Papermark
Published pricing, a free tier, and a room live in minutes.
- Headquarters
- Munich, Germany
- Founded
- 2023
- Segment
- Startups, SME and mid-market M&A, real estate, investor relations
- Hosting
- Hosted in Europe by default, in eu-central-1 in Frankfurt, with a US region in us-east-1 also available
- Encryption
- AES-256 at rest, TLS 1.2+ in transit
- Free trial
- Free tier available
The assessment
Papermark is a document sharing and virtual data room platform founded in 2023 and headquartered in Munich, used by more than 60,000 companies with customers worldwide. It is built around EU hosting and a full compliance stack: SOC 2 Type II and ISO/IEC 27001 certification, AES-256 encryption, GDPR compliance with a signable DPA, and data rooms hosted in Frankfurt by default.
The product covers what a transaction actually needs. Folder and file level permissions, dynamic watermarking, NDA acceptance before access, page-by-page viewer analytics, custom domains and white-label branding, and an AI document chat. The codebase is also public, so the access control model can be inspected directly rather than accepted on the strength of a certification badge, and self-hosting is available as a deployment option.
On data residency it is the most flexible option on this table, though not the most straightforward. Hosting is in Europe by default, in Frankfurt, with a US region available and Enterprise plans able to select from more than 38 global locations, which is a wider choice than anyone else here offers. Beyond the managed options, the codebase is open source and can be self-hosted on the customer's own infrastructure, so residency can be anywhere the customer puts it, including on premise. The qualifier is that both routes sit above the self-serve tiers: managed region selection is an Enterprise feature, and supported self-hosting needs an enterprise licence. A buyer on Pro or the base Data Rooms plan chooses between Europe and the US.
What sets it apart, though, is not a feature. It is that the price is on the website. The Data Rooms plan is €99 per month for three team members and unlimited data rooms, with additional seats at €33, and a user can sign up and put a room live without speaking to anyone. Unlimited rooms at that price is unusual in a market where most vendors charge per room or per project. Five of the providers ranked below it will not disclose a price at all.
If you are running a UK deal in the lower or mid market and do not need a named project manager sitting on the process, start here. The free tier means the evaluation costs nothing, the published price means you can budget before you commit, and a room can be live the same afternoon. If your counterparty or regulator requires UK-resident storage, that is available through Enterprise region selection, so raise it during the sales conversation rather than assuming the self-serve tiers cover it. Sterling billing is the one gap: pricing is set in euros and dollars.
Strengths
- The widest choice of hosting locations here: EU by default, a US region, and Enterprise region selection across more than 38 global locations including the UK
- Self-hosting on the customer's own infrastructure is possible because the codebase is open source, so data residency can be anywhere the customer chooses, including on premise. Very few providers at any price offer that
- SOC 2 Type II and ISO/IEC 27001 certified, with AES-256 encryption and a signable DPA
- Publishes a full price list on its own site, with self-serve signup and no mandatory demo
- Unlimited data rooms on the €99 base tier, where most competitors charge per room or per project
- Free plan with no card required for document sharing, useful for evaluating before committing
- Open source codebase, so the access control model can be inspected rather than taken on trust, with self-hosting available as a deployment option
- Used by more than 60,000 companies, with customers worldwide
- A data room can be created and shared in minutes rather than after an onboarding call
- Support answered directly by the product team rather than a ticket queue
Limitations
- Managed UK-resident hosting requires the Enterprise plan. On the self-serve tiers the choice is Europe or the US, where several UK-native providers host in the UK by default
- Prices are published in euros only, with no sterling option, so UK buyers carry the currency risk
- The free plan covers document sharing rather than data rooms, so a data room evaluation starts at the paid tier
- No Cyber Essentials certification, which some UK public sector and regulated procurement asks for
- Self-hosting is offered for personal use, with advanced features under an enterprise licence, so a supported production self-host is a commercial conversation rather than a download
- Founded in 2023, so a shorter track record than the incumbents on very large sell-sides
- No native mobile app
Pricing, hosting and certification
Published in full on their own site. Four tiers are available: Free at EUR 0 (document sharing, no card required), Pro at EUR 24 per month, Business at EUR 59 per month, and Data Rooms at EUR 99 per month. The Data Rooms plan includes three team members, unlimited data rooms, custom domain, analytics, NDA agreements, dynamic watermarking, granular permissions, groups and 24/7 email support. Additional team members are EUR 33 per month each. Annual billing saves up to 35 percent. Enterprise pricing is on request. Prices are in euros only, with no sterling option.
✓ Published on the provider's own site
Hosted in Europe by default, in eu-central-1 in Frankfurt, with a US region in us-east-1 also available. Enterprise plans select their hosting region from more than 38 global locations, the widest choice on this table and the managed route to UK-resident storage. Beyond that, because the codebase is open source the platform can be self-hosted on the customer's own infrastructure, which places the data wherever the customer puts it, including on premise. Papermark states that self-hosting is intended for personal use and that advanced features require an enterprise licence, so a supported production deployment means talking to them.
- SOC 2 Type II
- ISO/IEC 27001
- GDPR
- CCPA
- HIPAA
Counted only where named publicly by the provider.
Typical use cases
- Fundraising and investor relations
- SME and mid-market M&A
- Due diligence
- Real estate transactions
- Sales and document sharing
Sources consulted
Last reviewed 26 July 2026