Guide · Getting started
What is a data room?
A data room is a secure space for sharing confidential documents with outside parties during an important process: a sale, a fundraise, an audit. This guide explains what a (virtual) data room actually is, how it works, and when you'd use one.
Updated June 2026·7 min read
What is a data room?
A data room is a secure, access-controlled place where confidential documents are shared with people outside your organisation during a defined process. The owner decides exactly who can see which files, tracks every view, and can shut access off the moment the process ends.
Today, a data room is almost always a virtual data room (VDR), a secure website rather than a physical room. You upload your documents, invite each party, and set exactly what each one can see. The name goes back to the locked physical rooms once used in mergers and acquisitions. Same job, now online.
How a data room works
In practice, running a data room comes down to a few simple steps. You build an index, a clear folder structure for your documents, and upload your files. You invite parties and set their permissions, so each one sees only the slice of the room they're entitled to. They review the documents in a protected, often view-only and watermarked, viewer.
As they work, participants raise questions through a structured Q&A workflow, and you route each one to the right expert and track it to closure. Every action is recorded in an audit trail you can review at any time. When the process ends, you revoke access in one click and archive a sealed copy for your records.
What sets a data room apart
These are the capabilities that make a data room different from an ordinary file-sharing tool:
Granular permissions
Decide exactly who can see, download or print each folder and file, down to the individual document and the individual user.
Watermarking & view-only
Dynamic watermarks and view-only rendering deter leaks and make every page traceable back to the person who opened it.
Complete audit trail
Every view, download and search is logged, so you know precisely who looked at what, and when: invaluable in negotiation and compliance.
Structured Q&A
Reviewers ask questions in a managed workflow instead of scattered emails, with answers routed to the right experts and tracked to closure.
Organised index
A clear folder structure built for diligence keeps thousands of files navigable and lets every party find what they need fast.
Instant revocation
When a party drops out or the process closes, you cut off access in one click, something email attachments can never offer.
When data rooms are used
Any process where sensitive documents must be reviewed by outside parties is a candidate for a data room. The most common are:
M&A due diligence
Buyers and their advisers scrutinise financials, contracts and IP before a sale or acquisition closes.
Fundraising
Founders share cap tables, metrics and legal documents with investors reviewing a round in parallel.
Refinancing & debt
Lenders and credit committees review collateral, covenants and financial statements ahead of a facility.
Litigation & audit
Legal teams and auditors access controlled sets of evidence and records with a defensible trail.
Real estate & projects
Title deeds, leases and technical reports are shared with bidders across large property or infrastructure deals.
Board & lifecycle
Companies keep a secure, ongoing room for board materials, corporate records and recurring reporting.
Physical vs. virtual data rooms
Before the internet, a data room was a literal, secured room, typically at a law firm, where bidders reviewed printed documents one party at a time, under supervision. Virtual data rooms replaced that model almost entirely. Here's how they compare:
| Physical data room | Virtual data room | |
|---|---|---|
| Setup time | Weeks: printing, courier, on-site | Hours: upload and invite |
| Access | One party at a time, in person | Many parties at once, anywhere |
| Audit trail | Manual sign-in sheet | Automatic, per-page logging |
| Cost | Travel, premises, staff | Subscription, no logistics |
| Revocation | Collect the binders | Instant, central |
| Reach | Local, scheduled | Global, 24/7 |
What goes inside a data room
The exact contents depend on the deal, but a diligence room usually spans the following categories, each in its own indexed section:
- Corporate records: incorporation, cap table, shareholder agreements, board minutes
- Financials: historical accounts, management reports, forecasts, tax filings
- Commercial contracts: customer, supplier, partnership and lease agreements
- Intellectual property: patents, trademarks, licences and key technology assets
- HR & people: org charts, key employment terms, option plans (suitably anonymised)
- Legal & compliance: litigation, regulatory filings, insurance and permits
Choosing a data room
When comparing providers, weigh security and certifications (look for ISO 27001 or SOC 2), the depth of permission and audit controls, how quickly you can get a room up and running, the quality of the Q&A workflow, and transparent pricing without surprise per-page fees. Not sure whether you even need one yet? Our guide to deciding walks through the signs.
The newest generation goes a step further. An agentic data room uses AI agents to organise and index thousands of files, redact sensitive data, verify the information request list and draft Q&A answers, turning what used to be days of setup into minutes.
Frequently asked questions
What is a data room in simple terms?
A data room is a secure, controlled space for sharing confidential documents with people outside your organisation during an important process such as a sale, fundraise or audit. Today it is almost always a virtual data room: a website where the owner uploads files, decides exactly who can see each one, watches who reads what, and can revoke access at any time.
What is the difference between a data room and a virtual data room?
“Data room” originally meant a physical, secured room where parties reviewed printed documents one at a time. A virtual data room (VDR) is the modern online equivalent: the same controlled access and confidentiality, but available to many parties at once, from anywhere, with automatic audit logging and instant revocation. In practice the terms are now used interchangeably, and almost every deal uses a virtual data room.
What is a data room used for?
Most often it is used for M&A due diligence, fundraising, refinancing, audits and litigation, any process where confidential documents must be reviewed by outside parties under controlled conditions. Companies also keep ongoing rooms for board materials and corporate records.
Is a data room the same as Google Drive or Dropbox?
No. Cloud drives are built for everyday collaboration, not diligence. A purpose-built data room adds per-document permissions, watermarking and view-only protection, a complete audit trail of every view, a structured Q&A workflow, and reliable instant revocation. For a one-off, low-stakes share a drive is fine; for confidential documents reviewed by multiple outside parties, a data room is safer and faster.
How secure is a data room?
A reputable virtual data room offers encryption in transit and at rest, granular access controls, watermarking, multi-factor authentication and detailed audit logs, typically backed by certifications such as ISO 27001 or SOC 2. Security depends on the provider, so it is worth checking their certifications and controls before you commit.
Who sets up and manages the data room?
The party running the process, for example the company being sold or its advisers, owns and administers the room. They build the index, upload documents, set permissions for each invited party, manage the Q&A and monitor activity. A modern agentic data room can automate much of that setup, from organising files to drafting Q&A answers.