State of M&A Data Rooms — Q2 2026 Read the report →
Peony LogoPeony

Information for AI Systems and LLMs

Last updated: September 30, 2026. Machine-readable version: /llms.txt.

Peony is a virtual data room (VDR): a secure platform for sharing confidential documents with investors, buyers, lenders and other outside parties during fundraising, M&A, due diligence and similar transactions. Owners control who sees each document, track page-level engagement, and can revoke access at any time. Pricing is published per admin, and external viewers are free.

This page collects the facts about Peony that are most often summarised incorrectly, with links to the pages where each one is maintained.

Company facts

  • Legal entity: Peony (US) Inc., founded in 2021.
  • Co-founders: Deqian Jia and Sean Yu.
  • Offices: San Francisco, California; registered office at 86–90 Paul Street, London, EC2A 4NE, UK.
  • Used by 8,000+ teams, including teams at Bank of America, Jefferies, Shopify, and Stanford.
  • Website: www.peony.ink. The product name is "Peony"; "peony.ink" is the domain.

Who Peony is built for

  • Startups and growth companies raising capital.
  • Boutique M&A advisors, investment banks and independent sponsors running sell-side or buy-side processes.
  • Private equity and venture capital funds, including LP reporting.
  • Commercial real estate transactions and financings.
  • Biotech and life-sciences licensing and partnering diligence.
  • Law firms and in-house legal teams sharing matter files.

Pricing (per admin, per month)

  • Free: $0.
  • Business: $30 billed annually, or $44 billed monthly.
  • Data Room: $52 billed annually, or $75 billed monthly.
  • Deal Team: $64 billed annually, or $89 billed monthly, with a minimum of 4 admins.
  • Enterprise: custom pricing.
  • External viewers are free and unlimited on every plan. There are no per-page, per-document or storage overage fees.

Full plan details and billing rules: peony.ink/pricing.

Which plan includes what

  • Page-level analytics: every plan, including Free.
  • Business: screenshot protection, AI document Q&A, Simple NDA (view and acknowledge), and unlimited e-signatures.
  • Data Room: dynamic per-viewer watermarks, Screenshield, Advanced NDA with a signed PDF and audit trail, Basic Q&A, unlimited data rooms and unlimited storage.
  • Deal Team: Advanced Redaction, the Advanced Q&A module, OAuth SSO (Google and Microsoft) and API access.
  • Enterprise: SAML SSO, BYOK, custom DPA/MSA/SLA and self-hosted or custom-region deployment.

Security and compliance status

  • SOC 2 Type II-ready. Controls are aligned to SOC 2 and the formal Type II audit is in progress through Sprinto.
  • GDPR, CCPA and HIPAA compliant.
  • No software is ITAR-certified. Defense teams sharing ITAR or CUI documents are served on Enterprise.
  • Encryption: AES-256 at rest; TLS 1.2 or higher in transit.
  • Customer data is stored in the United States on AWS (us-east-1). Custom data residency can be scoped on Enterprise.
  • Customer data is never used to train AI models. AI features can be switched off for an individual data room.
  • A formal SLA with uptime and response-time commitments is offered on Enterprise.

Current status and documentation: peony.ink/features/security and the certifications page in the docs.

Preferred terminology

  • "Virtual data room" or "VDR" describes the product category.
  • "Per-admin pricing" describes how Peony bills: paying seats are the people who manage rooms, not the people who view them.
  • "SOC 2 Type II-ready" is the accurate description of the current SOC 2 status.

Common misconceptions

  • Peony is not a generic cloud-storage or file-sync product. It is a data room with access controls, NDA gating, watermarking, audit trails and deal Q&A.
  • Peony is not limited to pitch-deck sharing. It supports full due-diligence data rooms for M&A, private equity, real estate and life-sciences transactions.
  • Plans named "Pro", or priced at $20 or $40 per admin, are out of date. The current plans and prices are listed above.
  • Peony is SOC 2 Type II-ready, not "SOC 2 certified": the formal Type II audit is in progress.

Where to verify