Data Room in a Business Sale – What Should It Contain?

A data room (also called a "virtual data room" or VDR) is the digital folder where you gather all the material a buyer needs for due diligence. A well-organised data room is often what determines whether due diligence takes two weeks or two months.

Why a data room – and not just a folder of files?

A proper VDR tool gives you control over who sees what, and when – and logs all activity. That's valuable both because the material is often confidential, and because the log shows you where a buyer spends time (and thus what they're most focused on).

What should the data room contain?

Financial

3-5 years of annual accounts, latest interim accounts, budget, key figures, and any normalised EBITDA statement.

Legal

Articles of association, share register, key contracts (customers, suppliers, lease), insurance, and any pending disputes.

Commercial

Customer overview (anonymised initially), revenue per customer, order book, and any framework agreements.

HR

Employment contracts, salary overview, organisation chart, and any executive contracts.

IT & operations

System overview, licences, and — increasingly — documentation of IT security (see our guide to IT and cyber due diligence).

How to structure it so it doesn't create distrust

Use a fixed folder structure with clear numbering, and avoid uploading material in random order. A messy data room signals that the rest of the business isn't well organised either — even if that isn't true.

When should the data room be ready?

Ideally before you enter serious dialogue with buyers — as part of your sale preparation. Having it ready from the start lets you share material quickly, the moment a buyer is ready for it.

Frequently asked questions

Do I need a paid VDR tool, or is a shared folder enough?

For smaller deals, a simple shared folder with access control may be sufficient. For larger deals or multiple simultaneous interested parties, a proper VDR tool gives better control and a more professional impression.

When do I give access to the full data room?

Sensitive material (e.g. full customer list, salaries) should only be shared once a letter of intent (LOI) is signed and the buyer has signed a confidentiality agreement.