Security
Security for Confidential Deals
An M&A data room holds some of the most sensitive information a company will ever share. DiligensHub controls who sees it and how, and keeps a record of everything they do.
Viewing levels
Six Ways to Share a Folder
| Level | What a buyer can do |
|---|---|
| Hidden | Nothing. The folder doesn't appear. |
| Names only | See file names, not contents. |
| View only | Read in the browser. No download, no copying text. |
| Encrypted | Read in the browser; the file is streamed encrypted. |
| Watermarked PDF | Download a PDF stamped with their name, email and the time. |
| Original | Download the original file. |
Every page viewed in the room is stamped with the viewer's name, email and the time. Per-file lists let you allow or block named people or groups.
DRM, When You Need It
Turn on DRM for a deal and every file is encrypted at rest with its own key. Downloads become protected copies that check access each time they're opened, and can be revoked at any time. No system can stop a photo of a screen. DRM makes every copy traceable and revocable.
Bidder confidentiality
Competing Buyers Never See Each Other
Put each buyer in their own company group. They see your team and their own colleagues, and no one else: not in the user list, the activity feed, Q&A, notifications or AI answers. Before you invite anyone, preview the room exactly as a specific buyer will see it.
Controls
| Control | What it does |
|---|---|
| Single sign-on | Sign in with your company's identity provider: SAML 2.0 or OIDC. |
| Two-step sign-in | Authenticator-app codes, with backup codes. Require it for your organization or for one deal. |
| One account per person | Each person signs in once; access to each deal is granted separately. |
| Separate rooms | Each deal has its own web address and members. A sign-in for one deal can't open another. |
| Access expiry | Set an end date for a person, or for everyone with a given set of permissions. |
| Permission sets | 51 controls, set once and applied to a group of people. |
| Session revocation | End a person's sessions at once when their access changes. |
| Hardened entry | For sensitive deals: require a dedicated room password and two-step sign-in on every entry. |
| Data isolation | Dedicated, isolated data storage for a deal, on request. |
| Encryption | Always encrypted in transit. With DRM on, encrypted at rest with a key per file. |
Our Own Access Is Limited Too
DiligensHub administrators can't add themselves to your deal. Recovering a DRM-encrypted file needs a second administrator's approval. Access then lasts 72 hours and is recorded in your own activity log. You're notified when an administrator acts on your deal.
A Complete Record
Every view, download, upload, change and sign-in is logged with who and when. Entries can't be edited or deleted from the app, and every report exports to CSV.
Security Questions?
Ask for our security documentation, or talk to our security team about your firm's requirements.