Papermark

What it is

Papermark is the open-source alternative to DocSend. You upload a deck, proposal, or contract, send a tracked link, and see who opened it, which pages they read, and for how long. The same product runs virtual data rooms: folders of documents behind one link, with email verification, NDA gating, dynamic watermarks, and per-visitor analytics. The core is AGPLv3 on GitHub (9.2K stars, commits through August 2026); the hosted version is what most teams buy.

Two 2026 additions matter for RevOps. An AI agent answers questions across every document in a data room, with citations back to the page, and respects the room’s access controls. And since June 2026 a Papermark MCP server (57 typed tools), API, and CLI let Claude or ChatGPT create rooms, upload files, mint share links, and pull page-level analytics.

Papermark reached the Hacker News front page on 2026-06-25, when its co-founder accused the YC-backed startup Corgi of copying Papermark’s open-source and enterprise-licensed data-room code into a product Corgi had launched the day before. Corgi denied it. The episode says nothing about product quality; it does show that the code is public enough to copy, which is the point of the next section.

Open source does not mean everything is free to self-host

The repository is split. Everything outside ee/ is AGPLv3. Everything inside ee/ carries the Papermark Commercial License and needs a paid Enterprise Edition subscription to run in production. Inside ee/ sit the AI features, granular permissions, data-room Q&A (“conversations”), data-room invitations, workflows, and several security controls.

So the self-hosted free version covers link tracking, page analytics, and basic data rooms. The features that justify a data room for diligence are licensed code. Self-hosting also means running PostgreSQL, S3 or Vercel Blob storage, Tinybird for analytics, and Resend for email. For a team without an engineer on call, hosted Papermark is the realistic option.

Pricing reality

USD, monthly / annual billing (per month), checked 2026-10-01 at papermark.com/pricing. Every plan includes unlimited visitors.

• Free — $0. 1 user, 50 links, 50 documents, page-by-page analytics, 30-day analytics retention.
• Pro — $35 / $29. 1 user, unlimited links, 100 documents, custom branding, video and more file types.
• Business — $90 / $69. 3 users (+$30 / +$23 per extra user), 1,000 documents, custom domain, email verification, screenshot protection, webhooks, MCP/API/CLI. AI agents start here.
• Data Rooms — $179 / $119. 3 users (+$60 / +$40), unlimited data rooms and storage, NDA agreements, dynamic watermark, file-level permissions.
• Data Rooms Plus — $399 / $299. 5 users, visitor audit log, Q&A module, automatic file indexing.
• Data Rooms Premium — $799 / $649. 10 users, AI redaction, workflows, SSO on request.
• Data Rooms Unlimited — $1,799 / $1,199, unlimited users. Self-hosted Enterprise is quote-only.

The price is flat per workspace plus seats, not per document or per page. That is the main gap against DocSend. A 5-person deal team on annual billing pays $2,388 a year for Papermark Data Rooms (3 included seats plus 2 at $40) against $3,960 for DocSend Advanced ($150 for 3 users plus 2 at $90) and $4,320 for DocSend Advanced Data Rooms. Papermark Data Rooms Plus, which adds the Q&A module and the visitor audit log, lands at $3,588 a year with 5 seats included.

The tier to watch is Data Rooms Plus. Q&A and the visitor audit log are the two features a buyer’s counsel asks for in diligence, and both sit at $299 a month annual, not at $119.

Best for

RevOps leaders, founders, and sales leaders on deal teams of 1-10 senders who send decks, proposals, and diligence packs to outside parties, want DocSend-style page tracking, and want data rooms without per-sender pricing. It fits fundraising rounds, mid-market sales cycles with a security questionnaire and an MSA, and partner or channel document sharing.

Do not use it if you run banker-led sell-side M&A with dozens of bidders and a formal Q&A process: that is Datasite or Intralinks territory, with their contract and support model. And do not pick it for the open-source license alone unless someone will own the self-hosted stack and you have read which features live in ee/.

Versus the alternatives

• DocSend (Dropbox) — the incumbent, and the link format investors recognize. Dropbox discontinued its free Send and Track feature on 2025-03-31 and pointed those users to paid DocSend. Pick DocSend Personal ($10 a user annual) when one sender only needs link tracking and the recipient’s familiarity with DocSend matters. Past 3 senders or once you need a data room, Papermark costs roughly 40-45% less at the same seat count.
• Datasite and Intralinks — the enterprise virtual data rooms for regulated, banker-run M&A. Quote-based. Pick them when the deal size justifies a project contract and the sell-side adviser mandates the platform.
• Peony — the newer venture-backed entrant (founded 2021, San Francisco), priced per admin: $30 for Business and $52 for Data Room per admin per month, per Peony’s own pricing. Pick it when one admin runs the room; Papermark Data Rooms starts at $119 with 3 seats, so it wins from the third admin on.
• Dock — pick it when the deliverable is a buyer-facing digital sales room with a mutual action plan, not a tracked document. Papermark tracks files; Dock runs the deal workspace around them.

Watch-outs

• AI and Q&A are licensed code, not open source. Guard: before you choose self-hosting, list your must-have features and check whether each one lives under ee/ in the repository. If any does, budget for the Enterprise Edition or buy hosted.
• No native CRM sync. Slack is the only native OAuth integration; HubSpot, Notion, and Salesforce connect through signed webhooks plus Zapier, Make, or n8n. Guard: build and test the webhook-to-CRM field mapping (viewer email, document, pages viewed, completion percentage) before rollout, and count the automation-tool task volume in the budget.
• Diligence features sit two tiers up. The Q&A module and visitor audit log start at Data Rooms Plus; SSO starts at Premium and is “on request.” Guard: map your security review and counsel’s diligence checklist to the tier before signing, not after the room is live.
• Short analytics history on the low tiers. Free keeps 30 days of analytics and Pro keeps 1 year. Guard: export engagement data into the CRM through webhooks from day one rather than relying on Papermark as the system of record.
• AGPL obligations if you modify it. Running a modified Papermark for outside users triggers AGPLv3 source-disclosure terms. Guard: put any fork through legal review before external users touch it.