Inside the data room: what buyers review before they wire the money.
A diligence data room is a filing cabinet with your entire company inside it. Here is what sits in every folder, and where the deals get re-traded.
In this guide
- What a data room actually is
- Folder 1 · Financials
- Folder 2 · Customers and revenue
- Folder 3 · Commercial contracts
- Folder 4 · People and HR
- Folder 5 · Legal and litigation
- Folder 6 · IP and digital assets (the forgotten one)
- Where deals get re-traded
- The data-room folder checklist
- The honest summary
A data room is not a formality. It is the single stretch of the sale where the buyer stops trusting the story and starts checking it. Up to this point in the process everything the buyer knows about your business came from a broker's teaser, a confident phone call, and a website. Once you sign a letter of intent, the checking begins. The buyer's accountants, lawyers, and analysts open a folder, read what is inside, and pull on any thread that does not sit flat. Every thread they pull is a chance to move the price down or hold the deal open longer.
Most owners walk into diligence blind. They know their business cold, but they have never seen it laid out the way a buyer's team lays it out: in labeled folders, cross-checked against each other, read by people whose job is to find the gap between what you said and what the documents say. This piece walks through that filing cabinet folder by folder, so you can build it before someone else audits it.
We are a brand and website studio, not a broker, an accountant, or a lawyer. We do not run your diligence and we do not price your business. But we sit in the same room as the part of diligence almost nobody prepares for — the intellectual-property and digital-assets folder, the one that holds your trademarks, your domains, your website, your social accounts, and your brand files. It is the folder that is most often empty, most often messy, and most often the reason a clean deal gets a last-minute price chip. So we will spend real time there. But we will walk every folder first, because you cannot see why the IP folder matters until you have seen how the whole room is read.
One honesty note up front. Every number inside a chart in this piece is illustrative — a composite of typical lower-middle-market ranges, not sourced data about your company or any single company. The worked dollar examples are exactly that: worked examples, framed so you can run your own. Treat them as the shape of the thing, not a promise about your number.
A filing cabinet the buyer reads without you in the room.
A virtual data room, or VDR, is a secure online folder structure — today usually a purpose-built platform, sometimes just a well-organized shared drive — where a seller places every document a buyer needs to verify the business. The buyer’s team logs in, reads, downloads, and asks questions. You answer through a tracked request list. The whole exchange is deliberately unhurried and deliberately adversarial, in the professional sense: the buyer is being paid to find reasons the business is worth less than the number in the letter of intent, and you are trying to give them nothing to find.
The room opens after the letter of intent (LOI) is signed and, in a typical lower-middle-market deal, stays open for somewhere between thirty and ninety days. That window is the most dangerous stretch of the entire sale. The price is agreed but not final. The buyer has leverage they did not have before signing, because walking away now costs them time and money, so instead of walking they re-negotiate. Every soft spot in the room is a lever they can pull to move the price down without blowing up the deal. This is called a re-trade, and we will come back to it.
The structure of the room is not a mystery. It is nearly the same in every deal, because buyers’ advisors work from standard diligence request lists. Below is the shape of it — six folders that hold the substance, plus the corporate-record housekeeping that wraps around them.
Figure 1 · The room, mapped
Six folders the buyer opens, and the order they usually open them.
Illustrative structure — a composite of typical lower-middle-market diligence request lists. Folder six is highlighted because it is the folder most owners have not built. It is also the one this piece spends the most time on.
Financials: where trust is won or lost first.
The financial folder is the first one every buyer opens, and it is the one that carries the most weight, because if the numbers do not hold, nothing else matters. It contains, at minimum, three to five years of profit-and-loss statements, the same span of balance sheets, and the matching business tax returns. It also contains the two documents most owners underestimate: the add-back schedule and the trailing-twelve-month figures.
The profit-and-loss statement is read for consistency, not just size. A buyer’s analyst lines up three to five years side by side and looks for a story that makes sense. Revenue that lurches up and down without explanation, margins that move for no visible reason, or a suspiciously perfect final year right before the sale — each of those is a thread. The single most common finding here is that the internal financials the owner runs the business on do not reconcile to the tax returns filed with the government. Sometimes there is a good reason. It still has to be explained, in writing, and every unexplained gap is a small withdrawal from the trust account.
The balance sheet tells the buyer what they are actually buying and what they are inheriting. Aged receivables that will never be collected, inventory that is really dead stock, related-party loans between the business and the owner’s other companies — these are the items a buyer’s accountant circles. None is fatal. All of them get cleaned up during diligence, and the cleanup usually adjusts the price or the working-capital target.
The tax returns are the anchor document. They were filed under penalty of perjury, so a buyer treats them as the most credible version of your numbers. When your internal reporting shows more profit than your tax returns, the buyer will ask which number is true — and they will usually value the business off the lower one unless you can bridge the gap convincingly.
The add-back schedule is where the multiple lives.
For most small businesses, buyers price off seller’s discretionary earnings (SDE) or adjusted EBITDA — the real cash the business throws off once you strip out the owner’s personal expenses, one-time costs, and non-cash items. The document that makes the case for those adjustments is the add-back schedule. It is, in dollar terms, one of the most important pieces of paper in the entire room, because every dollar of a legitimate add-back gets multiplied by the deal multiple.
Here is the mechanic, as a worked example. Take a business a buyer would price at a 3.5× multiple. If you can defend a $40,000 add-back — say, a vehicle the business paid for but the owner drove personally — that add-back is worth $140,000 of purchase price. If you cannot defend it, because there is no receipt, no clear pattern, no clean line in the books, the buyer strikes it and the price falls by that $140,000. Add-backs that are documented get accepted. Add-backs that rely on the owner’s word get haircut or removed. The difference is bookkeeping, and bookkeeping done before the room opens.
“The financials do not have to be beautiful. They have to reconcile to each other and to the tax returns. Beautiful comes second. Consistent comes first.”— the working rule inside most buy-side diligence teams
Figure 2 · Where the price moves
Which folders re-trade a deal most often.
Illustrative — composite of typical lower-middle-market patterns, indexed to 100. The chartreuse bar marks the IP folder: it re-trades deals less loudly than financials, but almost always as a last-minute price chip nobody planned for, precisely because nobody prepared the folder.
Customers and revenue: concentration, contracts, churn.
Once the buyer believes the total number, they want to know how durable it is. That is what the customer folder answers. It holds the customer list (often anonymized until late in the process), a revenue-by-customer breakdown, the major customer contracts, and whatever churn and retention data the business tracks. Three things get pulled hard here.
The concentration question comes first, and it is the one that quietly re-prices more deals than any other single customer finding. If one customer is 40% of your revenue, the buyer is not really buying a business, they are buying a relationship — and relationships walk out the door when the owner does. A buyer’s analyst builds a simple table: top customer as a percent of revenue, top five, top ten. The more the total leans on a few names, the more the buyer discounts, because the risk that one departure guts the earnings is real and quantifiable. There is no brand fix for genuine concentration. But there is an enormous difference between concentration you disclosed cleanly up front and concentration the buyer discovered themselves in week three of diligence. The first is a known risk that gets priced once. The second is a surprise, and surprises get priced twice — once for the risk, once for the doubt about what else you did not mention.
The contract question comes next. Are the big customers on signed agreements or on handshakes? Contracted revenue is worth more than at-will revenue because it survives the sale more reliably. And a specific, technical detail lives here that catches owners off guard: assignability. If your best contract says it cannot be transferred without the customer’s written consent — a change-of-control clause — then the buyer cannot count on keeping that revenue after they buy you, and they will need to go get consent, which means telling your customer the business is being sold. That is a folder-two document with folder-three consequences, and we will come back to it.
The churn question comes last and is the one small businesses are least prepared to answer, because most do not measure it. A buyer wants to see whether customers stay and whether the customer base is growing, flat, or quietly eroding under a stable top-line number. If you have the data, provide it. If you do not, the buyer will reconstruct it from invoices, and their reconstruction is rarely more flattering than yours would have been.
What buyers pull on in the customer folder
- Concentration disclosed up front gets priced once. Concentration discovered mid-diligence gets priced twice.
- Change-of-control clauses in your biggest contracts can require you to notify customers of the sale — plan for it, do not get surprised by it.
- Churn you cannot measure gets measured for you, from the invoices, and rarely in your favor.
Commercial contracts: the assignability trap.
The contracts folder holds every agreement that binds the business: supplier and vendor contracts, the lease on your premises, equipment leases and loans, franchise or licensing agreements, insurance policies, and any partnership or joint-venture paperwork. The buyer’s lawyers read these for one dominant question, and it is the same question that haunted folder two. Can these agreements come with the business, or do they die at the sale?
This is the assignability trap, and it snares more small deals than owners expect, because owners have almost never read their own contracts closely enough to know what is in the fine print. Many standard agreements — leases especially — contain a clause requiring the other party’s consent before the contract can be transferred to a new owner. In an asset sale, the buyer is technically a new party to every one of your contracts, which means every non-assignable contract has to be renegotiated or re-consented before it carries over. Your landlord could use the moment to raise the rent. Your best supplier could use it to change terms. A key licensor could simply decline. None of these is common, but each is possible, and the buyer prices the possibility.
The lease deserves its own sentence because for many businesses it is the most important non-financial document in the room. If your business depends on its location and your lease is short, non-assignable, or about to expire, that is a material risk to the buyer, full of leverage for the landlord, and it belongs at the top of your preparation list — not because branding fixes it, but because a surprise here can stall or reprice an otherwise clean deal.
The practical preparation is unglamorous and entirely within your control. Read your own material contracts before the buyer’s lawyers do. Make a list of which ones contain consent-to-assign or change-of-control clauses. Know, in advance, which conversations you will need to have and roughly when. A buyer who watches you handle a known assignability issue calmly reads it as a managed risk. A buyer who uncovers one you did not know about reads it as a hole in your understanding of your own business, and that read colors everything else in the room.
People and HR: the key-person question.
The people folder holds the employee roster, the compensation schedule, the org chart, benefit plans, employment agreements, and any non-compete or non-solicit paperwork. It reads quickly compared to financials, but it answers the question that sits underneath the entire lower-middle-market deal: what happens to this business when the owner is gone?
Buyers are looking for a business that runs on a team, not on a single person — the same signal a good About page sends on your website, now backed by documents. The org chart tells them whether responsibility is distributed or whether every arrow points back to the owner. The compensation schedule tells them whether the business is paying market rates (a cost they inherit) or below-market rates propped up by loyalty to the founder (a cost that arrives the day the founder leaves). Employment agreements and non-competes for key staff tell them whether the people who actually run the operation are likely to stay.
The specific risk the buyer is pricing is key-person dependency. If one lead technician, one head of sales, or one operations manager holds relationships or knowledge that would leave a hole, the buyer wants to see that person locked in or, at minimum, wants to know the exposure. There is no way to brand your way out of genuine key-person risk. But an accurate, organized people folder — clean roster, current agreements, a real org chart — signals a business that is managed rather than merely run, and that signal is worth real basis points on the multiple.
One quiet trap lives in this folder for small businesses: worker classification. If the business treats people as independent contractors who a regulator might classify as employees, the buyer’s advisors will flag the back-tax and penalty exposure and either escrow against it or knock it off the price. It is a document problem, and it is far cheaper to clean up before the room opens than to argue about mid-diligence.
Legal and litigation: the entity and the skeletons.
The legal folder is where the corporate housekeeping lives, and where the skeletons come out if there are any. It contains the entity formation documents, the operating agreement or bylaws, the ownership cap table, business licenses and permits, any pending or past litigation, regulatory filings, and insurance claims history. Buyers’ lawyers run this folder, and lawyers are trained to assume there is a problem until the documents prove otherwise.
The first thing they verify is that you own what you are selling. That sounds trivial. It is not. Ownership disputes, an old partner who was never formally bought out, a spouse with a claim, shares promised to an early employee and never documented — these surface here, and each can freeze a deal until resolved. The cap table has to be clean and the chain of ownership has to be unbroken, on paper, before a buyer will wire funds.
Next, licenses and permits. A business operating on an expired permit, or without a license a regulator would expect it to hold, is carrying a risk the buyer inherits. In some industries — and Brazil taught this lesson to more than one operator — “approved” and “compliant” are not the same word, and a buyer’s lawyer knows the difference even when the seller has stopped noticing it.
Then litigation. Past, present, and threatened. A buyer is not necessarily scared off by a lawsuit — businesses get sued — but they are scared off by a lawsuit they learn about from a court record instead of from you. Disclosed litigation is a known quantity that gets priced or escrowed. Undisclosed litigation, found by a lawyer doing a routine records search, detonates trust across the entire room. The pattern repeats in every folder: the finding itself is survivable, the surprise is what does the damage.
Ranges are illustrative — composite of typical lower-middle-market deals, not company-specific data.
IP and digital assets: who actually owns your brand?
Here is the folder almost no owner builds before they need it, and the one where we live. Intellectual property and digital assets. On a service business, most of the sale price is goodwill, and a large share of that goodwill is the brand — the name, the reputation, the digital footprint customers find you through. Yet when the buyer opens this folder, it is the folder most likely to be empty, out of date, or quietly full of problems the owner has never thought about.
The buyer’s question is blunt: do you actually own the thing I am paying for? Not the equipment. The brand. And on a startling number of small businesses, the honest answer is “not cleanly,” because the brand assets were set up years ago, in a hurry, on personal accounts, by whoever happened to be handy.
Walk through what the buyer’s team checks in this folder, because every line is a place a clean business can look messy for no good reason:
Trademarks. Is the business name registered as a trademark, or does the business merely use a name that someone else could challenge? An unregistered name is not worthless, but a registered mark is a clean, identifiable, transferable asset — a real line item the buyer can put on their books. An unregistered name, or worse, a name that turns out to conflict with someone else’s registered mark, is a question that hangs over the goodwill the buyer is paying for.
Domain registrations. Who is listed as the registrant of your domain? On a distressingly large number of small businesses, the domain is registered to the founder’s personal email, or a former web developer’s account, or an agency that stopped returning calls in 2019. The buyer needs the domain to transfer with the business, owned by the entity being sold, not stranded in a personal account the founder half-remembers the password to. A domain that cannot be cleanly transferred is not a small problem. It is the front door of the entire digital business.
The website itself. Who legally owns the code, the content, the design? If a freelancer built it and there was never a work-for-hire agreement, the copyright may not sit where everyone assumes it sits. The buyer’s lawyer asks for the assignment. If it does not exist, that is a thread.
Social accounts. Who controls the Instagram, the Facebook page, the LinkedIn company page, the Google Business Profile? These carry real customer relationships and real reputation, and they are frequently tied to a single personal login that belongs to the owner, an ex-employee, or a former marketing contractor. An account the seller cannot demonstrably control is an account that may not transfer, and the buyer knows it.
Brand asset files. Do the editable logo files, the fonts, the brand guidelines, the photography licenses exist, and are they organized and owned? “The logo is in an email from 2016 somewhere” is not an asset. A tidy set of source files, with clear rights, is.
Analytics and search access. Google Analytics (GA4) and Google Search Console access, the advertising accounts, the email platform — these are the instruments that prove the digital business is real and healthy, and they are only useful to a buyer if they can actually be handed over. Access tied to a personal Gmail that the founder will delete after the sale is access that evaporates at close.
Messy versus clean, side by side.
The messy IP folder
Business name never registered as a trademark; nobody checked for conflicts.
Domain registered to the founder’s personal Gmail, renewal on a card that expires next year.
Website built by a freelancer in 2018, no work-for-hire agreement on file.
Instagram login shared with an ex-employee; Google Business Profile “claimed by someone,” unclear who.
Logo lives in an old email thread. No source files. Fonts unlicensed.
— reads to the buyer as: the brand is not cleanly owned, and every item is a transfer risk. Escrow it, or chip the price.
The clean IP folder
Business name filed as a trademark in the entity’s name; clearance search on file.
Domain owned by the LLC, registrar account under a business email, auto-renew confirmed.
Website with a signed IP-assignment from every contributor; the entity owns the code.
All social accounts under business email logins the entity controls; profiles consistent.
Editable brand files, guidelines, and licensed fonts in one labeled folder.
— reads to the buyer as: this brand is a real, transferable asset. Nothing to escrow. Nothing to chip.
The difference between those two columns is not talent and it is not money. It is housekeeping done before the room opened. And it removes an entire category of diligence friction — the slow, trust-eroding back-and-forth where the buyer keeps asking for a document that does not exist, and each missing document makes them wonder what else is missing. A clean IP folder is one of the few places in the whole room where a small business can look exactly as buttoned-up as a portfolio company, because the standard is documentation, not scale.
This is the specific work Brand2Sell does before you list: we make the brand and IP folder read clean. Consistent business naming across every asset, so the entity, the website, the trademark, and the storefront all say the same name. Domains owned by the entity, not the founder’s personal account. A trademark filed. Editable brand files gathered. GA4 and Search Console access moved onto accounts that survive the sale. It is not glamorous and it does not move the top-line number by itself. What it does is remove the last-minute price chip that comes from a folder full of question marks — and on a deal where goodwill is most of the value, protecting the clean look of the brand asset is protecting the largest line on the page.
Where deals get re-traded during diligence.
A re-trade is when a buyer, after signing the letter of intent at one price, comes back mid-diligence and asks to close at a lower one. It is legal, it is common, and the good buyers do it surgically rather than crudely. Understanding how it happens is the whole reason to read a piece like this, because almost every re-trade traces back to something in one of the six folders that the seller could have handled before the room opened.
Re-trades come in three shapes. The first is the documented adjustment: the buyer’s accountant finds that an add-back is not supportable, or that receivables are less collectible than the balance sheet claimed, and the price moves by a defensible amount. You cannot really argue with this one, and you prevent it by getting your financials clean and your add-backs documented before you list.
The second is the risk chip: the buyer finds a real risk — customer concentration higher than represented, a non-assignable lease, an undisclosed dispute, a domain the seller does not actually control — and prices it, either as a lower number or as money held back in escrow. You prevent this one by disclosing known risks up front and by building the folders that make the unknown risks knowable in advance.
The third is the trust chip, and it is the most expensive and the least fair. It happens when enough small surprises accumulate that the buyer stops believing the seller’s representations in general. Once a buyer decides you did not know your own business, or worse, that you were hiding things, they re-price everything through a discount of doubt. No single finding caused it. The pattern did. And the pattern is almost always a series of empty or messy folders — a data room that made the buyer do the seller’s homework.
The through-line across all six folders is this: buyers do not re-trade because your business is imperfect. Every business is imperfect and buyers know it. They re-trade because the imperfection was a surprise, and a surprise makes them wonder what else they have not found. A prepared data room does not pretend the business is flawless. It lays the flaws out cleanly, in labeled folders, priced and explained, so the buyer spends diligence confirming what you told them instead of hunting for what you did not.
The data-room folder checklist.
If you are twelve months or less from listing, here is the folder structure to build now, in the order a buyer will read it. You do not need a platform to start — a well-labeled set of folders on a secure drive is enough to see what you have and, more usefully, what you are missing. The gaps are the audit.
- Financials. Three to five years of P&L, balance sheets, and matching tax returns, plus trailing-twelve-month figures and a documented add-back schedule that ties to real records.
- Customer data. Revenue by customer, top-customer concentration table, major customer contracts, and whatever retention or churn data you can produce.
- Commercial contracts. Every vendor and supplier agreement, the lease, equipment loans, and a note flagging which ones carry consent-to-assign or change-of-control clauses.
- People and HR. Employee roster, compensation schedule, org chart, employment and non-compete agreements, and a clean answer on contractor classification.
- Legal and litigation. Entity documents, operating agreement, cap table, licenses and permits, and full disclosure of past, present, and threatened litigation.
- Trademarks. Registration certificates or filing status for the business name, plus any clearance search, held in the entity’s name.
- Domains. Registrar account under a business email, all domains owned by the entity, renewal dates and auto-renew confirmed — nothing on a personal Gmail.
- Website and brand files. Signed IP-assignment for the website, editable logo and brand source files, licensed fonts, brand guidelines, and photography licenses.
- Social and digital access. All social accounts under entity-controlled logins, plus GA4, Search Console, ad, and email-platform access on accounts that survive the sale.
- Consistency check. The same business name, spelled the same way, across the entity, the website, the trademark, the storefront, the invoices, and every profile.
Ten folders. The first five you will build with your accountant and your lawyer, and you should — those are their lane, not ours, and this piece is not legal or tax advice. The last five are the brand and IP folder, and that is the lane we work in every day. Between them, they are the difference between a room a buyer confirms and a room a buyer re-trades.
The honest summary.
A data room is the part of the sale where confidence meets checking. The buyer arrives believing your story and spends thirty to ninety days testing it against documents. Every folder that reads clean keeps the price where you agreed it. Every folder that reads messy hands the buyer a lever. And the folder small businesses most reliably leave empty is the IP and digital-assets folder — the one holding the brand, which on most service businesses is the largest slice of what the buyer is actually paying for.
You cannot brand your way out of real customer concentration, a genuine lawsuit, or numbers that do not reconcile. Those belong to your accountant and your lawyer, and they should. But you can walk into diligence with a brand and IP folder that reads exactly like a well-run portfolio company’s — trademark filed, domains owned by the entity, website and social accounts cleanly transferable, one consistent name across every asset. That is a category of last-minute price chip removed before the buyer ever finds it. It is the cheapest leverage in the whole room, because it is documentation, not scale.