# Investment Snapshot ## The deal **First round open from US$1 million.** Framed in the co-build agreement as *12 months to raise at least US$1M, with ambition for US$3–4M.* Valuation anchor carried in from the founders' prior company, **Bizsec, which closed at a US$12.5M post-money.** **Eighteen months of capital does four things:** finish the product · run paying design-partner pilots · build the certification-body channel · keep the books lean. **What it buys:** Phase 2 proof — ten or more paying sites, case studies, raise-ready books. ## The bull case - **A mandate, not a budget line.** MSPO is compulsory and enforcement is tightening; the monthly e-MSPO cadence and the Jan 2026 GHG module manufacture recurring demand. See [[Rimau/MSPO and the Regulatory Clocks]]. - **Ground access almost no software team has** — a family estate as design partner, three signed LOIs, nine recorded field sessions, and a co-founder from the industry. See [[Rimau/Fantasi Generasi - The Anchor Estate]]. - **A clean, defensible position on the impartiality line** — the Vanta analogue, with 23 certification bodies as channel rather than competition. - **Genuine whitespace.** No AI-native MSPO readiness player found. The largest plantation ERP has 700+ clients and no compliance intelligence. - **Pricing that undercuts an existing, resented spend** rather than creating a new one. - **A second-time team** in the same category, with QuickBooks and ex-Wilmar advisors. - **A credible second act** — the [[Rimau/The Flywheel and Rimau Sentient|flywheel]] into plantation AI and traceability, where each turn requires the one before it. ## The diligence flags 1. **Pre-revenue.** LOIs and validation partnerships, not signed paying pilots. Incorporated June 2026 — the company is weeks old. 2. **Market size is unverified.** The 6,000–7,000 estate count was quoted in conversation; the deck separately cites 8,000+ certified entities. The RM36M TAM derives from the unverified number. **Confirm against MPOB and MPOCC data before underwriting.** 3. **Small absolute TAM at the wedge.** RM36M/yr is roughly US$8M — the investment case depends on believing turns two through four, not on the compliance market alone. 4. **Adoption risk in a low-trust, low-digitisation buyer base.** The mitigation (contractual data sovereignty, warm intros, private-by-default) is sound but unproven. 5. **Incumbent extension risk.** A government rail or Lintramax reaching for this job is the cheapest way to lose. 6. **Concentration.** The Sabah network is both the edge and the dependency. 7. **EUDR timing** has slipped before; treat it as upside only. 8. **Key-person exposure** on ground access. See [[Key-Person Risk in Deep Tech]]. ## How to underwrite it A **regulation-timed vertical SaaS bet in a market nobody else wants to physically visit**, priced before proof. The diligence question is conversion velocity: how fast does an LOI become a *paying* design partner, and does that partner renew and describe the audit as easy without being asked? That unprompted sentence is the team's own phase gate — adopt it as the investor's. Frame against [[Investment Thesis Plays]], [[Emerging Market SaaS DD]], [[AI Agent Vertical SaaS DD MOC]] and [[3 Hard Truths of Deep Tech Commercialization]]. ## Related - [[Rimau MOC]] - [[Rimau/Company Overview and Traction]] - [[Rimau/Business Model and Go-To-Market]] - [[Rimau/Competition and the Impartiality Line]] - [[Defensibility Principles MOC]]