A data room, when you’re selling a business in Australia, is a secure and organised repository of documents that prospective buyers access during due diligence. It contains your financials, contracts, leases, employee records, licences, and anything else a buyer needs to verify the business before they commit. Most Australian business sales above $2 million in value use a virtual data room — a secure online platform that controls who sees what, logs every access, and lets you revoke entry when a buyer drops out.
In short: the information memorandum gets a buyer interested. The data room is where they decide whether to proceed.
What Is a Data Room in a Business Sale?
A data room is the bridge between what you’ve claimed in your sales materials and what a buyer can verify independently. Once a buyer signs an NDA and you accept their indicative offer, they engage their accountants and lawyers to go through the business in detail. The data room is where that review happens.
A well-organised data room signals that you’re a professional seller — that the business is what you say it is, and that you’ve thought about this process. A disorganised one (a shared Dropbox with files called “financials FINAL v3 (2).xlsx”) signals the opposite. Buyers notice, and they price it in.
One quotable rule for this stage: buyers buy certainty. Every unresolved question in your data room is a risk they put a number on — and that number usually exceeds what it would have cost you to resolve the issue beforehand.
What Goes in a Data Room?
The documents a buyer needs fall into five categories. Get these right and you’ll answer most due diligence questions before they’re asked.
Financials
- Profit and loss statements for the last three years (and current year management accounts)
- Balance sheets and cash flow statements
- Tax returns and BAS statements for the last three years
- Accounts receivable and payable ageing reports
- A normalised EBITDA schedule — the add-backs and adjustments that show your true underlying earnings (see the EBITDA add-backs guide for how this works)
Legal
- Company constitution or trust deed
- Shareholder or unitholder agreements
- IP registrations: trademarks, patents, domain names, software licences
- Any litigation history, insurance claims, or pending disputes
- Regulatory licences and permits specific to your industry
Contracts
- Customer contracts, especially recurring or long-term agreements
- Supplier and subcontractor agreements
- Service-level agreements that carry over to a buyer
- Insurance policies
Leases and Property
- Commercial lease agreement and any side letters or variations
- Rent review history and outgoings schedule
- Detail of any personal guarantees on the lease
- Any options to renew, and the terms
HR and People
- Employment contracts and position descriptions for key staff
- A workforce summary: headcount, tenure, base salary, leave entitlements
- Superannuation compliance records
- Any enterprise agreements or modern awards that apply
- Non-compete or restraint provisions in existing employment contracts
This is also the moment you discover things you’d rather have found earlier. I spoke last year with an owner who was six weeks into the buyer’s due diligence on his electrical contracting business in Western Australia — a solid business, twelve staff, good margins. The buyer’s lawyers asked for the original executed version of a key subcontractor agreement. It didn’t exist. There had been a handshake arrangement for years, and nobody had ever formalised it in writing. The deal completed, eventually, but it took another four weeks and a price renegotiation to get there (neither of which the seller had budgeted for, financially or emotionally).
That’s what a properly assembled data room catches before the buyer does.
When to Set Up Your Data Room
Most sellers set up the data room too late — scrambling to find documents once a buyer is already waiting. The better approach is to start building it in parallel with your information memorandum, so that by the time a buyer signs an NDA and requests access, you’re handing them a complete and organised repository.
In practice, that means starting the data room three to six months before you expect to go to market. This gives you time to identify missing documents, get leases or contracts properly executed, resolve any obvious compliance gaps, and have your accountant prepare the normalised financials you’ll need anyway.
If you’re running a vendor due diligence process — where you commission an advisor to review the business the way a buyer would — the data room is where that review lives. The VDD report and the data room are produced together and shared with buyers as a package. It’s the most professional version of this process and, for businesses above $3 million, it pays for itself in reduced buyer price-chipping.
Virtual Data Room vs Google Drive or Dropbox
You can run a data room on Dropbox or Google Drive. Plenty of smaller business sales do, and it works well enough when the buyer pool is limited and the documents aren’t sensitive.
The problems show up at scale:
- You can’t see who accessed what document — only that a link was opened
- Revoking access when a buyer drops out requires manually tracking every shared link
- There’s no Q&A functionality, so document requests happen over email and get lost
- Sharing permissions are easy to misconfigure (one “anyone with link” setting on your customer list and you’ve got a problem)
A proper virtual data room platform — Ansarada is the most widely used in Australia, others include Intralinks and Firmex — solves all of this. Granular access logs, document-level permissions, built-in Q&A, automatic watermarking, and a clear audit trail for each document.
For businesses below $2 million in value, a well-structured Google Drive with disciplined access management is usually fine. Above that — particularly when buyers include corporate acquirers or private equity — use a proper platform. The cost is modest and the credibility it adds is real.
What Does a Data Room Cost for an Australian SME?
Expect to pay between $500 and $2,500 per month for a virtual data room platform during a business sale. Ansarada’s SME packages start at the lower end of that range; full mid-market platforms run higher.
For context: the total advisory and legal costs on a well-run $5 million business sale in Australia typically run to $120,000–$200,000. The data room platform is one of the smaller line items. Cutting it to save $3,000 while paying $15,000 in legal fees to manage document requests over email is the kind of optimisation that makes sense only on paper.
If you’re working with a corporate advisor, they’ll usually set up and manage the data room as part of the engagement. If you’re running the process yourself, factor in both the platform cost and the time it takes to configure and maintain access.
Confidentiality and the Australian Privacy Act
Your data room will contain documents about your employees, your customers, and your commercial relationships. That creates obligations under the Privacy Act 1988 and the Australian Privacy Principles.
A few practical points:
- Employment records with personal data should be restricted to verified, senior representatives of the buyer — not shared with the full due diligence team
- Customer information should only be shared late in the process, once the buyer has demonstrated serious intent (post indicative offer, not at first enquiry)
- Every buyer who accesses the data room should have signed a confidentiality agreement first — the selling confidentially guide covers how the NDA framework works in practice
- When a buyer drops out of the process, you revoke their data room access immediately and request (or require, under the NDA) destruction of any downloaded copies
The data room closes when the deal is done. The platform’s access log is a useful record to keep — it shows exactly who accessed what and when, which matters if any confidentiality issues arise after the transaction.
The Data Room and Your Due Diligence Checklist
The due diligence checklist is what buyers ask for. The data room is where you provide it. Running both in parallel — building your data room against a typical buyer’s checklist — is the most efficient way to identify what’s missing before it becomes a negotiation point.
Most experienced corporate advisors will give you a data room index and a buyer’s likely request list at the start of the engagement. That’s the right time to discover that your 2021 lease renewal was never properly executed. Not three weeks after you’ve accepted an offer.
If you’re preparing for a sale and want to understand what a buyer will look for — or if you’d like a second opinion on your data room structure before you go to market — get in touch at /contact. You can also get a preliminary sense of your business’s value using the valuation calculator.