add-onIVIOIMgmt call 12 May1$85M
Helios continuationVELECLP vote 19 May2$210M
Argent exit · sell-sideIIIMP1CIM out 16 May$160M
Fund V raise · IRVDDQODD onsite 21 May1

Firm risk · now

HSR clock · day 18 of 30
long pole to close
Leases expiring today · 7
3 vaults, all render-only
Q&A aging > 5 days · 6
Meridian 4 · Helios 2
Team capacity · 2 at limit
staffing view
LAST CHECKPOINT 14:31:07EVENTS 1,204–1,391 SEALEDMERKLE ROOT ANCHORED

Who buys it

Four people have to say yes. Each one gets a straight answer.

Deal Partner

What is the disputed EBITDA actually costing us?

The QofE bridge prices it in the room: $6.2M in dispute is $71M of price at 11.4×. Kurt has the cited IC memo ready before committee.

See the bridge →

Deal Ops

Can we prove the auction was run fairly?

Every fan-out, redaction set and normalization step exports as receipts a losing bidder's counsel can check independently.

See the fan-out →

Security Review

Who at the vendor can read our MNPI?

Nobody. Decrypt is lease-gated against your keys, break-glass is witnessed by every party, and the full architecture goes to you before the first call.

Read the architecture →

Fund Operations

Why is ops re-keying the close into the capital call?

It shouldn't be. The close event builds the call: 38 notices generated, side letters checked mechanically, wire details frozen weeks ahead.

See the close →

Kurt

The analyst work, done overnight. Cited line by line.

Kurt drafts memos, bridges and Q&A responses under the same custody rules as any human seat. Every figure carries a document citation or a flag saying it is reasoning, not evidence. It works inside one deal and cannot see the next one — ask it to cross a wall and the refusal is recorded in writing.

214
citations in a first-draft memo
0
uncited figures allowed through
KurtSCOPE: MERIDIAN · SEAT: DEAL LEAD
How does Meridian’s churn compare to what we saw in the Kestrel room?

Meridian gross churn is 9.1% TTM — SMB 14.2%, enterprise 3.8%. DOC-0872 p.12 QA-0121

Kestrel is a separate vault and I can’t read it from this seat — that wall is yours, not ours. Ask me inside Kestrel, or use an approved precedent instead.

Reasoning — not cited

SMB-weighted churn at this NRR usually reprices around 0.5× in committee.

vault.metrics.read · lease 4m · 2 events
vault.compare.cross DENIED · SCOPE WALL → recorded

Bring your security review to the first call.

Architecture overview, data-flow diagram and custody specification go to your team before we talk. Briefings run 45 minutes on a live deal, not a slide.

Controls and attestations

SOC 2 Type II
ANNUAL · ON REQUEST
ISO 27001
ISMS CERTIFIED
RFC 3161 timestamping
THIRD-PARTY TSA
WORM object-lock
7-YEAR RETENTION
GDPR · DPA
EU/UK · SUBPROCESSORS
Okta · Entra · Ping
SAML · SCIM
© 2026 APOKTO, INC.SOC 2 TYPE II · ISO 27001 · RFC 3161

Book a briefing

Architecture overview, data-flow diagram and custody specification go to your team before we talk. 45 minutes, on a live deal.

Briefings run 45 minutes on a live deal, not a slide.

Request the security package

SOC 2, ISO 27001, RFC 3161, and the full custody architecture — sent immediately.

Architecture overview, data-flow diagram and custody specification — sent immediately, no call required.