Confidentiality in an Attorney-Run Sale: Employees, Customers, and Competitors

The three audiences and what each one risks

A leak to employees can produce attrition and anxiety. Key managers may start taking calls from recruiters. Hourly staff may worry about layoffs. The business the buyer diligences in month three may be weaker than the one in the CIM, which can give the buyer a reason to question projections or price.

A leak to customers can produce hesitation. A customer that learns the supplier is for sale may defer a renewal, start qualifying a second source, or ask for a price concession. Customer concentration, which was a disclosure item, can become a diligence concern that the buyer investigates.

A leak to competitors can produce lasting harm. A competitor that learns the business is for sale may tell customers, recruit employees, or shape its own pricing around the owner's presumed distraction. A competitor that gets access to the data room may learn pricing, margins, customer lists, and supplier terms, and may retain that knowledge whether or not it buys. The FTC recommends limiting competitively sensitive information, masking customer identities, and using clean teams or other safeguards when a bidder competes with the seller. [2]

Each audience requires a different rule, and the rules should be written down before the teaser goes out.

Employees: the owner's timeline, not the buyer's

The owner decides who inside the company knows and when. In many lower-middle-market sales, a small group is told at the start: the controller or CFO who will populate the data room, and perhaps one or two senior managers who will attend management meetings. Everyone else may learn at signing or at closing, depending on the owner's plan and the transaction's needs.

The attorney's role is to make this workable. The document request list should be structured so that the controller can fulfill most of it without involving others. Requests that would require pulling the operations manager into the process can be deferred until the second round, when fewer buyers are involved and the owner can decide whether to expand the circle. Management meetings should be scheduled off-site or after hours. Buyer site visits should use a neutral, truthful explanation approved by the owner, rather than a pretext that creates a new confidentiality or employee-relations problem.

The attorney should also raise retention with the owner early. If two managers are essential to the buyer's valuation, the owner may want to consider retention bonuses or transaction bonuses that are disclosed in the CIM and funded from proceeds. The buyer will ask whether these managers are staying, and "they do not know yet" may not be a good answer in the second round.

Customers: limit contact until the end, with exceptions

As a default, buyers should not contact customers before signing. The process letter accompanying the CIM and the NDA can require the buyer to obtain the seller's written consent before contacting employees, customers, or suppliers. A filed transaction confidentiality agreement illustrates this structure by limiting transaction-related contact without prior written consent, restricting use to evaluating the transaction, and requiring representatives to be bound by the agreement. [1]

A buyer that wants customer calls can have them after the purchase agreement is signed, if the parties agree and the deal structure permits it. The buyer may also rely on a blind or otherwise protected customer survey conducted by a quality-of-earnings firm, without disclosing the seller's identity where that approach is appropriate. The attorney should define the permitted channel, timing, and information before any contact occurs.

The important exception is a required consent or another deliberate business reason. If the client's largest contracts have anti-assignment or change-of-control clauses, the buyer may want assurance that the customer will consent. The attorney should identify these contracts in the readiness phase, assess which ones require consent under their terms and the deal structure, and plan consent requests for the window between signing and closing. A stock sale and an asset sale can raise different contract questions, so the answer depends on the document and transaction. Where the client's relationship with the customer is strong enough, the owner may choose to have a private conversation earlier. That is the owner's call, and the attorney should make sure it is deliberate rather than driven by buyer pressure.

Competitors: the blind teaser and the staged data room

The hardest decision is whether to include competitors at all. Some competitors are the best buyers because they have the largest synergies. Some are the worst because the cost of a failed deal is a rival that now knows too much. The owner makes this decision name by name when the buyer list is built. The attorney should ask of each one: if this competitor saw the CIM, signed an NDA, and then walked away, what would it know that it does not know today?

For competitors the owner approves, the attorney adds protections. The teaser is blind, with the client described by sector, size, and region in terms that do not identify it. The NDA may include non-solicitation terms, subject to the applicable law and the parties' negotiated form, plus a restriction on using information for any purpose other than evaluating the transaction. The data room is staged: competitors get financial summaries and the CIM in the first round, and customer names, pricing, and supplier terms only after an LOI and, where appropriate, exclusivity, if at all. The FTC recommends sharing the least information needed for diligence, masking customer identities, and applying stronger safeguards as competitively sensitive information becomes more detailed. [2] Some sellers never show a competitor the customer list and instead provide information to the competitor's outside counsel or accountants on a counsel-only or clean-team basis.

The attorney should also watch the activity log. A competitor that downloads every document in the data room in the first week and then submits a low IOI may have been fishing. The attorney cannot prove that from the log alone, but the attorney can ask for an explanation, decline to advance that buyer, and tell the client why.

The NDA as the backbone

Every protection above runs through the NDA. The attorney who runs the process controls the NDA form, which can give the client an earlier opportunity to set confidentiality rules than a process in which a banker's standard form is used and the attorney sees it afterward.

The form should define confidential information broadly, include the fact of the sale process itself, restrict use to evaluation of the transaction, limit disclosure to named representatives who are bound by the same terms, and address contact with employees, customers, and suppliers without the seller's written consent. It should also address non-solicitation of employees for a defined period, return or destruction of information on request, and a term that outlasts the process. The SEC-filed agreement cited above uses several of these mechanisms, including transaction-purpose limits, representative responsibility, contact restrictions, return or destruction, and a defined term. [1] For private equity buyers, the attorney should pay attention to how the NDA treats portfolio companies, since a sponsor with a competing portfolio company may need separate restrictions or clean-team procedures.

Buyers will mark up the form. The attorney should decide in advance which terms are negotiable and which are not, and should keep a log of each buyer's NDA status and any deviations agreed.

Writing the rules down before launch

The practical step is a one-page confidentiality plan, drafted by the attorney and approved by the owner before the first teaser is sent. It lists who inside the company knows and when others will be told; which customers have consent requirements and how those will be handled; which competitors are in the process and what they may see at each stage; and what the NDA requires of every buyer. The associate and paralegal work from this plan. When a buyer asks for something the plan does not allow, the answer is no, or the request is escalated to the attorney for a documented decision. The attorney does not have to reconstruct the reasoning.

How Acquivo Pro fits

Acquivo Pro supports a staged disclosure plan. The firm generates a blind teaser and a CIM from the client questionnaire and data room, and manages NDA flow for every buyer in a single pipeline so that the paralegal can see which buyers are bound and on what terms. The client approves disclosures through a branded portal under the firm's name, and client data is isolated and not used to train models for other customers. Software prepares, organizes, matches, and tracks; the attorney and the client decide and act. To walk through a process on a client you have in mind, request a demo through the Contact page.