What buyers actually read in a data room
Buyers no longer take the management deck at face value. In 2026 they rebuild your ARR, read your cohorts and test your AI defensibility. Here is what they open first.
A data room can hold thousands of documents. Buyers read only a few of them closely, and those few decide whether the price in the letter of intent survives to signing. As Silverpeak puts it in its H1 2026 report, “AI has become a core diligence lens,” on top of the financial and commercial questions buyers always asked.
1. ARR that reconciles to the billing system
Buyers rebuild ARR from raw billing exports and compare it with your management figure. What typically gets stripped out:
- Paid pilots and trials annualised as if they were committed.
- Customers who have already given termination notice.
- Implementation, services and custom development booked as subscription.
- Usage spikes above the committed minimum.
- Ramped multi-year contracts reported at their final-year rate.
If ARR cannot be rebuilt from the billing system, every other metric loses credibility with it.
2. Cohorts, not averages
A healthy blended net retention can hide a real problem. If 2023 customers retain at 115% and 2025 customers at 88%, the average still looks fine, but the business is getting worse. Buyers ask for monthly retention and expansion by signup cohort, and refusing to produce them is read as a warning sign.
3. Quality of earnings
Accrual accounting, correct revenue recognition and a deferred-revenue schedule are the minimum. Gross margin gets more attention than before, especially for AI products, where inference costs now sit in the cost of revenue.
4. Customer contracts
Buyers read the top contracts in full. They look for concentration (scrutiny rises above about 15% of revenue from one customer and starts to affect structure above 25%), change-of-control clauses that require customer consent, termination rights and the length of commitments.
5. AI defensibility, tested rather than asserted
Some buyers now use AI tools to build working replicas of a target’s product to see how hard it is to copy. The answer they want to find in the data room is what a copy would not have: proprietary data accumulated over years, workflows customers would have to retrain to replace, integrations into systems of record, certifications. They also expect the commercial terms of your own AI dependencies - which models, at what cost, under what data-use terms - to be documented.
6. Technology, IP and security
Signed IP assignments from every employee and contractor who wrote code, an open-source inventory, and security evidence such as SOC 2 reports, penetration tests and incident logs.
The issues that end deals early
- Cash-basis books with no accrual conversion.
- Unsigned IP assignments for contractor code.
- A customer above 25% of revenue without contractual protection.
- No security evidence at all.
- Undocumented commercial terms for the AI services the product relies on.
Build the data room before the process starts, structure it by workstream with access controls, and answer the hard questions in it before a buyer has to ask them.
Our view · from our team’s deals
Diligence is where a competitive process is won or lost. In the deals our team has advised on, how the transaction was structured mattered as much as the documents in the data room.
- Uploadcare → Tiugo TechnologiesThe process was structured to protect shareholders before and after LOI while keeping competition alive.
- Alphamoon → BoxA technology-and-team structure that put the proprietary OCR and LLM technology at the centre of the buyer's review.
- Vocalls → CallMinerA full 100% sale that aligned founder continuity with a clean exit for investors.
- UltimateSuite → ServiceNowA tailored business case for the buyer, followed by hands-on negotiation through to a premium valuation.
Prepare the data room before the first buyer call. A gap fixed in month one costs far less than one found in exclusivity.
Thinking about a transaction?
Start with a free M&A readiness screening, or talk to us directly.
Sources
- Papermark, SaaS due diligence in 2026: not all ARR is real ARR
- FE International, What do buyers look for in a SaaS acquisition in 2026
- Silverpeak, Software M&A Report H1 2026
Based on public information; not investment advice or a valuation. NMP was not involved unless stated.
Figures are taken from the third-party sources listed, for the periods stated. Sources use different deal samples, so their numbers are not directly comparable. This article is for general information and is not investment or valuation advice.
Newsletter
Stay close to the technology M&A market.
Selected perspectives, sent directly to your inbox. Occasional insights. No noise.
More insights
All insights →acquired by
acquired by
acquired byacquired by
acquired by
acquired by
Freshworks
Sagacityacquired by
Buy, don’t build: Salesforce, Workday, Anthropic, Cohere, Freshworks and Accenture go shopping, and Workday and Adobe sign AI partnerships
As AI agents move into real work, platforms are buying what makes them safe and useful there (identity, security, spend control and the customer data they act on), and the companies that own those pieces are being bought for fit, not size.
Read article- Buyer Spotlight
Buyer Spotlight: Nebius
Nebius has spent 2026 buying the software layers above its GPUs. We map the deals, assess the strategy behind them and look at where the AI cloud market and its adjacent segments are heading.
Read article acquired by
GoShineacquired byFlamel.aiacquired by
Listen Labsacquired by
Robotiq.aiacquired byacquired by
- Dokaiacquired by
Bolt
Buy, don’t build: SAP, Salesforce, Yext, HCLTech, Automation Anywhere and Bolt go shopping, and Accenture partners with Within
Platforms are buying the point solutions their AI agents need to do real work (proprietary data, execution inside legacy systems, a customer-facing voice, a new channel), and companies that own those pieces are being bought for strategic fit, not scale.
Read article
