BuyerQual / Guides / NDAs

The NDA for Selling Your Business: What It Must Cover and When to Send It

By the BuyerQual team. This guide is general information, not legal advice; have an attorney review your NDA.

Here is the surprise most first-time sellers hit within a week of listing: BizBuySell connects you with buyers, but it does not execute NDAs between you and them. The confidentiality of your financials, customer relationships, and the very fact that your business is for sale is entirely your responsibility. This guide covers what your NDA needs to contain, when in the conversation to send it, and the handling mistakes that quietly leave sellers exposed.

When to send the NDA

The right moment is after a basic identity check and before any financial detail. In sequence: a buyer inquires, you confirm who they are (name, LinkedIn, buyer type), and then the NDA goes out. Everything a buyer sees before signing should be information you would be comfortable with a competitor reading, because you have no way of knowing yet that they are not one. Our guide to vetting buyers on BizBuySell covers that identity step in detail.

What the NDA must cover

A business-sale NDA is not a generic template job. The important clauses for this specific situation:

• A broad definition of confidential information that explicitly includes financial statements, customer and supplier identities, pricing, and, importantly, the fact that the business is for sale at all. Word getting out to employees or customers can damage the business before any deal closes.
• Non-use, not just non-disclosure. Non-disclosure stops the buyer from telling others. Non-use stops them from exploiting what they learned themselves, which is the clause that actually matters if the "buyer" turns out to be a competitor.
• No contact with employees, customers, suppliers, or your landlord without written permission. A curious buyer calling your best customer or your key employee can be catastrophic mid-process.
• Non-solicitation of employees for a defined period, so a passing buyer cannot browse your org and then poach your operator.
• Return or destruction of materials on request when discussions end.
• A defined term. Two to three years is typical for small business M&A. Perpetual terms are often unenforceable and invite pushback.
• Standard carve-outs for information that is already public or independently known, plus governing law, and a statement that the NDA creates no obligation to transact.

Use e-signatures, not attachments

Emailing a Word document and hoping it comes back signed is where most seller NDA processes die. Buyers stall, versions fork, and you end up sharing financials with people whose signature status you cannot remember. An e-signature flow fixes all of it: legally binding under the U.S. ESIGN Act, timestamped, and archived automatically. It also takes a buyer three minutes on their phone instead of a print-sign-scan errand they will put off for a week, which matters, because every day of NDA delay is a day a serious buyer cools off.

The mistakes that leave sellers exposed

• Financials before signature. The most common mistake and the least recoverable one.
• No record of who signed. If you cannot produce the signed NDA two years later, you effectively do not have one.
• Sharing beyond the signer. The NDA binds the person who signed it. If the buyer brings in a partner or advisor, they should sign too, or be explicitly covered as representatives.
• Forgetting the dataroom link outlives the conversation. An NDA plus an open Google Drive link that never gets revoked is confidentiality theater. See our guide on running a permissioned dataroom.