shouldiuse.io

Categories

VERDICT

Papermark Review

Worth it

Should I use Papermark?

Secure, open-source data room and document sharing - papermark.io

· 1 day ago

Buy if you're a startup or small firm running fundraising or due-diligence data rooms and want DocSend-style analytics without DocSend pricing. Skip it if you self-host without patching discipline or need enterprise-certified VDR compliance.

Confidence

Medium. Based on 40+ public sources (G2, Reddit, CVE databases, vendor pages); many snippets were truncated.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo support evidence in reviewed sources
  • Security posture

Pricing

$0

Free / self-hosted

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Data room plansfrom $99/mo

Best for

  • Startup fundraising data rooms
  • Pitch deck sharing with analytics
  • Self-hosters wanting open-source DocSend
  • Small M&A and due-diligence teams

Not for

  • Occasional file sharing — a Google Drive link is free
  • Self-hosters who won't apply security patches promptly
  • Enterprises needing legacy certified VDRs like Ideals

Gotchas - check before you buy

high

Self-hosted versions through v0.22.0 have a CORS vulnerability; patch before uploading sensitive files.

medium

Data room pricing starts near $99/mo and scales via a calculator — confirm limits before committing.

medium

Users report switching data rooms mid-deal is painful — choose deliberately.

low

Annual billing discounts exist; paying monthly costs more over a year.

Pros and cons

Pros

  • 4.5/5 rating across 189 G2 reviews
  • Open source and self-hostable — rare among data room tools
  • Users praise file controls and permissions
  • Positioned as cheaper, modern DocSend alternative in comparisons
  • Real traction: 60,000+ companies, $900K bootstrapped ARR

Cons

  • Known CORS vulnerability in self-hosted builds through v0.22.0
  • Full data room plans cost around $99/month
  • Young bootstrapped vendor versus entrenched VDR incumbents

Sources & method

- 15 sources - Open-source project with a published security page; one CORS CVE (June 2026) affects self-hosted builds through v0.22.0.

official x4review x8security x2news x1
  • CVE-2026-57957 — CORS misconfiguration, Papermark through v0.22.0 contains a cross-origin resource sharing misconfiguration vulnerability, published June 2026.

Key stats

  • Value for money: 4/5

    Rating

  • $0

    Starting price

  • 15

    Sources

  • Analyzed

  • Value for money: 4/5. Cheaper DocSend alternative with free open-source core
  • Ease of use: 4/5. Reviewers praise quick setup and sharing
  • Feature depth: 4/5. Data rooms, analytics, feedback questions, permissions
  • Support quality. No support evidence in reviewed sources
  • Security posture: 3/5. Published security page, but one public CORS CVE
  • 4.5/5 G2 rating 189 reviews
  • $99/mo Data room pricing site offers a pricing calculator
  • Yes Free tier open source, self-hostable
  • $900K ARR bootstrapped, no VC

Pricing

Free / self-hosted

$0

  • Open-source core
  • Self-hosted documents
  • Community support

Data room plans

from $99/mo

  • Hosted data rooms
  • Analytics and permissions
  • Annual billing discount

Security

Open-source project with a published security page; one CORS CVE (June 2026) affects self-hosted builds through v0.22.0.

  • CVE-2026-57957 — CORS misconfigurationPapermark through v0.22.0 contains a cross-origin resource sharing misconfiguration vulnerability, published June 2026.14

What users say

Users rate Papermark 4.5/5 on G2 and praise its file controls and value versus DocSend.

Alternatives

Compare Papermark with each alternative.

  • DocSend

    The incumbent; some Reddit users now call it overpriced.

  • Ideals

    Enterprise-grade VDR for large, compliance-heavy M&A.

  • Digify

    Simpler secure document sharing for straightforward needs.

    Papermark vs Digify

Companies that use it

Full analysis

Based on 40+ public sources (G2, Reddit, CVE databases, vendor pages); many snippets were truncated.

Well-liked open-source DocSend alternative (4.5/5 G2) for fundraising data rooms; self-hosters must patch a known CORS bug.

Methodology

Based on 40+ public sources (G2, Reddit, CVE databases, vendor pages); many snippets were truncated.

Read how a report is made.

Sources

  1. Papermark Products | Read 189 Reviews on G2g2.com
    review
  2. Papermark Virtual Data Room Pros and Consg2.com
    review
  3. Papermark Review 2026 — The Business Divethebusinessdive.com
    review
  4. Papermark or DocSend? Side-by-side comparison in 2026ellty.com
    review
  5. Papermark Pricing — Compare Plansellty.com
    review
  6. Compare data room prices in 2026papermark.com
    official
  7. Papermark Securitypapermark.com
    official
  8. Papermark customers: Twopapermark.com
    official
  9. Papermark customers: Yunopapermark.com
    official
  10. How Papermark Bootstrapped to $900K ARRtechwithram.medium.com
    news
  11. Founder AMA: 60,000+ companies use Papermarkreddit.com
    review
  12. Papermark: the open-source, self-hosted alternativereddit.com
    review
  13. CVE-2026-57957 — NVDnvd.nist.gov
    security
  14. GHSA-4cq7-5c7c-cc5r — Papermark CORS misconfigurationgithub.com
    security
  15. Switching data rooms mid-projectreddit.com
    review

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.