Papermark

Papermark is a virtual data room built for M&A and due diligence, founded in 2023 and headquartered in Munich, and used by more than 60,000 companies with customers worldwide. Sell-side and buy-side diligence, real estate transactions and fundraising all run in the same room, at any deal size the parties bring to it. Underneath sits EU hosting and a full compliance stack: rooms in Frankfurt by default, SOC 2 Type II and ISO/IEC 27001 certification, AES-256 encryption, and GDPR compliance with a signable DPA, which is the paperwork a UK buyer needs to hold when deal data sits in the EEA under UK GDPR.

The deal workflow is what separates it from the document sharing bracket. A one-click NDA can be required before any document loads. Folder, file and viewer group permissions stage the release, so a first round sees one set of documents and a shortlisted bidder sees the next. A built-in Q and A module carries buyer and investor questions inside the room rather than in an email thread. Dynamic session-level watermarks stamp the viewer's email address, IP and a timestamp on every page. An append-only audit log records every view and every action, alongside page-by-page viewer analytics, which is the record a diligence process is later asked to produce. Custom domains, white-label branding and an AI document chat sit on top of that. The codebase is also public, so the access control model can be inspected directly rather than accepted on the strength of a certification badge, and self-hosting is available as a deployment option.

On data residency it is the most flexible option on this table, though not the most straightforward. Hosting is in Europe by default, in Frankfurt, with a US region available and Enterprise plans able to select from more than 38 global locations, which is a wider choice than anyone else here offers. Beyond the managed options, the codebase is open source and can be self-hosted on the customer's own infrastructure, so residency can be anywhere the customer puts it, including on premise. The qualifier is that both routes sit above the self-serve tiers: managed region selection is an Enterprise feature, and supported self-hosting needs an enterprise licence. A buyer on Pro or the base Data Rooms plan chooses between Europe and the US.

What sets it apart, though, is not a feature. It is that the price is on the website. The Data Rooms plan is $99 per month for three team members and unlimited data rooms, with additional seats at $33, and a user can sign up and put a room live without speaking to anyone. Unlimited rooms at that price is unusual in a market where most vendors charge per room or per project. Five of the providers ranked below it will not disclose a price at all.