Encrypted Data Rooms for External Review

Create access-controlled rooms with multiple files, invite participants by email, set expiration dates, and audit every access — built for M&A, legal discovery, and board materials.

Multi-file, role-based sharing rooms built for due diligence and compliance.

Encrypted Data Rooms let you create named, access-controlled spaces for sharing multiple files with external participants — with per-room expiry, per-participant roles, and complete access audit trails.

Value

Role-based participant access

Three roles — viewer, editor, admin — give you granular control over what each participant can do, per room, per person.

Complete chain of custody

Every room access is logged: who viewed, who downloaded, which file, from where, and when. Exportable for legal and compliance teams.

Automatic lifecycle management

Rooms auto-close on expiry. All participant access is revoked. Files remain permanent on Arweave but the room context is gone.

How it works

Create a room

POST /datarooms/create with name, description, optional expiry, max participants, and watermark flag.

Add encrypted files

POST /datarooms/:roomId/files adds Arweave-stored files by txId. Up to 200 files per room.

Invite participants

POST /datarooms/:roomId/participants adds users by email with viewer, editor, or admin role.

Participants access files

Authenticated participants list and download files. Each access is logged with IP, timestamp, and action type.

Use cases

M&A Due Diligence

Share financials, contracts, and IP documents with acquiring parties. Role-based access ensures only authorised participants see sensitive materials.

Legal Discovery

Produce documents for litigation with complete chain of custody. Every access logged, timestamped, and attributable.

Board & Investor Relations

Distribute quarterly reports, cap tables, and board resolutions. Auto-expire after the meeting window closes.

Security guarantees

Role-Based Access

Three roles — viewer, editor, admin — control what each participant can do. Granular, per-room, per-participant.

Complete Audit Trail

Every room access is logged: who, when, what file, from where. Exportable for compliance reporting.

Automatic Expiry

Rooms auto-close on expiry. All participant access is revoked. Files remain on Arweave but the room context is gone.

For operators

• Create rooms via API for M&A, legal discovery, board distribution, or investor relations workflows.
• Add and remove files dynamically — rooms grow with the deal lifecycle without recreating access.
• Export access logs for compliance audits. Every participant action is timestamped and attributable.

For buyers

• Replaces expensive VDR vendors (Intralinks, Datasite) for permanent-storage use cases.
• Gives legal, finance, and compliance teams an auditable sharing mechanism they can approve.
• Supports enterprise procurement narratives around security, access control, and data governance.

Can I add files to a room after creation?

Yes. POST /datarooms/:roomId/files adds files at any time while the room is active. Remove files with DELETE.

What happens when a room expires?

The status changes to 'expired', all participant access is revoked, and the room becomes read-only for the owner. Files on Arweave are unaffected.

Is there a limit on participants?

Default maximum is 50 participants per room, configurable via maxParticipants. Contact us for enterprise limits.