SecureDocs
Flat fee, unlimited users, and the clearest UK transfer mechanism of any US vendor here.
- Headquarters
- Atlanta, Georgia, USA
- Founded
- 2012, in Santa Barbara, California
- Segment
- Small and mid-market M&A due diligence, fundraising and secure document storage
- Hosting
- Amazon Web Services
- Encryption
- 256-bit encryption at rest and in transit, TLS 1.2
- Free trial
- 14 days
The assessment
SecureDocs is a virtual data room founded in 2012 in Santa Barbara and acquired by the legal technology company Onit in January 2022. It is now marketed from Onit's site as part of the Onit contract lifecycle management portfolio, and is headquartered with Onit in Atlanta.
Its commercial model is the simplest here. A flat fee of $250 per month billed annually, or $400 billed quarterly, covering unlimited users and unlimited documents with no per-page or per-user charging, plus a 14 day trial and a room you can launch in around ten minutes. For a small UK deal that is a genuinely low-friction proposition.
What makes it interesting for a UK buyer specifically is buried in the legal documents. SecureDocs publishes a data processing agreement incorporating the 2021 EU standard contractual clauses together with a UK Addendum built on the ICO template, explicitly invoking the Data Protection Act 2018. That is the correct current mechanism for a UK restricted transfer, and no other US provider assessed here has one live. It is a shame it sits alongside a parent company GDPR page still citing Privacy Shield.
Worth a serious look for a small UK transaction on a budget, because the flat fee with unlimited users removes the two things that usually make data room bills unpredictable. Read the paperwork rather than the marketing: their DPA with the UK Addendum is genuinely good and better than most, while the ISO 27001 badge belongs to AWS rather than to them. Ask where the data actually sits before you commit, because they do not say anywhere.
Acquired by Onit on 11 January 2022. The standalone securedocs.com site now redirects wholesale to onit.com.
Through its parent Onit, which lists London as one of four global offices alongside Atlanta, Pune and Auckland. No London street address is published.
Strengths
- The cheapest published flat fee here: $250 per month billed annually with unlimited users and unlimited documents and no metering
- The only US provider assessed with a current, live UK transfer mechanism: 2021 standard contractual clauses plus an ICO-template UK Addendum invoking the Data Protection Act 2018
- A UK presence through its parent Onit, which lists London among four global offices
- Fast self-serve setup with a room launchable in around ten minutes, and a 14 day trial with no sales gate
- SOC 2 Type 2 audited, with a 99.9 percent uptime guarantee
Limitations
- The independent SecureDocs brand is effectively gone: securedocs.com redirects wholesale to onit.com and the product pages have thinned since the acquisition
- ISO 27001 is claimed for the underlying AWS data centres, not for SecureDocs or Onit as an organisation, which is easy to misread
- No hosting regions are named at all, so UK or EU residency cannot be established
- Onit's public GDPR page still leans on the EU-US Privacy Shield, invalidated in 2020, which sits oddly beside their otherwise current DPA
- No London street address is published
Pricing, hosting and certification
Published. $400 per month billed quarterly on the three month plan, or $250 per month billed annually on the twelve month plan. Volume packages are custom. All plans include unlimited users, unlimited documents and 24/7 support as a flat fee, with no per-page or per-user charges. No sterling pricing.
✓ Published on the provider's own site
Amazon Web Services. No hosting regions are named anywhere, so data residency cannot be established from public information.
- SOC 2 Type II
Counted only where named publicly by the provider.
Typical use cases
- Small and mid-market M&A
- Due diligence
- Fundraising
- Secure document storage
What we could not confirm
Published openly, because a gap in the evidence is information too. Anything listed here could not be verified from a primary source, so we have not scored SecureDocs as though it were true.
- UK and EU data residency: no hosting regions are named anywhere
- The London office street address: only the city is published
- Year founded and the original Santa Barbara headquarters come from third-party reporting, not from the current Onit pages
- Whether the 14 day trial requires a card
- Volume package pricing