Private Equity · Institutional SaaS · East Africa + Central Asia · 2026
MSIFS — Frontier Impact Fund
A public site, a gated investor portal and a scope-locked dual-brain AI for a $200M frontier-impact fund.
Client: Multinational Strategic Investment Funds
The challenge
MSIFS — a newly-formed $200M, 10-year fund targeting critical minerals and infrastructure across East Africa and Central Asia — had a sophisticated GP team but no public platform to anchor LP confidence and deal flow. It needed institutional-grade credibility, a secure investor center and analyst tooling, built from fund formation to live in six weeks — replacing a demo-grade prototype with a production Supabase backplane.
What we delivered
The build
- 01A public corporate site (msifs.com): fund strategy, a three-pillar methodology, regional pages, team and an intelligence library.
- 02A gated investor portal with mandatory TOTP MFA: dashboard, portfolio, a slider-driven fund model (IRR/MOIC/NAV + investor waterfall), impact mapping and an admin console.
- 03A public bRRAIn assistant that is code-forbidden from discussing the fund itself, plus an internal deal-vetting tool that turns a deck excerpt into a structured 10-section IC memo — every memo audit-logged.
- 04A hardened security posture: Argon2id auth, refresh-token rotation, HIBP breach check, rate limiting, account lockout, a full admin audit log, HSTS preload, CSP and strict headers.
Technology & AI
The technology behind it
A SCOPE-LOCKed dual-brain — a public AI that is code-forbidden from discussing the fund's own internals, and an admin-only analyst that turns a raw deck into a 10-section Investment Committee memo.
- ◆Public assistant with a hardcoded SCOPE_LOCK: it refuses every question about MSIFS / the fund / GPs / pipeline and only answers frontier-market questions, citing primary (Tier-0 government) or anchor sources by name and year.
- ◆An admin-gated deal-vetting engine (401/403 otherwise): paste a deck excerpt, get a structured 10-section IC memo — every run written to an audit table.
- ◆Mandatory TOTP MFA on every account (investor, partner, admin) via Supabase, sessions required to reach AAL2, with 8 hashed one-time recovery codes.
- ◆A slider-driven fund model in the portal — IRR / MOIC / NAV, J-curve and carry waterfall — computed client-side with no server round-trip.
- ◆Institutional security: Argon2id, refresh-token rotation, HIBP k-anonymity breach check, sliding-window rate limits, account lockout, strict CSP / HSTS and a complete admin audit log.
Information-boundary enforcement as architecture — one AI that literally cannot talk about the fund, and a separate one only staff can reach. The boundary is code, not policy.
The outcome
Results
- ✓msifs.com live on Vercel with a production-grade, MFA-gated investor portal — institutional from day one.
- ✓A dual-brain AI where the public assistant is code-forbidden from discussing the fund, and the internal analyst produces audit-logged IC memos.
- ✓Security: HSTS preload-eligible, CSP + X-Frame-Options, sliding-window rate-limiting, account lockout and a complete admin audit trail.