Getting the Most Out of Confidentiality Agreements

By Michael D. Rubin, CEO & Founder · Updated September 2026 · 772 words

You get the most out of a confidentiality agreement by backing it with everyday habits: a code name for the deal, private conversations, controlled documents and a short list of people who know. The agreement gives you a legal remedy if a buyer misuses information. The habits stop the information escaping in the first place, from the buyer's side and from yours.

Modern agreements go well beyond keeping the sale itself quiet. They restrict how buyers use what they learn, whom they may hire and how material is handled. Here is how to put that into practice.

Know what the agreement actually requires

Read your signed form once with your advisor and note the working rules it creates. A typical agreement covers what information is confidential and what is excluded, how long obligations last, what remedy applies to a breach, that the buyer will not hire away employees, and how information is to be used, stored and returned. Several of those rules depend on day-to-day behavior. If the agreement says information may be shared only with the buyer's advisors, somebody has to notice when an unfamiliar name appears on an email thread. Ask your advisor to confirm that each buyer's agreement covers everyone on its team, including outside accountants and lenders who join later.

Use a code name

Give the transaction a project name that says nothing about your company, industry or town, and use it everywhere: in emails, file names, calendar entries, data room folders and conversations with your attorney and CPA. Ask buyers to use it too. A calendar invitation that pairs your company's name with the word acquisition is a leak waiting for someone to glance at a screen. The names of the principals should stay out of outside conversations for the same reason. Choose something dull: a project named after a color, a tree or a river draws less attention than one that hints at a merger.

Keep conversations private

Much sensitive talk now happens on mobile phones, in cars, airports, restaurants and coffee shops. Agree with everyone on the deal team that sale calls are taken somewhere private, not in the shop, the office hallway or anywhere a customer or employee could overhear. Video calls deserve the same care: check who else is in the room and what is visible behind you. Buyer meetings should be scheduled after hours or away from the business. MDR & Associates can host meetings at its Frisco office or meet you somewhere discreet near your company. Remember that text messages and chat apps are easy to forward; keep anything substantive in email or the data room, where it is controlled and recorded.

Control documents, paper and digital

• Share files through one controlled channel, such as your advisor or a secure data room, never from a shared office inbox.
• Protect digital files with passwords or access permissions, and remove access for any buyer who drops out.
• Keep printed material locked away when it is not in use, and shred drafts rather than recycling them.
• Do not print sale documents on a shared office printer or leave them on a desk overnight.
• Keep sale documents off personal cloud accounts and home computers that family members share.
• Watch what staff might see: unusual bookkeeping requests, appraisal visits or a stream of visitors in suits all raise questions.

Keep the circle small, and plan what you will say

Decide early who inside the company needs to know, if anyone, and when. Often it is only the owner and perhaps a trusted CFO or controller who must pull the financial records. Agree on a plain, true explanation for anything unusual, such as a lender review or an insurance appraisal, and on what you will say if an employee asks directly. The broader question of when and how to tell your people is covered in selling without alarming employees or customers.

Owners eager to find a buyer sometimes skip these steps to save time. It is almost always a false economy: rebuilding trust with staff and customers after a leak takes far longer than any of the precautions would have.

How MDR & Associates keeps the circle closed

MDR & Associates releases nothing identifying until a buyer has registered, signed a confidentiality agreement and completed a financial profile, and it controls what each buyer sees at every stage of its ten-step process. The firm also works with owners on the practical side: project names, meeting locations and what to tell anyone who asks, so your staff never has to wonder who the visitors are. For a private first look at value, begin with the free valuation snapshot.

Where this fitsSell your business in Texas →

Questions owners ask next

What should I tell employees who ask why visitors are touring the business?

Something true but limited, agreed in advance with your advisor. Visitors can be described as consultants, lenders or insurance people when that is accurate. Avoid outright lies, which damage trust once the sale is announced. Better still, keep buyer visits to evenings, weekends or off-site meetings so the question never comes up.

Should my spouse and family know about the sale?

A spouse usually needs to know, because the sale affects family finances and may need their signature. Beyond that, keep the circle as small as possible until closing. Adult children who work in the business are a special case; decide with your advisor when and how to bring them in.