Check a blind teaser as an identification puzzle, not just as a piece of marketing copy. List every clue, test combinations of geography, customers, products, history, and financial ranges against public sources, and ask whether a reasonably motivated outsider could narrow the field to your company. Remove or generalize clues that become identifying when combined. Have a person who knows the business review the draft and document why each remaining detail is necessary. Do not treat a confidentiality label as a guarantee. Before any outreach, confirm the release scope, recipient permissions, and transaction-specific advice with qualified counsel where needed.
Start with the identity question
A blind teaser normally withholds the company name while giving a prospective buyer enough context to decide whether to learn more. The useful question is not whether one sentence names the company. It is whether the whole document lets someone infer the name with reasonable effort.
Treat the draft as a set of clues. A clue may be a location, founding decade, customer segment, unusual product, regulated license, facility description, ownership fact, revenue band, growth rate, or wording borrowed from a public announcement. NIST explains that removing direct identifiers can reduce privacy risk, while also noting that apparently de-identified information can sometimes be re-identified [1]. That is the right mindset for a teaser: reduce linkage risk, then test what remains.
Build a clue inventory before searching
Copy the teaser into a review worksheet and put each potentially identifying detail on its own row. Record the category, the exact wording, the source-of-truth record, the business reason for including it, and whether it is public, internally known, or confidential. Include clues in headings, captions, file names, metadata, charts, and image properties, not only the body text.
Separate direct identifiers from quasi-identifiers. A direct identifier might be a named certification, a distinctive facility, or an unredacted domain name. A quasi-identifier may look harmless alone but become distinctive in combination, such as a rural region plus a narrow specialty plus a particular end market. The inventory gives the owner a concrete basis for deciding what can be generalized or removed.
Test combinations, not just individual clues
Run searches using two and three clues together. Try a geography with a product category, a customer type with a facility description, or a product phrase with a founding period. Search common wording and likely synonyms. Check company websites, trade publications, government registers, procurement records, job postings, patents, regulatory filings, local news, and archived pages where relevant to the industry.
Use a motivated-intruder review
The ICO describes a motivated intruder test for assessing whether apparently anonymous information can identify a person. Its guidance says to consider a reasonably competent person with access to resources such as the internet and public documents, plus investigative techniques and background knowledge [2]. A teaser review can adapt that discipline without treating the ICO guidance as an M&A rule.
Assign a reviewer who did not write the teaser. Give that reviewer only the draft and ordinary public-search tools. Ask them to answer three questions: What company or small set of companies comes to mind? Which clue combination produced the result? What additional fact would confirm the guess? If the reviewer can identify the company, record the path and stop distribution until the draft changes.
Adjust the exercise to the value and audience of the information. A local competitor may know the market better than a general searcher. A specialist may recognize a product or facility from one unusual phrase. The ICO says risk assessment should consider the information’s nature and volume, likely motivation, available capabilities, accessible information, and safeguards [2]. Those factors are more useful than a generic claim that the teaser is anonymous.
Check high-risk clue categories
Geography is risky when the business is one of only a few employers in a town, operates from a recognizable site, or serves a narrow local market. Consider broader regions or market descriptions when the exact place is not necessary for initial buyer interest.
Clients and channels are risky when a named or unusual customer type points to one supplier. Replace a distinctive customer description with a broader segment unless the detail is essential to screening. Product clues can be identifying when a feature, patent, regulated approval, or technical phrase is unique. Describe the capability at a higher level until a later, permissioned stage.
Financial clues can identify a company when a narrow revenue range is paired with a precise growth rate, employee count, acquisition date, or margin profile. Use ranges that still answer the reader’s question, and check whether the combination matches a public filing or database record. Do not alter numbers casually. If a number is needed, preserve the source-of-truth record and have the accountable owner approve any generalization.
Test the document and its delivery path
Review the file itself, not just a pasted text version. Check the document title, author field, tracked changes, comments, hidden sheets, chart labels, image filenames, hyperlinks, and PDF metadata. Remove details that disclose the company through the file or its hosting path. Keep the clean version separate from internal working files.
Use permissions and a stop rule
Define who may approve the teaser, who may send it, what recipient group may receive it, and what information can be disclosed at each stage. The FTC recommends taking stock of where sensitive information is held and who has or could have access, then scaling down unnecessary collection and access [3]. Apply that principle to the sale process: keep the working source records limited to people with a business need, and do not let a draft silently expand the disclosure group.
Document the decision and escalate legal questions
Keep a short review record with the date, draft version, clues tested, public sources checked, reviewer result, changes made, and final approver. A failed test is useful evidence that the process found a problem. The stopping condition should be explicit: no outreach while the reviewer can identify the company, a source record is missing, permission is unclear, or counsel has flagged a restriction. Revisit the test when facts, recipients, or market conditions change materially over time.
The DOJ’s FOIA guidance asks whether commercial or financial information is customarily kept private or closely held and whether confidentiality was expressly or implicitly assured, while also making clear that it is an FOIA analysis [4]. It is not a universal transaction rule. Use it as a reminder to examine the owner’s actual confidentiality expectations, contracts, industry obligations, and disclosure context. Qualified counsel should address jurisdiction-specific privacy, employment, regulatory, export-control, securities, and sale-process issues.
Acquivo gives business owners the entire sell-side process an investment bank would run, as software, with no success fee. It is user-operated software, so the owner or the owner’s advisers remain responsible for source checks, permissions, human review, and the decision to release a teaser. Acquivo is a software platform that delivers the entire sell-side M&A process, valuation, marketing materials, buyer matching, and deal management, on one platform for business owners, M&A attorneys, and boutique investment banks.
Key Points
- Inventory every direct and indirect clue, including metadata and attachments, before testing the teaser.
- Search combinations of geography, clients, products, history, and financial ranges because linkage risk often comes from the combination.
- Use an independent reviewer and a motivated-intruder mindset to record how identification could occur.
- Generalize or remove unnecessary details while preserving approved source-of-truth records and owner review.
- Stop outreach when the company is identifiable, permissions are unclear, or a legal or contractual question remains unresolved.
Sources and references
Source retrieval dates record research access, not article publication. Read our editorial and date policy.
- [1] De-Identification of Personal Information · Accessed
- [2] How do we ensure anonymisation is effective? · Accessed
- [3] Protecting Personal Information: A Guide for Business · Accessed
- [4] Step-by-Step Guide for Determining if Commercial or Financial Information Obtained From a Person is Confidential Under Exemption 4 of the FOIA · Accessed
Choose your next step
Acquivo is user-operated software. Owners and their professionals remain responsible for decisions, communications, and professional review.
Educational information, not individual legal, tax, or investment advice. Consult qualified professionals for your circumstances. Acquivo provides software, not representation or negotiation on your behalf.