Zero-knowledge Virtual Data Rooms · Powered by Spaces

The zero-knowledge virtual data room for the mid-market.

A virtual data room (VDR) with verified access, full audit trails and UK hosting. Unlike conventional VDRs, only the people you authorise can access your documents - not even Hexiosec. Set up in minutes and priced per user, not per deal.

  • UK Sovereign
  • E2E Encrypted
  • Admin-Verified Users
  • Full Audit Trail
  • Cyber Essentials Plus
Hexiosec data room folder structure
The problem

Overkill, or unsafe. The mid-market deal is stuck between two bad options.

Enterprise data rooms

Overkill, and overpriced

Built and priced for transactions over £100m: upwards of £20,000 per deal, sales-led setup measured in days, and a feature surface most deals never touch. For a sub-£100m acquisition or a fund transaction, you’re paying enterprise rates for capability you won’t use.

DIY (SharePoint · Dropbox · Email)

Unsafe, and indefensible

Email, SharePoint guest links and Dropbox shared folders cost nothing extra, and give you no verified access, no real audit, no expiry, and — for US-hosted tools — your confidential deal data sitting under the US CLOUD Act. When the deal is scrutinised, a shared folder is not an answer.

Hexiosec Spaces is the third option: a real data room at a per-user tier price, set up in minutes, self-serve.

How a Hexiosec virtual data room works

Verified parties. Controlled access. Full audit.

Step 1

Open the room

Name it, set retention and expiry to match the deal timeline, and build the folder structure — or upload one.

Step 2

Verify the parties and set access

The admin verifies each user’s identity before they can enter. Set granular permissions: read-only for reviewers, contribute for the other side, admin for your team. Files flow both ways, under control.

Step 3

Audit and close

Every view, download, upload and permission change is logged. Revoke access at any time; close or expire the room when the deal completes.

Set up in minutes, closed when the deal closes. The contrast with enterprise setup time, measured in days, and DIY control — which is none — is in every step.

Features

Everything a virtual data room needs, nothing it doesn’t.

Admin-verified user access

Each party’s identity verified before they can enter the room.

Full audit trail

Every view, download, upload and permission change logged: the defensible record a deal needs.

Folder structure support

Deal or disclosure document trees, preserved on upload.

Granular permissions

Read-only, contribute, or admin — set per user and per space.

Expiry & retention controls

Close the room when the deal closes; set retention to the matter.

End-to-end encryption

Zero-knowledge, so the contents stay readable only to the parties you verify. See how the encryption works.

Own branding & custom domain

Branded rooms on the Enterprise tier: the room is yours, not ours.

Bulk upload & download

Move document sets in and out at speed.

Browser-based, UK-sovereign

Nothing to install; hosted on Google Cloud Platform in London. Learn about compliance and sovereignty.

Data-rooms are powered by Spaces. See Spaces →

Use cases

One room, every kind of deal.

M&A due diligence (sub-£100m)

Run buy-side or sell-side diligence in a controlled, audited room: verified access for advisers and counterparties, a full record of who saw what, and a price that fits the deal. The mid-market alternative to enterprise platforms.

Fund transactions & secondaries

A data room for fund closings, secondaries and co-investment: investors and advisers verified, documents controlled, the room branded as the firm and closed when the transaction completes.

Legal disclosure rooms

An encrypted disclosure room for litigation, regulatory submissions and inter-counsel exchange: every access logged for a defensible audit trail, access revocable, retention set to the matter.

Regulatory submission rooms

A controlled room for submissions to the Financial Conduct Authority (FCA), auditors or regulators: verified recipients, full audit, UK-hosted.

Advisory & corporate-finance deals

For corporate finance boutiques and advisory firms running deals for clients: a branded, controlled room per engagement, at a per-user price that works across many concurrent deals.

The comparison

The data room with the things that matter, without the per-deal price.

Enterprise platforms like Intralinks and Datasite are built for transactions over £100m. Here is the mid-market contrast, category by category.

Dimension Enterprise data rooms DIY (SharePoint / Dropbox / email) Hexiosec data rooms
Price model Per-deal, £20–30k+ Included, but uncontrolled
Admin-verified access Yes No
Full audit trail Yes Limited or none
UK sovereignty Varies, often US-hosted Often US-hosted
Setup Sales-led, days to weeks Instant, but uncontrolled
Branding Yes, at enterprise pricing No
Expiry & revocation Yes No

Switching from an enterprise data room or a US-hosted tool?

Trusted where confidentiality is non-negotiable

Built by the engineers who protect governments.

Cabinet Office
UK Government
NHS

Built by ex-government and defence-intelligence engineers, Cheltenham.

Pricing

Trial free. Run real deals on Business or Enterprise.

FREE

Trial a room

no credit card required

One space, a small file allowance and a 14-day expiry: enough to see how it works, not to run a real deal.

BUSINESS

£125

Per month. Includes 5 users

Branded rooms, audit retention, admin controls, multiple spaces, more files and storage per space, a 90-day expiry: fits small or short deals.

ENTERPRISE

Contact us

Unlimited spaces, files and storage, single sign-on (SSO), a signed data processing agreement with UK residency, longer retention, framework procurement: the realistic tier for substantial or recurring deal-room use.

Straight about the file cap

A substantial M&A or disclosure room will exceed the Business per-space file cap, so serious data-room use points to Enterprise. Trial free, run small deals on Business, run substantial or recurring deals on Enterprise.

FAQ

Data rooms, answered.

How is this different from an enterprise data room (Intralinks, Datasite)?

Same core capability — verified access, full audit, control — without the per-deal pricing or sales-led setup, and UK-sovereign by default.

How many files can a room hold, and how big?

It depends on the tier. Business fits small or short deals; Enterprise is unlimited. See /transfer/pricing/.

Are users verified?

Yes. The admin verifies each user’s identity before they can enter the room.

Is there a full audit trail?

Yes. Every view, download, upload and permission change is logged.

Can I brand the room as my firm?

Yes. Own branding and custom domain on the Enterprise tier.

How fast can I open a room?

Minutes, self-serve — not the days of enterprise procurement.

Can I close or expire the room when the deal completes?

Yes. Expiry and retention controls let you close the room on completion.

Is the data stored in the UK?

Yes. Google Cloud Platform, London, not subject to the US CLOUD Act. See /transfer/compliance/.

What encryption is used?

End-to-end and zero-knowledge, so the contents stay readable only to the parties you verify. See /transfer/security/.

Is it suitable for M&A, fund transactions and legal disclosure?

Yes. See the use cases above and the Legal and Wealth pages.

Open a zero-knowledge data room in minutes.

Trial a room free to see how it works. Run small deals on Business, substantial or recurring deals on Enterprise. Need it walked through against a live deal? Request a demo.