Eight Parties Read Your File. Seven of Them Are Not Buying.

Your full document ends up in the hands of people who are not going to buy your company. That is not a failure of the process. It is the process.

A well-run sale produces several credible parties, and all but one of them eventually stops. What matters is what happens to the material afterward, and the mechanics of that are specific rather than aspirational.

Everything lives in one place and nothing is attached to an email

A data room gives you per-user access, a log of who opened which document and when, watermarking, and the ability to disable downloads entirely for the most sensitive material.

It is inexpensive and it is ordinary. The discipline is the part that is not ordinary: material never leaves it. One attachment sent for convenience, to a party who then forwards it internally to four colleagues, undoes the log, the watermark, and the download control in a single click.

Access is revoked the day a party drops out

Somebody has to actually do it.

In a process with eight parties sitting at four different stages, somebody also has to be tracking who is where. Owners find out long after a process ends that parties who walked away a year ago still have working logins and a complete file.

Treating revocation as housekeeping for later is the common version of this failure, and it is not a small one. Access nobody switches off stays live.

Destruction gets confirmed in writing

The standard obligation is that on request, or on deciding not to proceed, the recipient destroys everything they downloaded or derived from your material, including notes, models, and copies held by their advisors, and confirms in writing that they have done it.

A sophisticated buyer sends that confirmation without being asked; their counsel treats it as part of withdrawing cleanly. If one does not arrive, ask for it. It costs nothing to request, no serious party objects, and the absence of one tells you something about who you were dealing with.

The obligations outlive the destruction

Confidentiality continues for a defined period after the material is destroyed, and the period should be long enough to cover the window in which the information is still commercially useful to somebody.

That is a negotiated number rather than a standard one, and it is worth negotiating. Information about your margins and your customer concentration does not stop being useful to a competitor on a convenient schedule.

Read the residuals clause

Many agreements carve out what a recipient’s people retain in unaided memory, and that carve-out is the real limit on everything above.

A narrow residuals clause is normal. A broad one gives back most of what the rest of the agreement protects, and it is the paragraph a competitor’s counsel pays the most attention to. It deserves the same attention from you, before it is signed rather than after a party withdraws.

Which is why the sensitive tranche exists

Everything above limits the damage from a disclosure. None of it prevents one.

So the material is split. What a buyer needs to put a number on paper, which is size, concentration, contract terms, and financial history, can all be shown without a name. Customer names, supplier names, and employee names sit in a separate tranche that most parties never reach, released after a buyer has committed to a number in writing, sometimes without the ability to download anything at all.

Seven parties reading a document that identifies nobody is a very different exposure from seven parties reading your customer list.

What getting it wrong costs

The cost is not usually a lawsuit. It is competitive, and it is unattributable.

A party who read your file and did not buy knows what you earn, where you are concentrated, what your margins are, and where you are weak. Most of them will never use it. The one who does will not announce it, and you will meet it as a lost renewal, a competitor’s new pricing page, or a call your largest account received from somebody who knew exactly what to say.

No agreement gets that back. What can be controlled is how many parties ever had it, how much each one had, and whether anybody switched the lights off behind them.

More on this: The Agreement Is Not the Protection. The Order Is..

---

This is what we do. Prism Edge runs the data room, tracks which party sits at which stage, revokes access the day somebody drops out, and chases the written destruction confirmation rather than hoping for it. The sensitive tranche stays closed until a buyer has committed to a number, which is the only point at which the names are worth the risk.

The full chapter on what you show and when, and on what happens to it afterward, is in The Business Sale, free to download here.