Data Room
A data room is the structured, access-controlled collection of all documents that interested buyers review during a due diligence. It is virtually always run online, logs every access, and forms the basis of disclosure under the purchase agreement.
Two functions, not one
The data room is usually treated as a logistics task: gather documents, upload them, grant access. It has a second and legally more important function. What sits in the data room generally counts as disclosed under the purchase agreement – and a disclosed matter cannot later be claimed by the buyer as a breach of warranty. The data room is therefore a liability instrument.
From that follows a rule many sellers find uncomfortable: uncomfortable documents belong in it, not out of it. Withholding a live dispute or a problematic contract saves a discussion during the process and buys a liability risk after closing.
Structure
A proven structure follows the review workstreams and is numbered so that questions can be referenced unambiguously:
- Corporate – articles, commercial register extracts, shareholder lists, resolutions, cap table.
- Financial – statutory accounts and audit reports, monthly reporting, plan, adjusted EBITDA bridge, working capital, net debt.
- Tax – returns and assessments, tax audit reports, transfer pricing documentation.
- Commercial – customer contracts, revenue by customer and cohort, pipeline, price lists.
- Legal – material contracts, disputes, insurance, permits.
- HR – management employment contracts, compensation structures, pension commitments, works agreements.
- IT and data protection – system landscape, licences, processing register, processor agreements.
- IP – trademarks, patents, software rights, open-source usage.
Access and phases
In an auction the data room opens in stages. In the first round every bidder sees the same base set; sensitive material – customer names, margin by customer, personnel data – follows once the field has narrowed. Where competitors bid, a clean team is normally set up: a tightly limited group, often external advisers, who see the competitively sensitive data without carrying it into the business.
Every data room logs access. Those logs are a source of information for the seller: someone working through the customer contracts for days has a different interest from someone who only opens the annual accounts.
The three most common mistakes
- Started too late. A data room needs six to ten weeks of preparation unless the documents are maintained anyway. Filled in parallel with a live process, gaps appear exactly where the review is looking.
- An incomplete question log. Buyer questions run through a Q&A tool and have to be versioned, assigned and answered. Answers by email outside the process are a recurring problem – legally, because the disclosure is not documented, and practically, because different bidders receive different answers.
- Numbers that contradict each other. When reporting, statutory accounts and plan state the same figure differently, the process burns time on reconciliation instead of negotiation. Establishing that consistency is the finance function's job before the room opens.