Preparing for due diligence: organising company information

When a buyer or investor becomes seriously interested in a business, the next step is usually due diligence: a structured review of the business by the other side and its advisers. For the business being reviewed, the experience depends heavily on how prepared it is. A business that has to search for each document as it is requested tends to find the process slow, repetitive and stressful. One that has already organised its own information can answer clearly, spot its own issues first and keep control of what is shared.

This article explains how to prepare company information before due diligence begins: what reviewers typically want to understand, how to group the information, how to keep one index and control versions, and how to plan confidentiality before anything leaves the business.

Why preparation pays off

Due diligence is, at heart, a series of questions about the business. Each question needs an answer supported by information. The difference between a prepared and an unprepared business is not the questions they face but how quickly each answer can be given and how confident it is.

Preparation helps in several ways:

• Speed and clarity. Information that already exists in an organised form can be shared and explained quickly.
• Fewer surprises. Reviewing your own information first lets you find gaps, inconsistencies or issues and decide how to address them before someone else raises them.
• Consistent answers. When one source of truth exists, different people answering questions give the same answer.
• Control. A prepared business decides what to share and when, rather than reacting to every request.

Preparation does not mean presenting the business favourably. It means presenting it accurately, with the context needed to understand it.

What reviewers usually want to understand

Every review is different, but most of them try to understand a similar set of themes:

• who owns the business and how it is organised;
• what it sells, to whom, and on what terms;
• how it has performed financially and how that performance is measured;
• who works for it and on what basis;
• what assets it uses and relies on, including systems and intellectual property;
• what obligations, disputes or risks it carries;
• how it complies with the rules that apply to its activities.

The specific scope is set by the reviewing side and its advisers, and it changes with the size and sector of the business. Treat the themes above as a way to organise your own preparation, not as a definition of what any review will cover.

Corporate and ownership records

The starting point is a clear picture of the business itself. That usually means being able to show:

• the legal entities in the group and how they relate to each other;
• who owns each entity, and how ownership has changed over time;
• governing documents and records of key decisions;
• the people who hold management and signing authority;
• registrations and licences relevant to the activities carried out.

A simple ownership chart, kept up to date and checked against the underlying records, is often the most useful single document a business can prepare. Inconsistencies between the chart, the records and what people believe are common, and they are much easier to resolve early.

Commercial relationships and contracts

The second theme is the business's relationships with the outside world. Reviewers will usually want to understand the most significant customer, supplier, distribution, partnership and property arrangements, and how dependent the business is on any of them.

A practical approach is to build a contract register: a list of the significant agreements with the counterparty, the subject, the start and end points, renewal or termination arrangements, and any provisions that could be affected by a change of ownership. Flag where an agreement cannot be found, exists only informally, or has been amended in ways that are not recorded together. Those are exactly the points that create questions later.

Financial information

Financial information is reviewed closely in almost every transaction. Before any review, it helps to gather:

• historical financial statements for the periods your advisers recommend;
• management reports and how they reconcile with the formal statements;
• an explanation of how revenue and costs are categorised;
• information about working capital, debts and other obligations;
• a note of unusual or one-off items, and why they occurred;
• the assumptions behind any forecasts you intend to share.

Consistency of definitions matters as much as the numbers themselves. If "revenue" or "margin" means different things in different reports, write down which definition each report uses. Your accountants can advise on how to present the information; the aim of preparation is to make sure it exists and can be explained.

People and organisation

People information combines business significance with personal sensitivity. Reviewers often need to understand the structure of the organisation, key roles, the general terms on which people are employed or engaged, incentive arrangements and any significant people-related issues.

Prepare this information at an aggregated level first. Personal details of individuals should only be shared when it is genuinely necessary, on legal advice, and in a way that respects the data-protection rules that apply. A clear organisation chart and a summary of key roles usually answer most early questions without exposing individual records.

Operations, assets and technology

Depending on the business, reviewers may look closely at how it actually operates: the sites it uses, its key equipment, the systems it relies on, how it handles data, its intellectual property and its main operational risks.

Useful preparation includes a list of key systems and who supports them, a summary of significant intellectual property and how it is protected, a description of the main operational processes and any known weaknesses, and a record of incidents or interruptions and how they were handled. Where the business depends heavily on one person, one supplier or one system, say so; reviewers will usually find out anyway.

One index for everything

All of this information becomes much more useful when it sits behind a single index. The index lists each item, where it is stored, which theme it belongs to, who owns it and its status — available, being prepared, or not available.

A good index:

• uses the same structure that will later be used in the data room;
• gives each document a stable reference that does not change when the file is renamed;
• records gaps honestly rather than hiding them;
• shows which items are sensitive and require special handling.

Much of the later data-room work, including folder structure and question tracking, builds directly on this index.

Version control

Transactions generate many versions of the same documents: updated financial information, revised contract registers, amended charts. Without discipline, different people end up relying on different versions.

Simple habits prevent most problems:

• one master copy of each document, with older versions archived rather than deleted;
• a consistent naming convention that includes a date or version marker;
• a note of what changed and why when a document is updated;
• a rule that only the document owner updates the master.

Confidentiality before sharing

Nothing should be shared before the business has decided who may see it, under what arrangements and at what stage. Confidentiality agreements are commonly used before detailed information is exchanged; their terms are a matter for your lawyers.

Beyond the agreement itself, think about:

• staging — sharing general information first and the most sensitive information only once the counterparty's seriousness is established;
• need to know — limiting access to the people who genuinely need each category of information;
• sensitive categories — customer names, pricing, personal data and trade secrets may need redaction or later release, on legal advice;
• internal confidentiality — deciding which employees know about the process and how leaks would be handled.

What your advisers will ask for

Once a review begins, requests usually arrive as lists from the other side's advisers. A prepared business can map each request against its index, answer what is already available, and log what is missing with a date for follow-up. Questions that need interpretation should go through your own advisers before an answer is sent.

How information requests and questions are managed across several workstreams at once is described in keeping parallel workstreams aligned across jurisdictions. Who those advisers are, and what each covers, is explained in mapping the specialists in a cross-border deal.

In short

Due diligence is easier, clearer and more controlled when the business has organised its own information first. Gather corporate, commercial, financial, people and operational information around a single index, control versions, record gaps honestly and decide on confidentiality before anything is shared. Preparation is not about presenting the business favourably — it is about being able to explain it accurately.

If you would like help organising your company information before a review begins, you can talk to Wobridge.