How to Set Up a Virtual Data Room in 8 Easy Steps

10 min read
1693 reads

Virtual data rooms are an essential data-sharing solution for corporations looking to scale or companies seeking to increase efficiency. And for anyone who thinks setting up a data room is too complicated, we’re here to help. We break down the whole process into eight easy steps, after which you’ll be on your way to enjoying all the benefits virtual data rooms have to offer.

Before we start: What is a VDR?

A virtual data room, or VDR, is an online space for storing data.

That is the short definition. However, you should know that VDRs are a next-level solution that are quickly becoming a fixture of the corporate landscape. More and more, companies are jumping on the VDR bandwagon as they become aware of the need for greater data security and efficiency. 

If your corporation is in the process of due diligence for M&A, for instance, a virtual data room is just the thing you need. 

Step 1: Choose a VDR provider

When you’re looking to acquire a product that will get used every day — and by many people, too — you want to make sure you get the right fit for your needs. 

Time to do your homework. 

First of all, understand what you need: most virtual data room providers share a number of core functions, but there can be important differences across providers or usage plans. 

Ask yourself:

  • How much storage do I need?
  • How many people will be using the platform?
  • What’s my budget?
  • How long  will I be using the VDR?
  • Does my business vertical require any specific functions?

Having your priorities in place will help boil down your search, saving you time and the mental energy of making a decision.

Armed with a clear image of what you need and having shortlisted a few candidates, the next step is to research the pros and cons of each. Here are a few things to look out for:

  1. Security: As this is likely an important feature for you, you want a VDR that puts a premium on security. Look for data and access protection features such as advanced encryption, digital rights management functions, 2-step verification, and compliance with security standards.
  2. Usability: As a rule of thumb, simple is good. An intuitive interface where everything is easy to find will help you and your team adapt faster to the new environment, besides increasing your effectiveness in the long run.
  3. User base: Some small businesses target specific providers; if instead, you need compatibility for a large number of users, look for providers that offer enterprise-grade solutions.
  4. Cost: If this is one of your important criteria for finding a good VDR, be sure to look for competitive VDR pricing. Keep in mind that  if you feel that your preferred provider is overpriced or outside of your budget, try negotiating.
  5. Other features: this includes anything else that matches your company’s specific needs. 

By now, you should have a few (hopefully, at least a few) finalists. Now, it’s time to get a second opinion; head over to review aggregator websites to find out how providers compare to one another. 

Most provider websites have their own review and testimonial section, but ideally, you want to look at what external sources have to say. Also, check review aggregators and forums — but keep clear of “top ten”-style articles, as those are typically commissioned by a provider itself and not necessarily reliable.

Quick tip: When you think reviews, think numbers. Better a 4.5/5 out of 1000 reviews than a 5/5 out of 50.

Step 2: Sign a use contract and an NDA

An important, if often overlooked, step before you get started is to have a use contract in place that includes an NDA with the VDA provider. After all, lots of important and sensitive information will  be hosted on their platform — it’s vital to have legally valid assurance that your data will be safe.

This should be a simple step, as data room providers will often have a standard contract ready to sign. All you need to do is have your legal team go through it, suggest and negotiate any changes if needed, and sign it.

Step 3: Prepare your data

Now that you are set up with your VDR provider of choice, it’s time to gather and index the data that you are going to be working with for your upcoming projects. 

This is usually a two-fold process, as you’ll need to:

  • find, organize, and index all relevant files in electronic format (most commonly in PDF, MS Word, and image formats)
  • assemble and digitize physical documents 

Indexing and naming files is a key step. How effectively you do this will determine, to a great extent, how quickly and easily you can retrieve documents. 

To that end, decide on an organizing/naming system before you start. Besides separating files into clearly named folders that show you what’s what, it’s often a good idea to include some relevant data when naming files of a given type. Dates can be extremely helpful — instead of  “Contract with VDR Provider”, think “Contract_VDR_Provider_10-08-2021”.

Here are two best practices recommended by the National Archives and Records Administration:

  1. Naming files: type underscores (_) between words. Although most VDRs have highly effective search mechanisms, this helps ensure you’ll always be able to retrieve your files using keywords. 
  2. Scanning: look to keep files at a resolution of 300 DPI. At a minimum, settle for 200 DPI. And, when digitizing files that you’re sure you will need to reprint, 600 DPI is ideal.

Step 4: Create an admin account

One account to rule them all — yours, of course. Create your master administrator account, keeping in mind that it will give you the final word on everything that happens on the platform. Only admins can do things such as:

  • upload files
  • set rules
  • set user permissions
  • define access to files and folders
  • give admin powers to other users

This limitless power comes with great responsibility. To keep anyone else from yielding that power, don’t forget to:

  • Deploy a unique, powerful password: enough of ‘password123’, please  — that is a joke that takes a computer less than 1 second to break. Instead, aim to up the challenge to any would-be infiltrators with something slightly more secure. Try something along the lines of ‘MyVDRIsBlueLikeTheSkyInMay1990!’ — that would take 562 billion years to crack at current data processing power.
  • Enable multiple-factor verification: this is a vital extra layer of security. An authorization code will be sent to your personal phone whenever a user wants to access your account  from an unknown location or device. This means no one will be able to gain control of your account without access to your phone.
Remember: For a strong password that will guarantee you proper security, think pass-sentence, not password.

Step 5: Structure the data room 

Organizing your virtual data room is of the utmost importance. Here you’ll prepare virtual data room folders and subfolders, keeping in mind what purpose they’re going to serve. 

You can also create different ‘projects’ — those are areas targeted at specific activities or collaborations. 

Remember: you want a clean, clear room. It should be easily navigable. You want users to find what they’re looking for without hassle or wasting time. So, make sure you follow a clear organizing principle — work from top to bottom.

For instance, if you are going to prepare virtual data room for M&A due diligence, create a due diligence project with a main folder for each key aspect of your company. Those can be:

  • business overview
  • financial
  • market data
  • contracts and agreements
  • marketing
  • legal
  • labor and employment

Then, start organizing the main subfolders. Where necessary, create further subfolders — just remember to use your good judgment, as an infinite labyrinth of subfolders can end up being counterproductive. 

At this point, it can also be a good idea to determine the layout and other personalized aspects of your data room. 


Remember: your virtual data room is an extension of your company, just as a physical archive would be. To remind your users that they’re in a corporate environment, data room providers will usually allow for a good deal of leeway in personalizing your data room. 

Among other options, you should be able to:

  • upload your logo to the portal screen
  • choose the background color 
  • select font types and sizes and customize other similar details
  • add your company watermark to all documents


To further customize your VDR and ensure the security of sensitive data, remember to:

  • add documentation for new users to sign/agree with, including NDAs and other terms of use
  • write your own customized invitation letter that will be sent out when you invite new members to join the data room
  • convert uploaded files to protected PDF format for greater protection

Step 6: Upload the data

Once your folders are all set up, it’s time to bulk-upload your documents and other files into the virtual data room. 

For this step, many data room providers will offer their own desktop apps. That can be a handy resource, as it not only will help speed up uploads, but the app can also allow you to keep local folders and files synchronized with their data room copies.

Step 7: Set user access levels

Granular permissions are an essential feature offered by VDRs. This is where you’ll determine what each user is allowed to see and do. According to their access level, users will be able to visit or interact with a larger or smaller portion of the VDR. For given files and folders, permission levels will typically include:

  • opening/viewing
  • how much of the file is visible
  • downloading
  • printing
  • editing

You can also create groups with a preset access level. Users added to a “Visitor” group, for instance, may only access their assigned project, while their range of actions is restricted to view-only.

Quick tip: When deciding on user permissions, follow the principle of minimum disclosure (or “need to know”). If someone won’t necessarily need access to a specific file, they shouldn’t have it automatically. This helps maximize the level of security throughout the VDR.

Err on the side of caution. You can always edit permissions later as needed.

Step 8: Invite users

All set? Time to make things lively. Add users by entering their emails and sending out the invitations drafted in Step 5. Users will receive a secure link allowing them to access the VDR and set up their accounts.

For most cases, all you need to do is bulk-add users according to project or group, creating new groups as needed. Alternatively, add users separately, with customized access and security settings.

Quick tip: Before you invite anyone, send out an invitation link to a test email. Add it to specific groups and permission levels while also logging in with the test account to check that everything is set up correctly. This helps prevent slip-ups where someone gets access to more info than you meant.


As you see, setting up a virtual data room is not brain surgery. 

If you choose a good VDR provider and follow the above steps with a clear organizational principle in mind, you’ll soon find yourself operating in a secure and superbly efficient environment. And as for the bit of time it takes to set up the virtual data room?

More than worth it.

Recommended for you

financial due diligence checklist
Due Diligence
49 reads
Financial Due Diligence Checklist
5 min read
Looking for virtual data room software?
Check out the Top 10 VDR Providers
View providers