Most "best data room" lists rank ten products against each other and never say what they actually checked. This one is organised the other way round: by the deal you are running. A £400,000 pre-seed round, a £20m trade sale and a £600m banked auction are three different purchases, and the honest answer changes at each of them. Below you will find the method we used, an at-a-glance table of ten providers, a recommendation per segment, and a long FAQ that answers the cost and security questions buyers actually type. Where a competitor is the better fit, we name it.
How we compared these providers
We are not a neutral party, and pretending otherwise would be the first thing to distrust. 99 Data Rooms is the author of this guide and one of the ten products in the table. So the method matters more than usual, and here it is in full.
- Published prices beat quoted prices, and we mark which is which. A price you can read before a sales call is a fact. A price you can only get after a discovery meeting is not comparable, so we record it as "not published, quote-based" rather than guessing a figure. Where a vendor publishes a price, we quote the vendor's own currency and figure. Where only third-party blogs carry a number, we leave it out: aggregator estimates for enterprise data rooms are unsourced often enough that repeating them would make this table worse, not better.
- Vendor claims are reproduced from vendor materials, with a fetch date. The four enterprise entries here (Datasite, Intralinks, Drooms, Imprima) were checked against each company's own website on 1 September 2026. The five longer-standing entries (iDeals, Ansarada, Firmex, Digify, DocSend) carry the hedges from our own reviewed comparison pages. When a vendor does not publish something, the cell says so, and says to verify it with the vendor, rather than filling the gap with an assumption.
- Absence is recorded as absence, not as a failing. "No UK region published on its site" means exactly that. It does not mean the vendor cannot host in the UK, and it does not mean a sales conversation would not produce one. Several of these companies keep their detailed security and feature documentation behind a login, which we could not read, so we mark it unread rather than scoring it zero.
- UK residency is a two-part question, not a flag. Where does primary data sit, and where do the backups sit? A provider that answers only the first half has answered half the question, and a UK procurement form usually wants both.
- Our own claims are enforced by automated tests, not by a copywriter. Every 99 Data Rooms price and allowance in this article is pinned by an automated test that compares this page's figures against the same source files the product bills from, and the build fails if they drift apart. A further test scans the whole content tree and blocks any sentence that claims a security certification for 99 Data Rooms itself.
- We did not invent review scores or customer counts. No star ratings, no "trusted by" numbers, no G2 aggregates. Where a vendor publishes its own scale figures we have generally left them out, because self-reported and unaudited numbers are not a comparison, they are marketing on both sides.
One consequence of that method is worth stating up front. The enterprise incumbents look sparse in our table not because they lack features, but because they do not publish the specifics, and we will not fill their cells in on their behalf. If you are running a deal where those vendors are candidates, you will get the detail in a sales call, and you should ask for it in writing.
At a glance: ten providers compared
| Vendor | Published pricing | UK residency position | E-signature | Free tier | Best for |
|---|---|---|---|---|---|
| 99 Data Rooms | Yes, flat GBP: Pro £19/mo, Business £49/mo | Primary data resident in the UK (London), encrypted backups in an EU region | Built in, 5 a month from Pro, unlimited from Business | Yes, 3 rooms and 25 active links, forever, no card | UK raises, mid-market deals and ongoing contract work |
| Datasite | Not published, customised per transaction | No UK region published on its site, verify with Datasite | Separate Electronic Signature by Datasite app | Free account, plus a stated free start of up to 90 days on a new project | Top-of-market banked M&A |
| Intralinks | Not published, quote-based | In-region storage published generically, no UK location named, verify with Intralinks | Not published on its own site, verify with Intralinks | No self-serve free tier published, verify with Intralinks | Institutional capital markets, fundraising and syndication |
| Drooms | Yes, in EUR, but its own pages disagreed on 1 Sep 2026, verify with Drooms | EU or Switzerland only, stated as contractual, no UK region published | None published on its site as of 1 Sep 2026 | Yes, a Starter tier stated as free forever, per its pricing page | European deals wanting published pricing and a mature Q&A workflow |
| Imprima | Not published, sales-led, verify with Imprima | All data stored in EU locations, primary and backup, per its security page | Not published, verify with Imprima | Not published, only a sales-led demo is stated, verify with Imprima | AI-assisted review across legal, real estate and M&A diligence |
| iDeals | Quote-based, check current plan | Check current plan for region options | Check current plan | Trial, check current plan | Large, demanding transactions with a dedicated deal team |
| Ansarada | Quote or deal-based, check current plan | Check current plan for region options | Check current plan | Trial, check current plan | Structured deals that need a full deal-management suite |
| Firmex | Quote or per-room, check current plan | Check current plan for region options | Check current plan | Trial, check current plan | Recurring diligence and multi-party M&A with a dedicated administrator |
| Digify | Per user or tiered, check current plan | Check current plan for region options | Check current plan | Trial or limited plan, check current plan | Controlled document sharing without a full deal room |
| DocSend | Per seat in USD, check current plan | United States | Check current plan | Trial, not a permanent free tier, check current plan | Tracking a pitch deck or sales collateral |
Read "check current plan" and "verify with" literally. They are not a polite way of saying no. They mean the capability was not published in a form we could read on the date we checked, and that the vendor is the right party to answer. Plans, regions and packaging change frequently in this market, which is precisely why we have avoided printing a competitor figure we cannot stand behind.
What to buy, by deal type
This is the part of the guide that does the work. Pick the row that matches the deal in front of you, not the product with the longest feature list.
1. A founder-led raise (pre-seed to Series A)
Our recommendation: 99 Data Rooms, or DocSend if the only job is tracking a deck. At this stage you are sending a pitch deck, a cap table, a couple of contracts and a set of accounts to somewhere between five and fifty investors. You do not have a deal team, you do not have an administrator, and you cannot justify a five-figure engagement. What you actually need is: a link you can revoke, page-by-page evidence of who read what, an NDA gate if the material is genuinely sensitive, and signature at the end of it.
99 Data Rooms is a fair default here because the free tier is not a countdown: 3 rooms and 25 active links, forever, with no card. You can run an entire seed process on it and only pay when you want e-signature or the drafting tools, at £19 a month on Pro. If your only requirement is knowing whether an investor opened the deck and where they stopped, DocSend genuinely popularised that and does it well, and our best DocSend alternatives guide sets out when it is enough and when it is not. The trade-off with DocSend for a UK founder is stated plainly on its own terms: it is US-hosted and priced per seat in dollars.
The enterprise vendors are the wrong purchase at this stage, and it is not close. Datasite, Intralinks, iDeals, Ansarada and Firmex are all sales-led with unpublished pricing, which means a discovery call before you can even budget. If you are working through what a raise actually needs, our best fundraising data room guide and the fundraising data room checklist are the practical next reads.
2. UK mid-market M&A (roughly £5m to £100m)
Our recommendation: 99 Data Rooms or Firmex, depending on whether an administrator is running the process. This is the most contested segment, and the honest split runs along one line: is there a dedicated person whose job is the data room?
If there is not, and the finance director or the corporate lawyer is doing it alongside everything else, then predictability wins. A published flat price you can put in a budget, a room you can open the same day without a procurement cycle, NDA gating with acceptance receipts, per-viewer watermarking and analytics that separate a raw visit from a verified viewer will cover a clean mid-market sale. That is Business at £49 a month with 99 Data Rooms, and it does not change with the number of bidders, because we never charge per seat and viewers never need an account.
If there is a dedicated administrator, and particularly if the process involves many bidders submitting structured questions, Firmex has a long and genuine reputation in exactly this work, and its own positioning targets multi-party transactions run by an administrator. Our Firmex comparison sets the two side by side without pretending the choice is obvious. Ansarada is the alternative here if you want deal-management workflow around the room rather than just the room. Both are quote-based, so factor the negotiation into your timeline. For deals at the smaller end of this band, our best data room for M&A under £30m guide goes further into the trade-offs, and the M&A data room checklist covers what actually goes in.
3. An enterprise banked auction (nine figures and up)
Our recommendation: the incumbents. Datasite, Intralinks, iDeals or Ansarada. Not us. We would rather say this here than have you discover it in week three of a process.
At this scale the room is not the product. The product is deal-scale question and answer management with multi-level approval routing, in-platform redaction across thousands of documents, bidder-group permissioning at a granularity most teams never touch, and a named support desk that answers at three in the morning in the bidder's own language. Datasite positions itself explicitly at the top of the market. Intralinks describes itself as having pioneered the virtual data room and sits inside SS&C, serving banking and capital markets. iDeals and Ansarada are both built for large, structured transactions with dedicated teams. We do not have a deal-scale Q&A module and we do not have in-platform redaction, so on a banked auction the incumbents are simply the correct purchase.
The second difference is where certification sits. Our SOC 2 and ISO assurance is held at the infrastructure layer: 99 Data Rooms runs on audited platforms from Supabase and Cloudflare, and those providers hold the reports. The vendors in this segment publish first-party certifications on their own sites, and if your buyer's security questionnaire requires a certificate in the supplier's own name, weigh that alongside residency, price and the controls you can verify. Our trust page and security page set out what we run on and who audits what, and the Datasite and Intralinks comparisons state each vendor's published certification claims alongside our own position.
4. Ongoing contract and document work (no deal at all)
Our recommendation: 99 Data Rooms, or Digify if you only need controlled sharing. A large share of "data room" searches are not about a transaction. They are an accountancy practice sending client packs, an agency sending statements of work, an HR team sending offer letters, a landlord sending tenancy paperwork. There is no auction, no bidder group and no diligence timetable. There is just a steady stream of sensitive documents that must not end up as an email attachment, and that occasionally need signing.
A transaction-priced data room is a poor fit for this, because you pay for a deal cadence you do not have. This is the case where the whole journey in one place is worth real money: draft from a vetted England and Wales template, gate the link with a verified email and a one-time code, watch page-by-page analytics, sign with a tamper-evident audit certificate, and revoke the link when the engagement ends. Our guides on secure document sharing for accountants and client portal alternatives for UK agencies cover the specifics. Digify is a fair alternative if you want controlled sharing and tracking and nothing else, and our Digify comparison is honest about what each side covers.
What actually separates these products
Once you strip out the marketing, four things genuinely differentiate a virtual data room, and everything else is a variation on them.
Whether the price is published at all
This is the sharpest divide in the market. Of the ten products here, two publish a full price list you can read without speaking to anyone: 99 Data Rooms in GBP and Drooms in EUR. Drooms deserves credit for that, and it is closer to our own philosophy than the US incumbents are. The caveat we have to record is that on 1 September 2026 its own pricing page and its Flex page carried different figures for the same tiers, so treat the published number as a starting point and confirm it. Digify and DocSend publish tiered or per-seat pricing that scales with user count. Datasite, Intralinks, Imprima, iDeals, Ansarada and Firmex are all quote-based or sales-led.
Quote-based is not automatically worse. On a large transaction, a negotiated engagement with a named support team is exactly what you are buying. It is worse when you are small, because the discovery call is a cost before you have learned anything. Our best flat-rate data rooms guide goes further into how the charging models differ in practice.
Where the data actually sits
A UK company name on the invoice tells you nothing about where the files are stored, and this is where published positions diverge most. Drooms states that its contractually agreed data processing takes place exclusively in the EU or Switzerland. Imprima states that all data are stored in EU locations, primary and backup. Intralinks publishes a generic in-region storage and processing commitment but names no UK location on the pages we could read. Datasite publishes no UK region we could find. DocSend is US-hosted. For 99 Data Rooms, primary data is resident in the UK (London), with encrypted backups in an EU region, and we state both halves because a UK procurement form usually asks for both.
None of that makes EU hosting wrong for a UK buyer. Transfers to the EEA and Switzerland are covered by the UK's current adequacy regulations, so this is usually a matter to record in your own assessment rather than a blocker. It becomes a genuine problem only when your own engagement letters or client contracts promise UK-based hosting, because an EU-only processor cannot deliver that promise for you. Our explainer on data residency in the UK unpacks the distinction, and this is general information rather than legal advice.
Whether signature is included or bolted on
Almost every deal ends in a signature, and almost every data room stops just short of it. Datasite provides signature through a separate Electronic Signature by Datasite app rather than inside the diligence flow. Drooms publishes no e-signature on its site. Imprima and Intralinks publish none on their own sites either. iDeals, Ansarada, Firmex, Digify and DocSend all sit at "check current plan" on our reviewed comparison pages. 99 Data Rooms includes e-signature from Pro, five a month, unlimited from Business, with an audit certificate recording signer IP, intent-to-sign consent, timestamps and a SHA-256 fingerprint.
If signature is genuinely the main thing you are buying, a data room may be the wrong category entirely, and our best e-signature software UK guide is the better starting point. Note also that electronic signatures are admissible for most commercial documents in England and Wales, with exceptions including deeds, wills, land transfers and lasting powers of attorney.
Whether there is a way in without a sales call
Two products here offer a permanent free tier rather than a countdown: 99 Data Rooms (3 rooms, 25 active links, forever, no card) and Drooms (a Starter tier its pricing page states as free forever, capped at three projects). Datasite publishes a free account and a stated free start of up to 90 days on a new project, though the exact point at which a paid engagement becomes necessary is not spelled out on its site. Intralinks publishes no self-serve free tier. Imprima publishes only a sales-led demo. The rest sit at "trial, check current plan". Our best free virtual data rooms roundup covers the wider field, including the tools that are free because they are not really data rooms.
Where 99 Data Rooms is the wrong answer
Since we wrote the table, here is the short version of our own weaknesses, in one place, so you do not have to hunt for them.
- Our certification sits at the infrastructure layer. 99 Data Rooms runs on SOC 2 and ISO audited platforms from Supabase and Cloudflare, and those providers hold the reports. If a buyer-side questionnaire requires a certificate in the supplier's own name, the incumbents publish theirs, and our position is set out on the trust page.
- There is no deal-scale question and answer module. No multi-level approval routing, no bidder-group question workflow. Drooms and Datasite both publish a Q&A workflow of this shape, and several other enterprise vendors describe one in their materials (verify the approval mechanics with each vendor). On a banked auction it is not optional.
- There is no in-platform redaction. If your process involves redacting commercially sensitive terms across hundreds of documents before a bidder group sees them, that is a capability we do not have and several vendors here do.
- We are newer than the incumbents. Datasite, Intralinks, Drooms, Imprima and Firmex have been doing this for a long time and have the transaction history to show for it. A shorter track record is a legitimate thing for a buyer to weigh, and the free tier exists precisely so you can weigh it on your own real documents rather than on our description of them.
- Revocation ends access through the link. It cannot recall a copy. One click cuts a link for everyone who had it, effective even mid-view, but anything a person has already downloaded or photographed is out of reach. Every vendor in this table has the same limit, and any that implies otherwise is overstating it.
A practical shortlisting process
- Write down the deal first, not the features. Size, number of counterparties, whether an administrator is running it, and the date it has to be live. That single paragraph eliminates most of this table.
- Ask every shortlisted vendor the residency question in both halves. Where does primary data sit, and where do backups sit? Get it in writing, because it is the answer your own client contracts may depend on.
- Ask precisely who holds each certification, and over what scope. "Our data centres are certified" and "our whole business is certified" are different answers to the same question. Imprima, for instance, publishes a claim about business-wide scope specifically because data-centre-only scope is common.
- Get the quote-based vendors to price your actual deal, not a generic one. Ask what changes the number: pages, users, storage, duration, simultaneous deals. Then ask what happens if the deal runs three months longer than planned, which deals routinely do.
- Run one real document through the whole journey before you commit. Not a sample file. A real one, sent to a real counterparty, gated the way you would gate it. On a free tier this costs nothing and tells you more than any comparison table, this one included.
- Check the exit. How do you get your material out at the end, in what format, and what happens to it after the account closes. Ask this before you sign, not after.
Try it on a real document
If you are a UK team and the segments above put us in your shortlist, the fastest way to test that is on the free tier: 3 rooms, 25 active links, forever, no card; the drafter and e-signature start on Pro. Put one genuine document through the whole journey, from drafting to a gated, tracked link to signature, and judge it on what happens rather than on this page. If it does not fit your deal, the table above tells you honestly who does. Our pricing page carries the full plan detail, and the features page sets out what each tier includes.
Sources
- 99 Data Rooms product facts, prices and security posture: home, features, security, trust, pricing. Every 99 Data Rooms figure quoted here is pinned by an automated test against the source files the product bills from.
- Datasite pricing, positioning and certification claims, from datasite.com pages fetched 1 September 2026: https://www.datasite.com
- Intralinks security, trust and certification claims, from intralinks.com pages fetched 1 September 2026: https://www.intralinks.com
- Drooms pricing, data-protection and security pages, fetched 1 September 2026 (its pricing and Flex pages carried different figures on that date): https://drooms.com
- Imprima security and pricing pages, fetched 1 September 2026 (the pricing page resolved to a contact-sales form): https://www.imprima.com
- iDeals virtual data room, hosting and pricing (verify current plan): https://idealsvdr.com
- Ansarada data room and deal tools (verify current plan): https://www.ansarada.com
- Firmex virtual data room (verify current plan): https://www.firmex.com
- Digify document security and sharing (verify current plan): https://www.digify.com
- DocSend document sharing and analytics (verify current hosting and plan): https://www.docsend.com
- Electronic signature admissibility in England and Wales: Law Commission, Electronic execution of documents (2019), https://lawcom.gov.uk/project/electronic-execution-of-documents/ ; HM Land Registry Practice Guide 82, https://www.gov.uk/government/publications/electronic-signatures-accepted-by-hm-land-registry-pg82
There is no single answer, because the right product changes with deal size. For a founder-led raise or ongoing contract work, a published flat GBP price and a permanent free tier matter most, which is where 99 Data Rooms fits. For UK mid-market M&A, the choice is usually between predictable flat pricing and an established quote-based room such as Firmex. For a banked nine-figure auction, the incumbents lead.
It ranges from nothing to five or six figures a year. Of the ten providers compared here, only two publish a full price list: 99 Data Rooms in GBP (free, then Pro £19/mo, Business £49/mo, Enterprise £99.99/mo, never per seat) and Drooms in EUR. The enterprise vendors are quote-based, so the figure depends on your deal, duration and negotiation.
The cheapest real data room is a permanent free tier, not a trial. 99 Data Rooms gives 3 rooms and 25 active links, forever, with no card, and Drooms publishes a free Starter tier capped at three projects. Below that, tools sold as cheap data rooms are usually file-sharing accounts without gating, per-viewer watermarking or an audit trail, which is a different product.
Both exist, and the distinction matters. A trial expires mid-deal, typically at 14 or 30 days. A free tier does not. 99 Data Rooms offers 3 rooms and 25 active links, forever, no card, with e-signature and AI drafting starting on paid plans. Drooms publishes a Starter tier stated as free forever. Most other vendors in this guide offer a trial rather than a free tier.
For sensitive material, yes, and for one specific reason: a shared drive link tells you that access was granted, not what happened next. A data room adds per-viewer identity, gating before access, page-by-page analytics, per-viewer watermarking and revocation of a live link. If you only need to send a file to a colleague, a drive is fine. If you need evidence of who read what, it is not.
Five things, in this order: where primary data and backups actually sit; whether the price is published or requires a sales call; whether gating and identity verification happen before access, not after; whether page-level analytics distinguish a raw visit from a verified viewer; and whether signature is included or bolted on. Feature lists beyond those five rarely decide the outcome.
Ask precisely who holds each one and over what scope. 99 Data Rooms runs on SOC 2 and ISO audited platforms from Supabase and Cloudflare, and those providers hold the reports. Several vendors here publish first-party claims on their own sites: Datasite states ISO/IEC 27001, 27017, 27018, 27701, 42001 and SOC 2 Type II; Intralinks states ISO 27001, ISO 27701 and SOC 1, 2 and 3; Drooms states ISO 27001:2022 and ISO 27018:2020; Imprima states ISO 27001:2022 across its whole business.
It matters when your own contracts promise it. UK transfers to the EEA and Switzerland are covered by the UK's current adequacy regulations, so EU hosting is usually a position to record rather than a blocker. It becomes decisive when a client engagement letter or procurement answer commits you to UK-based hosting, because an EU-only processor cannot meet that commitment for you. This is general information, not legal advice.
Primary data is resident in the UK (London), with encrypted backups in an EU region. Data is encrypted with AES-256 at rest and TLS 1.2+ in transit, a Data Processing Agreement is available on request, and international transfers are covered by Standard Contractual Clauses and the UK International Data Transfer Addendum. The full detail sits on our security page.
Usually not in the way buyers expect. Datasite provides it through a separate signature app rather than inside the diligence flow. Drooms, Imprima and Intralinks publish none on their own sites. iDeals, Ansarada, Firmex, Digify and DocSend sit at check current plan. 99 Data Rooms includes it from Pro, five a month, unlimited from Business, with an audit certificate on every signature.
Two of the ten publish a full list: 99 Data Rooms in GBP and Drooms in EUR, although on 1 September 2026 Drooms' own pricing and Flex pages showed different figures for the same tiers, so confirm the current number. Digify and DocSend publish tiered or per-seat pricing. Datasite, Intralinks, Imprima, iDeals, Ansarada and Firmex are quote-based or sales-led.
For top-of-market banked M&A, it is a serious contender and positions itself explicitly at that end of the market. Pricing is customised per transaction and not published, and we found no UK hosting region published on its site as of 1 September 2026, so verify both with Datasite. For a founder raise or routine contract work it is more platform, and more procurement, than the job needs.
For institutional capital markets work, fundraising and syndication, it is one of the category's originals and sits inside SS&C. It publishes no pricing, no self-serve free tier and no UK-specific hosting location, describing in-region storage generically instead. Verify residency, contract shape and signature support directly with Intralinks. For a UK team wanting a published price and a same-day start, it is the wrong shape.
European deals where published pricing and a mature question and answer workflow matter. It publishes a price list in EUR, an unexpiring free Starter tier, built-in redaction and Q&A with approval routing. Its stated position is that contractually agreed data processing takes place exclusively in the EU or Switzerland, with no UK region published, so UK-hosting requirements point elsewhere.
AI-assisted document review across legal, real estate and M&A diligence, which is where its own materials position it. Its security page states that all data are stored in EU locations, primary and backup, and it states ISO 27001:2022 across its whole business rather than only its data centres. Pricing is not published and its pricing page resolves to a contact-sales form, so budget via a quote.
All three are capable quote-based enterprise rooms and the split is by process shape. iDeals suits large, demanding transactions with a dedicated team. Ansarada suits structured deals that want deal-management workflow around the room. Firmex suits recurring diligence and multi-party M&A run by a dedicated administrator. Residency options, e-signature and free trials all sit at check current plan, so confirm each with the vendor.
No, and it does not really claim to be. DocSend popularised sending a document and seeing whether it was read, and it does that job well. It is US-hosted and priced per seat in dollars, it offers a trial rather than a permanent free tier, and it stops at tracking rather than covering gating, drafting and signature, steps 99 Data Rooms includes from Pro. For a deck it is a reasonable choice; for a diligence process it is not the whole tool.
Both, at a lighter weight than the enterprise rooms. It handles controlled sharing, tracking, watermarking and room-level sharing well, with per-user or tiered pricing that scales with your user count. Several capabilities depend on your plan, so check the detail. It is a fair fit for ongoing controlled sharing, and a lighter fit than the incumbents for a full multi-party transaction.
With 99 Data Rooms, never. Recipients open a link in a browser with no account and no charge, even behind a passcode, a verified-email code or an NDA gate, and pricing is flat rather than per seat. Per-seat and per-user models elsewhere, including DocSend and Digify, mean your cost moves with your team size, so work out the true figure at the seat count you will actually pay for.
With a self-serve product, the same day: 99 Data Rooms and Drooms both allow a start without a sales call. With the quote-based vendors, the timeline includes discovery, pricing and contracting, which is why lead time belongs in your shortlist criteria alongside features. If a deal has a fixed announcement date, work backwards from it before you pick.