How it works in Canada
On a typical Bay Street or Montreal transaction, the vendor’s counsel builds and manages the data room, even when the client pays for it. Associates and law clerks load documents, set user groups for each bidder and answer due diligence questions. Purchaser’s counsel, accountants, lenders and insurers get read access. Smaller firms in Halifax, Saskatoon or Kelowna run the same process on shareholder buyouts, asset sales and estate files, often with one lawyer and one assistant doing all of the setup.
Every provincial and territorial law society has adopted a code of conduct based on the Federation of Law Societies Model Code. Rule 3.3 makes the duty of confidentiality a lawyer’s duty, not the vendor’s, so the firm stays answerable if a bidder sees a document it should not. Law societies also expect firms to keep client files for years after a matter closes, which means the room needs a full export with its index and logs.
Firms also use rooms for reasons beyond deals: sharing productions with co-counsel, handing a client archive back at retainer end, or giving an expert witness a fixed set of material. In each case the question is the same: who has access, for how long, and can the firm prove it later. A shared drive link cannot answer that question; a room with named users, expiry dates and a downloadable access report can, and that report is often what a law society practice advisor asks to see after a complaint.
Best data rooms for law firms
Our five criteria, re-weighted for this use case, plus a small bonus for providers built around it.
- 1
Ellty ~C$211/mo 9.2 Visit Ellty - 2
iDeals Quote 8.9 - 3
Datasite Quote 8.7 - 4
Ansarada Quote 8.6 - 5
Intralinks Quote 8.6 - 6
Firmex Quote 8.6 - 7
SmartRoom Quote 8.5 - 8
Drooms Quote 8.4 - 9
Citrix ShareFile ~C$78/mo 8.0 - 10
DealRoom Quote 8.0
What goes in the data room
- 0100 Engagement and room rules
Retainer scope, NDA template, room terms of use and the contact list for the firm’s deal team.
- 0201 Corporate records
Articles, by-laws, minute books, shareholder register and the individuals with significant control register.
- 0302 Material contracts
Customer, supplier, licence and lease agreements, flagged where a change of control consent is needed.
- 0403 Financial statements
Audited or review engagement statements, interim results, and the working capital schedule used in the price.
- 0504 Tax
T2 returns, notices of assessment, GST/HST and QST filings and any open CRA correspondence.
- 0605 Employment
Key employment agreements, policies, collective agreements and anonymized payroll summaries.
- 0706 Real property
Title searches, leases, surveys and estoppel certificates for every location.
- 0807 Litigation and claims
Pleadings, demand letters and a schedule of threatened claims, without counsel’s privileged assessments.
- 0908 Regulatory and permits
Licences, inspection reports and filings with provincial or federal regulators.
- 1009 Disclosure letter drafts
Restricted to the firm and client until the schedules are settled.
- 1199 Privileged (internal only)
Counsel memos and opinions; never shared with bidder groups.
Canadian rules that apply
Law society codes of professional conduct
Each law society (Law Society of Ontario, Barreau du Québec, Law Society of British Columbia and the rest) imposes a duty to hold client information in strict confidence. Using a cloud provider is allowed, but the lawyer must take reasonable steps on security and supplier terms.
Solicitor-client and litigation privilege
Privilege belongs to the client, and careless disclosure can be argued as waiver. Keep legal opinions, internal memos and counsel correspondence out of bidder-facing folders and use a separate, restricted area for anything privileged.
PIPEDA s. 7.2 and provincial privacy laws
Personal information in a deal room can be disclosed without consent for a prospective business transaction if the parties agree to limit use, protect it and return or destroy it if the deal fails. Quebec Law 25 s. 18.4 and Alberta and BC PIPA set similar conditions.
File retention and closing
Law societies expect a complete client file to be kept after a matter ends. Export the final index, documents, Q&A log and access history before the room is shut down, and store them in the firm’s own records system.
Features to insist on
| Data room | Activity log | Dynamic watermarks | Q&A module | 2-step login | In-room redaction |
|---|---|---|---|---|---|
| Yes | Yes | Yes | Yes | No | |
| Yes | Yes | Yes | Yes | Yes | |
| Yes | Yes | Yes | Yes | Yes | |
| Yes | Yes | Yes | Yes | No | |
| Yes | Yes | Yes | Yes | Yes | |
| Yes | Yes | Yes | Yes | Yes | |
| Yes | Yes | Yes | Yes | Yes | |
| Yes | Yes | Yes | Yes | Yes |
- Activity log. Per-user history of opens, prints and downloads with timestamps, which you can export for the closing binder.
- Dynamic watermarks. The reader's identity and the date are printed across every page, which discourages screenshots and identifies the source of a leak.
- Q&A module. Bidders post questions inside the room; counsel or the CFO drafts the reply, someone approves it, and every exchange stays on file.
- 2-step login. Logins need a one-time code or authenticator approval on top of the password.
- In-room redaction. Hide social insurance numbers, pay figures or client names on the platform itself, without keeping two versions of the file.
How to set it up
- 1Confirm who owns the room
Decide in the retainer whether the firm or the client holds the account. If the firm administers it, name the responsible lawyer and the clerk who will manage uploads, and record that in the engagement letter so billing and file ownership are clear.
- 2Build the index before uploading
Start from the disclosure schedules in the draft purchase agreement and mirror them in the folder numbers. Bidders and their counsel can then match each representation to the supporting document without asking where it sits.
- 3Set groups by bidder and by role
Create one group per bidder, plus separate groups for the client, the firm and advisers. Give accountants financial folders only, and keep the privileged area visible to the firm alone. Test each group by viewing the room as that user.
- 4Screen personal information
Redact employee names, health details and SINs unless they are necessary for the decision. Have each bidder sign an NDA that matches PIPEDA s. 7.2 or Quebec Law 25 s. 18.4 before access is opened.
- 5Run Q&A through one channel
Route all questions through the room so answers are logged against the right folder. Assign a lawyer to approve every answer before release, since replies can later be read as representations.
- 6Archive at closing
Export the full room, including the Q&A log and access reports, and save it to the firm’s records system. Then close the room and confirm deletion terms with the provider in writing.
Common mistakes
- Letting the privileged folder inherit permissions from the parent folder, so a bidder group sees counsel’s memos.
- Using email attachments for late documents, which leaves gaps in the access log the firm relies on.
- Forgetting to revoke access for losing bidders the day exclusivity is signed.
- Closing the room before exporting it, which leaves the client file incomplete under law society retention rules.
FAQ
Can a Canadian law firm store client documents in a cloud data room?
Yes. Law societies across Canada accept cloud services if the lawyer takes reasonable steps: reviewing the provider’s security, confidentiality and data location terms, controlling access, and being able to retrieve the file. Several law societies publish cloud computing checklists that firms use as a starting point for that review.
Who should administer the room, the firm or the client?
Usually vendor’s counsel administers it, because the firm controls disclosure and answers questions. Some clients prefer to own the account and add the firm as administrator. Either works if the retainer says who pays, who can add users and who keeps the export after closing.
Does sharing a document in a data room waive privilege?
It can. Placing a privileged memo where the other side can read it gives them an argument that privilege was waived. Keep privileged material in a separate area visible only to the firm and client, and check group permissions before opening the room to bidders.
How long should the firm keep the room export?
Follow your law society’s file retention guidance and the firm’s own policy, which often runs six years or longer after the matter closes. Keep the export with its index, Q&A log and access reports so the firm can show exactly what was disclosed and when.