How should an M&A advisor stage data room access from IOI to LOI?
A sell-side M&A advisor stages data room access in three gates: NDA plus CIM and summary financials before the IOI; quality of earnings, monthly financials and redacted contracts after the IOI; unredacted contracts, employee data and named customers after the LOI and exclusivity.
One room with one audience per bidder is the default. Separate rooms per stage drift.
Staged access (definition). Disclosure that follows the bid, not the folder dump.
Each bidder earns the next layer.
A Drive share of the whole tree is not this.
A new room copied at every stage is how versions drift.
Three gates, not one dump
Orrick (14 August 2024) describes two stages of access: initial information, particularly key financial data, so bidders can judge valuation; then comprehensive access once exclusivity is granted, usually with a term sheet or letter of intent. In a competitive process, more than one bidder may still be in confirmatory diligence. Morgan Lewis (June 2024) tells the seller to stage the release of sensitive documents as the transaction progresses, especially with a strategic. What belongs in the folders is what should be in a sell-side data room index. How to keep competing buyers out of each other’s questions is how to keep buyers from seeing each other’s questions in a data room.
| Gate | What opens | Who sees it | What stays closed |
|---|---|---|---|
| NDA, before the IOI | Process letter, numbered index, CIM, summary financials | Every bidder who has signed the NDA | QoE, monthly financials, named customers, employee files |
| After the IOI | Quality of earnings, monthly P&Ls, redacted contracts | Bidders who submitted a written indication | Named customers, unredacted contracts, employee-level data |
| After the LOI and exclusivity | Unredacted contracts, named customers, employee data | The exclusive bidder, and a clean team if a strategic is in | CSI in front of a competing bidder's operational personnel |
One room first. A derived room is the exception.
Copying the room at each stage is how versions drift. The CIM in round one and the CIM in round two stop matching. One room, with one audience per bidder, is the default: widen the folders that audience can see as the bid is earned, and preview the room as that audience before inviting. A derived room is worth the drift when a clean-team set must not share a tree with the open room, or when exclusivity means the other bidders should lose the file.
| Setup | When it is the default | What it costs |
|---|---|---|
| One room, one audience per bidder | Almost always. Preview as that audience before inviting. | You have to keep the allow-list honest as the bid moves. |
| Derived room for the next stage | A clean-team set, or exclusivity that must cut the other bidders off | Two trees. The CIM, the QoE, and the index drift unless someone promotes every file. |
Mintz (19 September 2022) says that in the early stages, when many firms may bid, sellers should share general information and reserve competitively sensitive information for later. Customer-specific prices, current bids, and unaggregated costs sit in a clean-team folder for outside advisors, not sales or marketing. Gun-jumping limits apply with or without an HSR filing. Have deal counsel review the cut. This page is not a template. See What is Cashpian?, and pricing.
FAQ
Should I copy the data room at each stage?
No.
Separate rooms per stage drift.
One room with one audience per bidder is the default.
A derived room is for a clean team or an exclusivity hard wall.
What opens after the IOI?
Quality of earnings, monthly financials, and redacted contracts.
Named customers and employee-level data wait for the LOI and exclusivity.
Have deal counsel review the cut. This page is not a template.
Do strategics see the same files as financial buyers?
Not the competitively sensitive ones.
Those sit in a clean-team folder for outside advisors, not sales or marketing.
HSR gun-jumping is counsel's call. Point it at counsel.
Does the NDA open the whole tree?
No.
The NDA opens the CIM and summary financials.
The rest is earned at IOI, then at LOI.
Sources
- Orrick, UK Tech Exit Series - Preparing a Data Room, 14 August 2024, retrieved 2026-09-30. Two stages: initial financials for valuation; comprehensive access once exclusivity is granted, usually with a term sheet or letter of intent. Competitive processes may still run multiple bidders through diligence.
- Morgan Lewis, Preparation Is Key When Selling a Business: What to Know, June 2024, retrieved 2026-09-30. Stage the release of sensitive documents as the transaction progresses, especially with a strategic.
- Mintz, On Sharing and Managing Competitively Sensitive Information in M&A Transactions, 19 September 2022, retrieved 2026-09-30. Early stages: general information. CSI later, through a clean team. Gun-jumping applies with or without HSR. Managing Multiple Bidders in the Sale of a Company, 27 July 2021.
If the files are already in a folder, grade which row they are on. Cashpian is a gated room for that packet. It is not a listing portal. It does not sell the company or run the deal.