Most mergers don’t die because the numbers were wrong. They die in week six, when the buyer’s counsel is still chasing a folder of contracts that nobody can find and the seller’s CFO has stopped answering emails.
I’ve watched that happen twice. Once on a supply chain deal, where the buyer walked after a three-week silence that had nothing to do with the business and everything to do with a messy SharePoint folder. The seller rebranded that mess as disorganization in the data. It wasn’t. It was disorganized in the process.
Here’s the promise: by the end of this piece you’ll know how a data room due diligence review actually runs, where deals lose weeks, and what to fix before your next one starts.
The Four Weeks That Decide Everything
Merger reviews compress a year of homework into two months. Buyers pull financial statements, employment contracts, vendor agreements, intellectual property filings, and a long tail of documents the seller never thought anyone would ask for. The data room due diligence setup usually looks fine on day one and starts bending by week three.
That’s when the questions get specific. Once, on a smaller acquisition, I counted four separate versions of the same revenue schedule floating between the seller’s broker, the buyer’s accountant, and a lawyer who kept printing everything. Three versions had different totals. Nobody noticed until a Friday afternoon call where two people confidently read out numbers that didn’t match.
So the real work isn’t collecting documents. It’s keeping every reader looking at the same copy.
What Actually Goes Wrong Inside the Room
Permission chaos shows up first. Someone gets invited as a viewer, then needs to upload a corrected file, so a second login gets created, and now the access log shows an unnamed user touching the folder that contains the customer list.
Version drift comes next. You have the term sheet, the redlined term sheet, and the term sheet with the partner’s margin notes. All three are live. The question asked on Tuesday gets answered from the oldest one on Thursday.
Then the silence. A request for environmental permits goes out, lands in an inbox, and sits there because the person who owns those permits is on vacation and everyone assumes someone else handled it. Two weeks of the window gone.
None of these are dramatic. That’s what makes them dangerous. A merger review is really a permission problem dressed up as a legal process. People think M&A and picture Encyclopaedia Britannica style definitions of a merger, but the daily reality is folders, access lists, and unanswered questions.
A Question About Who Owns the Clock
Who owns the review timeline?
I’d argue the buyer’s deal lead, not the lawyers. Lawyers are paid to find risk. They’ll find it whether or not the clock is running. The deal lead is the only person in the room with a reason to keep the pace honest, and if that responsibility floats between three people, it belongs to nobody.
Pick one name. Put that name on the deadline. When I ran a review a few years back, we hung a whiteboard in the hallway with a single line of text: days remaining. Crude, but the effect on response times was real.
The Traffic Light Deck
This is a framework I built after the confusing revenue schedule episode. It’s a one-page index that sits at the top of the room and tells every visitor where things stand. You sort every major document category into three buckets.
- Green: complete, current, and cleared for review.
- Yellow: received, but under legal or accounting review.
- Red: requested and not yet delivered.
The seller updates it at the same time every day. No exceptions, no days off. Buyers get a single view of the whole review instead of filing twenty separate follow-up requests, and you can spot a stalled category before it eats a week.
Here’s the disagreement I’ll have with people who’ve run a hundred deals: I don’t think you should keep a full Q&A log public to every reader. It feels transparent, and it also invites the buyer’s junior analyst to ask thirty low-stakes questions because asking costs nothing. Keep the log, but route questions through one named contact on each side.
Working the Checklist
If your review starts Monday, do these seven things before Friday of week one.
- Name one timeline owner on each side, in writing.
- Build the traffic light index and paste it at the top of the room.
- Set permissions by role: viewer, contributor, administrator.
- Ban re-uploads. Corrections replace the original file, they don’t sit beside it.
- Pick a daily update time and hold it, including weekends during crunch.
- Assign an owner to every red item, not a team, a person.
- Log every question with a due date attached to it.
That last one does more heavy lifting than it looks like. An undated question is a wish. A dated question is a task.
Security Without the Theater
Physical deal rooms still exist in the UK, and I understand the appeal. You can see who’s in the room. What you can’t see is that someone photographed a page on their phone, or that the same binder got carried between two firms without a sign-out sheet.
A digital room gives you an audit trail instead. Who opened which file, when, from where, and for how long. Dynamic watermarks. Access revoked in one click instead of a phone call to a reception desk.
Regulators have been pushing harder on data handling across industries for years, and transaction data isn’t exempt from that pressure. According to the Federal Trade Commission, protecting confidential business data is central to how companies are expected to operate, which is why access controls inside a deal tend to draw scrutiny in regulated sectors.
For cross-border deals the gap widens further. The seller sits in one jurisdiction, the buyer in another, and the paperwork sits in a third. If your process depends on someone being physically present, you’ve built a bottleneck and called it security.
What This Means for Smaller Deals
The teams buying businesses under fifty million pounds often skip the formal room entirely. Shared drives work fine right up until the first non-disclosure agreement expires and someone forgets to revoke a link.
If you’re on a small team, you don’t need every feature. You need a clean folder structure, role-based access, and one person watching the clock. That’s it. Deck builders, manufacturers, and logistics operators all run reviews with the same skeleton, and the ones that stay organized rarely pay for the fanciest platform on the market.
The workforce doing this cleanup work is aging out, by the way. According to the Bureau of Labor Statistics, the business and professional services sector keeps adding roles faster than many parts of the economy, and the people inheriting deal files are usually three years into their careers. Write your room like the next person won’t have you on speed dial.
Where This Leaves Your Next Deal
The document chaos, the permission gaps, the unanswered requests. All three have fixes, and none of them require a bigger budget. They require one owner, one index, and one daily rhythm you refuse to break.
So before your next review opens, ask yourself which category on your own traffic light index is quietly sitting on red. Then go fix that one first.
