How we rate virtual data rooms

Every provider on this site goes through the same five checks, with the same weights, tested the same way. This page sets out that model in full, so you can see why a provider sits where it does and judge whether our priorities match yours.

The five checks and their weights

Deal features weighs most because you feel it every day of a transaction. Security follows because a weak room can sink a deal outright. Support weighs least because most providers clear a reasonable bar, so the gaps between them are smaller.

What we look at under each check

Deal features (30%)

• A built-in Q&A module: can questions be routed to the right expert, given priority, and answered without leaving the room?
• Permission controls at folder and document level, by user and by group, including view-only, no-download and no-print settings.
• Automatic index numbering that survives reordering, and bulk upload that keeps your folder structure intact.
• Activity reporting you can actually act on: who opened what, for how long, and which bidders are most engaged.
• Redaction, e-signature and AI-assisted tools such as document categorisation or search, scored by how well they work, not only whether they exist.

Security (25%)

• Independent certifications such as SOC 2 and ISO 27001, and what they actually cover. A certificate that applies only to the hosting provider counts for less than one covering the vendor’s own controls.
• Encryption in transit and at rest.
• Two-factor login and single sign-on options for admins and guests.
• Dynamic watermarking, document rights control and the ability to revoke access to files that have already been downloaded.
• A full audit trail that you can export and hand to a counterparty or regulator.

Ease of setup (20%)

• Time from sign-up to a working room with a folder structure and documents in place. We time this with a standard test pack.
• How many steps it takes to invite an outside user and set their permissions.
• What the guest experience is like: does a buyer need to install anything, and does the room work in a normal browser?

Pricing clarity (15%)

• Whether prices are published at all, or only available after a sales call.
• What the bill is based on: flat monthly fee, per page, per gigabyte, per user or per project.
• Overage charges, minimum terms, auto-renewal and what it costs to keep a room open after the deal slips.
• Whether a free trial is offered, and what it includes.

This check measures predictability, not cheapness. A higher price that is published and fixed can score better than a lower one wrapped in page fees and overage.

Support (10%)

• Response times on chat, email and phone, at different times of day.
• Whether the first answer actually solves the problem or just opens a ticket.
• Availability outside business hours and across time zones.

How the score out of 100 is built

Each check is scored from 0 to 10, to one decimal place, based on the criteria above. We then multiply each check score by its weight, add the five results together, and multiply by 10 to give a score out of 100, rounded to the nearest whole number.

A worked example with made-up numbers:

Ties are listed alphabetically. A one or two point gap is real but small; read the reviews before treating it as decisive.

How use-case shortlists are built

The overall ranking answers “which room is strongest across the board?” Our use-case pages answer a different question: “which room fits this particular deal?”

For each scenario we first write down its must-haves and a realistic budget. A startup fundraising round needs fast setup, simple investor access and a predictable monthly bill. A life sciences licensing deal needs granular permissions, strong document controls and a long audit trail. Mergers and acquisitions lean hard on Q&A and bidder reporting.

We then pick three to five providers that meet those must-haves, ordered by how well they fit, with a short reason for each. So a provider with a lower overall score can sit above a higher-scoring one on a shortlist if it suits the scenario better. A room built for enterprise auctions can be overkill for a seed round.

Where the evidence comes from

• Hands-on testing in trial or demo rooms, using a standard set of test documents and test users.
• Published pricing pages, product documentation and security or trust pages.
• Certification details as published by the provider.
• Direct questions to sales and support teams, logged with the date asked.

If a feature can only be checked on an enterprise contract, we say so in the review and score it on documentation alone.

How often we re-check

• Pricing: checked every quarter, and sooner if a reader or provider tells us something has changed.
• Full re-score: every provider is re-tested against all five checks twice a year.
• Between cycles: major product launches, certification changes or pricing overhauls trigger an early review.

Each page shows its last updated date, and a changed score is replaced everywhere on the site at once.

What we do not do

• No paid placement. Partner commissions never change a check score, the overall score, the order of the ranking or who makes a shortlist. Our affiliate disclosure explains how partner links work.
• No user-review aggregation. We do not pull star ratings or review counts from third-party review sites. Every score is our own editorial judgement, based on our own testing.
• No vendor sign-off. Providers do not see or approve their scores or reviews before publication. We may contact them to check a fact, but the verdict stays ours.

Found an error?

If you think a fact, price or score is wrong, tell us through the contact page. Include the page, what you believe is incorrect and, if you can, a source. We check every report, correct confirmed errors promptly and update the page date. If a correction changes a score, we re-run the full calculation rather than nudging one number.

For how pages are researched and corrected more broadly, see our editorial policy.