{steps.map((step, i) =>

{box(step, i, step.strong ? "strong" : null)} {i < n - 1 ? arrow(i) : null}

)}

{feedback ?

{glyph("loop")} {feedback.label ? {feedback.label} : null}

: null}

; }; A data room is a link rather than a delivery. It wraps a report you have **already sent** in access controls (a password, an optional email prompt, an expiry date) so you can hand the same numbers to someone outside your investor list without emailing them a file. The important consequence of that design: a data room does not have its own content. You do not assemble one from blocks. You pick a sent report, and the data room is a controlled way of reaching it. ## Publish one Data rooms live on the Reporting page, alongside your reports and requests. Existing rooms are counted by state: active, expired, revoked. The Vein Reporting page on the Data Rooms tab with the New Data Room button highlighted

The Vein Reporting page on the Data Rooms tab with the New Data Room button highlighted

The dialog opens on the report picker. Only reports you have already sent appear here, so if the one you want is missing, send it first. The Vein create data room dialog, showing the linked report picker and access settings

The Vein create data room dialog, showing the linked report picker and access settings

Name the room something that will make sense to the person opening it; they see it. Then decide how tightly to hold it: | Control | Default | What it does | | ------------------ | ---------- | ------------------------------------------------------ | | Password | Required | Every data room has one. There is no unprotected link. | | Require email | Off | Visitors identify themselves before entering | | Allow PDF download | On | Lets a visitor export the report | | Allow printing | On | Lets a visitor print from the browser | | Expiration | Set a date | The link stops working after it | | Watermark | Empty | Prints text across every page of the report | Leaving the watermark blank shows none. Filling it in (`STRICTLY CONFIDENTIAL`, or the name of the person you are sending it to) lays that text faintly behind the whole report, so a screenshot carries it too. Turn off PDF download and printing for a room you are handing to someone early in a conversation. It does not make the numbers unreachable, since a screenshot always works, but it keeps your report from being forwarded as an attachment. Send the link to the person who needs it, and send the password through a different channel. A link and its password in the same email is one forward away from being public. ## What a visitor sees Opening the link puts them through a confidentiality notice first, then the password, and then the email prompt if you required one. Only after that does the report appear. The link works for anyone holding it and the password. If either may have spread beyond who you intended, revoke the room and create a new one. The email prompt records who visited; it does not restrict who can. ## Track who opened it Publishing a room hands out a link; opening that room's detail view tells you what happened to it. During a raise this is the most useful screen in the product, because it is the only place Vein tells you something you did not already know. Every visit is recorded as a row: | Column | Shows | | -------- | ------------------------------------------------- | | Visitor | Their name and email, with the IP address beneath | | Date | When they opened the room | | Duration | Roughly how long they stayed, in minutes | The list is paginated, newest first, and a room nobody has opened says so rather than showing an empty table. The same view repeats the room's current settings above the history, so you can see what a visitor was permitted to do without opening the configuration again. Two limits are worth holding in mind. A visitor row is only as identifiable as the room let it be. If you did not require an email address, visitors appear as **Anonymous** with only an IP and a timestamp, and that cannot be applied retroactively to visits that already happened. And duration is time the room was open, not time spent reading; a tab left open over lunch produces a long session. Treat these as a signal of interest across several visitors rather than a measurement of any one of them. Turn on the **Data Room Activity** email in [notification settings](/guides/notifications) to hear about visits as they happen rather than checking this screen. It is the one notification that defaults to off, because it is noisy unless you are actively sharing something. ## Revoking An active room can be revoked from the same detail view. The link stops working immediately for everyone holding it, and the room stays in your list marked revoked rather than vanishing, so the record of who visited survives the revocation. Revoking stops future visits. It does nothing about what an earlier visitor already saw, downloaded, or screenshotted. If a room reached someone it should not have, revoke it and assume the contents travelled; then send a new report and publish a fresh room against that one for the people who should still have it. ## Keeping it current Because a data room points at a sent report, it shows what that report showed when you sent it. It does not quietly update as your metrics move. To share newer numbers, send a new report and create a room against that one, which is the same guarantee your investors get, and for the same reason.