Business · Playbook

The Data Room Playbook: be diligence-ready in 30 days, before anyone asks for it

Deals do not usually die on the numbers. They die on latency — the four weeks it takes to find a contract, reconcile a revenue figure, or explain why two systems disagree. Here is the nine-drawer structure, the 30-day build, the one-page index that does most of the work, the scripts for what you do not have, and the seven ways people torch their own process.

N Noah · The Sharp Brief · Guide · 9 min read

Every founder who has been through a raise, a sale, a bank facility or a serious enterprise procurement learns the same thing, usually too late: the diligence itself is not hard. Finding the answers is hard. The questions are almost entirely predictable, they are almost the same list every time, and the difference between a company that answers them in two days and one that answers them in five weeks is not intelligence or honesty. It is filing.

That gap costs real money. A process that takes five weeks longer gives the counterparty five more weeks of market movement, five more weeks to talk to your competitors, and — the expensive one — five more weeks in which every slow answer reads as a red flag rather than as a busy quarter. Buyers and investors cannot distinguish disorganisation from concealment. They price both the same way.

This playbook builds the drawer cold, so it can be opened hot. It takes about 30 days of part-time work and roughly 20 minutes a quarter to maintain. Do it now, when nothing is happening, because the one guaranteed feature of diligence is that it starts on a week you were already busy.

The principle: build cold, open hot

There is a version of this where you wait until someone asks, then scramble. It always looks the same: a shared folder created in a panic, three people uploading whatever they can find, two different revenue numbers in circulation, and a founder spending the most important month of the year doing archaeology instead of negotiating.

The alternative is a standing drawer that is 80% complete at all times. Not a perfect one — perfect is the enemy here, and stale-but-labelled beats missing every single time. The goal is that on the day someone asks, you send an index within an hour and fill the last 20% inside a week.

The nine drawers

Structure it once, exactly like this, and number the folders so they sort correctly. Nine top-level drawers cover essentially every request list you will receive.

  1. 01 Corporate. Incorporation documents, current articles, the cap table, option pool and grant records, board minutes, shareholder agreements, any convertible instruments still outstanding.
  2. 02 Financials. Last three years of P&L, balance sheet and cash flow (monthly, not just annual), the current-year budget, bank statements, any accountant-prepared or audited accounts, and a reconciliation note explaining any difference between your management numbers and your filed numbers.
  3. 03 Revenue. The customer list with start dates and contract values, an ARR or revenue bridge for the last eight quarters, churn and expansion by cohort, and the top-ten-customer concentration table.
  4. 04 Contracts. Customer agreements (at minimum the top 20 by value), your standard template with a note on where you routinely deviate, supplier and reseller agreements, and anything containing a change-of-control clause — flagged separately, because that is the first thing a lawyer looks for.
  5. 05 People. Org chart, employment agreements, contractor agreements, the IP assignment for every person who has ever written code or made a design, benefits summary, and any open or settled employment disputes.
  6. 06 Intellectual property. Trademarks, patents if any, domain ownership, open-source licence inventory for anything you ship, and a plain-English note on what you built versus what you licensed.
  7. 07 Technology and security. Architecture summary at one page, hosting and key vendors, your security posture (SOC 2, ISO, or an honest statement of where you are), incident history, and data-processing agreements.
  8. 08 Legal and compliance. Litigation history, insurance policies, regulatory registrations, tax filings and any correspondence with a tax authority.
  9. 09 Commercial. The pitch or product deck, pricing history, competitive positioning, marketing spend and channel performance, and the pipeline snapshot.

The 30-day build

Week 1 — the skeleton and the easy 40%. Create the nine folders. Then, before gathering anything, do one pass where you write the index first: a single spreadsheet listing every document you believe should exist, its drawer, its owner, and its status (Have / Need / Does not exist / Deliberately excluded). This takes two hours and is the highest-leverage thing in this playbook, because it converts an anxious open-ended task into a finite checklist. Then dump in everything you already have to hand. Most companies clear 40% in an afternoon.

Week 2 — the financial spine. Rebuild three years of monthly P&L into one file, not twelve exports. Then write the reconciliation note. This is the document nobody has and everybody needs: one page, plain language, explaining exactly why your management ARR and your accounting revenue differ — deferred revenue, annual prepayments, one-off services, whatever it is. Handing a buyer a reconciliation note before they ask for it is the single strongest credibility signal in the entire process. Discovering the discrepancy on their side is the weakest.

Week 3 — contracts and people. The two drawers where things are actually missing. Chase down every signed agreement, and specifically hunt for three things: unsigned contracts operating as if signed, IP assignments missing for early contractors, and change-of-control clauses. All three are common, all three are fixable while nothing is happening, and all three are painful to fix mid-deal, when the counterparty knows you need them.

Week 4 — the narrative layer and the gaps. Write four short memos, one page each: how revenue works, how the product works, how the team is structured, and the honest list of risks. Yes, you write the risk memo yourself. A buyer who finds a risk you did not disclose reprices; a buyer who reads your version first is arguing on your framing. Then close whatever is still marked Need, and mark the genuine gaps as Does not exist rather than leaving a blank.

The one-page index

The deliverable that impresses people is not the volume of documents. It is a single page that says: here are the nine sections, here is what is in each, here are the four things we do not have and why, here is who to ask about each area. Send that page in the first reply. It reframes the entire process from “we are auditing you” to “we are working through your material,” and it is the cheapest status change available.

Three questions nobody can answer, and the answers

Scripts for what you do not have

When a document genuinely does not exist: “We don’t have that. Here’s why, and here’s the closest thing we do have: [X]. If it’s material to your process we can produce it in [timeframe].” Never let a gap sit silent in a folder — unexplained absence reads as evasion.

When they want it by Friday and you need two weeks: “I can get you sections 1, 2 and 4 by Friday. Section 3 needs a proper rebuild and I’d rather give you an accurate one on the 15th than a fast one you have to re-ask about.” Naming a date you will hit beats hitting a date you named badly.

When you find something bad mid-process: Disclose it in the same week you find it, in writing, with your proposed fix attached. The cost of a disclosed problem is a negotiation. The cost of a discovered one is the deal.

A worked example

A twelve-person software business runs this in September. The index pass surfaces 61 documents; 26 exist, 22 need gathering, 9 need creating, 4 do not exist. Week 2 turns up a £40,000 gap between management ARR and filed revenue — annual prepayments recognised differently — and it takes a two-hour call with the accountant and one page of writing to make it a non-issue forever. Week 3 finds that two of the four early contractors never signed IP assignments; both sign within ten days for nothing, because nothing is happening. In March, an acquirer appears. The index goes out in ninety minutes. Diligence closes in three weeks instead of eight, and the two things that would have been leverage against them in March were resolved for free in September.

Seven failure modes

The 20-minute quarterly refresh

Put it in the calendar on the first working day of each quarter. Open the index. Update the financial pack with the closed quarter. Add any contract signed above your materiality threshold. Update the cap table if anything moved. Re-read the risk memo and change one line. That is it — twenty minutes, four times a year, and the drawer never goes stale enough to matter.

The point of all of this is not to be organised. It is to make sure that when something good happens to your company, the constraint on it is the deal, not the filing.

Advertisement

Get the day, decoded — at 7 PM ET

The Sharp Brief: AI, money, business & performance in five sharp minutes. Free.

Free bonus: subscribe today and The 2026 Side-Hustle Playbook (PDF) lands with your welcome email.

Recommended by 5+ newsletters across AI, markets & business.