How to Decide What to Share During Investor Diligence

Decide what to share by translating each diligence request into the question it is meant to answer, identifying the minimum useful evidence and obtaining the required disclosure approval. Prepare an answer, an approved extract or a justified escalation. Do not assume either that every request requires raw files or that confidentiality excuses withholding material information.

Restate the actual question

A request for “all customer information” may contain several questions: revenue dependence, contract durability, churn or implementation quality. Ask the investor to clarify the purpose and period. You are clarifying the evidence need, not deciding unilaterally what a financing requires.

Record who asked, the intended reviewers and requested timing. Avoid sending personal records or restricted information merely to demonstrate responsiveness. If a request may involve a legal disclosure obligation, preserve it and ask counsel how to respond.

Identify evidence and authority separately

List the files that could answer the question, then identify who owns them and who can approve external disclosure. An employee's access to a file does not necessarily authorize sharing it. Ask about customer confidentiality, privacy, commercial sensitivity and third-party restrictions.

FTC guidance recommends minimizing sensitive data and restricting access by legitimate need. That principle supports careful preparation. It does not establish which disclosures are legally required in a particular transaction.

Prepare options for the responsible reviewer

Possible options include an approved aggregate, a contract schedule, a redacted extract, a limited review process or the complete relevant document. List what each option would and would not answer. Do not remove context that changes the meaning or use redaction to conceal a material problem.

Where needed, ask counsel and the security or privacy owner to determine permissions and process. If review will take time, tell the investor what is pending and offer a realistic checkpoint. Do not claim a response is complete while a material issue is unresolved.

Worked example: answer a customer durability question

Illustrative case: an investor asks HarborOps for all customer contracts to understand renewal exposure. The team prepares a decision brief rather than forwarding its entire drive.

Disclosure decision brief

Evidence option	What it could answer	Review needed
Approved contract schedule	Term, renewal dates and customer grouping	Finance accuracy and permitted detail
Relevant contract extracts	Specific clauses the investor asks about	Counsel, context and redactions
Full material contracts	Broader document-level review	Disclosure authority and recipient process

Counsel determines what is appropriate for the actual financing. If the schedule cannot answer a material question, the team does not present it as a substitute that settles the matter. The investor receives an accurate status and an approved response.

Copy the request-triage brief

Exact request and requesting recipient:
Underlying diligence question:
Period, scope and intended reviewers:
Relevant evidence and owner:
Disclosure authority / restrictions to assess:
Option A and what it answers:
Option B and what it answers:
Context that must not be removed:
Legal / privacy / security review required:
Approved response and version:
Open issue, owner and checkpoint:
Recipient acknowledgment or further question:

Try this on one broad request. Ask the evidence owner whether the proposed extract changes meaning. Ask the qualified reviewer whether the team is authorized to share it. These are different checks.

Complete the decision, then configure access

If the purpose is unclear, clarify it. If authority is unresolved, escalate. If an answer would be misleading without further context, preserve that context. Never treat a signed NDA as a reason to stop reviewing what you disclose.

Completion is a documented, approved response that answers the actual question or clearly explains the outstanding work. Use the existing secure document-sharing guide for access controls and delivery surfaces. This lesson owns the prior disclosure decision, not a duplicate security playbook.

Finta Field Guide. Examples and worksheets are original educational illustrations, not customer results. Based on Academy principles and the primary sources linked in this lesson.

Informational disclaimer

We are not lawyers. This article is for general education only and is not legal, tax, accounting or investment advice. Check with your attorney or accountant before acting on it.