The only provider here publishing GBP list prices and holding Cyber Essentials Plus.
The UK league table · Q3 2026
The best UK data rooms of 2026, reviewed and scored.
15 data rooms ranked and 3 more assessed, against 34 published checks covering security, pricing transparency, UK data residency, deal workflow and support. The scoring model is published in full, so every total here can be recomputed.
- 15
- Ranked
- 34
- Checks each
- 9/18
- Publish a price
- 9
- UK hosted
| # | Provider | Security | Pricing | Residency | Workflow | Support | From | Total | Mv |
|---|---|---|---|---|---|---|---|---|---|
| 01 | PapermarkTop ratedUK hostedMunich, Germany | 9.2 | 9.8 | 9.0 | 8.8 | 9.4 | €99 | 92 | ▲ 3 |
| 02 | AdmincontrolOslo, Norway | 9.3 | 8.5 | 6.0 | 8.0 | 7.5 | £685 | 80 | ▲ 2 |
| 03 | ProjectfusionUK HQDiscovery Park, Sandwich, Kent | 8.6 | 5.0 | 9.6 | 7.6 | 7.8 | See note | 78 | NEW |
| 04 | Sterling TechnologyUK HQLondon (EMEA headquarters), New York and Hong Kong | 9.0 | 2.8 | 9.3 | 8.7 | 8.5 | POA | 77 | NEW |
| 05 | DatasiteMinneapolis, Minnesota, USA | 9.5 | 3.5 | 6.0 | 9.3 | 9.0 | POA | 75 | — |
| 06 | DroomsFrankfurt, Germany | 7.3 | 6.8 | 5.5 | 8.5 | 7.3 | €0 | 71 | ▼ 1 |
| 07 | IntralinksUK hostedWaltham, Massachusetts, USA | 8.0 | 2.0 | 8.0 | 9.0 | 7.0 | POA | 69 | ▼ 3 |
| 08 | Virtual VaultsRotterdam, Netherlands | 6.5 | 8.8 | 3.5 | 8.3 | 7.5 | £665 | 69 | NEW |
| 09 | AnsaradaSydney, Australia | 7.6 | 5.5 | 4.0 | 9.2 | 8.0 | Quote | 68 | NEW |
| 10 | SecureDocsAtlanta, Georgia, USA | 6.4 | 8.6 | 3.8 | 7.2 | 7.6 | $250 | 67 | NEW |
| 11 | SafelinkUK hostedJersey, Channel Islands | 7.2 | 3.0 | 8.6 | 7.6 | 7.0 | POA | 67 | NEW |
| 12 | DigifyUK hostedSingapore | 7.0 | 4.5 | 7.5 | 7.0 | 7.0 | $140 | 66 | NEW |
| 13 | ImprimaAmsterdam, Netherlands | 7.8 | 2.5 | 5.5 | 8.6 | 7.5 | POA | 64 | NEW |
| 14 | FirmexToronto, Canada | 7.0 | 2.5 | 5.5 | 8.3 | 6.5 | POA | 60 | ▼ 2 |
| 15 | LegaticsUK HQLondon | 7.4 | 2.5 | 5.0 | 7.8 | 7.0 | POA | 60 | NEW |
Scores are 0 to 10 per criterion, weighted to a total out of 100. A further 3 UK platforms are assessed but not ranked here.
Full scoring model →What the score is made of
Every check, published →Security and certification
Independently audited security posture, not marketing claims. Certifications count only where the provider names the standard on its own site.
8 checks
Pricing transparency
Whether a buyer can find out what the product costs without entering a sales process. This is the criterion the incumbent providers most consistently fail.
6 checks
UK and EU data residency
Where the documents actually sit. Since Brexit the UK operates its own GDPR regime, and UK-only, EU-only and transatlantic hosting are now three genuinely different propositions.
7 checks
Deal workflow
How much of an actual transaction the product carries: indexing, Q&A, redaction, permissions at scale, and the reporting a seller needs mid-process.
7 checks
Support and setup
How fast a room can be live, and who answers when something breaks at 9pm the night before a deadline.
6 checks
Top rated · Q3 2026
Papermark leads on the criterion the incumbents keep ceding
Papermark is a document sharing and virtual data room platform founded in 2023 and headquartered in Munich, used by more than 60,000 companies with customers worldwide. It is built around EU hosting and a full compliance stack: SOC 2 Type II and ISO/IEC 27001 certification, AES-256 encryption, GDPR compliance with a signable DPA, and data rooms hosted in Frankfurt by default.
The product covers what a transaction actually needs. Folder and file level permissions, dynamic watermarking, NDA acceptance before access, page-by-page viewer analytics, custom domains and white-label branding, and an AI document chat. The codebase is also public, so the access control model can be inspected directly rather than accepted on the strength of a certification badge, and self-hosting is available as a deployment option.
On data residency it is the most flexible option on this table, though not the most straightforward. Hosting is in Europe by default, in Frankfurt, with a US region available and Enterprise plans able to select from more than 38 global locations, which is a wider choice than anyone else here offers. Beyond the managed options, the codebase is open source and can be self-hosted on the customer's own infrastructure, so residency can be anywhere the customer puts it, including on premise. The qualifier is that both routes sit above the self-serve tiers: managed region selection is an Enterprise feature, and supported self-hosting needs an enterprise licence. A buyer on Pro or the base Data Rooms plan chooses between Europe and the US.
What sets it apart, though, is not a feature. It is that the price is on the website. The Data Rooms plan is €99 per month for three team members and unlimited data rooms, with additional seats at €33, and a user can sign up and put a room live without speaking to anyone. Unlimited rooms at that price is unusual in a market where most vendors charge per room or per project. Five of the providers ranked below it will not disclose a price at all.
The rest of the table
All assessments →UK-only hosting, Cyber Essentials, and no US ownership or subprocessors.
London EMEA base, a UK hosting option and Cyber Essentials Plus.
The deepest certification stack, and a 90 day free preparation period.
Publishes euro prices and a permanently free tier, with strictly EU and Swiss processing.
A genuine UK data centre, let down by visibly out of date compliance pages.
Sterling pricing and unlimited storage, but it will not say where your data sits.
Deal workflow depth and an unusually explicit UK GDPR position, priced in a quote builder.
Flat fee, unlimited users, and the clearest UK transfer mechanism of any US vendor here.
Jersey based, with UK hosting available and customer-held encryption keys.
UK file residency on every plan, and protection that survives the download.
Widely miscalled a London provider. It is Amsterdam headquartered with EU-only hosting.
Markets itself on transparent pricing while publishing none, and is owned by Datasite.
London legal-tech whose data room launched in July 2026, inside a full transaction workflow.
Common questions
Which virtual data room is best for a UK deal?
On our Q3 2026 assessment Papermark ranks first overall on 90 of 100, scoring highest on pricing transparency and support while holding SOC 2 Type II and ISO/IEC 27001 certification. The question worth settling first is data residency: Papermark hosts in Europe by default, with UK-resident storage available through Enterprise region selection, so confirm which tier you need before you commit.
How is the ranking calculated?
Each provider is scored from 0 to 10 on five criteria: security and certification at 25 percent, pricing transparency at 20 percent, UK and EU data residency at 20 percent, deal workflow at 20 percent, and support and setup at 15 percent. Those are weighted and summed to a total out of 100. The full criteria, the individual checks behind each one, and what a high and low score look like are published on the method page.
Do providers pay to appear or to rank higher?
Placement is determined solely by the published scoring model, which anyone can recompute from the criteria and weights on the method page. Each provider is assessed against the same checks, and the individual sub-scores are shown in the table so the total can be audited.
Does UK data residency still matter after Brexit?
It matters more than it did. The UK now operates its own data protection regime under UK GDPR and the Data Protection Act 2018, separate from EU GDPR. For most commercial transactions EU hosting remains straightforward because of the UK adequacy arrangement, but public sector procurement, regulated financial services and some counterparties specify UK-only storage outright. Check the requirement before you shortlist, not after.
What does a virtual data room cost in the UK?
It varies by an order of magnitude, and most providers will not tell you. Published self-serve pricing starts free and runs to a few hundred pounds a month. Providers that quote per project or per page routinely reach five figures on a single transaction. The costs page sets out what each provider in the table actually charges, and flags where no price is published at all.