Preparing for a business sale: setting up the data room, vendor due diligence and the bidding process correctly

Readiness Review and Vendor Due Diligence

The process often begins with what is known as a Readiness Review. This is less comprehensive than a full vendor due diligence and addresses three key questions.

A Readiness Review clarifies which documents and information a professional buyer will expect, where gaps or inconsistencies exist, and which issues should be resolved, disclosed in a structured manner or taken into account in the transaction strategy before the sale begins.

In the area of company law, particular attention is paid to the chain of ownership of shares, current shareholder documentation, powers of attorney and resolutions of the governing bodies. Key customer, supply, financing, lease and cooperation agreements are examined for their term, termination clauses, change of control provisions and any unusual liability provisions.

For employees and management, the contractual situation, variable remuneration, pension commitments and potential key personnel risks are relevant. In the case of technology- or brand-driven companies, ownership and rights of use relating to IP, software, domains and data must be robustly documented.

Other areas requiring attention include licences, compliance, data protection, sanctions and export controls, property and the environment, insurance, legal disputes and tax matters. Prioritisation is crucial. Not every discrepancy needs to be resolved before the process begins, but every significant discrepancy requires careful consideration.

A full vendor due diligence goes further. Seller’s advisers examine the company to the agreed extent and draw up a report for the sale process. This can be useful in the case of complex companies, an international pool of buyers or a competitive bidding process. The report establishes a uniform starting point, but it does not replace the buyer’s own due diligence nor the targeted preparation of the contractual and disclosure strategy.

Setting up a data room correctly

The data room is not merely a repository but the primary source of information for the process. Its structure should align with the business model and the audit trails.

A robust structure begins with the company and ownership, and then covers financing and annual accounts, key contracts, personnel and management, IP, IT and data protection, as well as property, the environment and licences.

Other areas include compliance, sanctions and export controls, insurance and litigation, taxation, and operational and commercial documents. A separate folder for transaction documents, Q&As and updated documents facilitates traceability at a later stage. The index structure should remain consistent so that cross-references in the report and the disclosure letter remain valid right up to signing.

Each document should be complete, legible, correctly categorised and uploaded in its latest version. Contracts without annexes or addenda give rise to additional questions and mistrust.

Access rights must also be controlled according to bidder group, confidentiality level and stage of the process. Particularly sensitive documents may only be made available following additional authorisation or via a clean team. Versions, upload dates and the person responsible should be traceable.

A standardised process is also required for Q&A, new documents and corrections. The seller should check which response is legally and commercially necessary, and ensure that contradictory statements from different contacts do not find their way into the data room. A disclosure log documents when which information was made available to which bidder.

The organisation of the data room must be aligned with data protection, trade secret protection and competition law. Particularly in the case of strategic buyers, competitively sensitive information must not be exchanged unfiltered.

Managing the tender process and the flow of information

A structured process fosters competition without placing an unnecessary burden on confidentiality or day-to-day operations. The process generally follows a set pattern.

The process begins with an anonymised teaser and a carefully selected list of potential buyers. Once the confidentiality agreement has been signed, suitable prospective buyers receive an information memorandum and clear procedural guidelines for submitting indicative offers.

Following the initial selection, access to the data room, management presentations and Q&A sessions are managed in terms of both timing and content. A process letter sets out offer requirements, contract mark-up, proof of financing and binding deadlines. This ensures that offers remain comparable and the burden on management remains manageable.

In the final round, binding offers, transaction certainty and contractual terms are assessed together. Exclusivity should only be granted once the purchase price, financing, key contractual issues and a realistic timetable are sufficiently robust.

The process letter should set out deadlines, the content of bids, the valuation basis, financing, regulatory assumptions and contact details. Binding offers are easier to compare if bidders disclose not only the price but also the purchase price mechanism, terms and conditions, liability model, W&I structure, financing and the expected level of cooperation from the seller.

Exclusivity should only be granted once the price and key contractual terms are sufficiently robust. Granting exclusivity too early or for too long removes competitive pressure from the seller without providing certainty of a deal.

Preparation checklist

• Define the sales target, scope of the transaction and desired buyer groups. 
• Review corporate and ownership documentation. 
• Carry out a financial, tax and legal readiness review. 
• Address remediable risks before the process begins. 
• Prepare value drivers and sensitive issues for the equity story. 
• Establish the data room index and responsibilities. 
• Ensure documents are complete, up to date and traceable. 
• Implement data protection, competition law and ‘clean team’ policies. 
• Prepare the NDA, process brief and Q&A guidelines. 
• Plan the disclosure strategy and disclosure letter at an early stage. 
• Coordinate the purchase price mechanism and tax structure with advisers. 
• Prepare a draft SPA or seller’s mark-up for the bidding process. 
• Ensure management capacity and communication rules are in place. 
• Develop a timetable for regulatory approvals, financing and closing. 
• Identify post-closing issues such as handover, buy-back or TSA.

Letter of Assurance and the Advisers’ Liability

A vendor due diligence report is initially prepared on behalf of the seller. A buyer does not automatically acquire any contractual claims against the advisers as a result. If the buyer is to be entitled to rely on the report in legal terms, a reliance letter is usually agreed.

The Reliance Letter first specifies who is permitted to rely on the report, such as the buyer, the acquiring company and the financing banks. It describes the scope of the review, the information on which it is based, the cut-off date and the areas that have been expressly excluded from the review. It also sets out the standard of liability, the liability cap, the time limit for claims, confidentiality and disclosure. The relationship to the buyer’s own due diligence and to updates or bring-down work prior to signing or closing should also be clearly defined.

A Reliance Letter does not turn the report into a guarantee for the company, but merely extends the circle of persons to whom the adviser is accountable within the agreed framework.

In many processes, the buyer also carries out confirmatory due diligence. This is particularly useful if the vendor report only covers red flags, excludes certain specialist areas, or if a significant amount of time has elapsed between the report’s cut-off date and signing. Even without a Reliance Letter, the report can still help to speed up the process, but for the buyer it remains, above all, a source of information.