A sale process shows your most sensitive documents to the people best positioned to use them against you. Disclosure discipline is not paranoia — it is the process.
Every sell-side process has the same tension: buyers demand depth to bid, and half the credible buyers are strategics who remain competitors if the deal dies. The resolution is staged disclosure that tracks the funnel — teaser, IOI, LOI, exclusivity — with each stage seeing more, and no stage able to detect what it cannot see.
The CIM-adjacent material: anonymized customer mix, headline financials, market position. Wide distribution, low sensitivity — this is the phase where twelve parties are in the room and most will not advance.
Detailed financials, the model, commercial data with customers still anonymized, organizational detail. The shortlist works here. Every party’s view-only documents carry their own name and firm in the watermark, page by page — a leaked page identifies its leaker.
Named customer contracts, employee-level compensation, litigation detail, the material you show one buyer. Move exactly one party to phase 3 when exclusivity is signed. The parties that fell away at phase 1 never learned what the room was holding.
Hidden, not locked. A strategic bidder who can see that a “Customer Contracts” folder exists — locked or not — has learned that customer contracts are in play and will push. Here, above-phase documents are absent from listings, folder contents, counts, and search, and a direct request returns a 404 byte-identical to a document that does not exist.
The AI respects the phase. Bidders ask questions in plain language and get answers cited from the documents their phase allows — and only those. A phase-1 bidder asking about customer concentration gets the phase-1 answer, with no hint that deeper material exists.
Watermarks that testify. Every view-only page is stamped server-side with the viewer’s name, email, and timestamp before it leaves the building. In a process with competitors in the room, deterrence is a feature.
All of it enforced server-side, documented on the security page — including what we have not built, stated plainly.
At close — or at collapse — export the entire room as one ZIP with the folder structure preserved: the disclosure record for reps and warranties lives in your files, not in a vendor archive. Cancel and a 30-day wind-down starts, with read and export access throughout and permanent deletion at the end. There is no copy of your deal left behind. What diligence will ask for along the way is in the due diligence checklist.
Enterprise VDRs are built for banks running twenty processes — the comparison is here. Ours is flat monthly and published, and the demo room shows the product before you commit anything.