A data room is a controlled repository for sharing confidential material during due diligence. Access should be agreed internally, limited appropriately, and logged. section 14.5.4
Apply practical safeguards when responding to requests:
- Agree with the CEO and, when needed, HR on what can be disclosed; never lie or misrepresent. section 14.5.4
- Provide source code through a logged archive or read-only version-control account. section 14.5.4
- Restrict database access to screen sharing, using counts or sample records without transferring control. section 14.5.4
- Create a specific read-only cloud account for infrastructure review, and say no when requested access could compromise systems. section 14.5.4
A safe review request
A reviewer asks to inspect production data directly. Offer a screen share with counts and sample records, document the request, and refer exceptions to the CEO. section 14.5.4
