Every provider on DataRooms.uk is judged against one framework, written with UK transactions in mind. If you want to know why one room sits above another, the answer should be traceable to something on this page.
The five criteria and their weights
Each room is scored from 0 to 10 on five criteria. A data protection failure or weak deal tooling hurts a UK transaction far more than a clunky menu, and the weights reflect that.
| Criterion | Weight | The question it answers |
|---|---|---|
| Security & UK GDPR | 30% | Can you put sensitive personal and commercial data in this room and defend that decision? |
| Deal tools | 25% | Does the room carry a live transaction from first look to completion? |
| Ease of use | 20% | How quickly do administrators and outside parties become productive? |
| Value for money | 15% | Is the price clear, predictable and fair for what you receive? |
| Support | 10% | Will someone help, competently and quickly, when a deadline is close? |
What we check under each criterion
Security & UK GDPR (30%)
UK data rooms routinely hold employee records, customer contracts, health information and board papers. Under UK GDPR and the Data Protection Act 2018, the seller and its advisers stay responsible for that data while a third party hosts it, so this criterion carries the most weight.
We look at independent certifications (such as ISO 27001 or a SOC 2 report) and what they actually cover; how files are encrypted while stored and while moving; two-factor sign-in; how finely access can be restricted by user, group, folder and document; dynamic watermarking; download and print controls; the ability to revoke access to files already downloaded; and the depth of the audit trail. We also read what the provider publishes about processing terms, sub-processors and international transfers.
We do not assume where a provider stores data. Hosting locations change and are often negotiable, so reviews tell you what to ask (storage location, the transfer mechanism relied on, such as the UK International Data Transfer Agreement or an adequacy decision, and the list of sub-processors) rather than repeating claims we cannot verify. The ICO’s guidance is our reference for what a careful controller should be asking.
Deal tools (25%)
This covers the features that move a transaction along: questions and answers that can be routed to the right expert and approved before release, bulk upload that keeps folder structure, automatic index numbering, permission templates for different bidder groups, activity reports showing who opened what, redaction where offered, e-signature, and review aids, including AI features where a provider has them.
Ease of use (20%)
We build a room, load a realistic document set, invite test users at different permission levels and work through routine tasks from both sides: as administrator, and as a buyer’s adviser opening the room for the first time. We note setup time, how clear the permission model is, whether the viewer works in an ordinary browser without plug-ins, and how many clicks everyday actions take.
Value for money (15%)
We look at whether pricing is published, how it is structured (per page, per user, per room or flat monthly), what each level includes, and how likely the final bill is to surprise you. Most published prices are in US dollars. We show those with an approximate sterling figure, marked as indicative and possibly excluding VAT. We never invent sterling list prices.
Support (10%)
We assess the channels on offer, cover during UK business hours, onboarding help, documentation quality, and how quickly and accurately our test questions are answered. It has the lowest weight because most teams rarely need it.
How the overall score is calculated
Each criterion score is multiplied by its weight and the results are added together. That weighted average is the overall score out of 10, rounded to one decimal place.
Take a room scoring 9 for Security & UK GDPR, 8 for Deal tools, 9 for Ease of use, 7 for Value for money and 8 for Support: (9 × 0.30) + (8 × 0.25) + (9 × 0.20) + (7 × 0.15) + (8 × 0.10) = 8.35, which displays as 8.4.
Rankings run from the highest overall score to the lowest. Where two rooms share a score after rounding, they appear in alphabetical order rather than with an invented tie-break. Criterion scores appear on each review, so you can re-weight them yourself.
How sector shortlists are built
The sector guides do not just copy the top of the overall ranking.
For each sector we start from what that context demands. A life sciences deal may lean heavily on document controls and long-running access. A commercial property disposal needs a room that copes with large plans and surveys and many parties. An SEIS or EIS round needs quick setup and a simple investor experience. We then choose three to five rooms that meet those demands well and explain why each is there. Overall score is one input; fit for the task decides.
How often we re-check
- Full re-review: every provider is assessed again on all five criteria at least twice a year.
- Pricing and plans: published prices and plan names are checked each quarter.
- Triggered updates: we act sooner when a provider announces a material change, a reader reports something, or we notice a change ourselves.
Each page carries its last-updated date, and when a score moves, the review text changes with it so the two always agree.
What we never do
- Sell positions, scores or featured placements.
- Let a provider review, approve or edit our assessment before publication.
- Adjust a score because of a commercial relationship. Affiliate commission is explained in our advertising disclosure and has no part in scoring.
- Borrow ratings from third-party review platforms in place of our own assessment. Our scores are editorial judgements and labelled as such.
- Claim a feature, certification or hosting location we have not been able to confirm.
How to report an error
If you think a score, fact or price is wrong, tell us through our contact page, with the page concerned, the problem and a source if you have one. Every report is checked; confirmed mistakes are fixed quickly, the page date is updated, and significant corrections are noted on the page. Providers use the same route and get the same treatment. See also our editorial policy.