top of page

The Information Waterfall: How Sellers Control Buyer Access in M&A Deals

  • Writer: Clay Chamberlain
    Clay Chamberlain
  • 5 days ago
  • 9 min read

Read to discover how to…

  1. Leverage your information and avoid deadly leaks that destroy deal value

  2. Prevent buyers from using your own data against you in retrades

  3. Build a professional process using the Information Waterfall

Alison Dart spent nine hours one Saturday at her kitchen table, uploading eleven years of her company into a data room. She had a fresh pot of coffee, her laptop, and an external hard drive containing everything Tallgrass Environmental Services had ever generated. Financials, customer contracts, employee files, permit records, manifests, vendor agreements, banking statements, environmental reports. All of it, unsorted, unredacted, and unindexed.

She told herself she was saving the buyer's diligence team some time. She wasn't. She was handing them every retrade option they'd use against her four months later.


That nine-hour Saturday is the moment most founders' deals are decided — long before the LOI hits a problem, long before the PSA gets ugly. The deal gets lost in the days and weeks before either of those documents exist, when the founder starts bleeding information she can never get back.


I'm going to walk you through the system that stops the bleeding.


What Happened to Alison


Alison runs a $32 million hazardous waste outfit out of Tulsa. She's a chemical engineer who spent eight years at Waste Management before founding Tallgrass in 2014. We call her Ms. Speed Demon, a fitting nickname and the cause of her downfall.


When she walked into my office, she was two months past the worst experience of her professional life. She had spent six months in exclusivity with a Dallas private equity firm. And their terms were locked in by a twelve-page LOI she signed on her phone in the back of an Uber, just eight days after the first call. When Alison hastily signed the LOI, she only saw the underlined number on

page 2: $52 million.


Four months in, the buyer's diligence counsel — a Houston firm called Saxon Hartwell — sent over a 187-item questionnaire. They wanted manifest reconciliations going back to 2017, RCRA generator status for three offices, and permit transfer documentation for eleven acquired companies. By item 87, Alison realized she could answer only 41 of the 187 cleanly. The other 146 were unanswerable. Because after, eleven years of running Tallgrass at her speed, she had left a paper record that couldn't survive that kind of scrutiny.


Three weeks later, Alison found herself at a conference room table alongside her CFO and two paralegals from a panic-hire law firm. The buyer's lead diligence partner, with a calm and methodical tone, read the gaps back to her over a Polycom phone: Twenty-three missing manifests in 2017 alone. Three acquired entities operating under permits held by dissolved companies. Her top three customers running on month-to-month contracts that would be priced accordingly in the deal.


The price dropped from $52 million to $38 million. Then the buyer walked.

When Alison and I sat down two months later and I asked her to walk me through what actually happened, the line that stopped me was this: "I don't even remember signing an NDA." The first legal document in the entire transaction — and six months and $300,000 of advisor fees later, she couldn't remember it. That's how casual most founders are about the moment that decides everything.


The Three Words You Need to Write Down


Before I give you a single framework, I want you to write three words on a sticky note and put it on your monitor:


Information is leverage.


That's the lesson. Everything else I'm going to teach you is structure around those three words.


When you're running a company, your information is operational. Customer pricing is what you charge, employee comp is what you pay, vendor contracts are what you negotiated, and permit files are your regulatory compliance. All of that is true while you're running the business.


But the minute you decide to sell, every one of those things becomes something different. Customer pricing becomes a competitive intelligence asset. Employee comp becomes a recruiting target sheet for whoever sees it. Vendor contracts become a cost-cutting roadmap for an acquirer. Permit files become a regulatory exposure inventory. Your QuickBooks data becomes the seed of every retrade conversation that's going to happen in this deal.


The information didn't change. The context did — and the context changed the moment you decided to sell. The party with information has options. The party who gave it away has obligations.


The Five Gates


The Information Waterfall is a five-gate architecture. Each gate is a content tier, each gate has a trigger the buyer must produce to advance, and you control the flow.


Gate 1 is the Teaser — a one- or two-page non-confidential summary covering industry, size range, geography, and value proposition. No customer names, no financial specifics. Anyone can see this. There's no trigger to Gate 1.


Gate 2 is the CIM and Basic Information. The Confidential Information Memorandum includes high-level financials, an operational overview, market positioning, and customer portfolio described in categories rather than by name. The trigger to Gate 2 is a signed NDA that clears your NDA Control Score. Most founders never realize that the leverage lives right here — the NDA is not a formality; the NDA is the trigger.


Gate 3 is the Deep Dive — management presentations, detailed financials with working capital, anonymized customer concentration data, key SOPs, and contract summaries. The trigger to Gate 3 is a real IOI on letterhead, including a price range, proof of funds, and timeline, plus a F.I.T. score above the Paper Threshold. Information access at this stage is gated by your assessment of whether the buyer can actually close — not by their interest, but by your evidence.


Gate 4 is the Crown Jewels and Full Data Room. This is the big one: every contract, every permit, every employee file, every customer-by-customer detail. Most founders open the dam here. The trigger to Gate 4 is exclusivity granted on terms you control — a signed LOI with exclusivity backdoors, milestone gates, anti-retrade provisions, and a defined drop-dead date. Exclusivity is a gift, and you don't give it away. You sell it for terms.


Gate 5 is Pre-Closing Confirmation, the bring-down period where the buyer verifies that everything in Gates 2 through 4 is still true on closing day. Final reps, final certificates, final lien searches. The trigger to Gate 5 is an executed PSA. The buyer is not getting fresh data here — they're confirming what they already have.

I can hear half of you saying, "Clay, this seems like a lot of process. The buyer's going to think I'm being difficult."


Two decades on both sides of these deals, and I'll tell you with absolute confidence: a buyer who pushes back on a gated information process is a buyer who was planning to retrade you. The strategics with real platform experience and the disciplined PE funds expect a gated process because they run the same kind of process when they're selling their own portfolio companies. The only buyers who want unrestricted, immediate access are the ones whose deal model is built on finding a reason to retrade.


The waterfall is not adversarial. The waterfall is professional. And the buyer's pushback on the waterfall is the diagnostic — it tells you which buyers are real and which are running the playbook.


 

Want the implementation tool?


The Information Waterfall Toolkit includes the Crown Jewels Audit worksheet, the 5-Gate Map and Records Readiness Checklist, and four Karen Email scripts for handling buyer pushback in writing. Free for Big Exit Insiders subscribers.



 


What Alison Did Wrong


When the buyer sent that LOI in May, what gate of the waterfall was Alison at? She wasn't on the waterfall at all. There was no waterfall, no gating. The buyer hadn't signed a meaningful NDA, hadn't been scored on F.I.T., and hadn't earned access to anything beyond a teaser. Yet Alison signed an LOI with hard exclusivity — a Gate 4 trigger — before the buyer had even cleared Gate 1.



She didn't skip a gate. She skipped four.


Then, two weeks after signing the LOI, she opened the data room and gave Gate 4 access — the full eleven-year operational record of Tallgrass — on a Saturday at her kitchen table. She did it without a real Gate 1 NDA, without a Gate 2 CIM process, without Gate 3 management presentations, and without the exclusivity terms that should have been negotiated as the price of Gate 4 entry.


That's why the 187-item questionnaire was so devastating. The buyer's diligence partner had everything: every manifest gap, every permit gap, every customer concentration issue, every accounting discrepancy. There was no leverage left to negotiate with by the time the retrade came, because the leverage had been in Alison's information, and Alison had given the information away.


When I walked her through the framework, she stopped me at Gate 4 and said one sentence I want you to remember: "If I had run this process — if I had even opened a data room with three folders instead of opening the whole thing — the diligence team would have asked the same questions and gotten three folders' worth of answers. The retrade would have been about three folders, not about eleven years."


That's the whole lesson, in one sentence from her.


Build the Waterfall Backwards


Most founders try to build their waterfall top-down, starting with what goes in the teaser, then the CIM, then the deep dive, then the data room. That feels logical, but it's wrong. By the time you get to Gate 4, you've already let the more sensitive items leak into Gates 2 and 3 because you didn't yet know what the bottom of the waterfall was supposed to hold.


You build the waterfall backwards. Start at Gate 4, identify what you can never afford to lose, and anchor everything else relative to that list.


The exercise is called the Crown Jewels Audit. It takes thirty minutes. Block the time and turn off the phone. If you have a CFO or a long-tenured operations head you trust, do this with them in the room.


You walk through every category of information your business generates and ask one question for each item: if this got into a competitor's hands tomorrow morning, what is the damage? There are four levels. "None" means no competitive harm — it's public information. "Inconvenient" means annoying but recoverable, things like high-level financials and sector positioning. "Material" means real economic harm if misused, covering detailed unit economics, anonymized customer profitability, operational SOPs, and key contract terms. "Existential" means it could end the business or destroy enterprise value — trade secrets, customer-by-customer pricing and margins, key employee comp, regulatory filings, strategic plans, environmental issues, and pending litigation strategy.


Only items rated Material or Existential go on your Crown Jewels list. Those items live at Gate 4 and nowhere else, and they don't move until an executed LOI with exclusivity is in place.


The list should land between five and fifteen items. Fewer than five means you haven't pushed hard enough. More than fifteen means you're conflating Crown Jewels with Deep Dive material, and you should pull the borderline items up a gate.


Alison's list came to nine items. It included customer-by-customer pricing for her three Tulsa refineries, the unrecorded permit transfers for three acquired entities operating under dissolved-company permits, Reggie Castillo's compensation, equity, and retention agreement, and two unreported brine spill incident reports from 2018. But the one she didn't see coming was a clean-energy consulting business plan she'd been quietly building for two years — her next chapter. If a competitor saw it, they'd front-run her into the carbon-capture advisory market before she even closed Tallgrass. Existential. And it wasn't even part of her current company.


The audit caught it before the data room did.


The Spill Call


There's one more story I want you to hear, because it's the moment Alison's framework stopped being a framework and started being who she was going to be.


It was day twenty-three of records remediation, a Tuesday morning on November 17, 2025. We were two days from a critical milestone on her manifest reconstruction project when, at 11:47 a.m., the phone rang.


It was a Tier-1 emergency. A railcar had derailed at a refinery in Ponca City, spilling about 4,800 gallons of an F005 hazardous waste stream onto the rail apron. The refinery's general counsel was on the line. The customer wanted Tallgrass on-site within 90 minutes. Reggie Castillo, her ops director , had personally run forty-seven Tier-1 emergency responses and was sitting in his office in Tulsa, ready to roll.


Alison stood up. She picked up her keys, looked at me, and said, "This is my company. This is what I do."


I want you to understand that sentence. Every founder in M&A has a version of it in their throat at some point. It's not arrogance — it's identity. For eleven years, Alison's identity had been being the fastest person on every spill call. Speed wasn't her habit. Speed was her self.


I said: "This is exactly the moment that decided the last deal — the same moment with a different label on it. Six months from now, the next buyer's diligence team will read the prep that you're about to abandon, and they will price the gap. Reggie has run forty-seven Tier-1 responses. He does not need you in Ponca City. The data room does."


She stood in the doorway for what felt like ten minutes, the phone ringing again with Reggie's name on the screen.


Then she sat back down. She handed the phone to my paralegal and told Reggie over speakerphone: "You have the call. I am working on the future of this company. Do not call me again unless somebody is hurt."


The release was contained in 47 minutes. The DEQ inspector filed a clean report. The customer sent a thank-you email at six in the evening.


That night, Alison wrote a sentence in her notebook that became the line anchoring her whole transformation. Write it down too:


Velocity without a system is collision.


Main Takeaway


The seller who walks out of an exit with the deal she wanted didn't get luckier than the seller across the street. She wasn't smarter. She wasn't a better negotiator. She refused to give away her information before she had a deal worth giving it away for. The Waterfall is how that discipline becomes a system.


 

Become a Big Exit Insider

Get the free M&A Exit Compass Mini Series when you subscribe. Plus: biweekly deal intelligence, early framework releases, and priority access to the M&A Legal Masterclass.



  



Comments


  • Facebook
  • X
  • LinkedIn
bottom of page