| Criterion | Firm DMS | Legacy VDR | Sifrsys |
|---|---|---|---|
| Matter separationDocuments, search, notifications, AI answers | Need-to-know access control inside the firm | A room per matter | A room per matter, and the AI filter runs in the SQL query |
| External sharing | Not what it is for | The core job | The core job |
| Records and retention | iManage names Records Manager and Disposition Manager | Varies. Ask about post-matter export | Full audit trail of document access. Not a records system |
| Leak attribution | Internal only | Dynamic watermarking | Watermark burned into the page image, not an overlay |
| How it reaches the bill | Firm overhead | Per-project quotes map to a disbursement | Flat monthly, published. Firm overhead by default |
| Security certification | Ask the vendor | Usually SOC 2 and ISO 27001 | None. See the limit below |
Question one: is the matter wall structural or clerical?
Every tool claims separation. The question is which layer it lives in, because a wall maintained by hand fails the way all manual controls fail: quietly, on a Friday, when someone is covering for a colleague.
The practical version of the question is the one your conflicts partner already asked. Not "can you separate matters" but "show me that this associate, who is staffed on both, cannot reach the other file." A folder tree answers that with a screenshot of permissions on the day you take it. An architecture answers it the same way every day, including the day someone is added to a matter in a hurry.
- A folder per matter in one shared spacebypassable
Separation by naming convention and good intentions.
- An access list maintained by handbypassable
Correct on the day it is written. Drifts from the first secondment onward.
- A separate room per matterenforced
The matter is the unit of access, not a folder inside a shared one.
- Tenant and participant filter inside the retrieval queryenforced
AI retrieval cannot return a row from another matter. There is no path.
The last layer is the one to press hardest on, because it is new and most vendors have bolted AI onto an architecture that predates it. If the assistant reads everything and filters afterwards, or is merely instructed which documents to ignore, then your ethical wall now depends on a language model following directions. In Sifrsys the filter runs inside the SQL query, using the tenant identifier and a per-participant document access check, so a chunk on the far side of the wall is never selected. That exclusion is structural, and CI asserts it against the deployed function's source in pg_proc.prosrc on every push.
Question two: what does the record have to survive?
A matter ends. The obligation does not. Years later someone asks what was disclosed to whom and on what date, and the answer has to come from your file rather than from a vendor you stopped paying in 2027.
- Engagement letterRoom opened for this matter only
- Parties invitedClient, counterparty, opposing counsel as groups
- DisclosureWatermarked, logged, released to groups
- Matter closesExport the audit trail to the file
- RetentionRoom retained or destroyed to policy
Settle three things in the contract, not the demo. What the export format is. Whether the trail records every access or a sample. How long the vendor keeps the room after you stop paying, and what happens to it then. These are the questions that matter to a professional indemnity insurer, and they are rarely on a feature page.
Question three: who pays, and how does it appear?
This decides more purchases than any feature. A per-project fee maps cleanly to a disbursement on one matter, which is why the incumbents sell that shape: Firmex publishes a single-project room alongside an annual subscription on its own pricing page, checked 4 August 2026, with the price behind a quote request in both cases. A flat firm-wide subscription is overhead recovered through rates, which is simpler to administer and harder to explain to a client who wants the line item.
Sifrsys is the second shape: published flat plans at $399/mo for Teams and $999/mo for Pro, custom Enterprise, no per-page fees, and 90 days notice before any price change. For a firm running several matters at once that is usually cheaper and always more predictable. For a firm that recovers everything as a disbursement it is a change to how the bill reads, and worth raising with finance before the trial rather than after.
Question four: where does the DMS end and the room begin?
Keep the line clean. The DMS holds the file of record and the retention policy. iManage names Records Manager and Disposition Manager for exactly that work, and does not publish pricing, checked 4 August 2026. The data room is where people outside the firm come, and the reason to keep it separate is the same reason you do not give opposing counsel a guest account on your internal systems.
In practice that means the room holds the disclosure set for one matter, not the working papers, and everything that belongs in the file is exported back at the end. A vendor proposing to become your records system is proposing a project you did not budget for.
The recommendation
If a client's guidelines dictate the platform, this is a short evaluation and the answer is the certified incumbent. Where the firm chooses, the deciding factor is usually the first question rather than the fourth: a room per matter with the wall enforced in the query rather than in the folder structure, a real audit trail, watermarking that survives a crop, and a price that does not change mid-matter. Counsel running a sell-side process should also read the M&A guide, which is candid about where the incumbents are the better buy, and firms acting for sponsors will find the private equity guide covers what the client is doing on the other side. For the ongoing client-facing case rather than the deal case, see client portals.
Sources
Facts about other vendors come from their own pages and were checked on 4 August 2026. iManage Work, including Records Manager and Disposition Manager: imanage.com/products/work. Firmex pricing shapes: firmex.com/pricing. Datasite products and pricing statement: datasite.com/en/products. Where a vendor does not publish a figure, this guide says so rather than estimating one. Sifrsys pricing is on the pricing page.