Confidentiality during a sale: protecting the business, informing at the right time

During the sale of an SME, the rule is easy to state and hard to keep: only the people whose role requires it know a transaction is underway, each one informed only when their role justifies it, never before. A non-disclosure agreement (NDA) binds external buyers and advisors legally, but it does nothing against the most common kind of leak, which comes from inside: a manager who guesses, an employee who connects unusual visits, a partner who asks the wrong question at the wrong moment. Confidentiality is managed as a staged process, not as blanket silence held until closing.

Why confidentiality shapes the deal, not just protects it

A premature leak does more than cause discomfort — it changes the nature of the transaction. Clients who hear about a sale through a rumour, before the seller has had a chance to frame the message, start questioning continuity of service and become more receptive to a competitor's approach. Employees who are not informed but sense that something is happening often react worse than if they had received a clear but partial explanation — uncontrolled uncertainty weighs heavier than an incomplete truth. And a prospective buyer who learns that another party heard about the process before they did may reasonably wonder what else was hidden or poorly controlled.

Confidentiality therefore directly conditions the value achieved: a process that leaks becomes a process the seller is subjected to, negotiating under the pressure of rumours no longer under their control, rather than a timeline they still direct.

This pressure often shows up indirectly: a buyer who senses the seller weakened by a leak sometimes revises terms downward, betting that the seller now has more interest in closing fast than in negotiating point by point. Confidentiality is not only defensive, then — it also preserves the seller's leverage all the way through the process.

What an NDA actually protects, and what it does not

A confidentiality agreement signed by every prospective buyer before sensitive information changes hands remains essential, but its limits matter.

• What it covers. Use of the documents shared (accounts, contracts, client lists), a ban on directly approaching clients or employees identified during the process, and usually a non-solicitation clause of a defined duration.
• What it does not cover. The behaviour of internal staff who learn the information through another channel than the formal process, or the actual discretion of external advisors (banks, lawyers, accountants) beyond their contractual duty of care.
• Its real function. A signal of seriousness and a basis for recourse in the event of a proven breach, more than an absolute guarantee — the best protection remains limiting how many people know, not multiplying signatures.

Information circles, from the tightest to the widest

Total silence protects less than it seems to: it leaves the field open to assumptions, which are almost always worse than reality.

Good practice is to define, before the first contact with a buyer, who will know what and at which precise stage of the process. A first circle — the owner, possibly one or two managers genuinely indispensable to building the file — is informed as soon as the decision in principle to sell is made, under strict confidentiality. A second circle, the wider leadership team, learns of the process as the letter of intent approaches, once the probability of concluding becomes real and their operational involvement becomes necessary for due diligence. A third circle, the rest of the staff, generally only learns of the deal once signing is secured or very close.

This sequencing connects directly to the work of retaining key employees: the more clearly the circles are defined in advance, the less a premature leak forces an improvised communication, and the more the people informed early feel treated as partners in the process rather than risks to be managed after the fact.

The concrete risks of a leak

A leak does not cause the same damage depending on who learns of it, and it is worth distinguishing them rather than treating leaks as one generic risk.

• Toward clients. Key accounts who doubt continuity may look for an alternative even before a new owner is known, damaging exactly what due diligence will examine: the solidity and recurrence of the client portfolio.
• Toward staff. An unconfirmed, undenied rumour pushes your best people to test the market out of caution, often well before a concrete offer exists.
• Toward competitors. An informed competitor can approach the most exposed clients and managers of the business for sale directly, or use the information to adjust its own commercial strategy while the seller is occupied elsewhere.
• Toward the prospective buyer. Learning that an unplanned third party heard about the process undermines the trust built painstakingly over the negotiation, and can slow down or destabilise the deal underway.

What to frame before the first buyer contact

Confidentiality work is prepared before the process opens, not once the first discussions are underway. Concretely, this means drawing up the list of people authorised to know at each stage, preparing a template message for each circle in case a leak occurs despite precautions, and agreeing with external advisors on a limited communication channel rather than scattered emails. This same discipline shapes the choice of transfer path too — a third-party sale, family transfer, or MBO do not carry the same leak exposure, nor the same circles to inform first.

The data room deserves the same discipline as the human circles: named, logged access limited to the documents relevant to the current stage, rather than broad access opened from the first exchanges. A buyer who obtains sensitive information too early — before a serious, mutual interest is established — holds leverage they have not necessarily earned, and the seller loses part of their ability to calibrate information to how far discussions have actually progressed.

A structured succession diagnosis helps frame, before the first contact with a prospective buyer, who needs to know what and when to protect your company's value throughout the process. To discuss it concretely, book a session.