Forty-three banker’s boxes. That’s what one buyer I know inherited when he agreed to purchase a family-run machine shop outside Dayton. The seller’s son had scanned about a third of it, named the files things like “final final 2”, and called it a data room. Three weeks later, the buyer found a lease assignment problem that killed the deal.
You probably aren’t buying a machine shop with a filing cabinet problem. But if you’re acquiring a small company, you’re running the same playbook a law firm runs on a nine-figure merger, just at a smaller scale and with fewer people to help. The difference between a clean close and a mess usually comes down to how you organize documents before anyone starts reading them. That’s why serious buyers move the paper into a datasite data room instead of emailing zip files back and forth.
Here’s the process that works, in the order it actually happens.
Start With the Document Request List, Not the Data Room
Everyone wants to pick software first. Wrong move. The software serves the list, not the other way around.
Your request list is the single most useful artifact in the whole deal. It tells the seller exactly what to upload, it gives you a checklist to track progress, and it protects you later if something was never disclosed. Build it in five buckets:
- Corporate records: formation documents, bylaws or operating agreement, cap table, board minutes.
- Financials: three years of tax returns, monthly profit and loss statements, bank statements, accounts receivable aging.
- Contracts: customer agreements, vendor terms, leases, equipment financing, any contract a single client could terminate.
- People: employee list, compensation, contractor agreements, any non-compete or non-solicit in place.
- Risk: current litigation, liens, permits, environmental items, insurance claims history.
The SEC publishes plain-language guidance for smaller companies on what investors and buyers expect to see, and it’s worth an hour of your time before you build your own list.
Set Up the Room Before You Invite Anyone In
A data room with no structure is just cloud storage. What you want is a numbered folder tree that mirrors your request list so the seller can upload against it and you can see, at a glance, what’s still missing.
Two settings matter more than everything else combined. First, permissions. Your accountant should not see employment agreements. Your lender should not see the customer concentration analysis. Second, activity logging. You want to know who opened what, when, and whether they downloaded it. That log is your protection if confidential information ever leaks.
This is where the enterprise tools earn their price. Platforms built for large legal transactions, like the one in this datasite review, carry deal lifecycle workspaces, granular permissions, and AI-assisted document classification at a level general file sharing was never designed for. You may not need all of it. You do need to know the ceiling exists before you lock in a decision.
What Should You Actually Read First?
Not the tax returns. Start where the deal most often breaks.
Read the customer contracts before anything else. Look for change-of-control clauses, termination-for-convenience language, and any clause that lets a client walk if ownership changes. If your top three customers can leave the day after closing, the valuation you agreed to is fiction.
Then read the lease. Then read the equipment financing agreements. Then read the employment agreements for anyone whose departure would hurt. Tax returns tell you what happened. Contracts tell you what’s going to happen.
The Red Flag Table I Use on Every Small Deal
I keep this table on one page and fill it in as documents come in. It’s not legal advice, it’s a triage tool so I know which items need a professional’s eyes.
| Red flag | Where to look | What it usually means
|
|---|---|---|
| Revenue concentrated in one client | P&L, customer contracts | Value depends on one relationship you don’t control |
| Owner handles all key relationships | Org chart, contracts | You’re buying a job, not a business |
| Lease expires within 24 months | Lease agreement | Landlord holds your renewal hostage after closing |
| Files arrive unstructured | The data room itself | Records may be missing, not just messy |
| Recent change in accounting method | Tax returns, accountant notes | Numbers may not be comparable year to year |
| Customer complaints in writing | Email archive, support tickets | Product or service issues that predate you |
Two of those flags on one deal is normal. Four is a conversation with your attorney before you sign anything.
Run the Room Like a Project, Not a Folder
The buyer who closes cleanly does four things consistently. They upload their own questions as documents so nothing lives in a lost email thread. They set a weekly document deadline and hold the seller to it. They tag every document with a status: received, reviewed, needs follow-up. And they keep a running open-items list that gets shorter, not longer, as closing approaches.
Here’s a habit worth stealing from bankruptcy and restructuring work, where document rooms get used under real time pressure. Everything in the room gets an index number, and every question you send references the index number it relates to. When your attorney asks “where did this come from”, you answer in four seconds instead of four hours.
One more thing: never let the seller control the access log. If you’re the buyer, you own the room.
What About Regulatory and Government Filings?
Small acquisitions still touch rules. If the business operates in a regulated space, permits and licenses belong in the room on day one, not week three. And depending on the size and structure of your deal, antitrust review can apply, which is why the FTC publishes guidance on when premerger notification kicks in. Most small deals never get near that threshold, but you should confirm where you stand rather than assume.
On the financing side, the SBA’s loan programs remain a common route for small business acquisitions, and lenders running those programs have their own document requirements that overlap heavily with your due diligence list. Pull their checklist early and you’ll do the work once.
Do You Need the Expensive Tool?
Depends on what you’re buying. A ten-person service business with two years of records doesn’t need an enterprise platform. A company with fifty employees, multiple locations, and a document set running into the thousands needs something built for the job. My rule: if your request list has more than sixty line items, get a tool with real permissions and real logging. Below that, structure and discipline will carry you.
The mistake I see most often isn’t choosing the cheap option. It’s choosing nothing and running the whole deal out of a shared drive and a group text.
Close the Loop Before You Close the Deal
Your document request list mirrors your closing checklist. Every bucket you opened at the start should be resolved, disclosed, or explicitly excluded in the purchase agreement, in writing. If a seller says “we’ll get you that after closing”, that item is now your problem forever.
The banker’s boxes buyer from Dayton could have caught his lease problem in week one with a numbered folder tree and a thirty minute read. Instead he spent three weeks and lost the deal.
So before your next call with the seller, ask yourself one question: if a stranger opened your deal folder right now, could they tell what’s missing? If the answer is no, fix that today. Your weekend depends on it.
