
5 open-source and free data room software tools in August 2026
5 open-source and free data room software options in August 2026: Papermark, Box, Dropbox, Notion, Google Drive. Compare features, pricing, and self-hosting.
UK dealmakers shortlist a different set of data room providers than American ones, because UK GDPR, ICO expectations, and counsel's hosting preferences narrow the field before price does. This guide compares 10 data room providers UK teams actually use in 2026, from free options to enterprise VDRs.
| # | Provider | Starting price | Hosting | Best for |
|---|---|---|---|---|
| 1 | Papermark | From €99/month (free plan, 7-day trial) | EU Frankfurt available, self-hosting option | UK startups, advisers, and mid-market M&A |
| 2 | Imprima | Custom quote (introductory package reported from €250/month) | EU-based servers | European cross-border processes |
| 3 | Sterling Technology | Custom quote | UK and EU regions offered | Service-led rooms with project management |
| 4 | Ruby Datum | Custom quote (managed service or master licence) | UK data centres (ISO 27001) | UK M&A, legal, and insolvency teams |
| 5 | Admincontrol | From £250/month prep portal, £685/month VDR | European data centres | UK buyers wanting published GBP pricing |
| 6 | EthosData | Custom quote (tiered plans, free trial) | UK-based provider | Advisory and finance teams wanting hands-on support |
| 7 | Firmex | Custom quote (entry subscriptions reported at $625 to $995/month) | Multiple regions | Advisory firms running several rooms a year |
| 8 | Datasite | Custom quote (~$0.40 to $0.85 per page) | Multiple regions | Large-cap sell-side M&A run by a bank |
| 9 | Intralinks | Custom quote (~$10,000 to $200,000+/year) | Multiple regions | Regulated and syndicated transactions |
| 10 | Nextcloud | Free (self-hosted) | Wherever you run it | Technical teams with no budget and a server |
No credit card required.
How this list was built. Prices come from each vendor's own published pricing where one exists, and from industry reporting clearly labelled as such where it does not. Competitors are described neutrally and factually, with at least one honest limitation each. Ratings are quoted with review counts where available.
This matters enough to say before the list rather than after it. Almost no data room provider publishes a price in pounds sterling. Of the ten providers here, one publishes a monthly price in pounds (Admincontrol), one in euros (Papermark), one is free (Nextcloud), and the remaining seven are quote-only, though several have publicly reported dollar figures.
That produces a specific trap for UK buyers. Third-party comparison sites routinely convert a dollar or euro list price into pounds, present it as the provider's UK price, and leave a reader budgeting a number the vendor has never quoted. Exchange rates move, vendors bill in their own currency, and VAT treatment differs by contract. A converted figure is an estimate, not a price.
The practical approach is to ask three questions on the first call: which currency will the invoice be denominated in, whether VAT is added, and whether the price is fixed for the contract term or reprices at renewal. For quote-only vendors, ask for the number in writing in the currency you will actually pay. For published-price vendors like Papermark at €99/month or Admincontrol from £250/month, you at least know the number and the currency before you speak to anyone.
Four things shape a UK shortlist that a generic global comparison will not surface.
Where the data physically sits. UK counsel on a deal involving employee records or customer data frequently specifies UK or EEA hosting as a condition, and the only correct answer from a vendor is a named region rather than a general assurance about global infrastructure. Ask which region your room will run in, and ask whether it can be pinned there. Papermark offers EU hosting in Frankfurt and a self-hosted deployment for teams that want the data on their own infrastructure entirely.
UK GDPR and the Data Protection Act 2018. The obligations attaching to a diligence set containing personal data do not disappear because the platform is certified. You need a data processing agreement with the vendor, a current sub-processor list, and a configuration that reflects data minimisation and purpose limitation. A personal data breach is reportable to the Information Commissioner's Office within 72 hours of awareness, and the artefact that lets you answer the ICO's questions is a per-visitor audit log, not a certificate. Our data room compliance guide sets out the full framework map.
FCA-regulated participants. If a party to the transaction is an FCA-authorised firm, recordkeeping expectations attach to the deal correspondence and disclosure record. In practice that means the room must be able to produce an immutable, indexed export at completion rather than being left open as a live folder.
Whether the buy side has a house preference. On large-cap UK processes run by a bank, buy-side counsel occasionally specifies a room, and there is little value in arguing. Below roughly £75M in enterprise value that expectation largely disappears and the seller chooses, which is where the pricing differences in this list start to matter commercially.
Free is a real category in 2026, but it splits into three quite different things and only one of them is a data room.
The first is a genuine free plan on a purpose-built platform. Papermark runs one: it covers document sharing with page analytics and email capture, which is enough to send a pitch deck or a small document set with tracking, but full data room features sit on the paid tiers. That is the honest boundary, and it is where a free plan should stop.
The second is a free trial, which is not free software. Admincontrol offers a 14-day trial, EthosData offers a no-payment trial that converts to a paid term, and Papermark offers a 7-day Data Rooms trial with no credit card. Trials are genuinely useful for testing on your own documents before committing, and a vendor that will not let you do that is telling you something.
The third is self-hosted open source, where the software costs nothing and the infrastructure and engineering time cost something. Nextcloud is the general-purpose example. Papermark's codebase is open source under AGPL and can be self-hosted for full data sovereignty, which is the option UK teams with a strict hosting requirement and a technical function most often reach for.
What is not a free data room is a consumer cloud folder. Google Drive and OneDrive are excellent storage and poor deal rooms: no dynamic watermarking, no per-page analytics, no NDA gate on the link, and permissions designed for collaboration rather than for nine bidders who must not see each other. For a £2M business sale that may be an acceptable trade. For anything with employee records in it, it is not.
Based on each vendor's own website in 2026. Quote-only means no rate card is published in any currency; reported figures quoted in this guide come from industry sources, not from vendor pricing pages.
Calder Engineering is a hypothetical Yorkshire precision manufacturer with £18M of revenue and 140 employees, being sold through a regional corporate finance boutique. The diligence set runs to about 480 documents once the accountants have finished: five years of statutory and management accounts, 90 customer and supplier contracts, employment files for all 140 staff, environmental permits, machinery leases, and a freehold title pack.
The adviser expects six indicative offers narrowing to two for confirmatory diligence, over a process running roughly five months from information memorandum to completion. Counsel has one hard requirement: the employment files stay in the EEA and are not downloadable by any bidder.
The adviser prices three options. An enterprise VDR quoted per page would price the 480 documents at somewhere near 9,000 pages, which at reported rates around $0.60 a page is more than $5,000 in upload charges alone before any subscription. A quote-only mid-market VDR requires a discovery call and returns a number the adviser cannot benchmark against anything. A published flat plan at €99 a month is €495 across the five months, with unlimited documents and no page charge, and can be started the same afternoon.
The adviser takes the flat plan. The employment files go into a separate folder pinned to EU hosting, set to view-only with dynamic watermarking, and restricted to the two confirmatory bidders' named counsel rather than to the bidders themselves. The six first-round parties get the general and commercial folders on their own links, each with its own expiry date set at creation so nobody has to remember to revoke access when a bidder drops out.
At completion the room is frozen and exported with an index and the full access log, and the export goes to the seller's solicitors with the completion bible. The whole compliance question, which counsel had expected to take two weeks, is settled in the room's configuration on day one.
Website: papermark.com
Pricing: From €99/month on the Data Rooms plan with a 7-day free trial. Free plan available.
Papermark is a secure, fully customizable, and developer-friendly data room built for modern dealmakers, with page-by-page analytics, dynamic watermarking, and transparent pricing from €99/month. For UK buyers it answers the two questions that stall most shortlists: the price is on the website in a stated currency, and the hosting region is something you choose rather than something you hope about. It is also open-source and self-hostable under AGPL for teams whose counsel wants the data on their own infrastructure.

A UK sale process organised by workstream, with permissions set per link rather than per named user account.
Analytics is the feature UK advisers most often cite as the reason they moved off cloud storage. Papermark shows which bidder opened the room, which document and which page they spent time on, how long they stayed, and whether a link was forwarded. On a sale process that is a direct read on which party is doing real work, usually a week before their questions arrive.

Page-level analytics are included on every plan rather than sold as an enterprise reporting module.
Papermark covers the controls UK counsel asks about: dynamic watermarking stamping each viewer's email, IP address, and timestamp onto every page as it renders, view-only mode with screenshot protection, one-click NDA gating, granular file and folder permissions per viewer group, password protection, email verification, link expiry, and instant revocation. Encryption is AES-256 at rest and TLS in transit, EU hosting in Frankfurt is available, and every view, download, and NDA acceptance lands in an exportable audit log. Papermark is SOC 2 Type II compliant with SOC 2 Type II on the Data Rooms Plus plan, and GDPR, HIPAA, and CCPA compliant. The full list is on the security page.

Six first-round bidders and two confirmatory ones see different folders of the same room, with expiry set per link.
Every room runs on your own custom domain with your logo, colours, and layout, and with Papermark branding removed. UK corporate finance boutiques use this so each client's room carries the client's brand or the firm's, which is exactly what enterprise VDRs charge a white-label uplift for.

White-labelling and custom domains for data rooms are included from the €99/month plan.
The Data Rooms plan is €99/month with a 7-day free trial and includes 3 team members, unlimited data room visitors, unlimited data rooms, unlimited documents, a custom domain, dynamic watermarking, NDA agreements, and granular file-level permissions. Data Rooms Plus at €249/month adds 5 team members, the Q&A module with permissions, the visitor audit log, automatic file indexing, and SOC 2 Type II. Data Rooms Premium at €549/month covers 10 team members plus AI redaction, full API access, SSO, whitelabeling, and advanced security controls. Data Rooms Unlimited at €999/month removes per-seat charges entirely for unlimited team members, and adds self-hosted deployment and a bring-your-own AWS bucket.
Papermark rates 4.9/5 across 171 reviews on G2, Product Hunt, and community feedback, verified in 2026, and is used by 70,000+ companies. The honest limitations for a UK buyer: pricing is denominated in euros rather than pounds, so your invoice carries whatever your bank charges to convert, and there is no AI-assisted redaction engine, so a room holding hundreds of contracts that need masking is manual work.
Website: imprima.com
Pricing: Custom quote. An introductory package is reported at from €250/month for a single VDR with unlimited users and 500 MB of storage, with additional storage charged per megabyte.
Imprima is London-headquartered with EU-based servers, which is why it appears on UK shortlists where hosting is a stated requirement. It offers AI-assisted document analysis, multilingual support across European markets, and a compliance posture aimed at cross-border European processes.
Limitations: the published entry package is storage-constrained at 500 MB, which a document-heavy diligence set exhausts quickly, and per-megabyte overage on a scanned document set is exactly the kind of variable cost UK buyers try to avoid. Pricing beyond the introductory tier is quote-only, and the reported figure is in euros rather than pounds.
Website: sterlingtechnology.com
Pricing: Custom quote, calculated per client.
Sterling is a London-present VDR provider that sells on service rather than on software features: rapid room deployment, unlimited users, and a dedicated project manager working alongside the deal team through the lifecycle. It holds a reported G2 rating of 4.5 from 40+ reviews and has operated since 2009.
Limitations: the boutique pricing model means every engagement is priced individually against requirements, company size, and storage volume, so there is no benchmark to compare against and no way to size a budget without a call. The service-led model also means the cost structure suits transactions rather than always-on document sharing.
Website: rubydatum.com
Pricing: Custom quote. Ruby Datum sells a fully managed service for one-off transactions and a master licence for firms running higher deal volumes.
Ruby Datum is a London-headquartered VDR, founded in 2015, that stores data in the UK on ISO 27001-certified infrastructure, which is exactly what UK counsel means when it asks for data on UK soil rather than a general assurance about European hosting. It leans on AI-assisted search, document tagging, and a highly customisable, brandable interface, and its client list runs to UK law firms and advisers including Slaughter and May, Mishcon de Reya, and Quantuma.
Limitations: pricing is quote-only in any currency with no published rate card to benchmark against, and the company is small, so a UK buyer weighs a nimble, UK-native provider against the depth of a larger vendor.
Website: admincontrol.com
Pricing: Published in pounds. A preparation portal from £250/month and a full virtual data room from £685/month with 500 MB of storage and £0.90 per MB overage. A 14-day free trial is available.
Admincontrol is a Nordic provider (Oslo, founded 2005, owned by Visma and being acquired by Euronext) with a UK entity in London, and it is one of the very few on this list to quote a price in pounds up front. It pairs a board portal with a VDR, and its certification list fits UK buyers unusually well: ISO 27001:2022, SOC 2 Type II, Cyber Essentials Plus (a UK government-backed scheme), a G-Cloud listing, and GDPR, with European data centres. It rates around 4.6/5 across 140 Capterra reviews.
Limitations: the published VDR plan is storage-constrained at 500 MB with £0.90 per MB overage, encrypted USB exports are charged separately (£250 for the first, £100 for each after), and the board-portal heritage means part of the product is aimed at governance rather than deal flow.
Website: ethosdata.com
Pricing: Custom quote across tiered plans (Core, Premier, Enterprise) with unlimited users on listed plans and a no-payment free trial.
EthosData is a UK-headquartered VDR, founded in 2007, built around fast setup and hands-on transaction support for law firms, advisory companies, and finance teams. It is now part of iDeals, so treat it as an iDeals-owned brand rather than a fully independent provider. Plans differ by projects, administrators, storage, and service level rather than by seat, and support runs 24/7 across time zones by phone, email, and chat.
Limitations: pricing is quote-only with no public rate card, storage-based billing means a scanned diligence set drives the cost, and buyers should confirm the current platform, hosting region, and ownership terms directly given the iDeals acquisition.
Website: firmex.com
Pricing: Custom quote. Entry subscriptions are reported at $625 to $995/month; unlimited-room plans are quoted individually.
Firmex sells both per-transaction rooms and unlimited-room subscriptions, which suits UK advisory firms running several processes a year rather than one. Features include dynamic watermarking, document-level permissions, Q&A, and project management tooling.
Limitations: Firmex publishes plan tiers without the numbers underneath them, so every budget starts with a discovery call, and the reported entry figures come from buyer accounts in dollars rather than from a vendor rate card in pounds. See our Firmex pricing breakdown for what buyers report.
Website: datasite.com
Pricing: Custom quote. Reported per-page rates of $0.40 to $0.85, with typical deal rooms at $25,000+/year.
Datasite is the enterprise VDR used on large-cap UK sell-side processes run by a bank. Its differentiators are AI-assisted redaction across large contract sets, automated indexing and OCR, and a project support team embedded with the deal. Datasite Diligence rates 4.5/5 from 399 G2 reviews.
Limitations: per-page pricing means a document-heavy UK seller pays for its own thoroughness, there is no self-serve trial, and duration extensions and storage overages are common sources of invoice variance. See our Datasite review for the cost breakdown.
Website: intralinks.com
Pricing: Custom quote. Industry estimates range from $10,000 to $200,000+ per year.
Intralinks is a long-established VDR used on regulated, syndicated, and cross-border transactions, with AI-assisted redaction, automated indexing, Q&A workflow, granular permissions, and group-level activity reporting. It publishes SOC 2, ISO 27001, ISO 27701, and FISMA postures, which is why it appears on shortlists where a regulated counterparty sets the requirements.
Limitations: no published pricing, onboarding that typically takes two to three days with a representative, limited custom branding relative to modern tools, and additional fees for storage overages, extra users, and duration extensions. See Intralinks alternatives.
Website: nextcloud.com
Pricing: Free for the self-hosted community edition. Enterprise support is quoted separately.
Nextcloud is open-source file sync and collaboration software you run on your own infrastructure, which appeals to UK teams whose requirement is that data never leaves a server they control. Storage cost is whatever your hosting costs, and there is no per-user licence on the community edition.
Limitations: it is not a purpose-built VDR. There is no dynamic watermarking with viewer identity, no page-level analytics, no NDA gate on a link, and no Q&A module, so the deal-specific controls have to be approximated with general permissions. Running it also means someone owns patching, backups, and uptime through a bid deadline.
Three questions settle most UK shortlists, and only one of them is about features.
Does counsel have a hosting requirement? If the answer is UK or EEA only, that filter removes several providers before price enters the conversation. Ask each remaining vendor to name the region in writing.
Who pays, and can the cost vary? An adviser passing the fee to a client can live with a quote-only vendor. A founder or an owner-manager funding it personally usually cannot live with a per-page model, because the page count is driven by how thorough the accountants were. If you are weighing the wider market rather than only UK-present vendors, our comparison of the best virtual data rooms covers pricing model, bidder management, and compliance across 17 providers.
How many rooms will you run this year? One transaction points towards a trial or a monthly plan you can cancel. Four or five a year points towards an unlimited-rooms subscription, which is where Papermark and Firmex sit at very different price points.
| If this is true | Lean towards |
|---|---|
| Budget is tight and the deal is under £10M | Papermark, free plan then €99/month |
| Counsel requires EEA hosting with a named region | Papermark, Imprima, or Admincontrol |
| You want the data on your own servers | Papermark self-hosted, or Nextcloud |
| You want data on UK soil specifically | Papermark self-hosted, or Ruby Datum |
| You run four or more processes a year | Papermark, or Firmex |
| A bank is running a large-cap sell-side process | Papermark, or Datasite or Intralinks if buy-side counsel specifies one |
| You want a project manager, not just software | Papermark for self-serve, or Sterling Technology for a dedicated project manager |
| You are 12 months from an exit and preparing | Papermark, to build and keep the room ready early |
| You want a free trial on your own documents | Papermark (7 days), Admincontrol (14 days), or EthosData |
A secure data room on Papermark takes a few minutes to stand up on your own documents, which is a faster way to answer the hosting and permissions questions than a procurement cycle.