Legal documents
Effective Date: 2 October 2026
Last Updated: 2 October 2026
Version: 2026-10-02
These are the documents that govern the use of MandateRoom and the handling of personal data. The Terms of Service are the agreement; the other documents explain, supplement or are incorporated into it, as the Terms of Service say. Each shows its own version and the date it took effect. We keep earlier versions of the Terms of Service, and we will send you an earlier version of any document on request to hello@mandateroom.com.
Agreements
- Terms of Service (version 2026-10-09, effective 9 October 2026)
The terms of service that govern the use of MandateRoom, a virtual data room for M&A due diligence, including fees, liability and disputes. - Acceptable Use Policy (version 2026-10-02, effective 2 October 2026)
What may and may not be uploaded to or done in MandateRoom: restricted data categories, prohibited conduct, enforcement and how to report abuse. - Data Processing Addendum (version 2026-10-09, effective 9 October 2026)
The data processing addendum for personal data in customer content, with sub-processor terms and transfer clauses for the EU, UK and Switzerland. - Refund Policy (version 2026-10-02, effective 2 October 2026)
The MandateRoom refund policy for prepaid room terms, the credit for technical downtime, and how to ask for a refund or a credit.
Privacy and data
- Privacy Policy (version 2026-10-09, effective 9 October 2026)
How MandateRoom collects, uses and protects personal data, including account, access-log and watermark data, and the rights you have over it. - India Privacy Notice (version 2026-10-09, effective 9 October 2026)
How MandateRoom handles the personal data of people in India under the Digital Personal Data Protection Act, 2023, and how to use your rights. - Sub-processors (version 2026-10-09, effective 9 October 2026)
The providers that process personal data for MandateRoom, what each one handles and where, and how we give notice of changes. - Cookie Notice (version 2026-10-02, effective 2 October 2026)
The cookies and browser storage MandateRoom uses: only what the service needs to work, with no analytics, advertising or tracking. - Data Return, Retention, Deletion and Legal Hold Policy (version 2026-10-02, effective 2 October 2026)
How customer data is returned, kept, deleted and held for legal reasons when a MandateRoom subscription ends, and what is kept as evidence.
Policies
- Legal Requests from Authorities (version 2026-10-09, effective 9 October 2026)
How MandateRoom responds to court orders, subpoenas and other legal requests from authorities for customer data, in India and elsewhere. - Grievance Officer and Contact Points (version 2026-10-09, effective 9 October 2026)
The MandateRoom Grievance Officer: how to send a complaint, how quickly we respond, and the other contact points we publish. - Support and Service Levels (version 2026-10-02, effective 2 October 2026)
How MandateRoom support works, what we aim for on response times, and what we do and do not commit to on availability. - Accessibility Statement (version 2026-10-02, effective 2 October 2026)
MandateRoom's accessibility aim, where we stand against WCAG 2.2, the known limitations and how to ask for help.
Security and trust
- Vulnerability Disclosure Policy (version 2026-10-02, effective 2 October 2026)
How to report a security vulnerability in MandateRoom, how to test safely, our safe-harbour promise and what to expect from us. - Security & trust: what the platform does to protect a data room, and what it does not claim.
- Trust Center: the certification status table.