M&A NDAs: What Sellers Share Before and After Signing

Signing an M&A NDA does not give a buyer access to every record. I recommend starting with a 1–2-page anonymous teaser, then sharing more only as the buyer’s funding, intent, and diligence needs justify it. Here, signing means the NDA - not the purchase agreement.

I use this disclosure sequence:

• Before the NDA: Share broad business details and revenue or earnings ranges. Leave out names and details that could identify the company.
• After the NDA: Release the company name, financial summaries, and anonymized customer and workforce data to approved recipients.
• Later diligence: Share source financial records, customer contracts, pricing, and needed employee records under tighter access rules, often after an LOI.

My rule: <u>approve each release - not just each buyer</u>. Check privacy, contract, privilege, and antitrust limits; control data-room access; and require seller approval before customer or employee contact. If talks end, revoke access and follow the NDA’s return, deletion, and retention terms.

Sell Side M&A Process in Plain English

sbb-itb-a3ef7c1

What Sellers Share Before the NDA

Keep the teaser to 1–2 pages: enough to test fit, but not to assess the deal. Save detailed supporting records for after the NDA is signed.

What Goes in an Anonymous Teaser

Include the industry, business model, broad region, revenue and earnings ranges, growth trend, general customer mix, and sale objective. Add headcount only if it helps buyers screen the opportunity.

Label financial figures by period and basis: fiscal year, trailing 12 months, or year-to-date. Separate reported earnings from adjusted earnings, and briefly explain material adjustments.

EBITDA means earnings before interest, taxes, depreciation, and amortization. Seller’s discretionary earnings (SDE) generally adds the working owner’s compensation and qualifying personal, discretionary, or nonrecurring expenses to earnings. EBITDA generally assumes market-rate compensation for people in operating roles.

Check the teaser for re-identification risk, not just names. Together, a narrow niche, small geographic market, precise employee count, and specific customer profile can reveal a business’s identity. Broaden or remove details that make the company searchable. Leave customer logos, account-level pricing, individual compensation, and other identifying details out of the pre-NDA package.

Before and After the NDA: Disclosure Comparison

Signing the NDA means controlled access - not full access.

Before diligence begins, the NDA should define who can see each layer, how they may use it, and when access expands.

NDA Terms and Financial Disclosure Timing

Disclosure now moves from screening to controlled diligence. The NDA governs handling; the disclosure plan governs timing. Counsel should review how long confidentiality lasts, available remedies, restrictive terms, and enforceability under applicable law.

Who Can Receive Information and How They May Use It

Define what information the NDA covers, how recipients may use it for the transaction, and whether it protects earlier disclosures. Exclude information already known, independently developed, lawfully received, or made public without a breach.

Share information with approved representatives only when they need it. Those representatives should have confidentiality duties, and the buyer should remain responsible for their breaches. Lenders, family offices, and co-investors must be expressly covered or separately approved. An invitation to the buyer doesn’t automatically include them.

For legally compelled disclosure, require notice when permitted, cooperation on protective measures, and release of only what the law requires. Specify how long confidentiality lasts and when recipients must return or destroy information, with narrow exceptions for legal retention and backups.

If the NDA includes non-contact restrictions, employee or customer non-solicitation, standstill limits on takeover actions, or clean-team procedures, define them clearly. These terms are negotiated; counsel should review their scope, exceptions, and enforceability.

With those rules in place, decide which records to share at each milestone.

Financial Records Shared at Each Deal Stage

Use the indication of interest (IOI) to assess whether the buyer’s valuation and financing plan warrant deeper access. A letter of intent (LOI) or finalist selection can trigger access to more source documents.

Weigh the information’s sensitivity against the buyer’s reliability, financing needs, and timing. An approved lender may need tax returns earlier, while a competing bidder may receive customer economics only through a clean team. Start with redacted or aggregated records when they answer the diligence question.

Financial Document Access Table

The table below shows the usual progression from summaries to source documents, subject to the NDA’s access rules. These milestones are common practices, not entitlements. Every recipient needs authorization under the NDA.

Schedules should reconcile to source records: revenue to the ledger, debt to lender statements, working capital to balance-sheet accounts, and add-backs to invoices or payroll records. Clearly label preliminary or unaudited materials. Staged access does not replace independent accounting, tax, legal, or lender verification.

When to Share Customer and Employee Information

Review customer and employee data separately. Follow the same staged approach used for financial diligence: share summaries first and names later. An NDA does not override privacy laws, contract restrictions, employment obligations, or antitrust rules. Have counsel screen privileged material before sharing it.

Customer Names, Contracts, and Pricing

Start with customer mix, concentration, revenue categories, geography, retention trends, and contract types. As diligence moves forward, add anonymized customer-level revenue, renewal data, and contract summaries.

Before sharing names, full contracts, or pricing, check confidentiality, assignment, change-of-control, and consent terms. Require written seller approval before anyone contacts a customer. Specify who can participate, which questions they can ask, and whether a seller representative must attend.

Removing names alone does not protect an account’s identity. Geography, contract size, and renewal dates can still reveal the customer. Use clean-team restrictions for competitively sensitive information. The parties must remain independent until closing.

Employee Records and Personal Data

Use the same staged approach for employee diligence, but account for the greater privacy risk of personal data. Begin with headcount, functions, locations, tenure, turnover, and benefits summaries.

Small teams and detailed org charts can reveal identities without names. Group small teams and use broader job titles where needed. Share named records only with recipients who have a direct legal, HR, benefits, or transition need. Keep named employee records in tightly controlled diligence folders - not in the general data room.

The table below shows how access to customer and employee information expands as diligence moves forward.

Exclude Social Security numbers, bank details, medical information, disability information, leave documentation, background-check materials, dependent information, and private disciplinary communications unless they are needed. If sensitive information is required to administer closing, transfer it separately to payroll, benefits, or transition personnel - not through general diligence access.

How to Control Data-Room Access

Use the NDA’s disclosure stages to decide who can access the data room - and when.

Documents for Each Data-Room Stage

Build folders around the disclosure plan: screening, post-NDA, preliminary diligence, detailed diligence, and closing. Release the CIM, financial summaries, and contract summaries only after the NDA is signed and the seller approves.

As diligence progresses, add financial statements, tax returns, and quality-of-earnings materials. Hold source records for detailed diligence and closing documents for the final stage.

Before granting more access, check the buyer’s identity, financing capacity, and reason for each request. Have counsel review litigation files for privilege before release. A summary or privilege log may be more appropriate than the documents themselves.

Permissions, Redactions, and Access Logs

Folder structure works only when permissions match each disclosure stage.

Use named accounts with separate permissions for buyer staff, advisers, lenders, and equity partners. For each user, record the seller’s approval, permitted folders, download permissions, and access expiration. Require multifactor authentication, user-specific watermarks, and download limits where available.

Keep a document index that records owners, versions, and release approvals. Remove redacted text and metadata from the source file - not just with a visual overlay. Track requests and responses in one log, mark superseded files, and check access logs for bulk downloads, failed logins, and attempts to access folders without permission.

Identify clean-team members and exclude anyone who makes competitive decisions. Set rules for permitted analysis, access duration, and who can receive the team’s findings. Have antitrust counsel review the protocol.

Get written approval from the seller and counsel before uploading confidential records to any third-party AI tool. First, review the tool’s retention, human access, deletion, and confidentiality terms. Then check any AI output against the source records.

Data Access After Termination or Closing

Set access rules for when diligence stops or the deal closes, too.

If a buyer withdraws or negotiations end, disable accounts and shared links, preserve logs, and send return/destroy notices under the NDA. Include downloaded files, prints, extracts, analyses, and copies held by advisers or financing sources. Obtain written confirmation of compliance where agreed.

Document any permitted retention exceptions for legal duties, professional records, and backups. At closing, securely transfer only the records the buyer is entitled to receive under the transaction documents.

Disclosure Support From Clearly Acquired

Clearly Acquired can support secure deal rooms, automated NDAs, buyer qualification, and diligence tracking. Sellers must still control document releases and obtain separate legal review for privilege, privacy, and antitrust issues.

Conclusion: Disclosure Checklists for Deal Participants

Anonymous information supports screening; the NDA governs access. After signing, share more only as the buyer qualifies and the deal stage calls for sensitive records. Use these checklists to move from screening to diligence without sharing too much.

Seller Checklist

Start with a non-identifying teaser, then release customer, employee, and financial information in stages. Check the buyer’s financing capacity and competing interests. Before sharing more, confirm the NDA’s permitted purpose, approved recipients, and whether each recipient is covered or separately bound by equivalent confidentiality obligations.

Be strictest with customer names, employee records, and source financials. Assign records to disclosure stages and redact identifiers that aren’t needed. Share anonymized financial summaries before named customer and employee data. Limit access to individual compensation to cases where it’s justified.

Release only the next approved document set. Have counsel reconcile NDA duties with the LOI, purchase agreement, and disclosure schedules. Don’t assume later documents replace those duties.

Buyer and Capital Partner Checklist

Before sharing anything, check that each recipient needs access at the current diligence stage. List everyone, including lenders and investors, and get written seller approval where required.

Share materials only on a need-to-know basis through secure, access-controlled storage. Keep the data room limited to materials approved for that stage. Don’t contact customers, employees, or suppliers until the seller approves that stage in writing. Ask counsel about privacy, privilege, antitrust, or clean-team requirements before receiving sensitive records.

If the deal ends, revoke access and return or destroy materials by the deadline. Document any approved retention exceptions, and follow all confidentiality and non-use obligations that survive the deal’s end.

FAQs

How can I tell if my teaser reveals too much?

Your teaser gives away too much if it names the company or shares sensitive details meant for later stages. Keep it anonymous: include only the industry, general location, and key metrics.

Share a confidential summary only after the buyer signs an NDA and is pre-qualified. Release financial statements and business data in stages. Hold back customer lists, trade secrets, and business plans until final due diligence.

What if a buyer demands sensitive records before an LOI?

Before a letter of intent (LOI), sellers typically share an anonymous or sanitized teaser under a nondisclosure agreement (NDA). Deeper access comes after the buyer is qualified and the NDA is signed.

Information is shared in stages: a financial and operations overview first, followed by customer details and trade secrets. Full due diligence documents come last, in a secure data room with tiered access.

Clearly Acquired describes automated NDAs with tracking and virtual data rooms with granular permissions.

What should I do if a buyer breaches the NDA?

If a buyer breaches the NDA, the agreement defines which information is confidential and how long protections last. Data-room viewing logs and tracked signatures document who accessed information and who signed.

To limit exposure, share information in stages only after the NDA is signed and the buyer is qualified. Use tiered data-room permissions to limit access to full financial, customer, and employee records to approved parties who need that information.

Related Reading

• Pending Lawsuits: How Claims Affect Business Value
• Auto Repair Valuation Tools: SDE vs. EBITDA Multiples
• EBITDA Margin Calculator