A confidentiality agreement is necessary in a private company sale, but it is not a force field. An NDA gives the seller a contractual remedy after misuse. It does not undo a leaked customer list, calm employees who hear a rumour, or make a competitor forget the company’s pricing. The real protection is a staged disclosure process that gives each buyer enough information to make the next decision without giving every interested party the keys to the business.
For an owner-managed company, confidentiality has economic value. A careless process can unsettle staff, invite customers to test alternatives and tell suppliers that ownership may change before the seller knows whether a credible offer exists. The practical question is not whether to disclose information. A buyer cannot value or finance a business without it. The question is who receives what, when, for what purpose and under what controls.
What an NDA should accomplish
The NDA should define confidential information broadly enough to cover financial, commercial, operational and transaction information. It should restrict use to evaluating the proposed acquisition, limit disclosure to representatives who need the information and make the recipient responsible for those representatives. It should also address return or destruction, legally compelled disclosure, contact with employees and customers, and whether the existence of negotiations is confidential.
Standard exclusions normally cover information already known to the recipient, independently developed, publicly available through no breach, or lawfully received from another source. Those exclusions matter. An agreement that labels everything confidential without workable boundaries is harder to administer and easier to argue about.
The NDA should match the process. A financial buyer with no competing operation creates a different risk than a direct competitor seeking customer-level margins. A buyer already bound by professional confidentiality obligations is still a buyer. The seller should not rely on reputation or a friendly first meeting. Our guide to responding to an unsolicited offer explains why credibility and confidentiality need to be tested before detailed information moves.
Confidentiality is a disclosure sequence
The safest process starts with a blind teaser that describes the industry, geography, scale and investment case without identifying the company. A credible buyer then signs an NDA before receiving a confidential information memorandum or management presentation. Customer names, employee files, detailed contracts and other sensitive records come later, usually after an acceptable letter of intent.
This sequence separates curiosity from commitment. A buyer who will not explain its acquisition criteria, financial capacity or decision process should not receive the same information as a buyer that has completed an initial review, submitted an offer and assembled a financing team. Confidentiality improves when the seller runs a disciplined process because there are fewer recipients, clearer milestones and an auditable reason for every disclosure.
The uncomfortable truth is that some sellers overshare because they are flattered by interest. A strategic buyer may genuinely want the company, but it may also learn useful information simply by participating. Interest is not consideration. Detailed disclosure should be earned through process.
A worked example of staged customer disclosure
Assume a distribution company has $6.0 million of revenue. Its largest customer generates $1.2 million, the second $900,000 and the third $600,000. The top three therefore represent $2.7 million, or 45% of revenue. A buyer needs to understand that concentration before valuing the business, but it does not need the customer names on day one.
The first data package can label them Customer A, B and C and show revenue, gross margin, tenure, contract status and annual retention. If Customer A carries a 28% gross margin and the rest of the company averages 34%, the buyer can model the risk without knowing the name. After an LOI, the seller can disclose the contract and identity in a controlled data room. Direct customer contact should wait until the parties agree on timing, messaging and who attends.
This is not concealment. It is proportional disclosure. The buyer receives enough information to assess customer concentration and business value, while the seller avoids handing its most sensitive relationship map to every bidder.
Competitors require a higher bar
A competitor can be the buyer most able to pay because it can realize synergies. It can also cause the most damage if a deal does not close. Detailed pricing, current bids, customer-specific margins, supplier rebates and employee compensation should be restricted until necessary. In larger or more sensitive processes, counsel may recommend a clean team, meaning designated individuals or outside advisors review competitively sensitive information without sharing it with the buyer’s operating staff.
The Competition Act prohibits certain agreements between competitors, and competitively sensitive exchanges can create risk even when the commercial purpose is legitimate. The solution is not to exclude every strategic buyer. It is to define the purpose of disclosure, control access, aggregate information where possible and involve competition counsel when the parties overlap materially.
Seller and buyer should also agree on communication channels. A buyer should not contact customers, employees, lenders or suppliers without written authorization. One unauthorized call can reveal the process and damage the company faster than any contractual claim can repair it.
Privacy obligations do not disappear in due diligence
Data rooms often contain personal information: employee compensation, benefit records, customer contacts and sometimes medical or financial details. Federal and provincial privacy rules can apply depending on the organization and information. The Office of the Privacy Commissioner of Canada states that organizations should limit personal information in a business transaction to what is necessary for the transaction.
Redaction, aggregation and delayed disclosure are therefore privacy controls as well as commercial controls. A payroll summary by role may answer a buyer’s labour-cost question without disclosing names. Employment agreements for key managers may be necessary later, but home addresses, banking details and social insurance numbers are not acquisition diligence.
The NDA should require the recipient to protect personal information and use it only for the transaction. The seller still needs legal advice on applicable privacy requirements. An NDA between parties does not override legislation or cure an unnecessary disclosure.
Control the data room, not just the document
A secure data room should use named accounts, access permissions and activity logs. Highly sensitive folders can be limited to specific representatives. Downloads can be disabled or watermarked. Old versions should be removed rather than left beside current records, and the seller should maintain an index showing what was provided and when.
Good organization also improves the transaction. Buyers ask fewer repetitive questions, discrepancies appear earlier and the seller can respond consistently. The same preparation supports due diligence in a private company sale and reduces the risk that a weak record system becomes a reason to cut price.
Do not upload the entire corporate drive. A data room is a curated transaction record, not a digital warehouse. Every document should answer a foreseeable diligence question or support a representation the seller expects to make.
Access should also reflect buyer type. A financial buyer may need broad operating information to build its standalone case, while a strategic buyer may already understand the market and create greater competitive exposure. The distinction in strategic versus financial buyers affects both valuation and disclosure. Create permission groups before documents are uploaded, then review the access log weekly. If a bidder downloads an entire folder immediately before going quiet, the seller should know that while the process is active, not six months later.
What happens when confidentiality is breached
The seller should document the breach, preserve access logs and involve counsel immediately. The first objective may be practical containment: stop further access, recover documents, correct a rumour or notify affected parties. Injunctive relief and damages may be available, but enforcement takes time and proof.
This is why remedies should not be the primary control. A seller that disclosed ten named customers to six preliminary bidders has created sixty separate exposures. A seller that used anonymized concentration data until two bidders submitted credible LOIs has created far fewer. Process design reduces expected damage before lawyers debate the NDA.
The sale agreement later addresses continuing confidentiality, public announcements and permitted disclosure. It should align with the NDA rather than leave two inconsistent regimes. Other post-closing protections, including representations, warranties and holdbacks, solve different risks.
Frequently asked questions
Should a seller send financial statements before an NDA?
Usually no. A blind teaser can show revenue and EBITDA ranges. Identifying financial statements should normally follow an executed NDA and an initial credibility check.
How long should an NDA last?
The appropriate period depends on how quickly the information loses sensitivity and the nature of the recipient. Trade secrets may need different treatment from ordinary financial information. Transaction counsel should draft the term for the specific process.
Can a buyer share information with its lender?
Usually only if the NDA permits disclosure to financing sources and makes the buyer responsible for their compliance. The seller may require the lender to receive information through the data room rather than by unrestricted email.
When should employees learn about the sale?
There is no universal date. The answer depends on deal certainty, retention risk, required consents and the communications plan. Premature disclosure can destabilize the business, while leaving essential managers uninformed can delay diligence.
Does an NDA stop a buyer from hiring the seller’s employees?
Only if it contains an enforceable non-solicitation provision, and that provision needs legal review. Confidentiality, employee non-solicitation and non-competition are separate obligations.
Next steps
KitsWest Capital runs controlled sale processes for privately held companies in British Columbia and Alberta. Our M&A advisory team prepares disclosure materials, qualifies buyers, manages the data room and coordinates diligence with the seller’s legal and tax advisors.
If you are considering a sale or responding to a buyer, review our guide to preparing a business for sale and the exit readiness assessment. Then contact KitsWest Capital for a confidential discussion before sensitive information leaves your control.
A buy-side M&A advisor helps a business buyer define the acquisition, find and approach targets, assess value, structure the offer, coordinate financing and diligence, negotiate commercial terms, and keep the transaction moving to closing. The role is not to tell a determined buyer that every deal is good. The most valuable advice is often that the price, risk or financing structure makes the deal unworkable.
Not every acquisition needs a full buy-side mandate. A buyer with a known target, an experienced internal corporate development team and a straightforward transaction may only need targeted valuation or financing support. A founder making a first acquisition, a management team pursuing a buyout, or a company running a proprietary search usually benefits from one advisor owning the financial and transaction workstream.
What the buyer is actually hiring
The buyer is hiring decision discipline. Acquisitions create momentum. Once management has invested months building a relationship, signed a letter of intent and paid professional fees, walking away feels like failure. That emotional commitment is exactly when an independent advisor matters.
A buy-side advisor should keep four questions visible: does the target fit the strategy, is the price supported by maintainable cash flow, can the combined business carry the financing, and can identified risks be mitigated in the purchase agreement or integration plan? If any answer is no, the mandate is not to manufacture a yes.
This differs from a seller’s business broker or M&A advisor, whose mandate is to create competition and maximize the seller’s outcome. The buyer’s advisor represents the buyer, tests the thesis and protects the buyer’s capital.
Defining acquisition criteria before looking
A broad instruction such as “find a good business in BC” is not an acquisition strategy. The buyer needs criteria for sector, geography, revenue, EBITDA, customer concentration, recurring revenue, management depth, capital expenditure, working capital, ownership situation and acceptable valuation range.
The criteria should also state what the buyer will not buy. A company may reject targets with one customer above 30% of revenue, material environmental exposure, heavy founder dependence or a required equity cheque beyond a set amount. These screens prevent attractive stories from weakening the original discipline.
A strategic buyer should define the synergy it can actually capture. Cross-selling, procurement savings and shared overhead can create value, but only if there is an operating plan, responsible executive and credible timing. Our article on bolt-on acquisitions explains where a competitor purchase can create value and where it creates integration risk.
Finding targets and making the approach
A marketed business is only one part of the opportunity set. Many strong private companies are not listed. A proprietary search builds a target universe from industry research, databases, trade associations, referral networks and local market knowledge, then prioritizes owners who may have a reason to consider a conversation.
The first approach should be credible, specific and confidential. Generic mail about “qualified buyers” is easy to ignore. The owner wants to know who the buyer is, why the company is relevant, whether the buyer can fund a transaction and whether the discussion will remain controlled.
The process takes persistence. The first response is often no, and silence is common. A serious buyer builds a pipeline rather than depending on one target. Our guide to finding and approaching a business to buy covers the search process in depth.
Valuing the target without paying for your own synergies
The advisor normalizes historical earnings, assesses forecast credibility, selects valuation methods and bridges enterprise value to the equity cheque. That means adjusting owner compensation, related-party charges, non-recurring items, working capital and capital expenditure. It also means testing whether the seller’s add-backs are real.
A buyer may be able to eliminate $300,000 of duplicate overhead after closing. That synergy belongs to the buyer because the buyer creates it and takes the integration risk. If the purchase price gives the seller all $300,000 capitalized at a 5.0 times multiple, the buyer has paid $1.5 million for value it still has to deliver.
The right price leaves a reasonable share of synergy with the buyer. It also reflects the target as it exists, not as management hopes it will look after two years of improvements. The principles in how buyers value owner-managed businesses are the starting point.
Turning the price into a financeable structure
Enterprise value is not the amount the buyer needs at closing. Assume a target has maintainable EBITDA of $1.2 million and an agreed enterprise value of 5.5 times, or $6.6 million. The company has $1.4 million of debt and $300,000 of excess cash. The indicated equity purchase price is $5.5 million.
Suppose lenders will provide $3.3 million of acquisition debt, equal to 2.75 times EBITDA. The buyer initially expects to contribute $2.2 million of equity. Due diligence then finds that normalized working capital is $350,000 above the amount the seller plans to deliver and $250,000 of deferred equipment replacement is required in year one. The true capital requirement is now $6.1 million, so the buyer’s equity need rises from $2.2 million to $2.8 million unless price or structure changes.
That $600,000 gap is the kind of number that surprises first-time buyers. Purchase price is only one use of funds. Fees, taxes, refinancing, working capital and immediate capital expenditure all consume cash. Our acquisition financing calculator helps frame the capital stack, while acquisition financing in Canada explains the available instruments.
Negotiating the letter of intent
A letter of intent should settle the commercial architecture before the parties spend heavily on diligence and legal drafting. It normally addresses price, form of consideration, cash and debt treatment, working capital, structure, exclusivity, diligence access, financing, timing, confidentiality and key conditions.
The headline price can hide risk. A $6 million offer paid fully at closing is not equivalent to $6 million with a $1 million earnout tied to aggressive forecasts. A share purchase is not equivalent to an asset purchase. A working capital target that is undefined can reopen the price after closing.
The advisor models the economics while transaction counsel documents the legal terms. Buyers should understand the issues in letters of intent and asset versus share purchases before signing exclusivity.
Owning the diligence workstream
BDC’s current guidance describes target identification and the letter of intent as steps before due diligence, and notes that larger business acquisitions commonly require six to twelve weeks or longer for diligence. The advisor coordinates the financial, commercial, legal, tax, operational, technology, environmental and human-resources workstreams so material findings reach the decision-makers.
Coordination matters because issues interact. A customer contract may be assignable only with consent, which affects revenue risk, lender underwriting and the purchase agreement. Deferred maintenance may reduce price, increase the financing need and change the first-year integration plan.
The buyer should not measure diligence by the number of documents reviewed. The output is a short list of decision-relevant findings, their financial effect, and the proposed response. Our article on due diligence in a private company sale outlines the core workstreams.
Negotiating protections without losing the deal
Not every diligence issue requires a price reduction. Risk can be addressed through a working capital adjustment, holdback, escrow, indemnity, seller note, earnout, insurance, closing condition or specific covenant. The right tool depends on whether the issue is known, contingent, recurring or within the seller’s control.
A buyer who renegotiates every small item destroys trust and may lose a sound transaction. A buyer who ignores a material issue to preserve momentum overpays. The advisor’s job is to distinguish normal deal friction from information that changes value or risk.
For example, a one-time $80,000 legal expense may be a valid add-back. A recurring $80,000 annual compliance cost omitted from the forecast reduces maintainable EBITDA. At a 5.5 times multiple, the second issue affects value by $440,000. The numbers determine which conversation matters.
When a full mandate is worth the cost
A full buy-side mandate is most useful when the buyer needs a proprietary search, has limited transaction experience, is acquiring outside its current sector, requires third-party financing, or lacks an internal executive who can run the process. Management can continue operating the existing business while the advisor manages the acquisition timetable.
Targeted support may be enough when the opportunity is already identified and the buyer has a capable deal team. KitsWest can assist with business valuation, debt and capital advisory, financial modelling, offer strategy or diligence without running every workstream.
The wrong reason to hire an advisor is to outsource the investment decision. Management will own the acquired company after closing. The advisor improves the information, structure and execution, but the buyer remains accountable for strategic fit and integration.
Frequently asked questions
Does a buy-side advisor find off-market businesses?
Yes, when target search is included in the mandate. The advisor develops criteria, builds and prioritizes a target list, approaches owners and manages the early conversations.
Who pays the buy-side advisor?
The buyer does. Compensation structure should be agreed in writing and aligned with the mandate. The buyer should understand any retainer, milestone or success-based component before work begins.
Is the advisor also the lawyer or accountant?
No. The advisor coordinates the transaction and owns the financial and commercial workstream. Legal counsel, tax advisors and other specialists provide advice within their professional scopes.
Can an advisor help with a management buyout?
Yes. A management buyout requires valuation, financing, negotiation and careful handling of the managers’ relationship with the current owner.
When should the advisor be engaged?
Before the buyer commits to price or exclusivity. Early involvement improves the acquisition criteria, valuation range, financing plan and letter of intent. It is harder to repair a weak structure after the LOI is signed.
Next steps
KitsWest Capital advises private companies, founders and management teams on acquisitions across British Columbia and Alberta. Our business sales and acquisitions practice can run a full target search or support a known transaction with valuation, financing, modelling, diligence and negotiation.
If you are considering an acquisition, define the target and capital limits before approaching owners. Contact KitsWest Capital for a confidential discussion about the acquisition thesis, available resources and the level of support the transaction requires. You can also review how to buy a business in Canada for the broader process.