Legal data rooms
Running Legal Due Diligence in a Data Room: A Checklist for Deal Counsel
How deal counsel structures the legal diligence workstream in a data room — the request list, folder design, disclosure discipline, and Q&A management.
Quick answer
Legal diligence lives or dies on structure: a folder tree that mirrors the request list (corporate, contracts, litigation, IP, employment, regulatory, real property), disclosure staged by deal phase, every upload logged, and questions answered once, in writing, in the room. Counsel who run the room this way produce the disclosure record that protects their client at signing.
Tool choice follows matter size — the legal data room comparison ranks options from free-tier rooms for boutique deal work to the enterprise platforms large processes justify.
The legal request list as a folder tree
| Folder | Contents | Frequent issue |
|---|---|---|
| 01 Corporate | Charter documents, minute books, cap table, shareholder agreements, prior deal documents | Missing consents for past issuances |
| 02 Material contracts | Customer, supplier, partnership, and financing agreements above thresholds | Change-of-control and assignment clauses |
| 03 Litigation & disputes | Pending and threatened matters, settlements, demand letters, insurance claims | Undisclosed demand letters surfacing late |
| 04 IP | Registrations, assignments, licenses in/out, open-source policy, disputes | Contractor work never assigned |
| 05 Employment | Template and key-person agreements, incentive plans, contractor classifications, disputes | Misclassification exposure |
| 06 Regulatory & compliance | Licenses, permits, data protection documentation, correspondence with regulators | Lapsed licenses in acquired subsidiaries |
| 07 Real property | Leases, deeds, mortgages, subleases | Landlord consent requirements for the deal itself |
The room is the disclosure record
The under-appreciated function of a diligence room: at signing, the disclosure schedules will reference what was "made available" to the buyer. A room with per-document access logs — what was uploaded when, who viewed it — is the evidentiary backbone of that claim. Email-based disclosure produces no such record, which is why counsel should insist all disclosure flows through the room even when a banker or client finds email faster.
Practical corollary: never delete during a live deal. Replace and version, but keep the log continuous — a gap in the record is worse than a corrected document. The audit trail guide covers what the log must capture.
Counsel's room runbook
Build the seven-folder tree before the request list arrives
Index every document with a consistent naming convention (folder.number_name_date)
Stage disclosure: general folders first, sensitive items (litigation detail, key contracts) at exclusivity
All buyer questions through the room's Q&A — no side-channel answers
Answers that matter become uploaded documents, not chat replies
Weekly: reconcile the request-list tracker against the room's contents
At signing: export the full access log with the closing set
Privilege and the room
Privileged material needs its own discipline: counsel work product and privileged communications stay out of the buyer-facing room entirely, in a separate counsel-only workspace. The risk is not hypothetical — a privileged memo uploaded to the wrong folder and viewed by the other side creates a waiver argument no one wants to brief.
Structurally, that means two rooms (or strictly separated permission groups): the diligence room the buyer sees, and the deal-team room for drafts, analyses, and strategy. Providers with reliable group permissions make this safe; the legal comparison flags which tiers include them.
Continue your research
FAQ
Who should administer the deal room — counsel, banker, or client?
+
One named administrator with a deputy, agreed at kickoff. On banked deals the banker often runs it with counsel controlling the legal folders; on unbanked deals counsel should take it. Split administration produces permission accidents.
Should seller's counsel pre-populate before the request list?
+
Yes — the seven folders above cover 90% of any list, and pre-population compresses the timeline where deals most often stall. The request list then becomes a gap check rather than a construction project.
How should counsel handle 'clean team' material?
+
Competitively sensitive documents (pricing, customer terms between competitors) go in a clean-team folder restricted to outside advisors only, with the access log proving the restriction held. This is a permission-group feature — confirm your room supports it before the deal needs it.
Does a boutique firm need an enterprise VDR for a small deal?
+
No. The structure and disciplines in this guide work on free and low-cost rooms; what matters is the folder design, staging, and log. Enterprise platforms earn their fee on large multi-bidder processes with heavy Q&A volume.
Sources
These sources were checked for public plan details, security controls, or category context. Confirm the final offer with the vendor before you open a live room.