What documents go into a sale data room?

Seven folders: legal (articles, registration, minutes, shareholders' agreement, leases), financial (accounts, income statements, debt, forecast), commercial (contracts and client concentration), HR (contracts, register, agreements), assets and property, risks (litigation, insurance) and tax-social (compliance certificates).

What's the difference between documents before and after the LOI?

Before the letter of intent, you share general documents (presentation, published accounts, legal structure). Sensitive documents — named contracts, client detail, employment contracts, litigation — only open after the LOI and a confidentiality agreement are signed.

How do you guarantee a data room's confidentiality?

Through differentiated access rights per folder and per participant, watermarks on sensitive documents, and a timestamped viewing log that tracks who opened what and when.

How do you fill a data room without endless chasing?

By starting from a checklist mirroring the structure and sending it via a secure portal: each contact sees what to provide, uploads with no account, and automatic reminders handle the laggards.

All articles

June 6, 2026 · 8 min read

Due diligence data room checklist for a business sale

Building a due diligence data room checklist means anticipating every document the buyer and their advisers will examine. A well-structured data room reassures, speeds up exchanges and limits last-minute renegotiations. A messy or incomplete structure, by contrast, breeds doubt and slows the deal.

Here is the standard structure of a data room, organised by folder, with the expected contents of each. We'll then look at how to sequence the release of documents around the letter of intent, how to manage confidentiality, and finally how to fill the data room without chasing the owner piecemeal.

The standard structure of a sale data room

A data room is always arranged into broad families of documents, each in its own folder. This thematic structure lets the buyer's advisers — lawyers, accountants, tax specialists — each work within their scope without getting lost.

The standard structure has seven folders: legal, financial, commercial, human resources, assets and property, risks, and tax and social. It's best to create this structure from the start and fill it gradually, rather than piling up files in bulk.

01 — Legal (company structure and governance)
02 — Financial (accounts, debt, forecast)
03 — Commercial (clients, suppliers, key contracts)
04 — Human resources (contracts, registers, agreements)
05 — Assets and property (title deeds, leases)
06 — Risks (litigation, insurance)
07 — Tax and social (compliance certificates)

Legal and financial folders

These two folders form the foundation of any due diligence. The legal folder establishes who owns and controls the company; the financial folder measures its health and profitability.

Up-to-date articles, registration extract less than 3 months old
Shareholder-meeting minutes and shareholders' agreement
Current commercial leases
Last 3 sets of accounts and income statements
Interim accounts, debt schedule and forecast

Legal

This holds up-to-date articles of association, the company-registration extract, minutes of shareholder meetings from recent years, the shareholders' agreement if any, and commercial leases. It's the folder that proves share ownership and the regularity of corporate life.

Financial

Here you find the last three sets of annual accounts and income statements, recent interim accounts, the debt repayment schedule and the forecast. The buyer checks the consistency of results, the level of debt and the credibility of projections.

Commercial and human resources folders

These folders reveal the company's dependencies: on its clients, its suppliers, its teams. This is often where the buyer looks for the real hidden risks.

Key client and supplier contracts
Client concentration analysis (top 5, top 10)
Employment contracts and amendments
Staff register
Company agreements and applicable collective agreements

Commercial

You gather key client and supplier contracts, along with an analysis of client concentration (the share of revenue made with the top clients). Over-reliance on a single client is a major valuation concern.

Human resources

This holds employment contracts, the staff register and company-level agreements. The buyer assesses the payroll, social commitments and any contracts with sensitive clauses (key people, severance terms).

Assets, risks and tax-social folders

These three folders cover the company's assets and its exposure to risk. They're scrutinised closely because they shape the liability guarantees the buyer will require.

The assets and property folder gathers title deeds and leases; the risks folder collects ongoing litigation and insurance policies; the tax and social folder brings together compliance certificates from the authorities. The documents needed to later build a warranty and indemnity package are covered in a dedicated article: warranty and indemnity in a business sale, which documents to gather.

Title deeds for property and leases
List and status of ongoing litigation (employment, commercial)
Insurance policies and certificates in force
Tax compliance certificate
Social-contribution compliance certificate

Sequencing the data room around the letter of intent

Not everything is shown at once. The practice is to organise the release of documents in tiers, according to progress and the level of trust.

Tier 1 covers the general documents that can be shared before the letter of intent (LOI): company presentation, published accounts, basic legal structure. Tiers 2 and 3 — named contracts, detailed client concentration, employment contracts, litigation — only open after the LOI is signed, once the buyer has shown commitment and signed a confidentiality agreement. The set of documents needed to draft or receive that LOI, before the data room even opens, is covered in a dedicated article: letter of intent in a business sale, which documents to gather at this stage.

Tier 1 (before LOI): presentation, published accounts, legal structure
Tier 2 (after LOI): key contracts, aggregated HR data, detailed debt
Tier 3 (deep due diligence): named contracts, litigation, sensitive data

Managing confidentiality: who sees what, and who has viewed it

A data room handles strategic information that competitors must never see. Confidentiality rests on two pillars: differentiated access rights and a full audit trail.

In practice, access is granted per folder: the buyer's tax adviser doesn't need to see named employment contracts, the lawyer doesn't need detailed margins. Each view is timestamped, so the seller knows precisely who opened which document and when — valuable information in a tense negotiation or a leak. These security requirements overlap with the GDPR obligations that apply to any collection of client documents, covered in our dedicated article on GDPR and client document collection.

Access rights per folder and per participant
Watermarks on the most sensitive documents
Timestamped viewing log (audit trail)
Access revoked once the phase is over

Building and filling the data room without chasing the owner piecemeal

The real difficulty isn't knowing the structure: it's filling it. In a sale, documents are scattered between the owner, the accountant, the lawyer and sometimes several subsidiaries. Gathering them by email quickly turns into endless chasing, with files in the wrong format and omissions that resurface in the middle of due diligence.

The effective method: start from a clear checklist mirroring the structure, and send it via a secure portal. Each contact sees exactly the documents requested of them, uploads them with no account to create, and automatic reminders handle the laggards until every folder is complete. The adviser gets a clean data room, ready for the buyer, without having chased the owner ten times.

Frequently asked questions

What documents go into a sale data room?: Seven folders: legal (articles, registration, minutes, shareholders' agreement, leases), financial (accounts, income statements, debt, forecast), commercial (contracts and client concentration), HR (contracts, register, agreements), assets and property, risks (litigation, insurance) and tax-social (compliance certificates).
What's the difference between documents before and after the LOI?: Before the letter of intent, you share general documents (presentation, published accounts, legal structure). Sensitive documents — named contracts, client detail, employment contracts, litigation — only open after the LOI and a confidentiality agreement are signed.
How do you guarantee a data room's confidentiality?: Through differentiated access rights per folder and per participant, watermarks on sensitive documents, and a timestamped viewing log that tracks who opened what and when.
How do you fill a data room without endless chasing?: By starting from a checklist mirroring the structure and sending it via a secure portal: each contact sees what to provide, uploads with no account, and automatic reminders handle the laggards.