Anhuret is the virtual data room for M&A, due diligence and fundraising that runs inside your own infrastructure and encrypts every file with keys only you hold — with deal workflows, in-browser Office and private AI built in. So you never have to put a live deal on someone else's server.
Most data rooms ask you to hand your most confidential deal documents to a third-party SaaS vendor. For a growing set of teams — regulated, cross-border, or simply careful — that's a non-starter. Anhuret is built for them.
Run every mandate in a room you can white-label and self-host, with unlimited-deal economics.
Diligence, litigation and regulatory rooms that stay inside your perimeter and satisfy client confidentiality by design.
Protect IP and clinical data, keep it EU-resident, and run AI on-prem for air-gapped review.
Deploy fully self-hosted or air-gapped, with your own keys — where third-party cloud simply isn't allowed.
Deal-level isolation, LP-safe data, and unlimited concurrent rooms across your pipeline.
Internal diligence, vendor reviews, audits and board reporting under your own governance.
From the first NDA to signing, Anhuret replaces the tangle of file shares, spreadsheets and email threads with a single secure workspace — one you can run in your own cloud, so nothing sensitive ever leaves your perimeter.
Protection that holds up to a buyer's infosec review.
Every object encrypted with a unique AES-256-GCM key, wrapped by your KMS. Ciphertext and keys are never stored together.
Local, AWS KMS or HashiCorp Vault. You hold the master key — we can't read your documents.
An HMAC-keyed, hash-chained activity log that verifies its own integrity — undetectable edits are impossible.
Per-user view / download / print / share / annotate rights, inherited down the folder tree.
TOTP two-factor with re-authentication on enrollment, Argon2id password hashing, rotating tokens.
Every view is stamped with the viewer's identity, time and IP — on-screen and burned into PDFs.
Screenshot deterrents, disabled right-click & printing, blur-on-blur, and download/print/copy locked in read-only Office previews.
Every file is scanned (ClamAV) before it ever reaches the room.
Enforce NDA acceptance before anyone sees a single document; changes reset acceptance.
Structure, assign and track the whole process.
Each transaction is a data room, a member group and a status (ongoing → closed / failed) in one place.
Set a deal's email domain and let the other side self-register — attached to the deal, pending your approval.
Invitation- or domain-only sign-up, with public webmail domains (gmail, outlook…) blocked.
A built-in M&A checklist plus your own reusable templates — apply to a deal in one click.
Owners, due dates, priorities, self-assign, and progress notes that link to the file that satisfies them.
Generate a numbered folder per DD category for a deal, with tasks linked to their folder.
Ask, route and answer questions against a specific document — no more email chains.
Members request access; admins approve in one click from email or Microsoft Teams.
Move, rename, number, delete and grant across many files at once; import users in bulk.
Work on the documents without leaving the room.
View and edit Word, Excel and PowerPoint in the browser (Collabora) — read-only previews stay locked down.
Every change is a new, integrity-checked version; download any prior version and compare.
Find documents by what they say, not just their names.
Discussion pinned to the exact document, alongside Q&A and versions.
Expiring, optionally password-protected links — watermarked and access-logged like everything else.
Forward documents straight into a room via a monitored inbox (IMAP/POP3).
Answers grounded in your documents — never beyond a viewer's permissions.
RAG Q&A over the room — every answer is scoped to what the asker is actually allowed to see.
One-click summaries of long documents to speed up review.
Draft Q&A responses from the underlying documents, ready for a human to approve.
Run fully on-prem (self-hosted models) or use a cloud provider — with per-classification egress controls.
Your documents are used to answer your questions, never to train a third-party model.
Documents are embedded on ingest for fast, meaning-aware retrieval.
Enterprise plumbing without the enterprise headache.
Schema-per-tenant isolation keeps every organization's data fully separated.
Upload your logo; the room wears your identity.
Send from your own SMTP and push privileged-action alerts to Microsoft Teams.
Scheduled platform disaster recovery plus one-click per-org export/import.
English, German, Hungarian, Slovak and French, per user.
Deploy with Docker Compose or Terraform (AWS) in your own environment — or let us run it.
Legacy data rooms are closed, opaque and priced by the page. Cloud SaaS rooms keep your documents on their servers. Open-source tools are self-hostable but thin on real M&A workflow. Anhuret is the one option that's self-hostable, bring-your-own-keys and deal-complete.
| Capability | Anhuret | Legacy enterprise | SaaS VDRs | Open-source VDRs |
|---|---|---|---|---|
| Bank-grade encryption at rest | ✓ | ✓ | ✓ | ✓ |
| Bring-your-own-KMS (you hold the keys)AWS KMS / HashiCorp Vault | ✓ | enterprise add-on | — | — |
| Self-hosting / on-prem option | ✓ | — | — | ✓ |
| Per-object envelope encryption | ✓ | varies | — | — |
| Tamper-evident, self-verifying audit trail | ✓ | log only | log only | log only |
| Complete M&A workflow (Q&A, checklists, onboarding) | ✓ | ✓ | varies | partial |
| Built-in private AI (permission-scoped) | ✓ | paid add-on | — | varies |
| In-browser Office editing | ✓ | viewer only | varies | varies |
| Counterparty self-onboarding by domain | ✓ | — | — | — |
| Transparent / auditable codebase | ✓ | — | — | ✓ |
| Flat pricing — no per-page fees | ✓ | per-page | per-user tiers | free / flat |
Comparison reflects common positioning of enterprise VDRs (e.g. Datasite, Intralinks), mid-market SaaS VDRs (e.g. iDeals, Firmex, Ansarada) and open-source tools (e.g. Papermark) based on publicly available information as of 2026. Specific competitor capabilities vary by plan and change over time — always confirm current offerings directly.
Every plan includes AES-256 envelope encryption, automatic TLS, unlimited documents within your storage, and the full security toolkit. Managed rooms are free until your deal goes live — you only start paying when you invite the first external guest.
Managed by us on dedicated infrastructure, or entirely on your own — with keys only you hold.
All plans: no per-page fees, no per-document charges, cancel anytime. Managed rooms are free until go-live. Non-profit & academic discounts available. Prices shown for illustration.
Yes. Anhuret ships as a Docker Compose stack (Postgres, object storage, malware scanning, the app and edge) and as Terraform for AWS. Run it in your own VPC or on-prem, point it at your KMS, and your documents never leave your control — the codebase is fully transparent.
Every document is encrypted with a unique AES-256-GCM data key. That key is wrapped by a master key held in your KMS (local, AWS KMS or HashiCorp Vault). The ciphertext lives in object storage and the wrapped key in the database — they're never stored together, and sensitive fields (names, MFA secrets, extracted text) are encrypted too.
Each event is chained to the previous one with a keyed HMAC whose secret lives outside the database. A built-in verifier recomputes the whole chain and detects any edit, deletion, reordering — or an attempt to wipe the log and rewrite it. A plain log can be quietly altered by anyone with database access; ours can't.
Only if you choose a cloud model — and even then, egress is gated by document classification and your documents are never used to train anyone's model. You can run entirely on self-hosted models for a fully air-gapped deployment. Every AI answer is also permission-scoped: it can only draw on documents the person asking is allowed to see.
Per-page billing punishes you for doing thorough diligence and makes costs impossible to predict. We charge per deal room, so uploading one more contract never changes your bill.
Invite them individually, import a list in bulk, or set a deal's registration domain (e.g. targetco.com) so their team can self-register straight into that deal — landing in a pending state until you approve. Public webmail domains are blocked from self-registration.
Yes — bulk-upload folders and archives, or use the per-org import to recreate a folder tree and documents from an export. Files are virus-scanned and re-encrypted on the way in.
Because for some documents, "trust our security" isn't good enough — the data can't leave your control at all. Self-hosting Anhuret puts the entire platform inside your own cloud or on-prem, encrypted with keys only you hold. Your most sensitive deals never touch a third-party server, which clears the procurement and compliance bars that rule out cloud-only VDRs — common in regulated finance, biotech, defence and public-sector work.
On managed plans you can build and organise a room, upload documents, and set everything up at no charge. Billing only starts when you invite your first external guest — or after 90 days, whichever comes first. If a deal never proceeds, you don't pay for a room that stayed internal.
Anhuret's controls are built and documented against the SOC 2 and ISO 27001 frameworks, and formal certification is in progress. In the meantime, self-hosting means you don't have to take our word for it: the codebase is transparent, the platform runs in your environment, and — with bring-your-own-KMS — we technically cannot read your documents. We're happy to share our security documentation and support your own review.
Anhuret is built to help you meet your obligations under the EU GDPR — with the technical measures baked in and your data kept under your control.
To provide the data room we process account data (name, email, role), authentication data, the documents you upload, and activity logs. In self-hosted deployments this all stays inside your own infrastructure.
The application uses only strictly-necessary browser storage to keep you signed in. There are no advertising or third-party tracking cookies, and this marketing site sets none either — so no tracking-consent is required, only the notice you see at the bottom of the screen.
You choose where your data lives — EU regions on our managed hosting, or entirely on your own infrastructure when self-hosted. AI features can run on fully local models, so document content need never leave your environment. Where a cloud AI model is used, egress is gated by document classification.
This is a plain-language summary, not the full legal notice. A production deployment should pair it with a reviewed Privacy Policy and Data Processing Agreement, a defined lawful basis and retention schedule, and — where required — a named DPO and Records of Processing. We can provide a DPA and assist with your assessment.
Spin up a secure managed room in minutes, invite the other side, and run your diligence with confidence. Or talk to us about hosting Anhuret inside your own cloud, with your own keys.