How to Use This Glossary

• Alphabetical order: Entries run from A to Z, so you can scan quickly.
  
• Plain language: Definitions avoid legal or technical jargon wherever possible.
  
• Practical focus: Each term links back to how it appears in everyday VDR use.
  

Use this glossary as a desk reference for your team, whether you’re preparing for diligence, onboarding a new hire, or briefing external partners.

---

Glossary Entries

Access Control – The ability to decide who can see, download, or edit files.

Admin (Administrator) – The person who sets up and manages the VDR, folders, and permissions.

Archive – A secure folder for storing old or closed files that remain accessible for records but hidden from reviewers.

Audit Trail – A log that records who did what, when—viewing, downloading, or changing files.

Authentication – The process of proving identity before entering the VDR, often via password plus another factor.

Availability – A measure of whether the VDR is up and running without outages.

Board Portal – A data room configured for directors to access meeting packs and resolutions securely.

Buyer’s Guide – A structured overview of how to evaluate and choose a VDR (see Buyer’s Guide).

Confidentiality Agreement – Another term for NDA; a contract promising not to share sensitive data.

Counterparty – The other side in a deal, such as a buyer in an M&A process.

Cyber Hygiene – Simple good habits like strong passwords, logging out, and avoiding public Wi-Fi when using a VDR.

Data Leakage – When sensitive information escapes the VDR, either accidentally or intentionally.

Data Residency – The geographic location where digital information is stored and subject to local laws.

Data Retention – Policies for how long information is kept before being archived or deleted.

Data Room Index – A table of contents for the folders and files inside a VDR.

Decryption – Turning encrypted data back into readable form using a key.

Disclosure Schedule – A structured list of documents that show what a seller reveals during diligence.

Discovery Phase – The first stage where parties collect and upload relevant documents.

Document Control – Rules for naming, versioning, and limiting who can alter files.

Download Restriction – A permission setting that allows viewing but prevents saving a local copy.

Due Diligence (DD) – The investigation process where buyers or investors review detailed information before closing a deal.

Encryption (at Rest) – Scrambling stored files so they cannot be read without a key.

Encryption (in Transit) – Scrambling files as they travel across networks, protecting them from interception.

Escrow – An arrangement where money or assets are held by a neutral third party until certain conditions are met.

External Counsel – Outside lawyers given selective access to the legal folders of a VDR.

Finalization Phase – The last stage of a project when documents are confirmed, signed, and archived.

Folder Hygiene – The discipline of keeping folders tidy, separating drafts from finals, and archiving outdated files.

Governance Documents – Foundational materials like articles of incorporation, bylaws, and board minutes.

Indexing – The process of numbering or labeling files and folders for easy reference.

Invitation Email – The message that gives new users access, usually with role details and login steps.

IP (Intellectual Property) – Assets like patents, trademarks, and copyrights that are stored in a VDR for diligence.

Least Privilege – A principle meaning users only get the minimum access required to do their job.

Litigation Folder – A section of the VDR for case files, evidence, and pleadings.

Lockout – Temporary denial of access after repeated failed login attempts.

M&A (Mergers and Acquisitions) – Transactions where companies are bought, sold, or combined, often using VDRs.

Metadata – Information about a file, such as author, date created, or last modified.

Multi-Factor Authentication (MFA) – Login security requiring a password plus another factor like a text code.

Naming Convention – Agreed rules for labeling files, such as Finance_Budget_2025-01-01.pdf.

NDA (Non-Disclosure Agreement) – A contract requiring parties to keep shared information confidential.

Onboarding Toolkit – Resources for admins to launch and manage a new data room (see Onboarding Toolkit).

Permission Model – The structure defining who can see, edit, or download each folder.

Phased Disclosure – A strategy of releasing documents in stages as trust and negotiation progress.

Playbooks – Practical guides for running specific projects inside a VDR (see Playbooks).

Privilege Log – A list of documents withheld from disclosure due to legal privilege.

Q&A Log – A record of questions from reviewers and the official answers posted by admins or subject experts.

Read-Only Folder – A section of the VDR where files can be viewed but not changed.

Redaction – Removing or blacking out sensitive information before sharing a document.

Reviewer – A user role with read-only access to examine files during diligence.

Risk Mitigation – Steps taken to reduce the chance of leaks, confusion, or delays.

Role-Based Access – Permissions tied to user roles (admin, reviewer, counsel) rather than individual settings.

Security & Compliance – Practices that align with recognized standards to protect sensitive data (see Security & Compliance).

Seller Upload Folder – A space where the seller’s team adds documents before making them visible to buyers.

Single Sign-On (SSO) – A login method that lets users access the VDR using existing corporate credentials.

Stakeholder Map – A list of groups (legal, finance, IT, deal team) involved in the project.

Start Here Folder – An orientation folder with guidance, index, and disclaimers for new reviewers.

Timeline (Phases) – The three common stages: Discovery → Review → Finalization.

Two-Factor Authentication (2FA) – Another term for MFA, often using a password plus a one-time code.

User Deactivation – Removing access for people who no longer need to see the room.

Versioning – Keeping track of successive versions of a document with clear labels.

Virtual Data Room (VDR) – A secure online workspace for sharing sensitive documents during deals or projects.

Watermark – A visible or invisible identifier (like a name or timestamp) placed on documents to discourage leaks.

Week-One Review – An audit done after the first week to check folder hygiene, permissions, and naming.

Workflow – The structured steps by which documents are prepared, shared, reviewed, and finalized.

---

Related Guides

• Buyer’s Guide — Step-by-step process for choosing and launching a VDR.
  
• Playbooks — Detailed folder, permission, and checklist models for common projects.
  

---