What is a data room?
Virtual data rooms for mergers and acquisitions, due diligence audits and much, much more
From physical to virtual data rooms
The concept of the data room originated in the context of due diligence. Due diligence audits are commonplace across all forms of corporate transaction – mergers, acquisitions and/or the transfer of operations, for example – and in the case of real estate transactions. To begin with, the term designated a physical room where the seller would make all relevant documents available as hardcopies for potential buyers, auditors or consultants to inspect. These rooms were subject to strict security arrangements and could be accessed only by authorized individuals.
The advance of globalization and the digitalization of business processes have nevertheless rendered physical data rooms increasingly impracticable and obsolete. Since as far back as the early 2000s, virtual data rooms have therefore gradually been taking over from their bricks-and-mortar predecessors.
The role of virtual data rooms in M&A transactions and due diligence audits
Due diligence audits are standard practice for mergers, acquisitions and capital procurement measures of all kinds. Financial, legal and tax considerations are only some of the aspects assessed during these audits. Especially in the case of M&A transactions or vendor due diligence (VDD) audits, the scope of analysis is usually also widened to include the market environment, the competitive situation and operating processes. Moreover, analysis of a company's environmental, social and governance (ESG) criteria has for some time been another regular feature of M&A due diligence.
In a virtual data room, all the extensive documentation needed for a due diligence audit can be made available safely and in a clearly structured manner – including balance sheets, contracts, license agreements, documentary evidence for the supply chain, information about the customer structure, the sales structure and any other relevant materials.
What is a virtual data room?
A virtual data room (VDR) is a secure Internet-based application to facilitate digital data exchange and online collaboration across corporate boundaries. A VDR allows authorized users to access confidential documents and sensitive data from any location. Virtual data rooms have thus made due diligence audits simpler and faster. But beyond this, other applications too – such as real estate management, construction project planning and client communication – are now enjoying the substantial benefit of having documents available around the clock in a well-structured VDR setting. Ideally, using a digital data room should be intuitive: It should not require prior training and should be well accepted by all users.
How secure is a virtual data room?
In all scenarios, virtual data rooms like netfiles guarantee the best possible protection for secure data exchange. Security measures include the hosting of servers in certified high-security data centers, the use of encryption technologies such as SSL/TLS and AES-256 when transferring and storing data, plus 2-factor authentication and support for passkey authentication when users log in.
Granular access rights enable the data room administrator to closely control which users or user groups can view, edit, download or print out what documents. Particularly sensitive documents can be further protected with watermarks, while confidential passages (including personal data, for example) can be redacted (blacked out). These features are especially important in the context of due diligence audits, where strictly confidential information is made available to a group of potential buyers, auditors, lawyers and management consultants.
Versioning, digital archiving, automated notification whenever changes are made, and powerful search functionality simplify collaboration and project work.
Do virtual data rooms provide secure audit trails?
Yes, virtual data rooms provide secure audit trails. First, end-to-end activity protocols give administrators full control at all times over everything that happens in the data room. For example, it is possible to precisely reconstruct which user uploaded or edited documents, how long the user spent editing them and when this access took place. Second, on completion of a project, providers such as netfiles can, on request, supply the client with an audit-proof archived copy of the data room. The data room itself is then closed and no further changes can be made.
Are virtual data rooms GDPR-compliant?
That depends on the provider. netfiles, for example, fully satisfies all the strict requirements of Germany’s Federal Data Protection Act (BDSG) and the EU’s General Data Protection Regulation (GDPR). Here are just a few of the points covered:
Headquartered in Germany, netfiles also conducts all its development and hosting activities in Germany.
The netfiles servers are located exclusively in certified, highly secure data centers in Germany.
netfiles uses cutting-edge encryption technology and GDPR-compliant physical and data access controls when transferring and/or storing personal data.
netfiles GmbH signs data processing agreements pursuant to Article 28 GDPR with all its customers. These agreements govern netfiles’ processing of personal data.
What are virtual data rooms used for?
Today, virtual data rooms are used in all kinds of contexts where data needs to be securely transferred between locations and across company boundaries. They have also proven to be an efficient platform for online collaboration with customers or business partners, in project teams or when working from home.
Please note: E-mails, FTP servers, SharePoint and storage in the cloud are not suitable alternatives for secure data exchange. None of these methods fully meet the legal requirements for data protection and IT security, nor can they fulfill all relevant compliance guidelines. Moreover, some of these solutions are inconvenient to use and make a great deal of work for IT administrators. By contrast, virtual data rooms do satisfy all current security and compliance requirements.
Here are just some of the more common applications for which virtual data rooms are used:
Due diligence audits for mergers, acquisitions and real estate transactions
Due diligence audits involve the parties to a transaction exchanging large volumes of sensitive data. That happens in mergers and acquisitions, but also in real estate transactions, for all of which virtual data rooms provide a secure and convenient platform. Authorized sellers, potential buyers, auditors, consultants and lawyers can view documents online and always share the same information status, which is guaranteed to be up to date. For potential buyers in particular, it is useful to be able to review all the documentation simultaneously but separately. An integrated Q&A module simplifies communication between all parties and accelerates the due diligence process. If necessary, videoconferences with the different parties can be beamed straight from the data room – with no need to install either software or plug-ins. Additionally, an extensive activity log and assorted reports enable sellers to assess would-be buyers’ level of interest.
Due diligence for capital procurement and corporate finance
Companies that are seeking to procure capital use virtual data rooms to give potential investors access to financial reports, business plans and other crucial documents for the purposes of due diligence audits. Working in a virtual data room makes the process more transparent and financing rounds more efficient, while decisions can be made faster. Virtual data rooms are also used for IPOs and exits, insolvency proceedings, corporate restructuring exercises, reporting to investors and portfolio management.
Virtual project rooms for construction projects
A virtual project room for construction projects enables all parties to access a consistent data set and to centrally manage relevant information. Clearly structured document management provides valuable support for tasks such as planning, management and controlling throughout all phases of construction, while integrated communication tools are instrumental in ensuring that projects are completed on schedule.
Real estate management
In the context of real estate management, virtual data rooms are used primarily for the centralized management and provisioning of documents such as blueprints, purchase agreements, approvals and rental agreements. This allows owners, tenants, administrators and other stakeholders to work together more efficiently and improves transparency throughout the entire project runtime – for both real estate management and during real estate transactions.
Client communication
Lawyers, tax advisors, management consultants and their clients use virtual data rooms for the secure storage and exchange of confidential documents within the framework of legal proceedings, contractual negotiations, tax affairs and consulting projects. Strict security and data protection plus secure audit trails of access to data rooms are especially important to law practices and their clients. Lawyers and consultants also value the permanent availability of reliable evidence that documents have been made available to their clients. Where necessary, they can verify whether documents have already been read or downloaded.
Secure data exchange in the healthcare sector
In healthcare, it is vital to ensure that sensitive patient data can be exchanged securely [BF1] and in compliance with data protection provisions between doctors’ practices, laboratories, hospitals and patients. Image files too can be transferred securely between sites via this central platform. By storing all data at certified data centers in the EU, virtual data rooms such as those provided by netfiles fully comply with legal stipulations such as the US’ Health Insurance Portability and Accountability Act (HIPAA).
Board management and committee work
Effective board management is critical to the success of governing bodies such as management and supervisory boards in the corporate sector, but also for organizations and associations. A virtual data room supports the central planning, conduct and follow-up of board meetings. It provides functions for producing agendas, managing lists of participants and documenting resolutions. To ensure that all participants are properly prepared, all relevant documents and materials can be made available in advance in the virtual data room. The confidentiality of materials shared in this way is guaranteed because neither IT administrators nor the staff of the data room provider can access this data. In addition, optional security settings can prevent documents from being printed or passed on to unauthorized third parties. Even greater security is added by secure audit trails in the form of protocols that seamlessly document everything that happens in the data room.
Effective online collaboration
For people working from home, in distributed project teams, on the execution of calls for tender or in the context of corporate reporting, a virtual project room or data room provides a simple and secure way to exchange files – even across company boundaries and national borders. In netfiles data rooms, office documents can be edited online, and it is even possible to organize videoconferences straight from the data room. An integrated Wiki function also gives working groups freely definable spaces in which to work together on content – the ideal way to pool ideas and put together specifications, documentation or project memos.