By DiligensHub team · Last updated
Which Deals Use a Virtual Data Room?
A data room is used whenever one party must read another's confidential documents before a decision. Due diligence for a merger or acquisition is the most familiar use.
In each case, one side holds the documents and the other side needs to check them. The room sits between the two. It lets the holder share a great deal of material without losing control of it.
- Selling a company. Several buyers review the same documents, each in its own group. This is sell-side M&A.
- Buying a company. Your team reviews a target's records before you sign. This is buy-side due diligence.
- Raising capital. Investors check the business before they commit funds.
- Debt financing. Lenders review the borrower's accounts, contracts and obligations.
- Real estate. Leases, surveys, title documents and building reports change hands.
- Litigation and regulatory matters. Documents go to counsel or an authority under control.
The documents are usually the most sensitive a company holds. They include accounts, customer contracts, salaries and legal disputes. That is why access, watermarks and logging matter more here than in everyday file sharing.
Who Uses a Virtual Data Room?
Both sides of a deal use the room, in different ways. The seller's side builds and runs it; the buyer's side reads it and asks questions.
| Who | What they do in the room |
|---|---|
| Company owners and management | Upload documents and answer questions about the business. |
| M&A advisors and investment banks | Run the sale: set up the room, invite bidders, and track who is engaged. |
| Private equity firms | Review targets before they buy, and run the sale when they exit. |
| Corporate development teams | Review acquisition targets, often more than one at a time. |
| Law firms | Review contracts, prepare the disclosure schedule and track versions. |
| Accountants and tax advisors | Test the financial records, for example for a quality of earnings report. |
| Investors and lenders | Check the business before they invest or lend. |
Each group needs a different view of the same room. A lawyer needs every contract. A bidder may see summaries first, and full contracts only later. Good permissions make that possible without copying files.
How Does a Data Room Work During a Deal?
The room follows the deal: it is prepared in private, opened to the other side, worked through Q&A, then archived. Access changes at each stage.
- 1.Preparation. The seller's team and advisors build the folders and upload documents. Only the deal team can see the room.
- 2.First review. Bidders sign a non-disclosure agreement and get access to a first set of folders. Each bidder sits in its own group.
- 3.Questions. Bidders send questions through the room's Q&A log. Answers go back to the bidder who asked, or to everyone.
- 4.Later rounds. Fewer bidders stay in. They see more sensitive folders, such as full customer contracts.
- 5.Signing and closing. The buyer's lawyers confirm the final documents. The room's record shows what was disclosed and when.
- 6.Archive. The room closes to outside parties. The seller keeps a copy of the documents and the activity record.
Every stage leaves a trail. That record helps if anyone later asks what a buyer was shown.
What Goes in a Virtual Data Room?
A data room holds the documents a buyer or investor needs to judge the business. They are grouped by subject, in numbered folders.
A typical M&A room has a top-level folder for each area of due diligence:
- Corporate records: formation documents, minutes, ownership and the cap table
- Financial information: audited accounts, management accounts and forecasts
- Tax: returns, assessments and correspondence with tax authorities
- Commercial contracts: customers, suppliers, partners and material contracts
- Employees: contracts, benefit plans and policies
- Intellectual property, IT and data protection
- Real estate, insurance, environmental and regulatory matters
- Litigation: current and past disputes
The full list, area by area, is in our M&A Due Diligence Checklist. It is free to download.
How Is a Data Room Different From File Sharing?
A data room is built for one party to show documents to outsiders under control. File sharing tools are built for a team to work on files together.
Tools like Google Drive, Dropbox and SharePoint can restrict downloads on some plans. Microsoft documents a "Block download" option for view-only links, for example. But these tools set controls file by file or link by link.
A deal needs controls set by party. Each bidder sits in its own group, and no group sees another. Every page a person opens is logged against their name.
Dropbox's help notes that disabling downloads doesn't stop people saving content by other means. That is true of any screen. So a data room also stamps each page with the reader's name.
The full comparison, tool by tool, is in Virtual Data Room vs. Google Drive, Dropbox and SharePoint.
What Features Should a Data Room Have?
Look first for control over who sees what, a record of every view, and one place for questions. Then look at what saves your team work.
| Feature | What it does | Why it matters |
|---|---|---|
| Permissions by folder and party | Sets what each group can see, folder by folder | Each bidder and advisor sees only what is meant for them |
| View-only access | Lets people read a file without downloading it | The most sensitive files stay in the room |
| Dynamic watermarks | Stamps each page with the reader's name and the time | A leaked page shows whose copy it was |
| Access expiry | Ends a person's or a group's access on a set date | Access closes when a phase of the deal ends |
| Q&A | Collects buyers' questions and the answers in one log | Nothing is lost in email, and answers stay consistent |
| Activity reports | Show who opened each file, when and for how long | You can see which parties are engaged |
| Index numbers | Number every folder and file: 1, 1.1, 1.2 | Everyone can cite the same document |
| Search with OCR | Finds words inside documents, including scans | Reviewers can find a clause without opening every file |
| AI document review | Checks each document as it is uploaded | Problems surface before a buyer finds them |
Ask every vendor which of these come with the room, and which cost extra.
How Secure Is a Virtual Data Room?
A data room's security has two layers: how the provider protects the platform, and how you set access. You need both.
The platform. Ask the provider how files are encrypted, in transit and at rest. Ask where data is stored, and which of their staff can reach it. Ask which independent audits they have passed, and ask to read the reports.
Your settings. Most of the control is in your hands. These are the settings to check before anyone is invited:
- Two-step sign-in for every user
- Access set per folder and per party, never room-wide by default
- View-only access for the most sensitive files
- Watermarks that name the reader on every page
- Access that ends on a date
- An activity record you can export for the deal file
Then view the room as each group before you invite it. That check finds setup mistakes before an outsider does.
How Much Does a Virtual Data Room Cost?
The cost depends on the pricing model, the size of the deal and how long the room stays open. Get a written quote that covers the whole deal.
Providers charge in a few common ways. Each one shifts cost in a different direction as the deal grows.
| Pricing model | How it's charged | Watch for |
|---|---|---|
| Per page | A rate for each page uploaded | Cost rises with every document added late in the deal |
| Per gigabyte | A rate for the data stored | Large scans and drawings add up |
| Per user | A rate for each person with access | Large buyer groups raise the bill |
| Flat fee per deal | One price for one room | Limits on time, users or storage |
| Subscription | A monthly or yearly fee, often for several rooms | Minimum terms, and what happens to rooms when you stop |
Ask these questions before you sign:
- Is the price fixed for the deal, or does it grow with pages, storage or users?
- What happens if the deal runs longer than planned?
- Are Q&A, activity reports and AI review included?
- What does it cost to archive the room after closing?
- How do we get every document out at the end?
How Do You Choose a Data Room?
Start from your deal, not a feature list. Then test the rooms on your shortlist with real folders and a real permission setup.
- 1.List the parties who need access, and what each one should see.
- 2.Estimate how many documents you have, and how long the deal could run.
- 3.Shortlist rooms that set permissions by party and log every view.
- 4.Ask each vendor how its price is set for a deal like yours.
- 5.Ask about security: encryption, where data is stored, staff access and audits.
- 6.Ask how AI is used, and whether your documents train any model.
- 7.Set up a test room. Upload a folder, create a group, and view the room as that group.
- 8.Try it as a buyer would: search, open large files, and download.
For the AI questions in step 6, see How AI Is Changing Due Diligence.
How Do You Set Up a Data Room?
Plan the folder index, set permissions by party, upload, check each party's view, then invite. Invite people last.
Most rooms are built from a due diligence checklist, so start there. Turn the checklist into a numbered folder index. How to Structure a Data Room Index has a sample.
Each stage is covered step by step in How to Set Up a Virtual Data Room.
Questions
- What does VDR stand for?
- VDR stands for virtual data room. It is an online space for sharing confidential deal documents under control. People also call it a data room, a deal room or a due diligence room.
- Is a virtual data room the same as cloud storage?
- No. Cloud storage keeps files for a team that works on them together. A data room shows files to outside parties under control. It sets access by party, marks pages with the reader's name, and logs every view.
- Can buyers download documents from a data room?
- Only if you allow it. A data room sets downloads folder by folder and party by party. You can allow original files, allow watermarked PDFs, or allow viewing only.
- Do I need a data room for a small deal?
- Not always. A few documents for one trusted party can go through file sharing. Use a data room when several parties review, when documents are sensitive, or when you need a record.
- What is the difference between a physical and a virtual data room?
- A physical data room is a guarded office holding paper copies. Reviewers must travel to read them. A virtual data room puts the same documents online, so many parties can review at once, under the same controls.
- Who controls what each party sees?
- The room's administrators do. In a sale, they are usually the seller's deal team and its advisors. They set each group's access folder by folder, and only they can change it.