Bank-grade security Β· Self-hostable Β· AI-native

The virtual data room deal teams actually trust.

Run M&A, due diligence and fundraising in a data room that encrypts every file with your own keys, proves its own audit trail, and comes with deal workflows and AI built in β€” for a flat price, with no per-page fees.

πŸ”’ AES-256 envelope encryption 🧾 Tamper-evident audit πŸ›οΈ Your cloud or ours 🌍 EU data residency
vdr.anhuret.eu β€” Project Falcon
πŸ’Ό Deals
πŸ“ 01 Β· Corporate
πŸ“ 02 Β· Financial
πŸ“ 03 Β· Legal
βœ… Checklist
πŸ’¬ Q&A
PDFShare Purchase Agreement.pdfwatermarkedv3
XLSFinancial Model.xlsxrestrictededit
DOCBoard Minutes 2025.docxconfidentialv1
PDFCap Table.pdfviewed 12Γ—v2
AIAsk the deal AI about these documents…
Built for Mergers & Acquisitions Β· Due Diligence Β· Fundraising Β· Board & Investor Reporting Β· Audits & Compliance Β· Litigation
256-bit
AES-GCM envelope encryption at rest
0
Per-page fees β€” ever
5
Languages out of the box
100%
Self-hostable, data you control
Everything a deal needs

One data room. The whole toolkit.

From the first NDA to signing, Anhuret replaces the tangle of file shares, spreadsheets and email threads with a single secure workspace.

Security & compliance

Protection that holds up to a buyer's infosec review.

βœ“ Envelope encryption

Every object encrypted with a unique AES-256-GCM key, wrapped by your KMS. Ciphertext and keys are never stored together.

βœ“ Bring your own KMS

Local, AWS KMS or HashiCorp Vault. You hold the master key β€” we can't read your documents.

βœ“ Tamper-evident audit

An HMAC-keyed, hash-chained activity log that verifies its own integrity β€” undetectable edits are impossible.

βœ“ Fine-grained RBAC

Per-user view / download / print / share / annotate rights, inherited down the folder tree.

βœ“ MFA & strong auth

TOTP two-factor with re-authentication on enrollment, Argon2id password hashing, rotating tokens.

βœ“ Dynamic watermarking

Every view is stamped with the viewer's identity, time and IP β€” on-screen and burned into PDFs.

βœ“ Protected viewing

Screenshot deterrents, disabled right-click & printing, blur-on-blur, and download/print/copy locked in read-only Office previews.

βœ“ Virus-scanned uploads

Every file is scanned (ClamAV) before it ever reaches the room.

βœ“ Click-through NDAs

Enforce NDA acceptance before anyone sees a single document; changes reset acceptance.

Deal & due-diligence workflow

Structure, assign and track the whole process.

βœ“ First-class deals

Each transaction is a data room, a member group and a status (ongoing β†’ closed / failed) in one place.

βœ“ Counterparty onboarding

Set a deal's email domain and let the other side self-register β€” attached to the deal, pending your approval.

βœ“ Gated registration

Invitation- or domain-only sign-up, with public webmail domains (gmail, outlook…) blocked.

βœ“ DD checklist templates

A built-in M&A checklist plus your own reusable templates β€” apply to a deal in one click.

βœ“ Assignable tasks

Owners, due dates, priorities, self-assign, and progress notes that link to the file that satisfies them.

βœ“ Auto folder structure

Generate a numbered folder per DD category for a deal, with tasks linked to their folder.

βœ“ Per-document Q&A / RFI

Ask, route and answer questions against a specific document β€” no more email chains.

βœ“ Access requests

Members request access; admins approve in one click from email or Microsoft Teams.

βœ“ Bulk everything

Move, rename, number, delete and grant across many files at once; import users in bulk.

Collaboration & productivity

Work on the documents without leaving the room.

βœ“ In-browser Office

View and edit Word, Excel and PowerPoint in the browser (Collabora) β€” read-only previews stay locked down.

βœ“ Immutable versions

Every change is a new, integrity-checked version; download any prior version and compare.

βœ“ Keyword + semantic search

Find documents by what they say, not just their names.

βœ“ Threaded comments

Discussion pinned to the exact document, alongside Q&A and versions.

βœ“ Secure share links

Expiring, optionally password-protected links β€” watermarked and access-logged like everything else.

βœ“ Email-to-data-room

Forward documents straight into a room via a monitored inbox (IMAP/POP3).

AI, built in & private

Answers grounded in your documents β€” never beyond a viewer's permissions.

βœ“ Ask the deal

RAG Q&A over the room β€” every answer is scoped to what the asker is actually allowed to see.

βœ“ Instant summaries

One-click summaries of long documents to speed up review.

βœ“ Suggested answers

Draft Q&A responses from the underlying documents, ready for a human to approve.

βœ“ Local or cloud models

Run fully on-prem (self-hosted models) or use a cloud provider β€” with per-classification egress controls.

βœ“ No training on your data

Your documents are used to answer your questions, never to train a third-party model.

βœ“ Semantic index

Documents are embedded on ingest for fast, meaning-aware retrieval.

Platform & operations

Enterprise plumbing without the enterprise headache.

βœ“ Multi-organization

Schema-per-tenant isolation keeps every organization's data fully separated.

βœ“ Your branding

Upload your logo; the room wears your identity.

βœ“ Per-org email & Teams

Send from your own SMTP and push privileged-action alerts to Microsoft Teams.

βœ“ Backup & restore

Scheduled platform disaster recovery plus one-click per-org export/import.

βœ“ Localized UI

English, German, Hungarian, Slovak and French, per user.

βœ“ Self-host or managed

Deploy with Docker Compose or Terraform (AWS) in your own environment β€” or let us run it.

Security you can prove

Designed so we can't read your data.

  • β—†Encryption at rest, done right. Each document is sealed with its own AES-256-GCM data key; that key is wrapped by a master key held in your KMS. The encrypted file lives in object storage, the wrapped key in the database β€” never together.
  • β—†You hold the keys (BYOK). Point Anhuret at AWS KMS or HashiCorp Vault. Revoke the key and the data is instantly, permanently unreadable β€” including to us.
  • β—†Integrity on every read. A SHA-256 checksum is verified before a file is served; a tampered object is refused and flagged, not delivered.
  • β—†An audit trail that can't lie. Events are chained with a keyed HMAC; the trail verifies itself and detects edits, deletions and even a full wipe-and-rewrite.
  • β—†Least privilege, always. Fine-grained, folder-inherited permissions; expiring access; and continuous re-checks β€” a revoked grant takes effect immediately, even mid-edit.
Encryption at restAES-256-GCM
Key managementLocal Β· AWS KMS Β· Vault
Password hashingArgon2id
TransportTLS 1.2+ (auto)
Audit chainHMAC-SHA-256
Access tokensJWT Β· rotating refresh
Malware scanningClamAV on upload
Tenant isolationSchema-per-org
Data residencyYour region / on-prem
How we stack up

Modern where legacy VDRs are stuck.

Traditional data rooms are closed, expensive and priced by the page. Anhuret is transparent, self-hostable and flat-rate.

Capability Anhuret Legacy enterprise VDRs Typical SaaS VDRs
Bank-grade encryption at restβœ“βœ“βœ“
Bring-your-own-KMS (you hold the keys)AWS KMS / HashiCorp Vaultβœ“enterprise add-onβ€”
Self-hosting / on-prem optionβœ“β€”β€”
Tamper-evident, self-verifying audit trailβœ“log onlylog only
Dynamic per-viewer watermarkingβœ“βœ“βœ“
Built-in AI: RAG Q&A, summaries, suggested answersβœ“paid add-onβ€”
In-browser Office editingβœ“viewer onlyvaries
DD checklists + assignable tasksβœ“βœ“varies
Counterparty self-onboarding by domainβœ“β€”β€”
Localized UI (EN/DE/HU/SK/FR)βœ“EN + majorsvaries
Transparent, auditable codebaseβœ“β€”β€”
Flat pricing β€” no per-page feesβœ“per-pageper-user tiers

Comparison reflects common positioning of enterprise VDRs (e.g. Datasite, Intralinks) and mid-market SaaS VDRs (e.g. iDeals, Firmex, Ansarada) based on publicly available information as of 2026. Specific competitor capabilities vary by plan and change over time β€” always confirm current offerings directly.

Simple, flat pricing

Priced per deal room β€” never per page.

Every plan includes 256-bit encryption, automatic TLS, unlimited documents within your storage, and the full security toolkit.

Starter
A single, secure data room for one live deal.
€149
per month, billed annually
Get started
  • βœ“ 1 active deal room
  • βœ“ Up to 10 users
  • βœ“ 25 GB encrypted storage
  • βœ“ RBAC, MFA, watermarking, NDAs
  • βœ“ Q&A, comments, versioning
  • βœ“ Email support
Most popular
Professional
Multiple concurrent deals with full workflow & AI.
€499
per month, billed annually
Start free trial
  • βœ“ Up to 5 concurrent deals
  • βœ“ Up to 50 users
  • βœ“ 250 GB encrypted storage
  • βœ“ DD checklists, tasks & deal workflow
  • βœ“ Built-in AI (Q&A, summaries)
  • βœ“ In-browser Office editing
  • βœ“ Branding, Teams, priority support
Enterprise
For advisors, funds and corporates running deals at scale.
Custom
tailored to your volume
Talk to us
  • βœ“ Unlimited deals & users
  • βœ“ Custom storage & retention
  • βœ“ Bring-your-own-KMS (AWS/Vault)
  • βœ“ Dedicated tenancy & SLA
  • βœ“ Audit exports & compliance support
  • βœ“ Dedicated success manager
  • βœ“ SSO/SAML on the roadmap
Self-Hosted
Run the entire platform inside your own cloud or on-prem.
from €12k
per year, licensed
Request a license
  • βœ“ Full feature set, your infrastructure
  • βœ“ Your KMS, your data residency
  • βœ“ Docker Compose or Terraform (AWS)
  • βœ“ Air-gap friendly (local AI models)
  • βœ“ Updates & support included

Prices shown for illustration. All plans: no per-page fees, no per-document charges, cancel anytime. Non-profit & academic discounts available.

Good to know

Frequently asked questions

Can I really host this myself?

Yes. Anhuret ships as a Docker Compose stack (Postgres, object storage, malware scanning, the app and edge) and as Terraform for AWS. Run it in your own VPC or on-prem, point it at your KMS, and your documents never leave your control β€” the codebase is fully transparent.

How is my data encrypted?

Every document is encrypted with a unique AES-256-GCM data key. That key is wrapped by a master key held in your KMS (local, AWS KMS or HashiCorp Vault). The ciphertext lives in object storage and the wrapped key in the database β€” they're never stored together, and sensitive fields (names, MFA secrets, extracted text) are encrypted too.

What makes the audit trail "tamper-evident"?

Each event is chained to the previous one with a keyed HMAC whose secret lives outside the database. A built-in verifier recomputes the whole chain and detects any edit, deletion, reordering β€” or an attempt to wipe the log and rewrite it. A plain log can be quietly altered by anyone with database access; ours can't.

Does the AI send my documents to a third party?

Only if you choose a cloud model β€” and even then, egress is gated by document classification and your documents are never used to train anyone's model. You can run entirely on self-hosted models for a fully air-gapped deployment. Every AI answer is also permission-scoped: it can only draw on documents the person asking is allowed to see.

Why flat pricing instead of per-page?

Per-page billing punishes you for doing thorough diligence and makes costs impossible to predict. We charge per deal room, so uploading one more contract never changes your bill.

How do counterparties get access?

Invite them individually, import a list in bulk, or set a deal's registration domain (e.g. targetco.com) so their team can self-register straight into that deal β€” landing in a pending state until you approve. Public webmail domains are blocked from self-registration.

Can we migrate our existing data room in?

Yes β€” bulk-upload folders and archives, or use the per-org import to recreate a folder tree and documents from an export. Files are virus-scanned and re-encrypted on the way in.

Data protection

Privacy & GDPR by design.

Anhuret is built to help you meet your obligations under the EU GDPR β€” with the technical measures baked in and your data kept under your control.

Ready when you are

Open your first data room in minutes.

Spin up a secure room, invite the other side, and run your diligence with confidence β€” or talk to us about self-hosting and enterprise volume.