The short answer
The data room is the digital space in which a seller makes documents available to the buyer and the buyer's reviewers. For a financial due diligence its quality decides two things: how long the process takes, and how many questions end up as a risk line in the price negotiation.
The rule behind it is uncomfortably simple: what the buyer cannot trace, the buyer values conservatively. A data room is therefore not a filing exercise but part of defending the price.
A note for readers outside Germany
Two German particulars shape what belongs in the room. Most mid-market targets report under HGB, so there is no separate management set of accounts – the monthly reporting and the statutory accounts have to reconcile to each other, and where they do not, the difference has to be documented. And the annual accounts of most German companies of any size are published in the Company Register, so three years of figures are already public before the room opens. What the room adds is the traceability behind them.
What the buyer is actually looking for
A financial due diligence does not test the annual accounts for correctness – that is the auditor's job. It tests three figures that feed straight into the price:
- Sustainable earnings. Adjusted EBITDA after the quality of earnings analysis – that is, after stripping out one-off and non-operating effects.
- Normalised working capital. The reference against which settlement happens at closing. Set too high, it costs the seller real money.
- Net debt. Including the items that behave like debt: leases, pensions, unpaid bonuses, provisions for legacy issues.
Everything feeding into those three figures needs a traceable path in the data room from the number back into the books.
The folder structure
What works is a numbered structure that follows the logic of the review – not your internal filing:
- Company and structure – commercial register extracts, articles of association, group chart, shareholder list.
- Annual accounts – the last three financial years including notes, management report and audit report, plus the trial balances.
- Monthly reporting – 36 monthly closes in one continuous file: profit and loss by cost type, balance sheet, cash flow.
- Earnings power – revenue by customer, product and region, contribution margin, existing-customer development; for SaaS also cohorts, churn and recurring revenue.
- Working capital and liquidity – open receivables and payables with ageing, inventory valuation, bank statements, credit lines.
- Financing – loan agreements, security, covenants, lease and rental agreements.
- Tax – tax returns and assessments, the last tax audit, loss carryforwards, VAT matters.
- People – anonymised employee list, remuneration structure, bonuses, pension commitments, managing director contracts.
- Contracts – the ten largest customer and supplier contracts, notice periods, change-of-control clauses.
- Planning – the current plan with its derivation, and last year's plan against actuals, so that planning accuracy can be tested.
What to clean up before opening
The work before the data room matters more than the data room itself. Four points come up in almost every process.
Reconcile the two sets of numbers. Monthly reporting and annual accounts have to bridge to each other. Differences that everyone internally knows about and nobody has documented cost days and credibility once the process is running.
Separate the shareholder sphere. Private costs, vehicles, advisory contracts around the shareholders, managing director salaries that are too high or too low. That belongs in the EBITDA normalisation – explained and evidenced, before the buyer finds it.
Clear the open items. Ancient receivables without an allowance, and payables long since settled, generate questions the buyer reads as a sign of loose bookkeeping.
Find every contract. A missing contract with a major customer becomes a risk line in the review report. That costs more than the hours the search would have taken.
Access, watermarks, Q&A
What works in practice is staged access: in the first phase all bidders see the same folders, and sensitive content such as customer names or costings is released only after a firm offer. Documents carry a personalised watermark and downloads are logged.
For questions there is exactly one channel: the data room's Q&A tool, not the personal email of individual participants. Every answer is approved by one named person before it leaves the room. It is in that approval step that the statements arise against which warranties are later measured.
Timetable
Four to eight weeks of preparation before the room opens is realistic – nearer four for a company with clean reporting, considerably more where the history is missing. The review itself typically takes three to six weeks, followed by two to three weeks of Q&A. Open the room before it is ready and you lose exactly the time you were trying to save, twice.
In a structured sale process with several bidders, the vendor due diligence is the step before: the seller commissions the review and puts the report in the room. It costs money, but it shortens the process and settles arguments in advance – the levels are compared in vendor due diligence or financial factbook.
Frequently asked questions
How far back should the history go?
Three financial years plus the current months of this year. Where growth has been strong or there have been one-off effects, the monthly picture across 36 months matters more than the annual slices.
What if the figures are not audited?
A company that is not subject to audit is not a deal breaker. But the demand for traceability rises: bridges, account-level support and a clear accounting line take the place of an audit opinion.
Who should run the data room?
Someone with access to the books and experience of review questions – internally the head of finance, externally often an interim CFO, so that the operating business does not stall. The double load of the running monthly close plus Q&A is regularly underestimated.
Is a simple cloud folder enough?
For small transactions, sometimes. As soon as several bidders are involved it lacks logging, watermarks and staged permissions – and with them the evidence of who saw what and when.
What causes the most common price reduction?
Normalised working capital set too low, and EBITDA adjustments that cannot be evidenced. Both can be prepared for; both are, in practice, addressed too late.
Read on
- Financial due diligence – the six areas a buyer examines.
- Vendor due diligence or financial factbook – the three levels of seller preparation.
- Exit readiness – how the finance function makes a company saleable.
- Financial due diligence at nugrow – support on the buy side and the sell side.
Sources and status
Based on nugrow's mandate practice in purchase and sale processes. As of September 2026. This article is an overview and does not replace tax or legal advice.
