Editorial standards & independence
Published Last updated
Data Room Reviews exists to help buyers choose a virtual data room (VDR) with confidence. This page sets out the standards the editorial team holds itself to: how we verify facts, where our information comes from, how we correct mistakes, and, most importantly, how our rankings are kept separate from any commercial relationship we hold. If you only read one thing here, read this: no provider can buy a higher position, a better score, or a softer verdict.
Who writes and reviews our content
Our content is produced by the Data Room Reviews editorial team and published under our Organization byline rather than under invented personal names. We are a global, English-language, USD-denominated review desk that covers the VDR market for dealmakers, legal and finance teams, founders, and administrators running due diligence, fundraising, audits, and board processes.
We chose an Organization byline deliberately. Reviews here are a team effort: one person runs the hands-on trial, a second checks pricing and security claims against primary sources, and a third edits for accuracy and neutrality before anything is published. Attributing that work to a single fictional “expert” would misrepresent how it is made. Every page carries a visible published date and a last-updated date so you can judge its freshness for yourself.
How we test and gather evidence
We favour first-hand experience over spec-sheet summaries. Where we can obtain access, we run the product ourselves during a free trial or a vendor demo, upload representative files, invite test users, exercise permissions and watermarking, and note where the interface helps or gets in the way. We record what we tested and when, and we keep screenshots and notes as evidence behind a review.
Our factual claims come from sources in this rough order of preference:
- The provider’s own current documentation, pricing pages, security whitepapers, and trust centres, captured with the date we read them.
- Primary standards and legal sources: the text of the GDPR and guidance from the EDPB and the ICO for privacy; ISO (iso.org) for ISO 27001; the AICPA for SOC 2; HHS for HIPAA where health data is in scope.
- Independent audit reports and certification registries, where a provider makes them available.
- Verified user reviews on established platforms such as G2 and Capterra, used for sentiment and recurring themes rather than as proof of any single fact.
- Reputable business, legal, and deal media for market context.
Where a figure is a price, we treat it as indicative and tell you to confirm it with the provider, because VDR pricing is frequently quote-based and changes without notice.
How we keep rankings independent from money
This is the part that matters most, so we will be blunt about it.
Data Room Reviews earns revenue in part through affiliate links: when some readers sign up with a provider through a link on our site, we may receive a commission at no extra cost to the reader. That commercial arrangement is described in full on our affiliate disclosure page. Here is what it does not touch.
- Scores are set before commercial terms are considered. Our testing and scoring happen against a fixed methodology. Whether a provider has an affiliate programme, and what it pays, is not an input to the score.
- Ranking order follows the score, not the payout. A higher commission never moves a provider up a list, and the absence of any commercial relationship never pushes a provider down. Providers we earn nothing from are ranked, and can outrank, providers we do.
- The people who test and score do not negotiate commercial deals. Editorial judgement and any partnership discussions are kept separate so that the reviewer’s conclusion is not shaped by a payout.
- Sponsored placements are labelled as sponsored, every time. Any link that can earn us a commission is marked with a visible “Sponsored” label and uses
rel="sponsored nofollow", so you always know which links are commercial and which are not. - Vendors do not get approval rights. We may ask a provider to check a factual detail, but no provider reviews, edits, or signs off our verdicts, scores, or ranking order before publication.
Accuracy and corrections policy
We aim to be right, and when we are not, we fix it quickly and visibly.
If you spot an error, an out-of-date price, a changed security certification, or a claim you believe is wrong, contact the editorial team through our contact form. We review every report. When we confirm a mistake that affects meaning, we correct the page, update the last-updated date, and, where the change is material, note what changed. We would always rather publish a correction than defend an error.
Pricing and security details receive extra scrutiny because they move fastest. We re-check the most-read comparison and review pages on a regular schedule and after any pricing or certification change we become aware of.
The trust signals we commit to
To make the standards above checkable rather than merely asserted, every review and comparison page on this site is built to carry:
- a visible published date and last-updated date;
- a clear statement of what we tested and when, with supporting screenshots;
- honest limitations and cons alongside strengths, never strengths alone;
- primary-source citations where a claim rests on a law, a standard, or an audit;
- a proximate affiliate disclosure before any commercial link, plus a “Sponsored” label on that link;
- pricing marked as indicative, with a prompt to confirm current terms with the provider.
If a page you are reading is missing any of these, that is a defect on our part, and we want to hear about it. Independence is not a slogan here; it is a set of practices we hold ourselves to on every page.
