Key Takeaways:
- Data room administration is substantive legal work, not overhead. Populating and organizing a virtual data room requires legal judgment about privilege, confidentiality, and disclosure obligations—making it a billable activity that many firms mistakenly absorb as a cost of doing business.
- Mid-sized firms lose an estimated $6,000–$30,000 per transaction—and potentially far more on complex deals—by failing to capture the dozens (sometimes hundreds) of hours paralegals, associates, and staff spend building, maintaining, and managing VDRs during M&A deals, litigation, and due diligence processes.
- A transparent “Data Room Rate” structure protects your firm ethically and financially. By establishing clear billing practices for VDR administration upfront—through engagement letters, tiered rate structures, and detailed time entries—you can recover this revenue while actually improving client trust.
Here’s a scenario that plays out at mid-sized law firms every single week: Your paralegal has spent the last three days uploading, indexing, and organizing 4,200 documents into a virtual data room for an acquisition. She’s carefully reviewed each file for privilege issues. She’s built a logical folder structure that mirrors the buyer’s due diligence checklist. She’s set granular permissions so that the target’s HR records are only visible to employment counsel while financial statements are accessible to the broader deal team.
And when it comes time to bill the client? Those 30-plus hours of skilled, judgment-intensive work get written off as “deal overhead.” Or worse, they never make it onto a timesheet at all.
If this sounds familiar, your firm is leaving serious money on the table. And you’re not alone. According to the 2024 Legal Trends Report, lawyers bill just 2.9 hours of an 8-hour workday, with a staggering 48% of their time consumed by administrative tasks. But here’s the critical distinction that too many firms miss: not all “administrative” work is created equal. Populating and managing a virtual data room isn’t filing paperwork. It’s substantive legal work that demands training, judgment, and accountability—and it deserves to be billed accordingly.
Welcome to the case for the “Data Room Rate.”
The Hidden Economy of VDR Administration
Virtual data rooms have become the backbone of modern legal transactions. Whether your firm handles M&A due diligence, complex litigation, real estate closings, or regulatory investigations, chances are you’re using a VDR on a regular basis. In fact, 81% of the top 100 law firms have invested in virtual data rooms, and adoption among mid-sized firms has surged in recent years as deal complexity and cybersecurity concerns have escalated.
But the rise of VDRs has created a billing blind spot that few firms have addressed.
Think about what VDR administration actually involves. On a typical M&A transaction, someone at your firm—usually a paralegal, junior associate, or dedicated litigation support professional—is responsible for collecting thousands of documents from the client, reviewing each one for completeness and privilege concerns, organizing them into a logical folder structure that aligns with standard due diligence checklists, setting access permissions for multiple user groups with different levels of clearance, uploading and indexing everything with proper naming conventions, responding to buyer requests for supplemental documents throughout the process, and monitoring the audit trail for unauthorized access or suspicious activity.
This isn’t data entry. It’s document management that requires an understanding of the legal issues in the case, the transaction structure, confidentiality obligations, and the strategic considerations that determine what gets disclosed, when, and to whom. As one Jones Foster senior counsel noted in describing data room management, the appointed administrators “act as gatekeepers who control access, manage security, grant access to upload or download documents, and organize the documents in the data room.”
Yet many firms treat this work the way they’d treat photocopying or courier services—as a cost of doing business that’s baked into the overhead.
Quantifying the Revenue Leak
Let’s put some numbers to this problem.
A mid-market M&A transaction typically generates between 2,000 and 10,000 documents for the data room. Data room providers report that document volumes disclosed during due diligence reached record levels in 2024, and the trend is accelerating. Due diligence timelines are growing longer across the board, with 59% of firms reporting that one to three additional months have been added to the process in recent years.
For a mid-sized firm handling this kind of deal, VDR administration might consume 40 to 120 hours of staff time over the life of the transaction—from initial setup through closing. At a typical paralegal billing rate of $150 to $250 per hour, that’s $6,000 to $30,000 in potential revenue per deal. For complex transactions with multiple bidders, extensive supplemental requests, or prolonged due diligence periods, the number can climb even higher.
Now multiply that across your firm’s annual deal volume. If your corporate practice handles 10 to 20 transactions per year, you could be absorbing $60,000 to $600,000 annually in unbilled VDR administration time. For litigation-focused firms managing large document productions, the numbers can be similarly staggering.
And this doesn’t even account for the VDR platform costs themselves. While some firms pass through the subscription cost as a disbursement—Firmex, for example, explicitly encourages firms to “recoup the cost of your Firmex data room through a flat fee or usage-related charge, just like any other disbursement or admin fee”—the labor required to actually populate and manage the platform is where the real value (and the real revenue leak) lies.
The irony is hard to miss. Your firm invested in VDR technology specifically to make transactions more efficient, and it does. But the administrative work required to run the VDR effectively is work your firm performs, and it has real value to the client. Not billing for it isn’t a competitive advantage. It’s a realization rate problem.
The Ethics of Billing for Data Room Work
Before we go further, let’s address the elephant in the conference room: Can you ethically bill for this?
The answer, under both the ABA Model Rules and prevailing ethics opinions, is a clear yes—provided you do it right.
ABA Model Rule 1.5(a) establishes the foundational principle: fees must be reasonable. The rule enumerates factors that determine reasonableness, including “the time and labor required” and “the skill required to perform the legal services properly.” VDR administration, when it involves legal judgment about privilege, disclosure obligations, and document organization, clearly falls within the scope of professional services that can be billed.
ABA Formal Opinion 93-379, the landmark opinion on billing practices, draws an important distinction between general office overhead (which should be absorbed into the firm’s fee structure) and substantive professional services (which can be billed separately). The key question is whether the work requires the kind of training, skill, and judgment that distinguishes professional legal services from clerical tasks.
Data room administration sits squarely on the professional services side of that line. The paralegal reviewing documents for privilege issues before uploading them to the VDR is performing substantive legal work. The associate deciding how to structure the data room to align with disclosure obligations is exercising legal judgment. The litigation support specialist managing access permissions to protect confidential information is applying specialized knowledge.
Courts have consistently held that paralegal services are not simply overhead—they’re billable professional services that reduce litigation costs. As the Oklahoma Supreme Court ruled in Taylor v. Chubb, paralegal fees should be billed separately, and the tasks must “contain substantive legal work under the direction or supervision of an attorney.” VDR administration, when performed by paralegals exercising judgment under attorney supervision, fits this description precisely.
Where firms run into ethical trouble is not in billing for the work itself, but in how they bill for it. ABA Opinion 93-379 makes clear that “in the absence of an agreement to the contrary, it is impermissible for a lawyer to create an additional source of profit for the law firm beyond that which is contained in the provision of professional services themselves.” In other words, you can’t double-dip by billing for VDR administration time and then also marking up the VDR platform subscription as a profit center. The platform cost should be passed through at actual cost (or with a reasonable allocation of overhead), while the professional time should be billed at appropriate rates.
The critical ingredient? Transparency. If your engagement letter clearly identifies VDR administration as a billable activity and specifies the applicable rates, you’re on solid ethical ground.
Building Your Data Room Rate Structure
So how do you actually implement this? Here’s a practical framework that mid-sized firms can adopt without a complete overhaul of their billing practices.
Define What’s Billable vs. What’s Overhead
Not every minute spent near a data room is billable. The key is distinguishing between tasks that require legal judgment and tasks that are purely mechanical. Billable VDR activities include document review for privilege and confidentiality issues prior to upload, strategic organization of the data room structure to align with legal requirements, setting and managing access permissions based on deal structure and confidentiality considerations, responding to due diligence requests that require legal assessment, monitoring audit trails and flagging potential security or compliance concerns, and coordinating with opposing counsel or counterparties on data room access issues.
Activities that are more appropriately treated as overhead include basic file uploading without review (drag-and-drop mechanical tasks), routine system administration like password resets or generic user setup, and internal IT troubleshooting related to the VDR platform.
The line isn’t always bright, and reasonable minds can differ on where specific tasks fall. The important thing is to have a policy and apply it consistently.
Establish Rate Tiers
Your billing rates for data room work should reflect the level of professional skill involved. A tiered approach works well. Senior associate or partner oversight of data room strategy and privilege review commands a full attorney rate. Paralegal or junior associate work on document organization, upload review, and permission management should be billed at the standard paralegal or junior associate rate. Litigation support specialist or project management time for technical setup, indexing, and ongoing maintenance can be billed at a specialized rate that reflects their technical expertise.
Mid-sized firms average $341 per hour for lawyer time, while paralegal rates typically range from $150 to $250. For data room work, the blended effective rate often falls in the $175 to $275 range, depending on the mix of personnel involved.
Update Your Engagement Letters
This is where the rubber meets the road. Your engagement letter should explicitly address VDR administration as a component of the representation. Sample language might read: “In connection with this matter, the Firm will establish and maintain a virtual data room for the secure storage, organization, and sharing of documents. Time spent by firm personnel on data room administration—including document review, organization, privilege screening, access management, and ongoing maintenance—will be billed at the applicable rates for the personnel performing the work. The cost of the virtual data room platform itself will be passed through as a disbursement at the Firm’s actual cost.”
This kind of upfront transparency in your billing guidelines is precisely what ABA Rule 1.5 contemplates. It eliminates surprises, sets expectations, and gives the client an opportunity to discuss the arrangement before work begins.
Track Time Meticulously
Here’s where most firms fail, even when they’ve decided in principle to bill for VDR work: they don’t actually capture the time.
Remember that statistic about lawyers billing only 2.9 hours of an eight-hour day? A huge chunk of that lost time comes from administrative tasks that attorneys and paralegals perform but don’t record because they don’t think of them as “real” billable work. VDR administration is a prime example.
The solution is to create specific task codes or activity codes for data room work within your time tracking system. This does two things: it signals to your team that this work is billable (and therefore worth tracking), and it gives you data to analyze the true cost and profitability of VDR administration across your practice.
Detailed billing descriptions matter enormously here. Compare these two entries:
Poor: “Data room work; 3.5 hours”
Better: “Reviewed and organized 147 documents received from client’s HR department for inclusion in VDR; screened for attorney-client privilege and work product; established sub-folder structure for employee benefit plans and employment agreements; set restricted access permissions for buyer’s employment counsel team; 3.5 hours”
The second entry communicates clear value to the client and provides the specificity needed to withstand any challenge to the reasonableness of the charge.
The Client Perspective: Why Transparency Wins
You might be thinking: “My clients will push back if I start billing for data room time.” It’s a fair concern. But the reality is more nuanced than you might expect.
Corporate clients—especially sophisticated repeat players in M&A—understand that data room work is part of the deal. What they don’t appreciate is hidden costs. When VDR administration is baked into inflated associate hours or disguised as vague “deal management” time, clients feel deceived. When it’s broken out as a transparent line item with detailed descriptions and reasonable rates, clients can evaluate it on its merits.
In fact, many corporate legal departments are deploying increasingly sophisticated tools to analyze outside counsel billing. They’re already scrutinizing your invoices for block billing, vague descriptions, and excessive associate time. A clearly labeled, well-documented data room charge actually demonstrates the kind of billing discipline these clients reward.
There’s also a competitive angle. If your firm absorbs $30,000 in VDR administration costs on a transaction, that cost doesn’t disappear—it gets spread across your other fees in less transparent ways. You might unconsciously inflate associate hours elsewhere to compensate, or you might just accept a lower margin on the deal. Neither outcome serves the client well.
A transparent data room rate, by contrast, allows you to offer competitive pricing on the legal work itself while ensuring that the administrative infrastructure supporting the deal is fairly compensated. It’s the same principle behind alternative fee arrangements: align your billing structure with the value you deliver, and everyone benefits.
Technology as a Force Multiplier
The good news is that technology is making VDR administration both more efficient and easier to bill for.
Modern VDR platforms offer features like AI-powered document indexing, automated folder structure templates, and smart search capabilities that reduce the manual labor involved in setting up and maintaining a data room. Companies using AI for due diligence report 30-40% lower professional service fees, driven in part by automated document processing.
But here’s the key insight: efficiency gains from technology should benefit both the firm and the client. If AI-powered indexing reduces your data room setup time from 40 hours to 25 hours, you should absolutely pass that savings along to the client in the form of a lower bill. But you should still bill for the 25 hours at an appropriate rate that reflects the professional judgment involved.
On the billing side, automated time tracking and billing software can ensure that VDR time is captured contemporaneously—which matters more than you might think. Research consistently shows that delayed time entry costs firms dearly: recording time at the end of the day loses 10% of billable hours, waiting until the next day loses 25%, and by the end of the week, you’ve lost a full 50% of potential revenue.
For mid-sized firms, the integration between your VDR platform and your billing system is particularly important. When your team can track time directly within or alongside the data room interface, compliance goes up and revenue leakage goes down. Tools like LeanLaw that integrate with QuickBooks Online provide the kind of real-time financial visibility that makes it possible to monitor work-in-progress on data room tasks just as you would for any other billable activity.
Implementation Roadmap for Mid-Sized Firms
Ready to start capturing this revenue? Here’s a practical implementation plan.
Month One: Audit and Policy Development. Start by auditing your current practices. Pull data from your last 10 to 15 transactions and estimate the hours spent on VDR administration that went unbilled. This exercise alone will likely reveal a significant revenue opportunity. Then draft a firm policy that defines billable VDR activities, establishes rate tiers, and creates standardized task codes for time entry.
Month Two: Engagement Letter Updates and Team Training. Revise your standard engagement letter templates to include VDR billing language. Train your paralegals and associates on the new policy, emphasizing both the time-tracking expectations and the billing description standards that will make invoices clear and defensible. This is also the time to brief your partners on how to discuss VDR billing with clients during intake conversations.
Month Three: Rollout and Monitoring. Implement the new policy on all new matters. Set up reporting to track VDR-related time entries and monitor compliance. After the first billing cycle, review the invoices for quality and client reaction. Adjust as needed based on feedback.
Ongoing: Refine and Optimize. As you accumulate data, you’ll be able to benchmark your VDR administration costs by transaction type, practice area, and deal size. This data becomes invaluable for scoping estimates, negotiating alternative fee arrangements, and identifying opportunities to invest in technology or training that improves efficiency.
The Bottom Line
Every mid-sized law firm talks about improving realization rates, capturing lost billable hours, and finding new revenue without adding headcount. The data room rate addresses all three.
VDR administration is real work that delivers real value to clients. It requires professional skill and legal judgment. It protects clients from privilege waivers, disclosure mistakes, and security breaches. And when it’s done well, it can be the difference between a transaction that closes smoothly and one that collapses under the weight of disorganized document management.
Your firm already performs this work. The only question is whether you’re getting paid for it.
The firms that build transparent, well-structured billing practices around data room administration will find themselves better positioned financially—and, perhaps surprisingly, more trusted by their clients. Because in legal billing, nothing builds credibility like clarity.
Frequently Asked Questions
Q: Is data room administration considered “clerical” work that can’t be billed?
A: No. While certain mechanical tasks (like simple file uploads) may be considered overhead, the vast majority of VDR administration involves substantive legal judgment—privilege screening, disclosure strategy, access control, and document organization aligned with legal requirements. Courts and ethics opinions consistently hold that paralegal services involving legal judgment are billable professional services, not clerical overhead.
Q: How do I handle pushback from clients who don’t want to pay for data room time?
A: Start with transparency in the engagement letter so there are no surprises. When clients raise concerns, frame VDR administration in terms of the value it provides: protecting their privileged communications, ensuring compliance with disclosure obligations, and maintaining security over sensitive deal information. Most sophisticated clients understand this value once it’s articulated clearly. You can also offer alternative structures, such as a flat fee for data room setup and a reduced hourly rate for ongoing maintenance.
Q: Can I bill for VDR administration time and charge the client for the VDR platform subscription?
A: Yes, but they must be treated differently. Under ABA Formal Opinion 93-379, the platform subscription cost should be passed through as a disbursement at your actual cost (with a reasonable allocation of related overhead if applicable), without a markup for profit. The professional time spent administering the VDR is billed separately as a fee for legal services at your standard rates. The key is making both charges transparent in your engagement letter and invoices. Never mark up third-party platform costs unless you have a prior written agreement with the client authorizing a specific charge.
Q: What if my firm uses an alternative fee arrangement for the overall transaction?
A: If you’re billing a flat fee or phased fee for the deal, data room administration should be factored into your pricing model. This is where historical data on VDR time by transaction type becomes essential—it allows you to scope your flat fees accurately rather than eating unanticipated administrative costs. Tracking time even on flat-fee matters gives you the data you need to price future deals profitably and monitor your effective hourly rate across your practice.
Q: How does AI and automation affect the billing calculus for data room work?
A: AI tools can dramatically reduce the time required for document indexing, search, and organization within VDRs. As these efficiencies materialize, your per-transaction VDR billing will likely decrease—but the work remains billable. The ethical obligation is to pass efficiency gains to the client rather than billing for time you didn’t actually spend. The strategic opportunity is to handle more transactions at higher margins by investing in technology that makes your team more productive.
Sources:
- Clio, “2024 Legal Trends Report”
- ABA Formal Opinion 93-379, “Billing for Professional Fees, Disbursements and Other Expenses” (1993)
- ABA Model Rule of Professional Conduct 1.5(a)
- Taylor v. Chubb, 874 P.2d 806 (Okla. 1994)
- PandaDoc, “Virtual Data Rooms for Law Firms” (citing ABA 2022 Legal Technology Survey)
- McKinsey, “Global M&A Deal Value Report 2024”
- SRS Acquiom and Mergermarket, “M&A Due Diligence Study” (Q3 2024)
- Thomson Reuters Institute, “Law Firm Rates in 2024”
- HSF, “Global M&A Report 2025: Due Diligence, Deeper Dives”
- IBM, “Cost of a Data Breach Report 2025”
- Open Ledger, “AI in M&A Accounting: Transforming Financial Due Diligence” (2025)
- North Carolina State Bar, 2022 Formal Ethics Opinion 4
- NALA, “Model Standards and Guidelines for Utilization of Paralegals”

