Using a data room as a buyer or investor: what you can see, download and ask

The first time an associate at a buyer receives a data room invitation, they usually get a two-line email and a deadline. The software looks simple. The etiquette and the hidden visibility are less obvious, and getting them wrong can cost time, credibility or, occasionally, negotiating leverage.

This is a guide from the guest side of the room.

How do you get into a data room?

You receive an email invitation from the platform, sent on the seller’s or adviser’s instruction. Accepting it typically involves:

1. Setting a password, or signing in through your own company’s login if the room supports single sign-on.
2. Enrolling in two-factor authentication, by app or text message. Many sellers make this mandatory.
3. Agreeing to an on-screen NDA or terms of access before any document is shown.

That on-screen agreement is not a formality. It is usually recorded with your name and timestamp, and it may sit alongside, not replace, the NDA your firm signed earlier. Read it; some contain specific restrictions on downloads, contact with employees or use of external tools.

If the invite goes to the wrong person, ask the seller’s adviser to reissue it. Forwarding your login to a colleague is almost always a breach of the terms, and the audit trail will show two people using one account from different places.

What can you see inside the room?

Only the folders your permission group allows. Sellers often create one group per bidder, so your view may differ from another bidder’s, especially later in a process. Folders may also appear in stages: a first-round set, then more after a shortlist.

Gaps in numbering are worth a polite question. Ask whether a section will be released, not what is in it.

Can you download or print documents?

It depends on what the seller has allowed for your group, and it can differ folder by folder. Common settings are view-only, print allowed, download as watermarked PDF, or download of the original file. Spreadsheet models are a frequent exception, because financial advisers need to work in them.

If you need a download for a legitimate reason, such as running a financial model or sharing with your lender’s counsel, ask through the Q&A or the adviser. Give the reason. Sellers are much more willing to open a specific folder to a specific group than to loosen the whole room. Our guide to download, print and view-only settings explains how these permissions work from the admin side.

What can the seller see about your activity?

More than most guests expect. Typical reporting includes:

• Logins: when, how often, from which IP address.
• Document views: which files you opened, how many times, and for how long.
• Downloads and prints: which files, when.
• Questions: everything you submit through Q&A.
• Activity summaries: many platforms rank bidders by engagement for the seller.

This is useful information for the seller. A bidder that has not opened the customer contracts folder by week two is probably not preparing a serious offer. A bidder that spends hours in the litigation folder is worried about litigation.

That cuts both ways. If your team’s reading pattern signals a concern, the seller may prepare for that point in negotiation. There is no need to be paranoid, but it helps to work through the room systematically rather than jumping straight to the one issue keeping your partner up at night.

Can other bidders see you?

Normally not. Bidders sit in separate groups and cannot see each other’s names, activity or questions. Two common exceptions:

• Published Q&A answers. If the seller decides an answer is relevant to everyone, it may be published to all groups, usually anonymised, without naming who asked.
• Shared folders. Everyone in the same phase may see the same documents, but not who else is reading them.

If you think your question reveals your strategy, say so when you submit it and ask that the answer not be published. The seller is not obliged to agree, but most will consider it.

How should you ask questions?

The Q&A module is where buyer teams most often waste time. A few habits help:

Many sellers cap the number of questions per bidder or per category. Precise questions get precise answers faster, and they look like a well-run buyer team.

How should a buyer team organise its review?

Assign workstreams to folders: legal to corporate and contracts, finance to the financial folders, tax, HR, IT and security to their own sections. Agree a shared tracker outside the room for findings and follow-ups. Many teams also use the room’s notification settings: a daily digest of new uploads for most people, instant alerts for the deal lead.

Keep a dated record of what your team reviewed. If a dispute arises after closing about what was disclosed, the seller’s audit log will be one source of truth. Your own record should not contradict it, and it may fill gaps the log does not show, such as which version of a document your advisers relied on.

For security-sensitive targets, our guide to cybersecurity due diligence explains how sellers stage that evidence and what buyers usually request. And our list of due diligence red flags covers the signals in a room that should slow a buyer down.

What happens to your access at the end?

Access usually ends on a set date, when you drop out of a process, or after closing. When it ends, you lose the ability to view anything in the room, and protected downloads may stop opening. The seller keeps the full activity record.

If you win, you may be given an archive copy of the room as part of closing. If you are a lender or co-investor, ask in advance whether you will receive one, because it is easier to agree before the room closes than after.