The confidentiality agreement is the first document signed in a sale and usually the least read. It gets signed so the conversation can start, most often on a form the buyer brought. That piece of paper is the only thing standing between you and a competitor who has just seen your margins by customer.
What an NDA actually does
It does not prevent disclosure. It gives you a claim after disclosure has already happened, and proving the loss from leaked information is difficult and slow. The practical value lies in two other things: it deters, because a signed document changes how serious counterparties behave, and it defines precisely what counts as confidential, which removes the later argument about that.
Real protection therefore comes not from the text but from what you release and when. The text is the precondition; the sequence of disclosure is the protection.
The provisions that decide the outcome
- The definition of confidential information. It should cover what is said as well as what is marked, because the most sensitive things are said in a meeting.
- Permitted purpose. The information is used solely to evaluate this transaction. Without that, a buyer can argue it is using the material legitimately, in its own business.
- Who may see the material. The buyer’s advisers, lawyers and financiers, with an obligation that they are bound by the same terms.
- A non-solicit covering employees, usually twelve to twenty-four months.
- A restriction on approaching your customers and suppliers on the back of what was learned in the process.
- The duration of the obligation, commonly three to five years, with longer protection for anything amounting to a trade secret.
- An obligation to return or destroy material if the deal does not happen, including copies held by advisers.
- Who the counterparty is. Where a subsidiary with no assets signs, the obligation is effectively worthless; ask for the parent to sign or guarantee.
The non-solicit often matters more than confidentiality
Where the process involves a competitor, the greatest value they can take away is not the figures but the names. Who runs sales, who holds the relationship with the three largest customers, what those people earn. That cannot be unlearned and remains useful to them even if the deal collapses. The non-solicit therefore protects more in practice than confidentiality of data does, and it is the clause most often missing from a buyer’s form.
Liquidated damages
Because loss is hard to prove, agreements usually set a fixed sum payable on breach. That avoids the argument about quantum and makes the obligation enforceable in practice rather than only on paper. Whether such a clause is valid, and at what level, depends on the circumstances and the governing law, so counsel assesses it on the specific text.
Staged disclosure
A signed agreement is the first step rather than the protection itself. The protection is the sequence. First a short anonymous description without the company name. After confidentiality is signed, the identity is revealed and the information memorandum follows. The data room opens in phases, and the most sensitive material, customer names, prices by customer and margins by product, comes last and only against a binding offer.
With a buyer from the same industry that sequence tightens further. Some information is given only in aggregate, without names, or opened only to a named group on the buyer’s side who do not work in the operating business. It slows the process down and is worth every day lost.
When confidentiality is not enough
If the only serious buyer is a direct competitor, no agreement undoes the fact that they will see how the business works. The decision then is not about the wording but about whether to enter that conversation at all, and what you lose if it ends without a deal. A competitive process with several interested parties helps twice over here, because it raises the price and reduces dependence on any one counterparty.
Where to go next
- The letter of intent: what binds you
- How to sell a company
- Due diligence: what buyers look for
- Fund or strategic buyer
This describes practice and is not legal advice; the validity and effect of individual clauses are assessed by counsel. If a buyer’s form has arrived, the most useful check is whether it contains a non-solicit and a permitted purpose clause at all, because those are the two most often left out.