Confidentiality Agreements Before a Sale

Conor Meyers — Co-Founder & Business AttorneyHas built and run businesses; advises owners on contracts, transactions, and risk. About Conor →

The most valuable thing you show a buyer is not the financials. It is the customer list.

Selling a business means giving strangers a detailed look inside it, and some of those strangers are competitors. A confidentiality agreement is the first document in any sale process for that reason. NDA with a prospective buyer should be signed before the business is even identified, and it should restrict conduct as well as disclosure.

We handle these matters for growth-stage companies in Idaho and California. This is general information — not legal or tax advice on a specific situation.

Protect the conduct, not just the documents.

What the agreement should cover

Define confidential information broadly enough to include oral disclosures, observations from a site visit, and the fact that the business is for sale at all. That last point matters — the existence of a sale process is itself sensitive to employees, customers, and competitors.

Restrict use as well as disclosure. A recipient should be permitted to use the information only to evaluate the transaction, not for any other purpose, and that restriction is what separates a useful NDA from a formality.

The fact of the sale is itself confidential information.

Non-solicit in a deal NDA

Non-solicit in a deal NDA is the provision sellers most often omit and most often need. A prospective buyer walking through the business meets key employees and learns who the major customers are.

Restricting solicitation of employees for a defined period after the process ends, with a carve-out for general advertising, is standard and reasonable. Customer non-solicitation is harder to negotiate where the buyer is a competitor already serving the same market, but it should at least cover customers the buyer learned of through the process.

A competitor buyer leaves with your org chart and your customer list.

Staged disclosure

Staged information disclosure sale means not giving everything at once. Early stages share anonymized financial summaries. Later stages, after the letter of intent and exclusivity, open the detailed data room.

The most sensitive material — customer names and pricing, key contract terms, proprietary processes — should be held until the buyer has demonstrated commitment. Some sellers redact customer identities entirely until closing is near.

Reveal in stages that match the buyer’s commitment.

Who is bound

The agreement should bind the buyer’s representatives — advisors, lenders, accountants, potential co-investors — and make the buyer responsible for their compliance. Otherwise a breach by an advisor sits outside the contract.

Where the buyer is a competitor, consider requiring a clean team arrangement limiting who inside the buyer’s organization sees the most sensitive material. The FTC’s business guidance is relevant where competitively sensitive information passes between competitors even in a genuine sale process.

Make the buyer responsible for its advisors, or they are outside the contract.

Remedies and duration

Consequences of a leaked sale process are hard to quantify — customers who defect, employees who leave, competitors who use the knowledge. Because damages are difficult to prove, the agreement should acknowledge that a breach causes irreparable harm and provide expressly for injunctive relief.

Duration should run two to five years for most information, with trade secrets protected for as long as they remain secret. Trade secret protection is also available independently of contract — the USPTO is the starting point for registered rights, and Idaho entity records are confirmed through the Secretary of State.

Damages are hard to prove. Injunctive relief is the real remedy.

A practical protocol for the process

Beyond the document, control the mechanics. Number and watermark sensitive materials so a leak can be traced. Route all contact with employees, customers, and suppliers through the seller or its advisor rather than allowing direct approaches. Schedule site visits outside business hours where possible, and brief only the small internal group that genuinely needs to know a process is running.

Keep a log of what was disclosed, to whom, and when. If a dispute arises later about whether particular information came from your process or from elsewhere, that log is the difference between an enforceable claim and an argument. It also disciplines the process internally, because someone has to decide what goes out.

The agreement sets the rule. The protocol is what actually protects you.

A simple plan to get a legal partner in your corner

Owners who bring in M&A attorney for growth-stage companies early almost always pay less than those who call one afterward.

The engagement at a glance

A three-step path from first call to ongoing protection.

Frequently asked questions