How to Set Up Per-Folder Investor Permissions in Under an Hour

Permissioning a data room by folder is the difference between "we sent a link" and "we ran a process." The mechanics take an hour once. The discipline pays out for the whole raise.

The trap founders fall into is treating permissions as a config screen instead of a policy. Configure once, then follow the policy every time a new investor enters the pipeline. Below is the setup that gets to first invite in under an hour.

What are the standard investor permission tiers?

Three active tiers plus one for retention. Any more than that and you will lose track by week two.

• Teaser. Any invited fund with an NDA on file. Sees the deck, one-pager, and high-level financials. This is the room a partner clicks into during the follow-up call.
• Diligencing. Signed NDA, active partner meeting scheduled or completed. Sees the full model, cap table, product deep dive, and redacted customer list.
• Lead. Signed term sheet or serious LOI. Sees everything, including named customers, key employment terms, IP filings, and unredacted revenue concentration.
• Passed. Retired firms. No active access. Audit trail retained.

The three active tiers cleanly separate the fund still deciding whether to take a first call from the fund writing the check. That separation is what makes the room a functional process artifact.

How do you map folders to groups?

Build a permission matrix once, before you invite anyone. The matrix is the source of truth. Every new folder gets a row.

Ten folders, three groups. Every cell in this matrix is a decision you make once. Data room software applies the pattern automatically to every new invite.

What is the fastest one-hour setup path?

Four blocks. Fifteen minutes each. Done in sequence, room is ready to send.

1. Minute 0 to 15. Groups. Create the three active tiers plus Passed. Give each a clear label a stressed founder will read correctly at midnight.
2. Minute 15 to 30. Folders and matrix. Create the ten folders in the matrix above. Assign group permissions using the pattern. Enable dynamic watermarking on the model, cap table, and customer list folders.
3. Minute 30 to 45. Invites. Import your investor list from your CRM or a spreadsheet. Assign each contact to their tier. Send group-scoped invite links. One email per group. Every partner, principal, and associate as their own identity.
4. Minute 45 to 60. Test. Log in as a Teaser user. Confirm you cannot see the model. Log in as Diligencing. Confirm you see the model but the cap table is redacted. Log in as Lead. Confirm you see everything with a watermark on the sensitive files.

That test at minute 45 catches every configuration mistake before an investor does.

Should partners and associates get the same access?

In terms of folder access, yes. The partner and the associate should see the same folders inside a given firm. The associate writes the memo the partner reads, and asymmetry here creates friction inside the fund that lands as friction on you.

Where they should differ is on file-level rendering:

• Partner. May request download rights on the model. Grant on request, watermarked.
• Associate. View-only mode by default on financials, cap table, and customer list. Downloadable on public materials.

This posture reduces the surface area of loose model copies without slowing the associate's work, because associates rarely need to actually download the raw model, they need to read it and pull specific numbers.

When and how do you revoke access?

Immediately, in one motion, with the audit trail retained. The mechanics are the same every time.

• Firm passes. Move the whole firm group from Diligencing to Passed. All share links die within minutes. Every downloaded document with a watermark still points back to a named viewer.
• Individual leaves the firm. Remove that person from the group. The rest of the firm's access continues.
• Round closes. Freeze the room. All groups move to Passed. The room becomes a read-only historical record.

The mistake is trying to manually revoke each individual. Founders miss people. Groups do not.

What does dynamic watermarking do that static does not?

Static watermarks put "Confidential" on every page. Useless in a leak scenario. Dynamic watermarks render the viewer's email or firm name on every page at view time. In a leak scenario, the document points back to a person.

Enable dynamic watermarks on three folders unconditionally:

• Financial model, in every state including drafts
• Cap table, redacted or full
• Customer list, anonymized or named

Leave the deck and the one-pager clean. Friction on public collateral costs more than the marginal deterrent.

How do you handle a request to share outside the room?

Sometimes a partner asks you to email a specific document to their operating partner. The pattern that keeps the room clean is a soft no plus a fast alternative.

• Add the operating partner to the room as a Diligencing user. Send them the group link. They see the document with a watermark, in view-only mode, with their views logged.
• Do not email the document. Once a PDF is in email, you cannot revoke it, cannot see who reads it, cannot trace a leak.

Investors accept this without friction when the alternative takes 30 seconds. They resent it when it takes a day.

The mistake to avoid

Founders spend the first week of a raise carefully setting up permissions, then the third week emailing files ad hoc because it feels faster in the moment. Every one of those emails is a permanent hole in the audit trail and a permission tier you cannot enforce. The room only works if it is the only channel for diligence documents from day one to close. Everything else, no matter how convenient, is process debt you pay for with slower closes and looser reps.