What Is a Data Room? Contents, Timing and How Investors Read It

What is a data room? It is a secure online space where a company shows confidential documents to a defined group of outsiders, usually investors or buyers, during a deal. Each person sees only the files assigned to them, and the space records every document they open.

Companies raising growth equity or private debt, fund managers raising from LPs and owners selling a business all run one, and the rooms differ in what they hold and who reads them. This guide covers what goes in, when to open it and how reviewers read it.

What is a data room, and how does it differ from a shared drive?

A data room organizes documents for diligence and lets the company control access and track activity, as the venture firm CRV puts it in its data room guide. A shared folder stores files. The data room vs shared drive gap sits in four controls.

3 columns. Drag the table sideways; the first column stays put.

Physical rooms came first. In M&A, sellers catalogued every document in a secured room and admitted buyer teams to review it on site, and virtual rooms now carry most of that work because they cost less and open from anywhere.

What is a virtual data room today? The default form: the virtual data room (VDR) carries most deals, and the terms data room and deal room mean the same thing in a raise. One data room definition therefore covers a growth equity raise, a fund placement and a sale: a controlled, logged place to show confidential files.

What is a data room for in a raise, and who uses one?

A reviewer in a private placement works from what the company provides. The SEC's investor bulletin on Regulation D private placements says so directly.

“Therefore, investors in private placements are generally on their own in obtaining the information they need to make an informed investment decision.”

SECinvestor bulletin on private placements

The data room is where that information sits in an order the reader can check. A capital raising consultant builds a data room for fundraising next to the deck and the model, because the three have to tell the same story. Four things make the effort pay back.

• Speed. One indexed room answers a request list in a single pass, where emailed attachments make the reviewer ask again for each one.

• Credibility. A complete, current room before anyone asks tells the investor the team has been through diligence before, or takes it as seriously as if it had.

• Signal. The log shows who went to the financials first and who came back to the cap table.

• Control. The company decides who sees the customer contracts, when access ends and which files carry a watermark.

Three groups use one. A company raising growth equity shows investors its numbers and contracts, and a company raising private debt shows lenders and their counsel the same files read against its ability to repay. A fund manager shows LPs a track record, and an owner selling the business shows bidders everything.

What reviewers look for shapes the folders. Gompers, Gornall, Kaplan and Strebulaev surveyed 885 institutional venture capitalists at 681 firms for an NBER working paper, and the abstract reports the result that matters for a room.

“In selecting investments, VCs see the management team as more important than business related characteristics such as product or technology.”

GompersGornall, Kaplan and Strebulaev, NBER Working Paper 22587

For a venture investor the team's record therefore earns a folder of its own from the first draft: bios, prior outcomes and references.

A fund manager's room follows the questions LPs ask. ILPA's due diligence questionnaire exists to standardize the key areas of inquiry that investors put to managers, so the room mirrors those areas: track record, team, process, terms and compliance. The draft limited partner agreement belongs in it for the same reason.

What goes in a data room, and what should stay out?

The data room definition stays the same across all three cases, but what goes in a data room follows from who reads it and what they decide. The table gives three data room examples side by side.

4 columns. Drag the table sideways; the first column stays put.

What is a data room made of in practice? Folders, an index and a set of access rules. For a company raise I'd build five folders, and these data room examples show the job of each.

• Corporate and ownership. The current cap table, incorporation documents, board minutes if the board meets, and the IP assignment agreements signed by engineers and contractors who built the product. CRV notes that missing assignments are among the more common legal gaps in technology diligence, and that investors expect one cap table that nothing else in the room contradicts.

• Financial. The model with assumptions visible and actuals beside the plan, monthly management accounts and the latest annual accounts. Monthly revenue history and churn by segment belong here when the pitch rests on them.

• Commercial. Revenue by customer, the largest contracts and retention or churn data. Every traction claim in the deck needs a file behind it, and one customer reference that contradicts a retention figure can undo confidence late in the process.

• People. Bios of the leadership team and the key hires, with the reporting lines.

• Legal and compliance. Material agreements, open disputes, licences and, for enterprise customers, the security questionnaire.

A fund manager's room runs on other folders: the fund terms and draft documents, the track record with the method behind each figure, the team and the decision process, regulatory status and a sample of LP reporting. A seller's room is the deepest. Its corporate, financial, tax, commercial, legal, HR, IP and IT folders are each tested by the bidders' counsel and accountants, so the owner of every folder matters more there than anywhere.

Anything the team cannot defend on a diligence call stays out: a five-year projection nobody believes, files named "v3 DRAFT", contracts with no bearing on the raise, and documents added to make the room look full. A padded room buries the few files that move a decision.

The first page a reviewer sees is the index, and it doubles as a data room checklist. It numbers the folders to match the request list, shows the date of the last update and marks each line complete, pending or not applicable.

How do investors and buyers read a data room?

Reviewers read in a sequence, and the CRV guide describes it. The deal team makes the first pass, and a sponsoring partner turns the findings into an investment memo for the wider partnership.

That first pass starts with the cap table, the financial model, the articles of incorporation and the IP assignments. Product, customers, team and security follow. Because the memo is built from the room, anything missing weakens the case the sponsor makes on the company's behalf.

Numbers that differ between the deck, the model and the accounts read as a warning about trust. Revenue in the deck has to reconcile to billing and to the accounts, and any remaining difference belongs in the room with an explanation.

The log adds a second layer of information. A single open says little. A return visit to the cap table after the first session, or a long stretch on the financials, is a pattern, and I'd follow up when one forms.

Most rooms treat this log as an afterthought, while the ones that report it per document turn each return visit into a signal and a raise into something close to a feedback loop. Valicon is one data room built around that idea.

When should you set up the data room?

I'd start building about a month before the first investor outreach, because the index and the missing files take longer than the folders do.

What is a data room doing before and during outreach? Staying closed. The table shows the five stages.

3 columns. Drag the table sideways; the first column stays put.

I'd keep the link out of a cold first email. The deck earns the meeting, and the room verifies what the meeting started.

Through all five stages the room stays current: a figure that changes in the model changes in the room the same day.

Which mistakes turn a data room into a leak?

Five mistakes recur, and CRV's guide lists several of them.

1. One link for everyone. Recipients forward it, versions drift and nobody can show who opened what. A unique link per investor keeps the log and lets the company revoke cleanly.

2. No audience tiers. In a sale, a strategic bidder that reads the full customer list holds a competitor's data, so the room is staged by bidder, and a sell-side advisor usually sets that staging. The same logic keeps co-investors away from files meant for the lead.

3. Stale files. Outdated financials force the investor to ask for replacements before judging current cash and performance.

4. Disclosure in pieces. One item surfaces, and a second appears only after the reviewer presses. The pattern reads as a behavioral red flag.

5. Visible gaps. Empty folders and a file named "model final v3 DRAFT" tell the reviewer how ready the company is.

All five can be seen from outside the company, and each costs time even when the business underneath is sound.

What does a data room cost, and which tool should you pick?

Prices and plan limits change often and depend on seats, storage and how many deals run at once, so I'd compare current offers on those three before looking at a headline price. What is a virtual data room worth paying for? Less the feature list than whether a tool covers the checks below.

3 columns. Drag the table sideways; the first column stays put.

Valicon has a free plan, which suits a first raise that wants the activity signal without a contract. For twelve providers scored on the same six checks, see the virtual data room providers compared.

How spectup runs a data room

spectup works for one side of a raise, the company or the fund manager, and that side pays. On a raise the data room is part of the work, and the deck, the model and the room are one set of documents.

1. Build. With the deck and the model, spectup builds the index and folders so the three tell one story.

2. Keep current. The room is updated through the raise, so a reviewer opens current figures.

3. Open after the NDA. An investor gets access only once the NDA is signed, and the room opens to that investor alone.

4. Stay out of the terms. The company or fund and its counsel negotiate the terms; spectup does not.

What to settle before the first reviewer gets access

What is a data room worth before these three things are settled? Little, so before any file opens I'd settle them.

1. An owner for every folder. One named person answers requests on it.

2. A dated index with every gap marked. The reviewer then sees the state of the room at a glance.

3. An access rule per recipient, with an end date. You decide now when each person's access stops.

That short data room checklist catches most of what slows a raise. If you want the room built next to the deck and the model, talk to us before outreach starts.