The situation
A promoter in Rajkot runs an auto components company that machines and supplies parts to two large vehicle makers. He has agreed to sell a minority stake to a strategic investor, and diligence starts in two weeks. Until now, documents have lived in three places: the accountant's laptop, a shared drive the IT person set up years ago, and a WhatsApp group where the plant manager sends photos of licences.
The investor's team includes an accounting firm, a law firm and two of its own engineers. Each will want different documents. Some of those documents, such as customer pricing and employee salaries, should be seen by as few people as possible. The promoter needs a data room that works for the next two to three months without becoming a second mess.
What a data room is for
A virtual data room is a controlled online space where the seller places documents for the buyer to review. It does three jobs. It gives the buyer one place to look. It lets the seller decide who sees what. And it creates a record of what was disclosed, when, and to whom. The third job matters later: purchase agreements often limit the seller's liability for matters that were fairly disclosed, and the data room record is part of how that is shown.
Step one: agree the folder structure before uploading
Build the index first. A structure that mirrors the buyer's request list makes it easy for both sides to find things. A common top level looks like this:
- Corporate and secretarial
- Financial
- Tax
- Commercial contracts
- Legal and litigation
- Property, licences and environment
- People
- Technology and data
- Operations
Under each, create subfolders that match the request list's numbering. If request 4.12 asks for the GST reconciliation, the file lives in a folder the buyer can find from that number. Number folders and files as well as naming them, and keep the scheme the same across the whole room.
Step two: set access rules by role
Decide the roles first, then add people to them. For the Rajkot deal the roles might be:
- seller core team: everything, including drafts
- seller advisers: everything they are working on
- buyer deal team: all folders except restricted ones
- buyer accountants: financial and tax, plus restricted payroll summaries
- buyer lawyers: corporate, legal, contracts, property
- buyer engineers: operations and technology only
Then mark a small number of folders as restricted: customer pricing, individual salaries, and any document the seller's lawyer says should go only to named people, often called a clean team. Restricted folders get access per person, granted only when needed.
When the access rules live in a role, adding a new associate from the law firm takes one step and gives exactly the right access.
Step three: control what goes in
Most data room problems start at upload. Agree a few rules:
- one person approves each upload in each section, usually the request owner
- final versions only; drafts stay outside the room
- file names follow the scheme, with a date where the document has versions
- scanned documents are legible and the right way up
- no duplicates; replace an old file when a new version arrives
Personal data needs extra care. Employee records, customer contact lists and anything with identity numbers fall under India's Digital Personal Data Protection Act, 2023. Share summaries or redacted versions first, and full records only when the buyer can show a specific need. Keep a note of what personal data was shared and why.
Step four: run questions through the room
Buyers will ask questions about what they read. If those questions arrive by email and phone, answers get lost and the same question gets asked twice. Run them through a Q&A log attached to the documents, with each question assigned to an owner on the seller side and a target date. Answers should be reviewed by the seller's adviser before they go out, because an answer is a disclosure too.
Step five: watch the activity
The audit trail shows who opened which documents and when. Read it weekly. If the buyer's lawyers have not opened the litigation folder, ask whether they have what they need. If someone is repeatedly downloading payroll files, check their role. Activity also tells you where the buyer's attention is, which helps you prepare for the next meeting.
Step six: close the room properly
When the deal signs, or stops, freeze the room. Take a complete export of the index and the audit trail, and keep it with the signed agreements. Remove buyer access on a fixed date. If the deal does not proceed, the NDA usually requires the buyer to return or destroy confidential material; ask for written confirmation.
Where Synerger helps, and where it does not
Synerger's virtual data room holds financial, legal, operational and technical documents with role based access, permissions per deal and per folder, a Q&A log linked to documents, and an audit trail of who opened what. Diligence request tracking connects each request line to the files that answer it, and workflow automation can notify an owner when a request is assigned or overdue.
The platform does not decide what belongs in the room, which documents should be redacted, or who should be in the clean team. Those calls belong to the seller and its lawyers. It also does not make a disorganised business organised. If the underlying records are poor, the room will show that clearly, and the better course is to fix the records first.
A short checklist
- Folder index agreed and numbered to match the request list
- Roles defined before any person is added
- Restricted folders identified with your lawyer, access per named person
- One approver per section, final versions only, consistent file names
- Personal data shared in summary or redacted form first
- Questions handled in the Q&A log, answers reviewed before release
- Audit trail read weekly
- A dated plan to freeze, export and close access when the deal ends
For the controls behind per folder access and the audit trail, see security and access.