✦
Verifying access…
Confidential — For qualified investors under NDA · NaXhio.Tech © 2026
Section 8 Due Diligence

Data Room & Due Diligence

The full document set for qualified investors under NDA. 25 diligence documents across 7 categories — plus the product binary itself, available for live demonstration on request.

Build Proof

The product exists. Here is the evidence.

76,199
Lines of Code
167 Dart files, zero warnings
$0.9–2.5M
Replacement Cost
Industry benchmarks vs. agency quotes
v1.0.0-rc1
Build Status
Release candidate — pre-launch hardening
6
Languages Live
EN · ES · PT · HI · ZH · JA
Demo available: A live, working build of the app is available for demonstration on any investor call. Android APK, Web PWA, and Windows installer can be provided under NDA. Source code review available for lead investors.
Document Library

25 documents across 7 categories

All documents are in the business/ directory of the secure data room. Full access provided under NDA.

📋

Section 1 — Executive Summary

2 documents
📄
Executive Summary
One-page overview: mission, product, ask, team
Available
📊
Investor Pitch Deck
18-slide narrative deck (PDF)
Available
🔧

Section 2 — Product & Technical

4 documents
📘
Technical Product Specification
9,000+ line master spec · all features · all models
Available
📗
Codebase Reference
Full architecture, file map, service registry
Available
📙
Product Roadmap (24-mo)
Phase-by-phase feature and milestone plan
Available
🏗️
Technical Architecture Diagram
Layer diagram, data flow, third-party integrations
Available
💰

Section 3 — Financial Model

4 documents
📈
24-Month Financial Model
Full P&L, cash model, three scenarios
Available
💳
Funding & Use of Funds
$1.5M allocation by line item, hiring plan
Available
📉
Unit Economics Model
CAC, LTV, ARPPU, payback, cohort assumptions
Available
🏦
Cap Table (Illustrative)
Pre/post-Seed; ESOP; advisor grants
Available
🌍

Section 4 — Market & GTM

4 documents
🔍
Market Analysis
TAM/SAM/SOM, competitive landscape, positioning
Available
🚀
GTM & Growth Strategy
7-phase channel playbook, budgets, KPIs
Available
👤
Customer Personas & Journey
3 primary personas, acquisition + retention paths
Available
🔄
Competitor Matrix
Feature-by-feature comparison, positioning map
Available
👥

Section 5 — Team & Legal

4 documents
👔
Team & Hiring Plan
Current team, bios, 24-month hire sequence
Available
🏛️
Corporate Structure
Delaware C-Corp plan, IP assignment, governance
At close
⚖️
IP Ownership Summary
Codebase ownership, third-party licences, trademarks
Available
🔐
Privacy & GDPR Policy
Data handling, retention, deletion, CCPA
Available
⚠️

Section 6 — Risk & Governance

3 documents
📋
Risk Register
Full 30-item register, scores, mitigations, owners
Available
🏢
Governance Framework
Board composition, investor rights, reporting cadence
Available
🔒
Security Posture Summary
OWASP controls, Firestore rules, secrets management
Available
⚙️

Section 7 — Operational

4 documents
📊
KPI Dashboard Template
Monthly reporting format: MRR, retention, CAC, burn
Available
🌐
Culture & Operating Principles
10 principles · hiring values · remote-first norms
Available
📱
Publishing & App Store Guide
Android / iOS / Web store listing strategy, ASO
Available
💎
Software Factory Quote / Comp Valuation
Agency cost benchmarks vs. build effort — $0.9–2.5M range
Available
KPI Framework

How we define and measure success

Product Health KPIs

MetricY1 GateY2 Target
D7 Retention≥ 25%≥ 32%
D30 Retention≥ 12%≥ 18%
DAU / MAU≥ 14%≥ 18%
Free → Paid Conversion3%6%
Session Length≥ 4 min≥ 5.5 min
Sessions / User / Week≥ 3×≥ 4×

Growth & Financial KPIs

MetricY1 GateY2 Target
Net ARPPU~$8.50~$8.50–9.50
LTV (12-mo)~$75~$82
CAC (blended paid)< $25< $20
CAC Payback< 12 mo< 8 mo
LTV / CAC≥ 2×≥ 3×
Paying Users1,80014,400
Gate mechanism: D7 retention below 20% triggers a product-first pause on marketing spend — irrespective of investor pressure. This is an encoded operating rule, not a preference. Investors will be informed before the pause, not after.
Security

Security posture at v1.0.0-rc1

Application Security

  • OWASP Top 10 controls reviewed in codebase
  • No secrets committed to repository (all via --dart-define)
  • Certificate pinning for API calls
  • JWT validation on all Firebase-protected endpoints
  • Input sanitisation on all user-facing fields

Data Security

  • Firestore security rules restrict all reads/writes to authenticated owners
  • No PII stored beyond operational necessity
  • Birth data encrypted at rest (Firestore default AES-256)
  • Account deletion flow ships Phase 0 (GDPR Article 17)
  • LLM API calls do not include identifying PII in prompts

Operational Security

  • Firebase App Check prevents API abuse
  • Rate limiting on LLM-backed endpoints (Aura system)
  • Anomaly detection on Aura wallet mutations
  • Pen-test scheduled pre-Series A
  • Dependency audit quarterly (dependabot / pub audit)
Due Diligence Access

Ready to dig deeper?

The full 25-document data room, live app demo, and source code review are available to qualified investors under NDA. Reach out to schedule a technical deep-dive or Q&A call.

25
Documents ready
Live
Demo available
Same day
NDA turnaround
Request NDA & Data Room Access Schedule a Demo Call

founder@astrohitch.app · NaXhio.Tech · Remote-first · Seed 2026