Data Rooms Providers Find a data room
VDR glossary · Security

What is a session timeout?

Definition

Session timeout: An automatic sign-out after a set period of inactivity, so an unattended browser does not leave the data room open to whoever sits down next.

How it works in a data room

The platform tracks activity for each logged-in session. When no clicks, scrolls or page loads occur for a configured period, say fifteen or thirty minutes, the session ends and the user must sign in again, often with two-factor authentication. Some providers also set an absolute limit, ending even active sessions after a number of hours. Administrators can usually shorten the timeout for sensitive rooms. When the room uses single sign-on, the identity provider’s own session rules may apply as well.

Why it matters in a deal

Deal teams work long hours across shared offices, airport lounges and client meeting rooms. A laptop left open on a document index is an easy leak. Short timeouts close that gap at almost no cost. They also keep the activity log honest: views recorded while someone was away from the desk can mislead a seller reading engagement reports. Set the timeout too short, though, and analysts working through a long financial model will be annoyed, so match the setting to how the room is used.

Example

An Indian conglomerate shares a room with three lenders during a refinancing. Credit analysts at one bank read the room in a shared workspace, so the borrower’s adviser sets a ten-minute idle timeout for that bank’s group and thirty minutes for everyone else. Complaints stop after the first day once analysts get used to it. The India guide covers the local data protection law that shaped the decision.

Related terms