# Investment Snapshot ## The deal **First round open from US$1 million.** Framed in the co-build agreement as *12 months to raise at least US$1M, with ambition for US$3–4M.* Valuation anchor carried in from the founders' prior company, **Bizsec, which closed at a US$12.5M post-money.** **Eighteen months of capital does four things:** finish the product · run paying design-partner pilots · build the certification-body channel · keep the books lean. **What it buys:** Phase 2 proof — ten or more paying sites, case studies, raise-ready books. ## The bull case - **A mandate, not a budget line.** MSPO is compulsory and enforcement is tightening; the monthly e-MSPO cadence and the Jan 2026 GHG module manufacture recurring demand. See [[Rimau/MSPO and the Regulatory Clocks]]. - **Ground access almost no software team has** — a family estate as design partner, three signed LOIs, nine recorded field sessions, and a co-founder from the industry. See [[Rimau/Fantasi Generasi - The Anchor Estate]]. - **A clean, defensible position on the impartiality line** — the Vanta analogue, with 23 certification bodies as channel rather than competition. - **Genuine whitespace.** No AI-native MSPO readiness player found. The largest plantation ERP has 700+ clients and no compliance intelligence. - **Pricing that undercuts an existing, resented spend** rather than creating a new one. - **A second-time team** in the same category, with QuickBooks and ex-Wilmar advisors. - **A credible second act** — the [[Rimau/The Flywheel and Rimau Sentient|flywheel]] into plantation AI and traceability, where each turn requires the one before it. ## The diligence flags *Revised after the 18 Aug 2026 Utopia download call.* 1. **Pre-revenue.** LOIs and validation partnerships, not signed paying pilots. ~4 months old as a company; the Sabah discovery trip only just finished. 2. **The price is wrong against the stated comparable.** With one audit a year and group schemes materially cheaper than standalone, RM800–1,500/month is a **multiple of an estate's entire compliance budget** — not a fraction of it. The product only prices sensibly against the combined compliance + ERP spend, which means the pricing model, the sales narrative and the TAM all need rebuilding. → [[Rimau/The Stack Not the Certificate]] 3. **Scope expanded materially.** The team is building the record layer as well as the compliance layer. That is now the right call — the ERP is the larger budget — but "the ERP is easy with AI" is an untested claim resting on one full-time engineer who is still a final-semester student. → [[Rimau/Plantation OS - The ERP Question]] 4. **A smaller certified denominator than the deck implies.** 1,565 certified entities in the target band, not 6,000+. The uncertified population is unquantified, so the true addressable count could be materially larger — but nobody has produced it yet. → [[Rimau/Market Segmentation - Large Medium Small]] 5. **Adoption risk in a low-trust, low-digitisation, often low-literacy buyer base**, much of it beyond cell coverage. Mitigations are sound but unproven. → [[Rimau/Adoption Design - WhatsApp First]] 6. **Incumbent extension risk.** A government rail or Lintramax reaching for this job is the cheapest way to lose — and Rimau has now chosen to meet Lintramax on its own ground. 7. **Concentration and key-person exposure.** The Sabah network is both the edge and the dependency; ground access runs through one co-founder and one family relationship. See [[Key-Person Risk in Deep Tech]]. 8. **A young bench.** Two founders still completing studies; the CTO's first venture. 9. **EUDR timing** has slipped before; treat as upside only. ## What got better - **The regulation is a moat, not a constraint.** ISO/IEC 17065 bars a certifier from certifying what it consulted on — which means the 23 accredited bodies can **never enter Rimau's category** without surrendering accreditation. A structural barrier competitor capital cannot cross. → [[Rimau/The Accreditation Question]] - **The strategy fork closed cleanly.** Readiness, single entity, no certification arm — and a sharper position than either option looked at first: **demand aggregation** over 23 largely interchangeable certifiers, ~196 entities each. - **A bigger revenue line than the one being targeted.** The ERP is several times the compliance spend, and estates already pay both, to systems that do not integrate. → [[Rimau/The Stack Not the Certificate]] - **A second problem sitting on the same data:** the **harvest labour shortage** and unharvested yield — a revenue argument aimed at the customer Rimau already has. → [[Rimau/Labour Shortage and Unharvested Yield]] - **A structural reason the middle tier survives:** the majors cannot safely absorb estates carrying undocumented labour and unclear land title — which also makes a documented estate an attractive acquisition. - **The team answers hard questions with evidence.** Challenged on four numbers, they came back with the register, the source of each figure, and a correction that made their own price look *worse*. That behaviour is itself a diligence signal. ## How to underwrite it A **regulation-timed vertical SaaS bet in a market nobody else wants to physically visit**, priced before proof. The diligence question is conversion velocity: how fast does an LOI become a *paying* design partner, and does that partner renew and describe the audit as easy without being asked? That unprompted sentence is the team's own phase gate — adopt it as the investor's. Three things to resolve before a cheque, in order: 1. **See the repriced model** against the combined stack — and evidence that a buyer perceives two separately-approved budgets as one. 2. **Get the uncertified population** in the 40.46–500 ha band. The certified count is the floor, not the market. 3. **See the adoption surface work** with one real, non-family estate — photos and voice notes in, a filed declaration out. Nearer-term path: an **angel round is being opened**, with existing interest. Frame against [[Investment Thesis Plays]], [[Emerging Market SaaS DD]], [[AI Agent Vertical SaaS DD MOC]] and [[3 Hard Truths of Deep Tech Commercialization]]. ## Related - [[Rimau MOC]] - [[Rimau/Company Overview and Traction]] - [[Rimau/Business Model and Go-To-Market]] - [[Rimau/Competition and the Impartiality Line]] - [[Defensibility Principles MOC]]