3UILD - Technology Due Diligence

1. Financial Summary (last 3 years) Critical

Revenue, MRR/ARR, burn rate, customer count, unit economics

Uploading documents below Pre-revenue, no financial history yet Partial data available (will describe in comments) Not available / confidential at this stage

📄

Click to upload or drag files here

PDF, XLSX, DOCX, CSV up to 50MB each

Comments

2. System Architecture Diagram Critical

End-to-end: AI pipeline, multi-chain deployment, infrastructure, data flows

Uploading documents below No formal diagram exists (can explain in comments) Not available at this stage

📄

Click to upload or drag files here

PDF, PNG, SVG, DOCX, Visio

Comments

3. Organizational Chart Critical

Full headcount, reporting lines, roles

Uploading documents below Team is small enough to describe in comments Not available

📄

Click to upload or drag files here

PDF, XLSX, PNG, DOCX

Comments

4. Security / Compliance Documentation High

Audit reports, security policies, pen test results

Uploading documents below No formal security documentation exists yet Pontem Network has docs, but not 3UILD-specific Not available / confidential

📄

Click to upload or drag files here

PDF, DOCX

Comments

5. Product Roadmap High

Current quarter + next 6 months with priorities

Uploading documents below No formal document, can describe in comments Not available

📄

Click to upload or drag files here

PDF, PPTX, DOCX, PNG

Comments

6. Additional Documents Optional

Tech stack inventory, DR/BCP, formal verification docs, customer data

📄

Click to upload or drag files here

Any format up to 50MB each

Describe what you uploaded

1. What is the full headcount at 3UILD today?

1-5 people 6-15 people 16-30 people 31-50 people

Breakdown (engineering vs. non-engineering, contractors vs. FTEs)

2. How is the leadership structured?

Flat structure, founders handle everything Functional leads report to CEO (eng, product, etc.) Formal C-suite / VP layer in place Matrix / cross-functional teams

Who owns what functional areas?

3. Is there a succession plan if Stas or Dmitry are unavailable for 3+ months?

Yes, formal succession plan documented Informal understanding of who steps in No succession plan exists Team is distributed enough that no single point of failure exists

Comments

4. How many people have left in the last 12 months?

0 departures 1-2 departures 3-5 departures More than 5 departures

Were departures voluntary or involuntary? Any key roles?

5. How many of the original Pontem team carried over to 3UILD?

All / nearly all Most (>75%) Some (25-75%) Few (<25%)

Comments

6. Do you have SOC 2 certification or other compliance frameworks?

SOC 2 Type II certified SOC 2 Type I certified SOC 2 in progress / planning Other framework (ISO 27001, GDPR, etc.)

Which frameworks, if any?

7. What is your current revenue situation?

Pre-revenue ARR under $100K ARR $100K - $500K ARR $500K - $1M

How do you forecast revenue? How accurate have projections been?

8. Are your unit economics tracked?

Yes, CAC / LTV / payback period are tracked Partially tracked (some metrics known) Not yet tracked (too early) Not applicable (pre-revenue / no direct customers)

Share numbers if available

9. What is the nature of the Google, Amazon, Microsoft, and Nvidia partnerships?

Select all that apply

Strategic / co-development partnership Cloud credits / startup program Listed on their marketplace Using their APIs / services as a customer

Describe each partnership

10. Are the VC logos (Pantera, Lightspeed, etc.) 3UILD-specific investors or Pontem?

3UILD-specific investors Pontem Network investors Mix of both Same entity, investors cover both

How much has been raised specifically for 3UILD?

1. What best describes your architecture?

Monolith (single deployable unit) Modular monolith (structured internal modules) Microservices Serverless / edge functions

Walk through the major components and how they interact

2. How does the AI code generation pipeline work?

Proprietary / fine-tuned models Off-the-shelf LLM APIs (OpenAI, Anthropic, etc.) Hybrid (off-the-shelf + fine-tuned layers) RAG-based (retrieval-augmented generation)

Which models? How is the pipeline structured?

3. What is the formal verification coverage via Move VM?

Full coverage on all generated contracts Partial coverage (common vulnerability classes) Limited (basic type checking / compilation only) Planned but not yet implemented

What are the limitations? What classes of bugs can it miss?

4. Can the platform handle 10x your current traffic?

Yes, auto-scales horizontally Can scale, but requires manual intervention Not load-tested yet No, significant rework needed to scale

Comments

5. What is the technical debt situation?

Minimal (<10% of codebase) Moderate (10-25%) Significant (25-50%) Not formally measured

Known areas of debt or planned refactors?

6. What development methodology do you follow?

Scrum (sprints, ceremonies, story points) Kanban (continuous flow, WIP limits) Hybrid / adapted agile Ad-hoc / no formal methodology

Describe the lifecycle from idea to production

7. How automated is deployment?

Select all that apply

Fully automated CI/CD pipeline Automated tests run on every PR One-click rollback capability Mostly manual deployment process

How often do you deploy to production?

8. Do you have a disaster recovery plan?

Yes, documented and tested regularly Documented but not tested Informal / ad-hoc approach No DR plan

RTO/RPO targets? How often tested?

9. Who owns security at 3UILD?

Dedicated security role / team CTO / Engineering lead owns it Shared responsibility across engineering Outsourced to external firm

Formal program, policies, or security certifications?

10. Has external penetration testing been done on the platform?

Yes, within the last 12 months Yes, but more than 12 months ago Internal testing only No pen testing done

Comments

11. Is MFA enforced on production systems?

Select all that apply

MFA enforced for all team members Secrets manager used (Vault, AWS SM, etc.) API keys rotated on a schedule MFA not enforced / using shared credentials

How do you manage secrets and API keys?

12. How does multi-chain deployment across 16+ blockchains work?

Single source compiled to each chain's bytecode Chain-specific adapters / bridges Only a subset of chains are live today Multi-chain support is planned, not fully live

Describe the RiskVM compilation process

1. How many active users does 3UILD have today (not Pontem)?

Pre-launch / private beta only Under 100 active users 100 - 1,000 active users 1,000+ active users

How do you define "active"?

2. Do you have paying customers?

Yes, multiple paying tiers Yes, a few early customers Free users only, paid tier planned Pre-revenue / no paying customers

Revenue breakdown by tier ($99 vs $2K+)?

3. What does user retention look like?

Strong (>50% return for a second project) Moderate (20-50% return rate) Low (<20% return rate) Not measured yet

Describe the typical user journey

4. How do you measure product-market fit?

Select all that apply

NPS surveys Retention / engagement metrics Revenue growth rate Not formally measured yet

Comments

5. What is your Net Revenue Retention (NRR)?

Above 120% 100% - 120% Below 100% (net negative) Not applicable / too early to measure

Gross churn rate?

6. How do you track customer health?

Formal health scoring system NPS / CSAT surveys Usage/engagement metrics only Not formally tracked

Comments

7. How is the product roadmap managed?

Formal roadmap with prioritization framework High-level plan, priorities shift often Founder-driven, no formal document Customer-driven (build what customers ask for)

Top 3 priorities for next 6 months?

8. What is the dApp marketplace status?

Live with revenue from commissions Live but no commission revenue yet In beta / limited availability Planned but not launched

Commission structure on template reuse?

9. Can you substantiate competitive advantages over Cursor, Lovable, and Replit?

Select your primary differentiators

Web3-native (smart contracts, on-chain deployment) Formal verification / security layer Multi-chain deployment (16+ chains) dApp marketplace / reusable templates

How do you compare head-to-head on each claim?

10. What is the subscription renewal rate?

Above 90% 70% - 90% Below 70% Too early to measure (no renewal cycle yet)

Most common reasons for non-renewal?

1. What data do you store about users, contracts, and deployments?

Select all that apply

User profiles and authentication data Generated source code / contracts Deployment logs and on-chain references Usage analytics and telemetry

Describe the data architecture

2. How do you handle training data for AI code generation?

Licensed / purchased training data Open-source data only No custom training (use base LLM capabilities) Proprietary dataset built from user interactions

Any licensing or IP concerns?

3. How do you measure quality and security of generated code?

Select all that apply

Automated test suites run on generated code Static analysis / linting tools Formal verification before deployment Manual review / human-in-the-loop

Quality metrics tracked?

4. What happens when formal verification misses a vulnerability?

Documented incident response process User is responsible post-deployment Insurance / liability coverage in place Not explicitly addressed yet

Comments

5. What is the AI unit testing capability?

AI auto-generates unit tests for each contract AI suggests tests, user reviews and runs them Basic test scaffolding only Planned but not yet implemented

How does it work?

3UILD Technology Due Diligence

Submitter Information

Document Uploads Critical

Leadership & Organization 10

Technology & Engineering 12

Product & Customers 10

AI & Data Platform 5