BEST·UK·DATA ROOMS

UK-based providers · Q3 2026

The data room providers that are actually British.

A surprising number of providers are described as UK companies by comparison sites, and are not. We checked every claim of a UK base against the provider's own site and against Companies House. What follows is what survived that check, along with the corrections.

6
UK based
5
Claim Cyber Essentials
9
Offer UK residency
3
Widely misreported

UK-based virtual data rooms

3

Purpose-built data rooms with a UK headquarters or a UK registered trading entity. Ranked positions are their positions in the overall league table, not against each other.

01
ProjectfusionUK HQUK residencyPrice on application#3 overall

UK-only hosting, Cyber Essentials, and no US ownership or subprocessors.

03
LegaticsUK HQPrice on application#15 overall

London legal-tech whose data room launched in July 2026, inside a full transaction workflow.

UK platforms assessed, but not ranked

3

These are British, they are genuinely used for UK deal and diligence work, and some of them beat the data rooms outright on security and residency. But they are collaboration platforms and sovereign file shares rather than transaction data rooms, and ranking them against Datasite on deal workflow would flatter them on the criteria that matter least to a deal. So they are listed here instead, with their scores intact.

Three the comparison sites get wrong

The sites that rank highest for UK data room searches are largely affiliate networks. During this assessment they produced two providers presented as available that no longer trade, and one described as a British company hosting on UK soil that is neither. We are publishing the corrections because they are a useful test of everything else those sites tell you.

Imprima

Commonly claimed

Routinely described as London headquartered, with UK data hosting.

What the primary sources say

Imprima's own company page gives Amsterdam as its headquarters, with London as one of five offices. Its own security page states that all data, primary and backup, is stored in EU locations on Microsoft Azure. We found no UK hosting claim anywhere on Imprima's site.

Trading. Listed in our table, correctly described.

Read our assessment →

EthosData

Commonly claimed

Still listed by comparison sites as an active UK provider, and its own site footer advertises a UK company registration and VAT number.

What the primary sources say

EthosData was acquired by Ideals, announced on EthosData's own blog in December 2024, and repositioned towards the Indian market. Its UK entity, ETHOSDATA LIMITED, company number 06343947, was dissolved on 19 May 2026. The registration still advertised in its footer belongs to a company that no longer exists.

Not listed. It is no longer a UK provider.

Ruby Datum

Commonly claimed

Still listed as an active provider, with pricing, by several of the sites that rank top for UK data room searches.

What the primary sources say

rubydatum.com returns no content. RUBY DATUM LIMITED, company number 10106562, was dissolved on 4 December 2024, with its registered address care of a restructuring and insolvency firm. RUBY DATUM HOLDINGS LIMITED, 09789202, was dissolved on 26 December 2023.

Not listed. Both UK entities are dissolved and the site is down.

Cyber Essentials is where being British actually pays

Cyber Essentials is the UK government-backed certification scheme developed by the National Cyber Security Centre and delivered through IASME. It covers five technical controls: firewalls, secure configuration, security update management, user access control and malware protection. The basic certification is self-assessment with independent verification. Cyber Essentials Plus adds a hands-on technical audit and vulnerability scanning.

It matters commercially because of Procurement Policy Note 014, which has applied since 24 February 2025 and covers all central government departments, executive agencies, non-departmental public bodies and NHS bodies. Suppliers must demonstrate the technical requirements, evidence is required before contract award, subcontractors are caught through the Model Services Contract, and recertification is annual. Buyers are told not to apply it as a blanket rule, but the higher-risk triggers include ICT systems processing data at OFFICIAL, which is precisely what a government data room is.

Which makes the split in our table striking. Of every provider assessed, only 5 claim Cyber Essentials at all, and most of them are UK-native. The large international platforms that dominate UK deal work do not claim it.

Claim Cyber Essentials (5)

A caution on all of these. The IASME certificate register blocks automated lookup, and the certification fields on G-Cloud are supplier self-declared rather than checked by the Government Digital Service. Every claim above is the provider's own. Ask for the certificate.

Almost nobody in this market is on G-Cloud

G-Cloud 14, framework RM1557.14, runs until 28 October 2026 and lets UK public sector buyers award directly without running a full procurement. It is the single most practical route to selling a data room into UK government.

Searching the Digital Marketplace for the exact phrase virtual data room returns two services, both from Admincontrol. Broadening to data room adds Nine23. Searching secure deal rooms adds Kahootz. That is the entire field.

Datasite, Intralinks, Firmex and Ansarada do not appear under any of those terms. For a UK public sector buyer that is not a minor administrative detail, it is the difference between a direct award and a full procurement exercise, and it is a concrete, checkable advantage for a small number of mostly British suppliers.