Built to protect sensitive deal documents.
A dataroom holds a company's most sensitive material and shares it with people outside the company. Every control here limits who can see what.
What is in place
Encryption in transit and at rest
All data is encrypted in transit with TLS 1.2+ and at rest with AES-256. Keys are rotated on a schedule and kept apart from the data they encrypt.
Access scoped per room
Permissions are granted per organization and per room. Teams see only what they are allowed to see, and revoking access is a single action.
Every action recorded
Downloads, uploads, and more are written to the audit log as they happen, against the acting user and their organization.
Authentication
MFA is available to all users. SSO is available to Enterprise customers on request. Passwords are secured with SOC 2-compliant practices.
Identity security
Users see the identities of people in their own organization only. Across organizations, actions show the organization name, not the individual.
Invite security
Every invite has a use limit and an expiration date, both set by the inviting user.
Connect us with your security team
We will answer any questions they have.