What an investor, acquirer, correspondent bank or licensing authority will open first — and how a company gets its house in order before the data room opens rather than during it.
A buyer or investor will test each of these independently. Weakness in one is survivable; weakness across three changes the valuation or kills the deal.
Commercial register, articles, shareholder agreements, capital history, board minutes and powers of attorney — complete and consistent.
Every licence current, every condition met, every regulatory correspondence and finding closed or with a live remediation plan.
Audited statements, tax filings and clearances, related party transactions disclosed, and reconciliations that hold.
Board composition and independence, delegated authorities, segregation of duties, and internal audit coverage.
AML programme, sanctions controls, ABAC framework, whistleblowing channel and training records.
System inventory, access controls, business continuity, incident history and PDPL data handling.
We score each workstream into one of three bands. The band determines whether you open the data room now or in ninety days.
Documentation complete, current and internally consistent. Can withstand third-party scrutiny without preparation.
Core documents exist but with gaps, stale versions or unclosed findings. Remediable within a defined window.
Material deficiencies that will be discovered and will affect price, terms or completion. Address before engaging counterparties.
If any of these cannot be answered within a day, the company is not ready.
Every engagement is led by a senior practitioner and closes with documented, regulator-ready evidence of what was built.