Quick answer
Build a diligence index that lets the proposed structure be tested against how the business actually operates. The buyer needs reliable records to understand what exists and what must transfer; the seller needs controlled, lawful disclosure with clear cut-off dates, permissions and explanations for gaps.
How to use this guide
Organise records around what the buyer will own, assume, depend on and need after closing. Constitutional, ownership, finance, tax, employee, contract, premises, intellectual-property, licence, asset, liability, dispute and data records should be indexed by source and period. Sellers should disclose lawfully and explain gaps rather than provide an uncontrolled data dump.
Build a diligence record architecture
Organise diligence around what the buyer will own, assume, depend on and need after closing. Start with constitutional and ownership material, then group financial, tax, employment, contract, premises, intellectual-property, licence, asset, liability, dispute and data records. The index should show source, period, custodian and status, not merely reproduce the seller’s data-room folder names.
Collect ownership-to-operations evidence
Build the data room around these evidence categories:
- Provide constitutional, ownership, securities, director, beneficial-ownership and group-structure records from authoritative sources.
- Reconcile management accounts, annual financial statements, tax filings, bank debt, security and working-capital information.
- List employees, roles, remuneration, benefits, disputes, contractors and records relevant to a possible going-concern transfer.
- Index customer, supplier, finance, lease, licence, franchise and service contracts with change-of-control or consent terms.
- Record property, equipment, inventory, intellectual property, domains, software, data, insurance and maintenance history.
- Disclose litigation, complaints, warranties, returns, environmental or regulatory issues and material post-balance-sheet events.
Control provenance and disclosure
Reconcile management claims to source records. Revenue concentration should connect to customer agreements and system data; working capital and margin should tie to accounts and transaction history; assets and security should link to registers and finance documents. Clearly mark unaudited figures, forecasts and schedules prepared for the sale. Explain a missing or reconstructed record instead of allowing it to appear authoritative.
Reconcile claims to source records
Control disclosure as a legal workstream. An NDA does not replace POPIA or duties owed to employees, customers and counterparties. Limit access by role, stage sensitive material where appropriate, log uploads and corrections, and explain redactions. Material gaps and consent requirements should become deal issues for price, warranties or conditions rather than disappear inside an unmanaged document dump.
Avoid an unmanaged data dump
A useful diligence process avoids these record-management failures:
- Do not upload an unexplained data dump without dates, owners, source systems and transaction relevance.
- Do not conceal liabilities in informal channels or omit records because they are commercially uncomfortable.
- Do not assume an NDA permits unrestricted processing of customer, employee or special personal information.
- Do not present forecast figures as historical results or management summaries as audited records.
Prepare the data-room index
Use the index to connect each commercial claim to its source:
- Create a numbered data-room index with owner, period, source, status and access restriction.
- Reconcile headline financial and operational claims to the underlying system or signed record.
- Mark expired, terminable, non-transferable and consent-dependent rights.
- Use a disclosure log to record questions, answers, uploads, withdrawals and corrected versions.
- Separate known gaps and management explanations from verified source evidence.
Deeper analysis: small-business diligence record set
Reconcile ownership and authority first. Constitutional documents, securities records, director information, beneficial-ownership material and group structure should support the seller and target described in the deal. Then connect major assets, security and related-party arrangements to the entity that actually owns or owes them instead of relying on a management presentation.
Commercial claims need source support. Revenue concentration should link to customer contracts and system data; margin and working capital should reconcile to accounts and transaction-level records; employees, contractors, leases, licences and supplier dependencies should be listed with change-of-control, transfer, consent and termination terms. Clearly label forecasts and management estimates.
Use controlled disclosure for personal and sensitive information. An NDA does not replace POPIA. Limit access by role, stage detailed employee or customer data where appropriate, record uploads and corrections, and preserve a disclosure log. Redact only with an explanation so the buyer can distinguish lawful protection from a missing record.
Financial information should be tied back to the rights and obligations a buyer will actually acquire. Management accounts, bank statements and tax records may show trading history, but they should be read alongside customer contracts, supplier commitments, payroll data, leases, finance agreements and asset registers. Note which figures are unaudited, adjusted or prepared specifically for the sale. A buyer can then test material assumptions, while the seller can identify legitimate confidentiality limits and organise controlled disclosure.
Limits of diligence records
Diligence records inform structure, warranties, price and conditions but do not guarantee completeness, value or future performance. Management summaries, forecasts and reconstructed schedules need their status stated. Material gaps, inconsistencies, expired rights and consent requirements should become explicit deal issues rather than disappear inside the data room.
FAQs
How far back should records go?
Use periods relevant to the business, claim and transaction, while prioritising current obligations, trends, tax periods, warranties and records needed after closing.
Can personal information be placed in the data room?
Only where processing is lawful, necessary and appropriately secured; minimise access and redact or stage sensitive information where suitable.
Why include expired contracts?
They may explain revenue, liabilities, disputes, data use, warranties, renewals or the basis of historical performance.
Should forecasts be included?
They can be, but clearly label assumptions, preparation date and status, and do not present them as guaranteed or historical results.
Related Lexuno paths
Related articles
Source notes
Legal note
This article is general legal information for South African readers. It is not legal advice. Speak to a qualified legal professional about your specific facts before taking action.