Intralinks
A genuine UK data centre, let down by visibly out of date compliance pages.
- Headquarters
- Waltham, Massachusetts, USA
- Founded
- 1997 per their own dated timeline
- Segment
- Large-cap and cross-border M&A, capital markets, private equity fundraising
- Hosting
- Data centres in the United States, the United Kingdom, Germany, Japan and Australia
- Encryption
- Encryption at rest and in transit, with regional key handling
- Free trial
- Not offered
The assessment
Intralinks, owned by SS&C Technologies, is a US virtual data room provider headquartered in Waltham, Massachusetts, with a London office at Citypoint. It is one of the oldest platforms in this market and remains deeply embedded in banking, capital markets and private equity workflows.
It is one of the few large platforms offering genuine UK data residency. Data centres sit in the US, UK, Germany, Japan and Australia, and its Distributed Content Nodes architecture keeps content in-region with encryption, indexing and virus scanning handled locally rather than shipped elsewhere. For a UK buyer with a hard residency requirement that is a serious technical answer.
The problem is what surrounds it. The GDPR page treats the regulation as an EEA matter and never mentions UK GDPR or the Data Protection Act 2018, which is a strange omission for a vendor running a UK data centre. It also still claims certification under the EU-US Privacy Shield, a framework invalidated in 2020. The dedicated certifications page, meanwhile, lists no standards whatsoever.
Technically one of the two strongest answers here on UK data residency, and the in-region processing model is better than most. But the compliance pages are doing it real damage: a live Privacy Shield claim in 2026 and no UK GDPR language at all are exactly the things a buyer's security review will pick up. If you shortlist Intralinks, ask for current certificates with scope statements and a UK-specific data protection position in writing, and expect no price and no trial until you are well into a sales process.
SS&C Technologies.
Level 6, Citypoint, 1 Ropemaker Street, London EC2Y 9AW
Strengths
- Genuine UK data residency with in-region processing, which few providers at this scale offer
- The longest verifiable track record, with a dated company timeline going back to 1997
- ISO 27701 alongside ISO 27001, plus SOC 1, SOC 2 and SOC 3
- 24/7/365 support in more than 140 languages
- SS&C ownership and deep integration into banking and private equity workflows
Limitations
- Compliance pages are visibly out of date, including a live claim of EU-US Privacy Shield certification that has been invalid since 2020
- Their dedicated audits and certifications page names no standards at all
- No UK GDPR or Data Protection Act 2018 language anywhere, despite operating a UK data centre
- No published pricing and no free trial, the highest evaluation friction of any provider here
- UK customers contract with a US entity
- Their own pages disagree on the founding year, giving both 1996 and 1997
Pricing, hosting and certification
Not published. No free trial could be found anywhere on their site.
✗ No price published
Data centres in the United States, the United Kingdom, Germany, Japan and Australia. Distributed Content Nodes keep content in-region, with encryption, indexing and virus scanning handled regionally.
- SOC 1
- SOC 2
- SOC 3
- ISO/IEC 27001
- ISO/IEC 27701
- ENS ALTA RD311 2022
Counted only where named publicly by the provider.
Typical use cases
- Cross-border mergers and acquisitions
- Capital markets
- Private equity fundraising
- Due diligence
- Regulated financial services
Sources consulted
Last reviewed 26 July 2026
What we could not confirm
Published openly, because a gap in the evidence is information too. Anything listed here could not be verified from a primary source, so we have not scored Intralinks as though it were true.
- The UK data centre itself. Intralinks states on its own site that its data centres are located in the US, UK, Germany, Japan and Australia, and we have scored it on that basis. But their dedicated audits and certifications page names no standards or facilities at all, and we could not corroborate the UK location from a second Intralinks source. Ask them to confirm it in writing before you rely on it
- Founding year: their own pages give both 1996 and 1997
- Whether any free trial exists
- Certificate validity dates and scope
- Whether the Privacy Shield claim is superseded elsewhere on their site
- Whether UK hosting carries a price premium