What is a virtual data room?

The definition

A virtual data room (VDR) is a secure online repository used to store and share confidential business documents during transactions. The term "virtual" is historical: physical data rooms were locked rooms in law firm offices where buyers and lenders could review documents under supervision. Virtual data rooms moved that function online in the late 1990s and have evolved into purpose built software platforms with M&A specific workflows.

The capabilities to check in any VDR, with what LockRoom documents for each:

• Secure document storage. Encryption at rest and in transit. LockRoom uses 256 bit AES at rest and TLS in transit (how secure LockRoom is).
• Access controls. Permissions per buyer, folder, and file, so different bidders see different subsets of the room. LockRoom sets four levels (View Watermarked, Download Watermarked, View Original, Download Original) per buyer group, folder, and file.
• Audit logs. Who viewed and downloaded which document, when, and from which IP address, exportable at close. LockRoom exports to PDF.
• Watermarking. Documents stamped with the viewer's identity, which discourages leaks and shows whose copy a document was.
• NDA and Q&A workflow. Some vendors offer an in room NDA click through and a Q&A module. LockRoom does not list either today, so ask each vendor if your process needs them.

What VDRs are used for

The most common use case is M&A due diligence. A seller hosts the diligence documents in a VDR, buyers sign an NDA to access, and the buyer's diligence team reviews documents before signing a definitive agreement.

Other common use cases:

• Fundraising. Founders share financial models, cap tables, customer data, and product documentation with prospective investors.
• Real estate transactions. Sellers share property documentation, leases, surveys, environmental reports, and financials with buyers and lenders.
• IPO preparation. Companies share documentation with underwriters, counsel, accountants, and regulators during the registration process.
• Litigation. Counsel shares privileged documents with opposing counsel under controlled access for discovery.
• Audits and compliance. Companies share documentation with auditors and regulators with full audit trail of what was shared and viewed.
• Strategic partnerships and joint ventures. Parties share confidential business information during partnership negotiations.

How VDRs differ from cloud storage

Cloud storage tools (Google Drive, Dropbox, OneDrive, Box) are built for everyday file sharing, and they have real controls. Google Drive, for example, lets you share with specific people, set permissions per file and folder, and lets owners turn off download, print, and copy for viewers and commenters.

What a data room adds is a structure built around buyers. Using LockRoom as the example:

• A room staged by buyer. Each bidder is a buyer group with its own permissions, groups are invisible to each other, and moving a buyer to round 2 is a permission change (how buyers are invited).
• Viewer watermarks. Documents show as watermarked previews by default, and the watermark identifies the viewer (how watermarks work).
• Per buyer activity reporting. The audit log shows which documents each buyer viewed and downloaded, with timestamps and IP addresses, plus a daily digest email (how to track buyer activity).
• An audit trail at close. Every view, download, and permission change, exportable to PDF, with closed rooms archived and the audit record kept for 7 years (how to export the audit log).

For internal team collaboration, cloud storage is the right tool. For sharing confidential documents with competing buyers, check each item above against the tool you plan to use.

For more on this distinction, see Data Room vs Shared Folder: When to Use Each.

Pricing models in 2026

VDR pricing models vary widely. The main approaches:

• Quote only. Datasite, Intralinks, Firmex and iDeals do not publish a price on their own sites (checked September 2026).
• Usage based. Some quotes bill by pages, megabytes, users, or months. Ask what counts as a page, whether replaced versions count again, and what an extra month costs.
• Tiered subscription. Plans step up by data volume, users, or rooms. Ansarada publishes plans priced by data volume in its pricing guide.
• Flat rate. LockRoom is $6,000 a year for unlimited rooms and users, or $375 a month for one room, with no storage overage fees on standard usage.

For the full pricing breakdown, see Virtual Data Room Pricing 2026. For the boutique IB specific comparison, see Best VDR for Boutique Investment Banks 2026.

What to look for in a VDR in 2026

The criteria that matter:

• Security baseline. AES 256 encryption at rest, TLS in transit, and security documentation the vendor will share. For broker dealer use, confirm you can export the full audit log and documents at close into your firm's archive.
• Audit log detail and export. Every view, download, and permission change, exportable at close. The audit log is the record you hand to your client and counsel.
• Pricing transparency. Published pricing or clear quote process. No per page billing surprise on a single deal.
• Setup time. Measure time to a live room during the trial. If setup requires an onboarding call, count that time too.
• Q&A. If your process needs a built in Q&A workflow, confirm the vendor has one. LockRoom does not list one today.
• White labeling. Included, not a paid add on. Boutique IBs need to run rooms under their own brand.
• Free trial. Full access trial of at least 7 days. If you can't try the platform without a sales call, that itself is information.

Where to read next

For the full setup walkthrough, see Setting Up a Virtual Data Room for Due Diligence. For the standard sell side data room folder structure, see Sell Side Data Room Folder Structure. For a method to compare vendors on the same footing, see How to Compare Virtual Data Rooms.