Virtual Data Room
Definition
A virtual data room, usually shortened to VDR, is a product category rather than a folder with a password on it. Purpose-built rooms offer per-document permissions, per-user watermarking, granular audit trails recording which page each viewer opened and for how long, revocation of access after the fact, a question-and-answer workflow between the two sides, and index numbering that matches the disclosure schedule in the legal documents. They are used in mergers, acquisitions, fundraising, litigation and property deals, and priced accordingly, often per page or per user per month. The name comes from the physical version: a locked room in a solicitor's office with the files in it and a sign-in sheet on the door.
Why It Matters
The audit trail is the product. In a contested deal, whether a particular disclosure was made and whether the buyer's team opened it is a question with money attached, and a real data room answers it with a record. Watermarking each page with the viewer's own name changes behaviour, because documents carrying somebody's name are less likely to be forwarded. Revocation matters as much: when a bidder drops out, their access closes and the files stop opening, which no emailed attachment can be made to do. If any of that is part of your process, a static page is not a substitute for it.
How It Works
A purpose-built room sits behind named user accounts, applies permissions per document and per user, renders files through its own viewer instead of serving the original, stamps each rendered page, and writes every view to an audit log. The informal end of the same job looks quite different. A password-protected page with a lead capture form in front of it gives you one shared password, a note of who typed their details in, view and download counts, and the ability to take the whole thing down. That covers an early-stage raise where the pack is a deck, a cap table summary and some monthly accounts, or a small diligence request from a single counterparty. It does not give you per-user watermarking, per-document permissions, revocation for one viewer while the others continue, or a log that will stand up in a dispute — and you should not imply to a counterparty that it does.
Real-World Example
A founder raising a seed round publishes a diligence pack at company-dataroom.99helpers.site: the deck, a summary cap table, twelve months of management accounts and two customer contracts with the commercial terms redacted, all behind one password with a short form in front. Four investors ask for access, and the download figures show which of them actually opened the accounts. When the round closes, the page comes down. For a Series B with three bidders and a disclosure schedule, the same founder will pay for a proper data room, and should.
Common Mistakes
- ✕Calling a password-protected folder a data room in front of a buyer's lawyer — the word sets expectations of audit trails and revocation, and you will be asked for both
- ✕Sharing one password with everyone and then needing to remove one party — changing it locks out all of them, and you have no record of who used the old one
- ✕Uploading documents redacted only visually — a black rectangle drawn over text in a PDF can often be removed, and the text underneath is still selectable
Related Terms
Investor Update
An investor update is the short, regular note a founder sends to existing investors: how the numbers moved, what happened, what went wrong, and what help is needed. Monthly or quarterly, usually one page.
Password-Protected Link
A hosted address that asks for a shared secret before it will show the file or site behind it. One password covers everyone who has the link; there are no individual accounts.
Access Control
The rules deciding who may reach a file or page and what they may do once they are there. It combines proving identity with checking permission, and the two are separate jobs.
Audit Log
A record of who did what inside an account — logins, uploads, deletions, permission changes, tokens created. It answers questions about the people with keys, not about the visitors.
Lead Capture Form
A short form shown in front of a hosted file or site: the visitor gives a name and an email, the content opens, and the answer lands in the owner's dashboard.
Put a file online in seconds
Drop in a document, an image, a page or a whole static website and share the link — free, with no build step and no server to set up.
Host a file free →