Financial Due Diligence Checklist: What Sellers Put in the Secure Data Room

The buyer's financial advisors are trying to answer three questions. What does the business really earn on a normalized basis? How much cash does it need to run, which drives the working capital target in the purchase agreement? And what liabilities sit outside the headline debt figure, which become deductions from the price?

Your job as the seller is to answer those questions before they are asked. That means reconciling management accounts to statutory or audited accounts, documenting every add-back and one-off item, and preparing a working capital analysis you can defend. Many sellers commission a sell-side quality of earnings report for exactly this reason: it surfaces the awkward questions on your timetable rather than the buyer's.

Tax returns and tax exposure are a separate workstream with their own advisors and their own checklist. Keep them in their own top-level folder so the financial and tax teams on the buy side can each find what they need without wading through the other's documents.

Use this list as the backbone of the financial folder. Most buyers will ask for three full fiscal years plus the current year to date, and lenders financing the deal will often ask for the same set.

Number the financial section so it matches the index you share with buyers and the request list you will receive. A consistent numbering scheme turns every follow-up answer into a reference ("see 3.4.2") instead of a new attachment. The table below is a workable starting structure for a lower-mid-market sale.

Build permission groups before you upload a single file. A typical financial setup has a general bidder group, a shortlisted bidder group, a preferred bidder group and, where a trade buyer competes with you, a clean-team group. Each folder is then switched on for the right groups as the process moves forward, which is what staged release means in practice. Papermark handles this with granular folder and file permissions, NDA gating before the first view, and dynamic watermarking that stamps each viewer's email on every page.

Keep a short read-me document at the top of the financial section. It should explain the fiscal year end, the accounting framework, the basis of the management accounts and any known reconciling items. That single page heads off a surprising share of first-round questions.

Not every financial document carries the same risk. Audited accounts may already be on public record in some jurisdictions, so locking them down adds friction without much benefit. The documents below are different: in the wrong hands they reveal your margins, your customers or your plans.

Harlow Components is a hypothetical industrial parts distributor preparing for a sale to either a private equity buyer or a larger competitor. Before the teaser goes out, its finance director builds the financial section of the data room around the checklist above, with a sell-side quality of earnings report as the anchor document.

The first problem surfaces early: monthly management accounts do not reconcile cleanly to the audited accounts for one year because of a late inventory adjustment. Rather than waiting for a buyer to spot it, the finance director adds a one-page reconciliation memo to folder 3.2 explaining the adjustment and its effect on reported EBITDA.

The second decision is about access. One of the likely bidders is a direct competitor, so Harlow creates three permission groups: a general bidder group that sees statements and management accounts, a financial sponsor group that also sees anonymized revenue detail, and a clean-team group limited to the competitor's outside accountants, who alone see customer names and margins.

During the first round, the analytics show that two bidders spent most of their time in the working capital schedules. Harlow's advisor reads that as a signal that the peg will be contested and prepares a monthly normalization analysis before the question arrives. When the preferred bidder's accountants ask for the forecast model, it is released to their group only, watermarked, with every page view recorded in the audit log.

Once the first pass is done, expect a second wave of requests that drills into the numbers. Preparing for these in advance is the cheapest way to shorten diligence.