Virtual Data Room Features: The 12 That Matter in 2026 (and 8 Nobody Uses)

Quick answer: The virtual data room features that decide deals are, in the order a deal team meets them: (1) page-by-page analytics, (2) dynamic watermarking, (3) NDA gating with a signed PDF, (4) email authentication with allow-lists, (5) group permissions that isolate each bidder, (6) download prevention with screenshot protection, (7) link expiry with remote revocation, (8) an exportable audit trail with a stated retention window, (9) bulk upload with auto-indexing and OCR search, (10) a structured Q&A workflow, (11) permanent redaction, and (12) a tamper-proof archive at close. Everything else on a 50-row comparison grid is either a checkbox or a feature nobody uses, and I say that as someone who built several of them. On Peony, two of the twelve (analytics and link expiry) are free along with password links and email capture, eight arrive on Business ($30/admin/month) or Data Room ($52), and the last two sit on Deal Team ($64).

I'm Deqian Jia, co-founder of Peony. I run a data room company, which gives me an unusual vantage point on "virtual data room features": I have shipped most of the features on this list, watched 6,800+ customers use or ignore them, and killed a few that landed with silence. So this is not a feature grid with checkmarks. It is the short list that shows up in usage data on real deals: what each feature does, when it earns its keep, what to demand from any vendor, and which Peony tier carries it. Then the honest list of eight that never get touched.

What are virtual data room features, and why do most lists get them wrong?

Virtual data room features are the controls a VDR adds on top of plain file storage: identity gates, per-viewer marking, permission scoping, page-level tracking, tamper-evident logging, and diligence workflow tooling. Cloud storage shares a file. A data room governs a disclosure, so it has to answer three questions storage never asks: who exactly is looking, what can they do with what they see, and can you prove both later.

Most feature lists get this wrong in two ways. They count features instead of weighing them, so a 50-row grid of checkmarks looks more capable than a product that does 12 things well. And they repeat the vendor's marketing name rather than the mechanism: "watermarking" can mean a static CONFIDENTIAL stamp or a per-viewer identity render; "NDA gate" a tick-box or a countersigned PDF; "audit trail" a last-opened timestamp or a per-action record kept for two years. Same name, different feature, different price. The twelve below name the mechanism every time.

The mechanism matters because of who is on the other side of the link. The 2026 Verizon Data Breach Investigations Report found third-party involvement in 48% of breaches, up 60% on the prior dataset, and a human element in 62%. A data room is where you hand your most sensitive documents to outsiders, so the features that matter are the ones that govern outsiders.

Which 12 virtual data room features actually matter?

1. Page-by-page analytics

What it does. Records which pages each named viewer opened, how long they spent on each, whether they came back, and pushes a real-time notification the moment someone enters the room. Not "document opened." Page seven, four minutes, twice.

The deal moment. The week after you open the room. Every reviewer looks busy from the outside; the page pattern tells you who is actually working the file. One founder I work with, anonymised here, used it to stop chasing the investors who bounced after the team slide and to spend her follow-up on the handful who read the financial model past page 12. A pile of opens tells you people clicked; the minutes on page 12 tell you who is deciding.

What to demand. Time per page, not per document. Viewer identity tied to the session, not an anonymous hit counter. Return-visit detection. A drop-off report. Export to CSV. And a stated analytics retention window, which is feature 8 and which most vendors will not volunteer.

On Peony. Page-by-page analytics with viewer identity, location, time per page and real-time visit notifications are on every plan, including Free. Download tracking, the drop-off report and analytics export start on Business ($30 per admin per month billed annually, $44 monthly). Aggregate data room analytics and version comparison start on Data Room ($52).

2. Dynamic watermarking

What it does. Stamps each rendered page with the viewer's email address, IP address and timestamp, generated server-side at view time rather than baked in at upload, with control over text, opacity, position and size so it does not wreck a financial statement.

The deal moment. The moment a page leaves the room in a photograph or a print. Static CONFIDENTIAL stamps are theater; a competitor who receives a photographed page learns nothing about who leaked it. A watermark carrying the viewer's name changes the viewer's behaviour before anything leaks, which is the point. The 2026 IBM Cost of a Data Breach Report puts the global average cost of a breach at USD 4.99 million, a record high and up 12% year on year.

What to demand. Per-viewer, per-session rendering, server-side so a viewer cannot strip it in the browser. Survives print and any permitted download. Tied to an authenticated identity, because a watermark on an anonymous link identifies nobody. Adjustable opacity, so your team does not turn it off.

On Peony. Dynamic watermarks are on Data Room ($52 per admin per month, $75 monthly) and above. Our dynamic watermarking guide covers what a forensic watermark has to contain to be useful after the fact.

3. NDA gating with a signed PDF

What it does. Requires the viewer to accept a non-disclosure agreement before the first document loads. There are two versions, and vendors use the same words for both. A simple gate has the viewer tick a box; acceptance is logged but no signed document exists for either side. An advanced gate has the viewer digitally sign, delivers a countersigned PDF to both parties, and records the signature with timestamp, IP address, identity and document version.

The deal moment. The first outreach on a sell-side process, when a teaser goes to forty buyers; the second-round room, when the model opens to five; the private placement, when the PPM cannot load until the investor has signed.

What to demand. Which of the two versions the quote includes, and whether you can switch the mode per room, because a deck room and a model room need different gates. What the acceptance record contains; without the document version you cannot later prove which NDA text the viewer saw. And whether the room can sign the deal documents themselves, so a term sheet does not leave the platform to be executed.

On Peony. The simple NDA is on Business ($30 per admin per month); the Advanced NDA with signed PDF to both parties, audit trail, countersigning and custom templates is on Data Room ($52), switchable per room. Built-in e-signatures for the deal documents are three a month on Free and unlimited from Business. For fund managers, investor gating chains a signed NDA, a pre-qualification questionnaire and email verification in front of the PPM; Peony logs the evidence and does not itself certify accreditation.

4. Email authentication with allow-lists

What it does. Confirms who is actually at the keyboard. It is a ladder, not one feature: email capture asks for an address; email authentication sends a one-time code and makes the viewer prove they own it; password protection adds a shared secret; allow-lists admit named addresses or whole domains and block-lists refuse them; domain-restricted rooms admit only a counterparty's domain; custom access questions ask role, firm or fund size and log the answers.

The deal moment. The forwarded link. Every deal has one: the associate who forwards the room to a colleague at another firm, the investor who shares the deck with a friend at a rival fund. Email capture records that the second person came; email authentication stops them at the door.

What to demand. Authentication, not capture, on anything sensitive. An allow-list by domain, so onboarding a bidder's whole team is one line. A block-list for the party you have disqualified. Pre-qualification questions that land in the audit trail. And no plug-in, app or account creation on the viewer's side; every step added to a bidder's login is a reviewer who reads less.

On Peony. Password protection, link expiry and email capture are free. Email authentication and allow and block lists by email or domain start on Business ($30 per admin per month). Domain-restricted rooms and custom access questions start on Data Room ($52).

5. Group permissions that isolate each bidder

What it does. Groups viewers by counterparty (bidder, client, LP class) and gives each group its own document set, with view, download or no-access per file and per user, cascading down folder trees. Done properly, one bidder cannot see that another exists.

The deal moment. Round two of a sale, when three bidders share a room with deliberately different access; a law firm's client portal, where client A must never see client B's folder; a fund's LP reporting, where each class sees its own statements.

What to demand. Do not take the permissions matrix on faith. Have the vendor set up two isolated groups in front of you, then sign in as a member of each and try to find the other. Confirm permissions cascade to subfolders and re-apply when files move, that a group can be revoked as a unit, and that domain routing drops a new viewer into the right group on first sign-in.

On Peony. Visitor groups with per-group document access, NDA gating and audit trails, plus granular per-file permissions, are on Data Room ($52 per admin per month), with unlimited groups. The permissions guide for due diligence covers group design for a multi-bidder process.

6. Download prevention with screenshot protection

What it does. Two controls that vendors blur together. Download prevention makes a file view-only: it renders in the secure viewer and there is no download to press. Screenshot protection puts a visible overlay on the page and disables keyboard screenshot shortcuts and capture extensions while a document is open in a modern desktop browser, with nothing to install; Screenshield, the Data Room tier, extends the block to screen-recording tools. Peony's screenshot protection page frames this as the capture chain: four ways a page can be captured, of which three (keyboard screenshots, screen recording, capture extensions) can be blocked and one (a separate phone camera) cannot. The fourth is made traceable by the watermark, not blocked by software, and any vendor claiming otherwise is overselling.

The deal moment. Every document you would not want in a rival's inbox: the customer list, the pricing schedule, the cap table. When we shipped screenshot protection I expected a checkbox; it became one of the first things buyers ask about, because a room that visibly blocks capture tells every viewer the seller is serious.

What to demand. True view-only, not "downloads tracked." A block on screen recording and extensions, not just Print Screen. No plug-in. An admission that the phone camera cannot be stopped, paired with a watermark that makes it pointless. On control after a download: a downloaded file is outside any vendor's control unless it is DRM-wrapped, which trades reviewer friction for control; the cleaner control is to not permit downloads on the sensitive folders and watermark what you do allow.

On Peony. Download prevention and screenshot protection are on Business ($30 per admin per month). Screenshield, which adds the screen-recording block, and per-file view, download or no-access permissions are on Data Room ($52). Peony does not claim to revoke a file already downloaded; it prevents the download, watermarks the page and revokes the link.

7. Link expiry with remote revocation

What it does. Expiry ends a link automatically after a date, a period or a number of views. Revocation ends it now, for one viewer or everyone. Update-in-place replaces the file behind a link without changing the URL, so a corrected model does not leave the stale one in circulation.

The deal moment. A bidder drops out, a counterparty's associate leaves the firm, a deal dies, a term sheet is superseded. Permanent links are permanent exposure, and a team without instant revocation ends up emailing a support desk to close a door that should close in one click. Expiry also does quiet work on timelines: a reviewer who knows the room closes in 14 days reads this week.

What to demand. Expiry by view count as well as by date. Revocation you have timed yourself on a trial, because some platforms take minutes to kill a live session. Every access change in the audit trail. And update-in-place, which retires a whole category of version confusion.

On Peony. Link expiry by date, period or view count is on every plan including Free. Remote access revocation starts on Business ($30 per admin per month). Updating a file after sending without changing the URL is standard; version comparison starts on Data Room ($52).

8. An exportable audit trail with a stated retention window

What it does. Keeps an immutable, per-action record of every view, download, NDA acceptance, permission change, Q&A exchange and AI query, tied to the viewer's email, IP address, device and timestamp, and lets you export it. Analytics is the deal lead's view of that record (who is engaged); the audit trail is general counsel's (what can we prove). Retention is how long it survives.

The deal moment. Rarely during the deal. Usually months later: a buyer alleges a liability was never disclosed and the seller needs to show which bidder opened which contract when; a limited partner disputes a notice; a regulator asks who saw a file. In representation-and-warranty claims, whether a document was fairly disclosed in the room can decide whether a buyer recovers at all.

What to demand. Per-action logging, not per-session. Export. NDA status, Q&A history and AI chat logs in the same record as page views. And the retention window as a number, in writing; it is the question vendors least like, which is why it belongs on your list.

On Peony. The full audit trail sits with leak protection on Data Room ($52 per admin per month): every view triggers a real-time alert and is logged with the viewer's email, IP, device and timestamp. Analytics retention is 30 days on Free, one year on Business, two years on Data Room and unlimited on Deal Team ($64, $89 monthly, minimum 4 admins).

9. Bulk upload with auto-indexing and OCR search

What it does. Takes a whole folder tree in one drag, numbers the index and re-numbers it when files move, reads scanned PDFs with OCR so their contents are searchable, indexes every word for full-text search, and, in the AI version, classifies each file by content rather than filename, detects missing files and scores completeness against a standard M&A checklist.

The deal moment. The week before launch, when a company's documents arrive as inconsistent filenames and 20-year-old scanned leases and the deal team has to make a room a buyer can navigate. And every day after, when a reviewer needs the change-of-control clause and does not know which of 300 contracts holds it.

What to demand. Bring the folder tree you actually have, scanned leases and inconsistent filenames included, rather than the tidy sample set the vendor keeps for demos. Search a scanned page for a phrase you know is on it. Move a folder and watch whether the numbering follows. Confirm classification is by content, not filename. Check the file-size and storage caps and whether either carries an overage.

On Peony. Folders, bulk upload, 2 GB files and 50 GB of storage start on Business ($30 per admin per month). Auto-indexing with built-in OCR and full-text search, AI room generation that classifies by content and flags missing files, and unlimited storage are on Data Room ($52). I am deliberately not quoting a minutes-saved figure; the AI rooms page states its own claim and you should test it on your own tree.

10. A structured Q&A workflow

What it does. Replaces the email thread in which bidder questions get lost, answered twice and answered differently for different bidders. There are three layers, and it pays to know which one a vendor means. AI document Q&A is internal research: ask a question across every document in the room and get an answer that cites the exact file, page and passage. Smart Q&A is external disclosure: a viewer submits a question, the AI drafts a cited answer, and the draft is held until a human on your team reviews, edits and approves it; it never auto-publishes, it flags semantically similar questions, and nothing reaches a counterparty until you approve it. The Advanced Q&A module adds assignment, deadlines, role-based routing and a full audit history.

The deal moment. Round two of a sale, when five bidders generate two hundred questions in a fortnight and a different answer to two bidders on the same question is a disclosure problem. Also the week a reviewer would otherwise paste the CIM into a public chatbot: the 2026 DBIR reports 45% of employees now regularly use AI on corporate devices, up from 15%, with technical documentation being uploaded to unauthorized systems. Permission-aware Q&A inside the room is the answer.

What to demand. Which of the three layers the quote actually covers, and what the module costs if it is not in the base price. Whether members of the same bidder group can see each other's questions, and whether other groups ever can. Whether an AI-drafted answer can reach a counterparty without a human approving it; the only acceptable answer is no. Citations on every AI answer. And when a vendor calls the platform intelligent, ask which specific task the model performs, on which documents, with what human step in between.

On Peony. AI document Q&A with cited answers starts on Business ($30 per admin per month, base usage), with 5x the usage on Data Room and 10x on Deal Team. Smart Q&A, the draft-hold-approve workflow, is on Data Room ($52). The Advanced Q&A module with assignment, deadlines and audit history is on Deal Team ($64); fully walled per-group threads are on Enterprise. Peony also ships an owner-side MCP server (read a room's contents and push artifacts into it from an AI client like Claude), and on Enterprise you can connect your own GPT, Claude or Gemini to the room under zero data retention, permission-scoped and fully audited. Our data room Q&A guide covers running the process itself.

11. Permanent redaction

What it does. Blacks out names, financials, dates and other sensitive content at the file level, permanently, so the text is gone rather than hidden under an overlay a reviewer can lift. In the AI-assisted version, the system scans every page for PII, customer names and financial figures, a human approves the proposed redactions in bulk, and the redacted version can be shared with one stage of the process and the unredacted version with a later one.

The deal moment. A competitor is one of the bidders and must not see customer names or pricing until exclusivity; employee data must be masked for HR diligence; a supplier contract carries a most-favoured-nation clause the seller is not ready to disclose. Manual redaction of a 500-page set is slow and misses instances; an overlay that is not really redaction is worse than none.

What to demand. Permanent removal at the file level, not a visual overlay. Detection with human approval, never detection alone. Stage-gated versions, so the same room serves round one and exclusivity. A record in the audit trail of what was redacted and by whom.

On Peony. Advanced Redaction is on Deal Team ($64 per admin per month, $89 monthly, minimum 4 admins), available on request with setup tailored to your data type. Our redaction guide for due diligence covers what to redact at each stage of a sale.

12. A tamper-proof archive at close

What it does. Freezes the room at a point in time and produces a verifiable, tamper-proof, one-time-passcode-protected archive of its documents and record: the closing binder in one file that both sides can rely on. The same layer usually carries upload notifications, so both sides know the moment a document lands, and governs how the room closes, with expiry that revokes all access at once.

The deal moment. Signing and closing, when the deal documents, the disclosure schedules and the record of what was disclosed must be preserved as they stood on the day; and every audit or post-close claim afterwards. A room that simply expires, taking the record with it, has thrown away the evidence at the moment it became valuable.

What to demand. Settle the close before you open the room: what event ends access and who triggers it, whether the archive is in the price or billed separately, whether it captures the audit log and Q&A history rather than the files alone, and whether producing it is metered by the page. Closing is the line item that most often surprises a finance team.

On Peony. The data room archive download, tamper-proof and OTP-protected, and upload notifications for your team and counterparties are on Deal Team ($64 per admin per month). There is no per-page charge to produce it.

Which VDR features does nobody use?

This is the part vendors leave off the grid. Some of these we built; some we declined to build after watching how rooms get used. Either way: watch what deal teams do, not what they ask for.

1. AI document generators

We built an AI tool that drafts NDAs and financial templates. Nobody used it. Every law firm and finance team already has templates their own counsel reviewed and that survived previous deals; an AI-generated NDA cannot compete with the one your lawyer approved. The lesson: AI should accelerate existing documents (index, search, answer, redact), not replace the professional's own.

2. A separate preview mode

We spent half a week of engineering on a dedicated preview button. Crickets. Viewers open documents directly; nobody wants a preview step in front of the document.

3. Parallel multi-version sharing

One client urgently asked to share several versions of the same document simultaneously. We built it. They never used it. The real need was simpler: replace the file behind an existing link so the recipient always sees the latest version, and keep the history to compare. That is now update-in-place and version comparison in feature 7; the parallel-versions feature is gone.

4. Static watermarks

A CONFIDENTIAL stamp across every page is a feature on many grids and does nothing. It identifies no one, deters no one who has decided to leak, and trains reviewers to ignore watermarks. If the watermark does not carry the viewer's identity, treat the row as empty.

5. Composite engagement scores

A single "heat" number summarising a viewer's engagement sounds like a time-saver. Deal teams distrust it and go straight to the page-level data, because the score hides the one thing they want to know: whether the reviewer read the model or spent nine minutes on the cover. Show the pages; skip the score.

6. In-room chat

Real-time messaging inside the viewer looks collaborative in a demo. Deal teams do not leave email, and the conversations that belong in the room are questions, which belong in the structured Q&A with an audit history rather than a chat window nobody exports.

7. Print permissions set differently from download

Several products let you allow download but block print, or the reverse. In our experience nobody sets them differently, because a downloaded file can be printed and a printed page can be scanned. The decision that matters is binary: does this file leave the viewer at all. Set that, watermark what you allow, move on.

8. Native mobile apps

Reviewers open a link in whatever browser is in front of them. Nobody installs an app for a six-week deal, and a bidder's IT department will not approve one. What deal teams need is a viewer that works in any modern browser with nothing to install, which is a requirement in feature 4, not an app in a store.

Which virtual data room features are free?

Features that cost the vendor nothing per viewer should be free; the ones that cost real engineering per viewer are where paid tiers start. Here is where each feature sits on Peony's plans, per admin per month billed annually. Viewers are never billed.

Monthly billing is $44, $75 and $89 respectively, and Deal Team has a four-admin minimum. Enterprise is custom and carries the infrastructure features: SAML SSO, bring-your-own-key storage, custom data residency, self-hosted deployment, a custom DPA, and connecting your own LLM to the room with every query audited. Full detail is on the pricing page; for what other vendors count and charge, read the virtual data room cost guide.

Which VDR features does each use case need?

M&A sell-side

Group permissions that isolate each bidder (feature 5), a signed NDA gate (3), the structured Q&A workflow (10), permanent redaction for the competitor in the process (11), and the tamper-proof archive at close (12), with watermarks and download prevention on the sensitive folders. Use every security feature available. On Peony that is Deal Team; for a single-buyer sale, Data Room. Our guides to the best data rooms for M&A and the M&A data room go deeper on process design.

Fundraising

Page-by-page analytics (1) to sort real interest from courtesy opens, email capture and authentication (4), link expiry (7) to set a quiet timeline, a custom domain for credibility, and a dynamic watermark (2) on the financial model and cap table, the two files that get forwarded. NDA gating is friction at seed and reasonable at Series A for the model only. On Peony that is Free or Business for a seed round and Data Room for a priced round. The data room for investors guide covers the investor's side of the same room.

Legal

For law firms, litigation and closings: a signed NDA gate with document version in the record (3), visitor groups so client A cannot see client B (5), an exportable audit trail with a long retention window (8), permanent redaction with stage-gated versions (11), and the archive for the closing binder (12). On Peony that is Data Room for a client portal and Deal Team for a closing.

Real estate

For a property sale or portfolio financing: bulk upload with auto-indexing and OCR (9), because the leases are scanned; dynamic watermarks (2) on the rent roll and tenant schedule; email authentication with domain allow-lists (4) for each broker's team; page-by-page analytics (1) to see which buyer read the environmental report; and link expiry with revocation (7) when the bid deadline passes. On Peony that is Data Room.

How do you evaluate virtual data room features before you buy?

Run the room; do not read about it. A vendor's feature page describes the best case; a trial with your own documents describes the product.

The ten-step trial script.

1. Upload your real, messy folder tree and watch whether the index numbers itself and re-numbers when you move a folder.
2. Search a scanned page for a phrase you know is on it. No result means no OCR.
3. Create two visitor groups, log in as each from a second inbox, and look for the other group. It should not exist.
4. Forward a link to that inbox and confirm email authentication stops it.
5. Attempt a screenshot, then a screen recording, on a protected file.
6. Revoke a link while the second inbox has it open and time how long the session survives.
7. Confirm you can see time per page for a named viewer and export it. Ask for the retention window as a number.
8. Submit a question as a viewer and check whether anything reaches the viewer before you approve it.
9. Sign the NDA as a viewer and confirm both sides receive a PDF with the document version in the record.
10. Open the archive download and check it contains the audit log and Q&A, not just the files.

Security claims to verify rather than trust. AES-256 is the Advanced Encryption Standard of NIST FIPS 197, the 256-bit-key member of the AES family; ask whether it is applied at rest, and to what. TLS 1.3 is the transport protocol of RFC 8446, since superseded by RFC 9846, designed to prevent eavesdropping, tampering and message forgery in transit. A SOC 2 report is a CPA attestation against the AICPA's Trust Services Criteria, not a badge; ask for the report with its period, scope, exceptions and auditor, because the AICPA is investigating allegations about a compliance vendor's SOC practices and warned in 2026 about fast-and-easy SOC engagements. Ask for the DPA, the sub-processor list, and where the data is processed.

Peony's own posture, as our security page states it: AES-256 at rest and TLS 1.3 in transit; SOC 2 Type II-ready with the formal audit not yet completed, which we say rather than blur; no ISO 27001 certification today; a public sub-processor list; data processed in the United States with custom data residency on Enterprise; and a standard DPA and security documentation self-serve on Deal Team.

Commercial terms to get in writing. The pricing model and what counts toward it; the overage rate; the year-two price; how the room closes and what the archive costs; whether viewers are billed. A vendor that hides pricing has told you something about the invoice. For the glossary behind all of this, see what is a virtual data room.

Frequently asked questions

What are the most important virtual data room features?

The most important virtual data room features are the ones that govern what happens once an outsider can see a document: page-by-page analytics, dynamic watermarking with the viewer's identity, NDA gating that produces a signed PDF, email authentication with allow-lists, group permissions that wall each bidder off, download prevention with screenshot protection, link expiry with remote revocation, an exportable audit trail with a stated retention window, bulk upload with auto-indexing and OCR search, a structured Q&A workflow, permanent redaction, and a tamper-proof archive at close. On Peony, analytics, password links, link expiry and email capture are free; email authentication, download prevention, screenshot protection and revocation arrive on Business ($30/admin/month); watermarks, signed NDAs, visitor groups, the audit trail, auto-indexing and Smart Q&A on Data Room ($52); redaction, Advanced Q&A and the archive on Deal Team ($64). 6,800+ customers run their rooms on that ladder, and I would rather you buy the tier the deal needs than the longest grid.

What features should a VDR have for M&A due diligence?

For M&A due diligence a VDR should have group permissions that isolate each bidder so no buyer can see that another exists; a signed NDA gate logged with email, IP address, timestamp and document version; dynamic watermarks tied to an authenticated identity; download prevention on the sensitive folders and screenshot protection on the rest; page-by-page analytics so you know which bidder actually read the customer contracts; a structured Q&A workflow with routing, deadlines and an audit history so answers stay consistent across bidders; permanent redaction for customer names and pricing when a competitor is bidding; an exportable audit trail with a retention window that survives a post-close claim; and a tamper-proof archive for the closing binder. Use every one; the 2026 Verizon DBIR puts third-party involvement at 48% of breaches, and diligence is the most sensitive external disclosure a company makes.

Which virtual data room features are free?

On Peony, the free tier includes tracked links with unlimited visitors, page-by-page analytics with viewer identity, time per page and real-time visit notifications, password protection, link expiry, email capture, three e-signatures a month, 50 documents and 500 MB of storage, with analytics retained for 30 days. The features that cost real engineering per viewer are where paid tiers start: email authentication, download prevention, screenshot protection and remote revocation start on Business ($30 per admin per month billed annually, $44 monthly); dynamic watermarking, signed NDAs, custom domain, visitor groups, the audit trail, auto-indexing and Smart Q&A start on Data Room ($52, $75 monthly); redaction, the Advanced Q&A module and the tamper-proof archive start on Deal Team ($64, $89 monthly, minimum 4 admins). Viewers are never billed on any tier.

What is the difference between a VDR and cloud storage features?

Cloud storage shares a file; a virtual data room governs a disclosure. The difference is not encryption but what sits between the viewer and the page: identity gates (email authentication, signed NDA, allow-lists) instead of a link anyone can forward; per-viewer dynamic watermarks instead of a static stamp; view-only rendering with screenshot protection instead of a download button; per-file, per-group permissions instead of folder sharing; page-by-page analytics instead of a last-opened timestamp; an immutable audit trail with a stated retention window instead of an activity feed; and diligence tooling (auto-indexing, structured Q&A, redaction, a closing archive) that storage does not attempt. If your recipients are your own team, storage is fine. If they are bidders, investors, counsel or regulators, you need the governing layer.

What is the difference between download prevention and DRM?

Download prevention means the file never leaves the viewer: it renders view-only in the browser and there is no download to press. DRM means the file is allowed to leave, wrapped in a layer that tries to keep controlling it afterwards, usually via a converted file or a plug-in so the laptop copy can later be blocked from opening. DRM buys control after the download at the cost of reviewer friction, and it is only as strong as the wrapper. The cleaner control is to not permit downloads on the sensitive folders, watermark what you do allow, and revoke the link the moment a party drops out. Peony does not claim to revoke a copy that has already been downloaded; it prevents downloads (Business), sets view, download or no-access per file (Data Room), watermarks every rendered page (Data Room) and kills links remotely (Business).

Does screenshot protection stop phone cameras?

No, and any vendor that claims otherwise is overselling. Screenshot protection can disable keyboard screenshot shortcuts and capture extensions inside the browser, and its stronger tier blocks screen-recording tools too, which closes three of the four capture routes. The fourth, a separate phone pointed at the screen, cannot be blocked by software. What you can do is make it traceable: a dynamic watermark with the viewer's email, IP address and timestamp on every page means a photographed page identifies who was logged in when it was taken. On Peony, screenshot protection is on Business and works in modern desktop browsers with no plug-in; Screenshield, which adds the screen-recording block, and dynamic watermarks are on Data Room. The block handles the casual capture; the watermark handles the deliberate one.

What does analytics retention mean in a data room?

Analytics retention is how long the data room keeps the record of who viewed what, page by page, before it is purged. It matters because the question a log answers most often is asked months after the deal: a buyer alleges a document was never disclosed, a limited partner disputes a notice, a regulator asks who saw a file. If the retention window ended first, the room cannot answer. Ask every vendor for the number in writing. On Peony the window is 30 days on Free, one year on Business, two years on Data Room and unlimited on Deal Team, and the Deal Team archive download freezes the room and its record as a tamper-proof, OTP-protected file.

Do dynamic watermarks and audit trails cost extra?

It varies by vendor, and the trap is that both names get used for less than they imply. A static CONFIDENTIAL stamp is often sold as watermarking; a per-viewer render with the viewer's email, IP and timestamp is the feature that actually deters a leak. A basic access log is often sold as an audit trail; an exportable, per-action record with a stated retention window is the feature that survives a dispute. On Peony, dynamic watermarking and the full audit trail are both included on Data Room ($52 per admin per month) rather than sold as add-ons, and page-by-page analytics is free on every plan. Whichever vendor you evaluate, ask which version of each you are getting and whether the quote includes it.

What is the difference between a simple NDA gate and a signed NDA?

A simple NDA gate asks the viewer to tick a box acknowledging the NDA before the documents load; acceptance is logged but no signed document is produced for either side. A signed NDA has the viewer digitally sign, delivers a countersigned PDF to both parties, and records the signature with timestamp, IP address, identity and document version in an audit trail. The simple gate is enough for a first-look deck; the signed version is what counsel wants before a financial model, a PPM or a second-round room opens. On Peony, the simple NDA is on Business ($30 per admin per month) and the Advanced NDA with signed PDF, countersigning and custom templates is on Data Room ($52); you can switch the mode per data room.

Which VDR features do deal teams actually use, and which do they ignore?

From watching 6,800+ customers on Peony, the features deal teams touch on nearly every room are page-by-page analytics, link expiry and revocation, email authentication, NDA gating, dynamic watermarks, group permissions, auto-indexing, and, on M&A rooms, the Q&A workflow and the archive at close. The features that see almost no use are the eight under the nobody-uses heading: AI document generators, a separate preview mode, parallel multi-version sharing, static watermarks, composite engagement scores, in-room chat, print permissions set differently from download, and native mobile apps. Usage data is a better roadmap than feature requests, and a better buying guide: weigh the features a room actually exercises, not the length of the grid.

How do you test virtual data room features during a trial?

Run the room, do not read about it. In one sitting: upload your real, messy folder tree; search a scanned page for a phrase you know is on it; create two visitor groups and confirm from a second inbox that one cannot see the other; forward a link to that inbox and check that email authentication stops it; attempt a screenshot and a screen recording; revoke a link and time how long the session survives; export time-per-page analytics; submit a question as a viewer; sign an NDA as a viewer and confirm both sides receive a PDF; and open the archive download. Then pin down in writing what the price includes, what an overage costs, what year two costs, and what happens to the room and its record when the deal ends. A vendor that will not let you do those ten things on a trial has told you what the product is.

Why do data room invoices end up higher than the quote?

Because the quote priced the room at the start of the deal and the invoice priced it at the end, when there were more pages, more users, more months and an archive to produce. Per-page pricing bills every upload; per-user pricing bills every bidder's associate; storage caps trigger overage packs; long deals roll into year two at a different rate; and the closing archive is sometimes a separate line. Before you sign, have the vendor write down which unit it bills on and what counts toward it, what an overage costs, what the renewal price is, and what closing the room costs. Flat per-admin pricing with unlimited viewers and no per-page fees removes most of the surprise; on Peony the tiers are $30, $52 and $64 per admin per month billed annually and viewers are never billed. Our cost guide covers what other vendors count.

Related resources

• What Is a Virtual Data Room? The Complete VDR Guide
• Virtual Data Room Cost Guide
• Best Data Rooms for M&A
• Data Room for Investors
• Best AI Data Room for M&A Due Diligence
• Due Diligence Data Room Checklist
• Dynamic Watermarking Explained
• MCP Data Rooms: Which VDRs Let Agents In