Peony
Peony Overview
Peony is a cloud-based virtual data room (VDR) and secure document-sharing platform built for teams that need to control who sees a document, track how it is read, and revoke access on demand. Peony is aimed at small and mid-sized deal teams rather than large enterprise procurement departments. Its stated customer base includes boutique M&A advisory firms, independent sponsors, venture capital and private equity funds, commercial real estate brokers, biotech companies, law firms, and startup founders raising capital. Peony reports being used by more than 6,800 teams managing over $26.3 billion in combined assets, though this figure is self-published and not independently audited.
Core use cases include sell-side and buy-side M&A due diligence, startup fundraising data rooms, LP reporting for funds, board communications, and sales proposal tracking. The platform’s most distinctive capability is rendering live, interactive HTML and AI-generated artifacts (such as Claude or GPT-built financial models and dashboards) inside a watermarked, access-controlled viewer, rather than limiting sharing to static PDFs.
Prices below are per admin, per month, billed annually (monthly billing is also offered at a higher per-admin rate, noted in parentheses).
Free, $0/admin/month
For personal use: up to 50 documents, page-by-page analytics, unlimited visitors, password protection, email capture, and 3 e-signatures per month.
Business, $30/admin/month ($44 billed monthly)
Adds up to 1,000 documents, up to 3 data rooms per admin, email authentication, allow/block visitor lists, Simple NDA (acknowledge-only), advanced analytics and dropoff reports, screenshot protection, AI document Q&A, download prevention, custom logo/background, folders and bulk upload, and unlimited e-signatures.
Data Room, $52/admin/month ($75 billed monthly), marked “Most Popular”
Adds dynamic watermarking, Advanced NDA (a digitally signed PDF delivered to both parties with an audit trail), granular per-file permissions, custom domain and branding, AI-based auto-indexing, “Screenshield,” 5x AI document Q&A usage, AI room generation, unlimited storage and file size, and migration assistance.
Deal Team, $64/admin/month ($89 billed monthly), minimum 4 admins
Adds a tamper-proof data room archive download, upload notifications, Advanced Redaction, an Advanced Q&A module, API access, custom integrations, OAuth SSO (Google and Microsoft), a self-serve SOC 2 Type II report and standard DPA, priority support, and a dedicated account manager.
Enterprise, custom pricing
Adds SAML SSO (Okta, Azure AD, or any identity provider), custom DPA/MSA/SLA, a white-label option, BYOK (bring your own encryption key), custom data residency (for example, EU-based hosting), self-hosted deployment, and custom LLM/workflow integrations.
Advantages
- Fast, minutes-not-days setup
- Page-level analytics and real-time view notifications
- Strong vs value pricing
- Renders live HTML/AI artifacts, not just static PDFs
Things To Consider
- Some key features gated behind higher tiers
- Screenshot protection isn't airtight
- No dedicated mobile app
- Onboarding docs and tutorial videos flagged as thin
- No native CRM integration
customer service
Customer service is one of the most consistently praised aspects of Peony across every review platform checked. Multiple reviewers specifically credit direct access to co-founders Deqian Jia and Sean Yu during onboarding and support requests, which is realistic given the company’s small, distributed team. Support runs around the clock across three time zones (North America, Europe, and Asia-Pacific), and Peony sets its own internal target of replying in minutes rather than hours. That response-time figure comes from Peony itself and has not been benchmarked by an outside party.
security, compliance, and certifications
On the base layer, every Peony plan, including Free, stores files under 256-bit AES encryption, moves them over TLS 1.3, requires two-factor login, and keeps a complete record of who viewed or downloaded what. Higher tiers add NDA gating, screenshot blocking, dynamic watermarks, and, on Deal Team, Advanced Redaction. The company states it is GDPR, CCPA, and HIPAA compliant, though it does not publish a signed Business Associate Agreement (BAA) process for HIPAA on its public pages. Peony describes itself as “SOC 2 Type II-ready” and is explicit on its security FAQ that a formal SOC 2 audit has not yet been completed; ISO 27001 certification is not held. Data for standard plans is processed in the United States (AWS us-east-1), with Vercel, Cloudflare, and Stripe as published sub-processors; EU or UK data residency is offered only as a custom Enterprise option.
use cases
Peony’s own site describes fit across more than 25 use cases and industries, with the most developed being: M&A and investment banking (sell-side and buy-side diligence rooms), startup fundraising (pitch decks and investor data rooms), private equity and venture capital (LP reporting, portfolio monitoring, deal flow), commercial real estate (offering memorandums, JV data rooms), law firms (privileged document review, NDA workflows), and board communications (board books, director-level watermarking).