Product & Tech DD, built for European VC

Product & Tech DD, delivered in 1 business day. Built on 250+ engagements.

The problem

You're underwriting tech you haven't actually seen.

01

Traditional product & tech DD is too slow, too shallow, and done by the wrong people.

Three to six weeks, vendor interviews, self-reported metrics, and a verdict from people who've never shipped a product. By the time it lands, the deal has moved on.

Why European VCs are pricing deals blind →

02

Every deck claims AI. Almost none of them survive a closer look.

Wrappers dressed as moats. Prompts called models. Demos hiding production gaps. You need to know whether the AI is genuinely unique, an enabler, or a story. Before you underwrite the bet.

The EU AI Act: a new diligence obligation →

03

The tech clarity you need dies at the term sheet.

DD gives you one verdict, once. Then the portco runs for years. Architecture drifts, velocity falls, key people leave, and your fund finds out at exit. You need a signal that keeps working after the deal closes.

5 tech DD questions every investor should ask →
Mathijs de Wit

In their words

Tech DD earlier in the process changes things, it unlocks deal speed. We put down high valued term sheets with more confidence and use tech DD not only as confirmation, but to pay up for the quality now that we know what's really under the hood.

Newion

Mathijs de Wit

Managing Partner · Newion

Who we are

Built by operators who've been on both sides of the table.

We built the X-Ray because we kept watching investors write term sheets on technology they hadn't actually seen. Traditional tech DD was too slow, too late in the process, and done by people who'd never shipped a product. We fixed that.

250+ automated checks, signed off by us. Founders, CTOs, and CPOs who know what good actually looks like under the hood.

After 250+ engagements, nothing in Europe comes close.

250+

European engagements

100%

Partner repeat rate

30 min

Target time commitment

The X-Ray team

The X-Ray

A hands-off diagnosis. AI-powered. Operator-verified. In 1 business day.

  • Target connects their codebase — under 30 min, read-only
  • VC and company add context — thesis, key questions, dataroom docs
  • AI runs 250+ checks across the full stack
  • Operators verify every finding — IC-ready within 1 business day

Pillar scores

250+ dimensions across the target's stack, each with a deal-relevant verdict.

Architecture
78
Security
61
Team & Delivery
88
AI Readiness
72
Code Quality
91

Benchmark

Co. F
92
This co.
78
Co. A
76
Co. D
71
Co. B
64
Co. C
55

Ranked 2nd of 6 · anonymised

Findings

A verdict on every pillar, not a list of observations.

Architecture

Investable with conditions

78

Security

Caution — auth gaps found

61

Team & Delivery

Strong — above benchmark

88

AI Readiness

Moderate — gaps in governance

72

Code Quality

Strong — clean codebase

91

Gap closing over time

Prove the gap is closing. Rescan to show progress — in data, not slide decks.

JanFebMarAprMayJunJulAmbitionReality

Delivered in 1 business day

Four layers, four audiences — one complete picture.

Executive Presentation

Verdict + scored pillars

Mitigations Document

Prioritised fixes for CTO

Clarification Questions

Sent directly in-platform

Raw Evidence

Code-level data for deep DD

How it works

From activation to verdict.
One business day.

You

Activate an X-Ray

Select a target, add your investment thesis, key questions, and any docs. We take it from there.

New X-Ray

TargetVertex
StageSeries A
SectorB2B SaaS
ThesisPre-LOI confidence check
VCInvestment thesis.pdf
VCKey risk questions.docx
VCPitch deck · Vertex.pdf
Activate X-Ray →
Company

Sign NDA & connect code

NDA signed same day — use our template or yours. Target connects repositories (read-only, under 30 min) and adds any technical docs.

Repository access

vertex/backendTypeScriptConnected
vertex/frontendReactConnected
vertex/infraTerraformPending

From company

CoArchitecture overview.pdf
CoAPI documentation.md
X-Ray

AI scan + operator verification

250+ automated checks run across all pillars. Our senior operators then review every finding — adding context, catching edge cases, and signing off on the verdict.

Scan progress

247 / 250

Architecture
78
Code Quality
91
Security
61
AI Readiness
72
Team & Delivery
88

Operator notes

Security score adjusted

Auth issue pre-dates team — not systemic

Crown jewel identified

Real-time data pipeline — rare at this stage

Context added

Monolith is intentional — roadmap shows migration

Company

Questions to the company

Where the scan raises questions, we send them directly to the company. They answer in the platform — structured, traceable, fast.

DD questions

3 pending

What is the plan for the auth layer migration?

Answered

Who owns the data pipeline and what is the bus factor?

Answered

Are there existing SLAs for enterprise clients?

Pending
You

Investor Verdict

Verdict, risk rating, crown jewels, and how the tech maps to the deal. IC-ready — no technical background needed.

Investor Verdict · Vertex

Confidential

Investable with conditions

Security remediation required pre-close

76

Architecture
78
Security
61
Team & Delivery
88
Share withIC membersCo-investorsBoard
See example report →
Company

Full Findings & Actions

Every finding with code references and a remediation path. Released to the company at your discretion — before or after close.

Full Findings · Vertex

VC releases
High

Auth tokens stored in local storage

auth/session.ts:42

Med

No rate limiting on public API endpoints

api/routes.ts:118

Low

Lodash 4.17.11 — CVE-2021-23337

package.json

Delivered toCTOEngineering leadFounding team
See example report →
You

Debrief — your deal team

We walk through every finding with your deal team. Ask anything. We translate technical risk into investment language.

On the call

X-Ray Team

Walking through findings

You

Lead investor

Deal team

IC members

Company

Separate debrief — optional

If useful, the X-Ray team can do a separate debrief with the company's CTO. Completely optional — and kept separate from your investor debrief.

Optional — company debrief

X-Ray Team

Walking through findings

Vertex CTO

Technical lead

Kept separate from your investor debrief.

You

Optional: Product & Tech Due Diligence

Not part of the X-Ray. A separate, deeper engagement when the deal warrants it — operator interviews, architecture deep-dives, IC-ready package.

Due Diligence — add-on

Avg. 2 weeks from X-Ray verdict

Operator interviews

CTO + lead engineers, structured

Architecture deep-dive

Full system walkthrough

Expanded X-Ray

Deeper checks, more pillars

IC-ready package

Verdict, risk rating, recommendation

Used when the deal warrants deeper scrutiny — post-term-sheet or pre-close.

Learn more →

What investors say

In their own words.

Newion

Tech DD earlier in the process changes things, it unlocks deal speed. We put down high valued term sheets with more confidence and use tech DD not only as confirmation, but to pay up for the quality now that we know what's really under the hood.

Mathijs de Wit

Managing Partner · Newion

Newion

Speed, depth, and a clear focus on business goals. Our go-to for every scan.

Dorus Olgers

Partner · Newion

ECBF

Their technical due diligence supports our scale-up investments by providing a clear assessment of whether the technology and product organization can scale effectively.

Isabelle Laurencin

Partner · ECBF

Icos Capital

Every startup we have taken through technical due diligence has appreciated it, and the depth of the analysis has been consistently useful to our process.

Nityen Ranjan Lal

Managing Director · Icos Capital

ROM Utrecht Region

The assessment gives you a clear picture of what's actually under the hood. Not just a checklist, but real insight into what matters for the investment. That's been my experience across multiple deals.

Joyce Houterman

Investment Manager · ROM Utrecht Region

Calibrated to your fund

Every X-Ray is tuned to three things about your fund.

No one-size-fits-all report. We adapt scope, depth, and focus based on where you invest, what you're betting on, and which vertical you back.

Stage

Where the target is in its journey.

Different stage, different risks. What matters at Seed is not what matters at Series C.

Pre-seed / Seed

Team capability, architecture fundamentals, early tech debt

Series A / B

Scale readiness, tech debt quantified, key-person risk

Series C+

Organizational maturity, integration risk, post-investment roadmap

Thesis

The lens your fund invests through.

Every fund has a different bet. We assess against yours. Examples:

Does the architecture match the commercial thesis?

Is this real AI defensibility, or wrapper-level?

Will the cost structure work in your return window?

Focus

Your industry vertical.

250+ scans across 11+ verticals. Industry context shapes what matters.

Security & Trust

Built for sensitive data.ISO 27001 in progress. Confidential by design.

Security overview →
In progress

ISO 27001

Currently in the process of achieving ISO 27001 certification, the international standard for information security management.

In progress

SOC II

SOC 2 certification in progress. Independently verified controls for security, availability, and confidentiality of your data.

By design

Confidential

Every engagement is covered by NDA. Your product & tech reality stays between us. Full stop.

Zero storage

No data retained

Source code and dataroom content is analyzed in-context. Nothing is stored or shared after the engagement ends.

In progress

GDPR

Working towards full GDPR compliance. Data processing agreements available on request.

Scoped access

Secure dataroom

Dataroom integration reads only what it needs. Access is scoped, auditable, and revocable at any time.

FAQ

Common questions.

Pre-term-sheet for deal confidence in competitive processes. In-DD to replace or sharpen your traditional product & tech DD step. Post-investment to keep a signal on the portfolio. The X-Ray fits every stage. 1 business day, 30 minutes from the target, non-intrusive.

We verify what's behind the AI: the model, the data, the orchestration, the evals, the production footprint. You learn whether the AI is a genuine moat, an enabler, or theater, and what the blast radius looks like if something goes wrong. Essential under the EU AI Act, and for any AI-led thesis.

Yes. The target grants us read-only access to their repositories. That's it. Total time commitment from them is under 30 minutes.

1 business day from access. Setup is under 10 minutes. We deliver two verdicts: one for your deal team, one for the company.

Yes. The X-Ray runs quarterly or annually across portfolio companies to surface drift: architecture, velocity, tech debt, key-person risk, AI posture. You see trends over time and which portcos are on track, before you read about it in a board deck.

Yes. Every X-Ray score is compared against our anonymized database of 250+ assessments. We benchmark by industry vertical, company stage (Seed to Series C+), team size, revenue model, and tech stack type. For funds with multiple X-Rays, we also surface patterns across your portfolio: which targets are outliers, which are typical, and where the risk clusters.

What if your product & tech DD took 1 business day instead of 3–6 weeks?

Traditional DD takes 3 to 6 weeks. We deliver in 1. Optionally pre-term-sheet for extra deal confidence.