Dullet - Technology Due Diligence

1. Financial Summary (last 12 months) Critical

Revenue, MRR, burn rate, transaction volume

Uploading documents below Pre-revenue or early stage, limited history Partial data available (will describe in comments) Not available / confidential at this stage

📄

Click to upload or drag files here

PDF, XLSX, DOCX, CSV up to 50MB each

Comments

2. System Architecture Diagram Critical

DuPay gateway, Dullet Wallet, multi-chain infrastructure, data flows

Uploading documents below No formal diagram exists (can explain in comments) Not available at this stage

📄

Click to upload or drag files here

PDF, PNG, SVG, DOCX, Visio

Comments

3. Licensing Documents Critical

El Salvador DASP, Dubai Prepaid Management Card, other regulatory approvals

Uploading documents below In progress, no licenses issued yet Some licenses, others pending Not available

📄

Click to upload or drag files here

PDF, DOCX

Comments

4. Team Bios (C-suite and technical leads) Critical

Founder, CTO, technical leads with background and experience

Uploading documents below Can provide verbally or via email Not available in formal format

📄

Click to upload or drag files here

PDF, DOCX

Comments

5. Security Audit / Penetration Test Report High

Most recent external security assessment or pen test results

Uploading documents below No external audit conducted yet Internal audit only, no external assessment Not available / confidential

📄

Click to upload or drag files here

PDF, DOCX

Comments

6. Smart Contract Audit (DUL Token) High

Token contract audit on Base L2 or other blockchain

Uploading documents below Audit in progress Audit planned but not started No audit conducted or planned

📄

Click to upload or drag files here

PDF, DOCX, JSON

Comments

7. AML/KYC Policy Documentation High

Compliance policies for high-risk verticals (crypto, payments, prepaid cards)

Uploading documents below Policies under development Basic KYC only, no full AML program Not available / not yet implemented

📄

Click to upload or drag files here

PDF, DOCX

Comments

8. DR/BCP Documentation Medium

Disaster recovery and business continuity plans, failover procedures

Uploading documents below Informal procedures, no formal documentation Not available

📄

Click to upload or drag files here

PDF, DOCX

Comments

9. Total employee headcount at Dullet today

Breakdown (engineering vs. non-engineering, FTEs vs. contractors)

10. Engineering team size

Breakdown (backend, frontend, blockchain, QA, DevOps)

11. Key person dependency

1 founder does everything (extreme risk) 2-3 key people (founder, CTO, product lead) Distributed leadership (5+ people with critical functions) Documented succession plans for all critical roles

Details on knowledge concentration

12. Voluntary attrition in last 12 months

Were departures of critical staff?

13. Hiring plan for next 12 months

No planned hires 1-5 hires 6-15 hires 16+ hires

Hiring roadmap by function

14. Remote vs. on-site work arrangement

Fully remote Hybrid Fully on-site Multiple offices

Geographic distribution

15. Primary tech stack

Select all that apply

Comments

16. Cloud provider

Infrastructure details

17. Deployment frequency

Comments

18. CI/CD automation

Fully automated (incl. production) Semi-automated (manual prod deploys) Manual deployments No formal process

Comments

19. Test coverage

Comments

20. Technical debt estimate

Comments

21. Wallet private key security model

HSM / hardware security modules Multi-signature wallets MPC (multi-party computation) Software-based encryption Other

Comments

22. Blockchain networks supported

Select all that apply

Comments

23. Smart contract audits completed

Yes, external audit (last 12 months) Yes, external audit (>12 months ago) Internal audit only No audits conducted Not applicable

Comments

24. Formal security program

Yes, dedicated security team Yes, shared responsibility model Informal/ad-hoc security practices No formal program

Comments

25. SOC 2 or other compliance certification status

SOC 2 Type II certified SOC 2 Type I certified SOC 2 in progress / planning Other framework (ISO 27001, etc.) No certification

Comments

26. Last penetration test or security assessment

Comments

27. MFA adoption across internal systems

Comments

28. Incident response plan

Documented and tested Documented but untested Informal process No plan

Comments

29. Disaster recovery / BCP testing frequency

Tested in last 6 months Tested in last 12 months Documented but never tested No DR/BCP plan

Comments

30. AML/KYC compliance maturity

Automated screening + manual review Manual review process Basic KYC verification only Under development Not applicable

Comments

31. Hot wallet exposure limit

Comments

32. DuPay gateway status

Live with active merchants Live but limited use / pilots Beta / pilot phase In development

Comments

33. Dullet Wallet status

Live on iOS and Android Live on one platform Beta / testing phase In development

Comments

34. Prepaid Card status

Live and issuing cards Pilot with limited users In development Not started

Comments

35. Active merchant count (DuPay gateway)

Comments

36. Monthly active wallet users

Comments

37. Monthly transaction volume (USD equivalent)

Comments

38. Net Revenue Retention (NRR)

Comments

39. Primary customer segments

Select all that apply

Comments

40. Competitive win rate vs. alternatives

Comments

41. DUL token status

Deployed on mainnet Deployed on testnet Smart contract ready (not deployed) In development Concept only

Comments

Dullet Technology Due Diligence

Submitter Information

Document Uploads Critical

Leadership & Organization 6

Technology & Engineering 9

Security & Compliance 8

Product & Customers 10