Why Smart UK Founders Now Build a Vendor Shortlist Before They Build a Budget

The first quote I ever saw for a virtual data room was £14,000 for a six week project. We paid it. We used maybe a fifth of what we bought.

That was the moment I stopped treating due diligence software like a utility bill and started treating it like hiring a locksmith for a specific door. The price barely matters if the door is wrong.

Most UK teams do this backwards. They set a number, then shop inside that number, then discover three weeks into a live deal that half the tools they can afford cannot do the one thing the deal requires. Before you look at any pricing page, you should be reading an independent https://dataroom.org.uk/ breakdown of what each platform actually does, because feature sets diverge far more than headline prices suggest. A shortlist built on capability first, cost second, will beat a budget built on cost first every single time.

What the shortlist actually protects you from

Buying on price alone is not cheap. It is deferred cost.

Here is what I have watched go wrong, in order of how often it happens. A fund signs a twelve month contract to get a lower monthly rate, then the deal dies in month two and nobody needs the room again until next spring. A law firm picks the platform with the prettiest interface and finds out during disclosure that query logging is buried two menus deep. A founder buys the cheapest tier, then pays for two extra weeks of access because the migration dragged.

None of that shows up in a comparison table. All of it shows up in your week.

There is a structural reason this keeps happening, and it is not stupidity. Software procurement in the UK has simply gotten more complex faster than most small teams have built the habit of researching it. According to techuk, the trade body representing the UK technology sector, digital adoption across British businesses has moved in one direction for a decade, and the buying process has not kept pace with the products. You end up choosing between fifteen platforms that all sound identical on a landing page.

The shortlist is what makes them stop sounding identical.

Build your shortlist in four passes

I use a four pass filter, and I have used it on deals small enough to run solo and large enough to need three outside counsel firms. I call it the Four Pass Filter, and the whole point is that each pass eliminates on a different axis so you never compare apples to invoices.

• Pass one, the hard requirement. Write down the single thing that would kill the deal if the platform could not do it. Q&A workflow. Redaction. Drag and drop bulk permissions. Whatever it is, write one line and be brutal. Anything that fails this line is gone, regardless of price.
• Pass two, the deal window. How long do you actually need it? A three week window and an eighteen month window demand completely different contract shapes. Do not buy an annual license for a one-off sale.
• Pass three, the counterparty. Who else logs in? If the other side is a large regulated buyer, they may already have a preferred platform, and forcing them onto an unfamiliar tool costs you goodwill you will need later.
• Pass four, the total. Add the subscription, the setup fee, the per page or per gigabyte overage, and the cost of the hours your team spends learning it. That last one is real and it is usually the largest.

Four passes, and you go from fifteen options to two or three. That is your shortlist. Notice nothing in there was about brand recognition.

Where most teams cut the wrong pass

They cut pass one. They assume the hard requirement will work out, because surely every platform does redaction by now. They do not, or they do it differently enough to matter, and you find out at the worst possible moment.

If you only get one pass right, get that one right.

The one thing people forget to check

Data residency. It gets treated as a footnote and it should be one of your first three questions.

If your documents touch personal data about UK citizens, where that data physically sits is not a technicality. The Information Commissioner’s Office sets out the UK’s data protection rules, and the rules follow the data, not the company. A platform that stores everything outside the UK is not automatically wrong for you, but you need to know it, and you need to know it before the counterparty’s lawyers ask you in writing.

Practically, this means asking two questions in your first call with any vendor. Where do you host, and can you guarantee it in the contract? If the answer to the second one is vague, that tells you something about how the rest of the relationship will go.

I would rather pay more for a platform with a boring answer to that question than less for one with an interesting one.

Why pricing pages lie to you without lying

No vendor is being dishonest when they advertise a low entry price. They are just pricing a different product than the one you need.

Entry tiers usually cap storage, cap users, or cap the number of active projects. Those caps are invisible until a deal gets big. Here is the rough shape of how costs move as you scale, which will not match any single vendor’s rate card but does match the pattern I have seen across a lot of contracts.

That last row is the one that catches people. It is not the software cost that hurts. It is the four weeks the software’s security review adds to a deal that was already moving too slowly.

So when you compare, compare the timeline, not the invoice. A platform that is £2,000 more expensive and clears review in three days is cheaper than one that saves you £2,000 and takes three weeks.

A quick self-check before you sign anything

Run this list the day before you commit. It takes twenty minutes and it has saved me from at least two bad contracts.

1. Does it clear pass one, on a live test, not a demo?
2. Is the contract length matched to the deal window, not to the sales quarter?
3. Did you ask about hosting location and get a written answer?
4. Have you priced the overages, not just the base tier?
5. Has your counterparty confirmed they can access it without a support ticket?

Five questions. If you can answer all five, sign it.

What this actually changes

The shortlist is not a research project. It is fifteen minutes of thinking that prevents a fifteen thousand pound mistake, and in my experience the thinking part is the part everyone skips.

There is also a compliance dimension people miss. If you handle corporate records at any scale, basic governance expectations around retention and access control now apply to small firms the same way they apply to large ones, which is why the UK government’s own guidance on information handling is worth skimming before you sign a storage contract, not after.

Here is the honest version of what I think about all this. The platforms are not the problem. The problem is that most teams let a pricing page do the job of a requirements document. A platform that is thirty percent cheaper and eighty percent wrong is not cheaper. It is just a more expensive way to learn.

So before your next deal, write the one line that matters, apply the four passes, and see what survives. You will probably be surprised by which names are still standing, and by which ones quietly never made the list.