Confidential Information Memorandum (CIM): What Goes in It

A confidential information memorandum (CIM) is the sale document a sell-side advisor sends to buyers only after they sign a non-disclosure agreement (NDA). It describes the company's business, market, customers, management and financials, and it's the document each buyer prices its first-round, non-binding offer from.

In the UK and continental Europe the same document is called an information memorandum (IM); US bankers also say offering memorandum, or simply "the book".

What is a confidential information memorandum in an M&A sale?

A sale releases information in stages. Each stage goes to fewer parties than the one before, and each carries more detail. The CIM is the first document that names the company, and the last one every signed buyer sees before the shortlist.

Each buyer prices an indication of interest (IOI), a non-binding price range, from the CIM. The few whose offers clear the bar get management meetings and the data room, then submit a letter of intent (LOI).

The CIM comes after the NDA because it names the company and carries numbers a competitor could use. Once they've signed, buyers hold no other detailed source until the shortlist, so anything the CIM leaves unclear gets priced as risk.

On spectup's sell-side M&A advisory mandates, we write the memorandum with management, and it goes only to parties that have signed.

CIM, teaser, management presentation and PPM: what each document is for

Four documents get mixed up in private transactions. Three belong to a company sale: the teaser, the CIM and the management presentation. The fourth, the private placement memorandum, belongs to a securities offering.

4 columns. Drag the table sideways; the first column stays put.

A private placement memorandum supports a capital raise and carries securities-law risk disclosures. An information memorandum supports the sale of a company or a business unit and leaves the binding statements to the purchase agreement.

Use the CIM's figures in the management presentation; a new number there will be questioned.

What goes in a confidential information memorandum, section by section

Buyers expect each item in the same place. The 12 sections below are the standard order for a lower mid-market sale.

1. Cover, confidentiality notice and disclaimer

A project code name lets the company be discussed without being named. The disclaimer says the information comes from the company, the advisor hasn't verified it, and buyers rely only on the warranties in the purchase agreement. It repeats the NDA's main terms: no contact with staff, customers or suppliers, every question routed through the advisor.

2. Executive summary

The summary states what the company does, revenue and adjusted EBITDA (EBITDA with one-off and owner-specific items removed) for the historical and current years, headcount, ownership and the transaction sought: a full sale, a majority sale with management rollover, or a minority stake. Many buyers decide here whether to read on, so every figure that matters appears here first.

3. Investment highlights

A short list of claims about why the business is worth buying, each pointing to the page that proves it: recurring revenue share, customer tenure, market position, margin trend. Give every highlight a number and a page reference; buyers discount claims they can't check.

4. Company overview and history

Year established, entity chart, ownership, milestones, locations and headcount by function. For an owner-managed company, also the reason for the sale, such as succession.

5. Products, services and business model

Revenue by line, pricing model, contract length and renewal terms. Buyers look first for the recurring share, because recurring revenue usually supports a higher multiple. Margin by line often appears here only in bands; the full figures come once a buyer has put a price in writing.

6. Market and competition

Market size and growth with named sources, the competitor set and the company's position. Buyers discount top-down figures fast; addressable customers multiplied by a realistic contract value carries more weight.

7. Customers and go-to-market

Share of revenue from the largest customers, the largest single customer's share, tenure, retention and the structure of the sales team. In the CIM, customers appear anonymised by sector and tenure ("Customer A, an industrial distributor, 11 years"); names and contract end dates follow later.

No rule sets a concentration limit for a private seller. A useful yardstick is the US rule that makes a public company disclose the revenue from any single customer at 10% or more of its revenue, without naming the customer; expect questions about any customer above that line.

8. Operations, sites and suppliers

Owned or leased facilities, capacity and utilisation, key suppliers, IT systems, certifications and permits. For manufacturing and logistics it also covers maintenance capex and the age of the asset base.

9. Management and organisation

Organisation chart, leadership biographies and which managers intend to stay. Buyers test how many of the customer relationships depend on the owner, so the CIM describes the transition plan.

10. Financial information

This is the longest section of the CIM. It covers the historical years, the year to date, the current-year forecast and the projection period:

2 columns. Drag the table sideways; the first column stays put.

If the company has commissioned a sell-side quality of earnings (QoE) report, the CIM figures reconcile to it line by line.

11. Growth plan

The initiatives behind the projections, the investment each needs and the EBITDA it should add. PE buyers also read it for add-on targets, because many plan to use the company as a platform.

12. Transaction overview and process

The perimeter, the structure sought, the timetable and what a first-round offer must contain, sometimes in a separate process letter. A typical IOI request asks for a valuation range on a cash-free, debt-free basis, financing sources, diligence requirements and expected time to signing.

Confidential information memorandum example: an illustrative outline

The outline below sets a page budget for a lower mid-market B2B services company. All figures are invented for illustration and describe no real transaction.

Illustrative example: a 56-page CIM for a B2B services seller

3 columns. Drag the table sideways; the first column stays put.

Total: 56 pages, with the financial section the largest at 12. If the market pages outnumber the financial pages, expect buyers to ask why.

What does management have to produce for a CIM?

How long a CIM takes to write depends less on the advisor's drafting than on the finance team's time, because only management can produce the numbers behind the narrative.

A company that closes monthly and can pull revenue by customer moves straight to drafting; one that has to restate a year adds that work to the front. What a CFO supplies:

• Monthly management accounts, reconciled to the statutory accounts

• Revenue by customer and by year, so concentration and retention can be computed

• Evidence for every add-back: invoices, settlement letters, payroll records

• Entity chart, key contracts (with change-of-control clauses) and headcount by function

• Capex split into maintenance and growth

A vendor due diligence (VDD) report, commissioned by the seller, is worth ordering before drafting when add-backs are large or the accounts have never been examined at this depth. KPMG's sell-side guide says a full VDD typically includes a quality of earnings analysis, a working capital review and key contract analysis, which is the work a buyer will rebuild anyway.

Where the CIM falls in the wider timetable is set out in the sell-side process, stage by stage.

What do buyers test first in a CIM?

A buyer reads the CIM first for the questions it'll ask later. Each page that sets the price has a document behind it that'll be checked:

• Adjusted EBITDA. Every add-back is tested in the buyer's own QoE review. An add-back that doesn't survive comes off the price between the LOI and the purchase agreement, which is called a retrade.

• Current-year forecast. Buyers compare it with monthly actuals as the process runs. A company that misses its own forecast during the sale hands the buyer a reason to reprice.

• Concentration. Customer, supplier and key-person dependence, each with a number behind it.

• Internal consistency. The same revenue figure has to match in the summary, the business section and the financials, and a mismatch reads as weak financial control.

Once the LOI is signed, exclusivity starts and the seller can't negotiate with the other bidders. What a term sheet and an LOI each bind decides how much of the price is still open when the buyer's QoE lands.

What should a CIM leave out until later?

A CIM that discloses everything at once gives every bidder the facts it needs to retrade, and gives a competitor among them data it shouldn't hold. The fix is a disclosure ladder: each step goes to fewer parties, and each is triggered by a commitment from the buyer.

3 columns. Drag the table sideways; the first column stays put.

On a 2024 sale of a UK managed services provider, spectup ran a no-names approach throughout. The company was named to each party only against a signed NDA, and it sold to a strategic acquirer without the market learning it was for sale.

When a bidder competes with the company, the FTC's guidance on pre-merger due diligence describes clean team agreements that limit competitively sensitive information in data rooms to select individuals.

Is a confidential information memorandum legally binding?

No. Every CIM opens with a disclaimer: neither the seller nor the advisor gives a warranty on its contents, and buyers rely only on the purchase agreement. How far that protects the seller is decided by the purchase agreement and the law that governs it.

In Delaware, a clause in which a party disclaims reliance on statements outside the contract is enforced when it's explicit and unambiguous. Sidley's review of a 2024 Chancery opinion adds that an integration clause on its own may not bar a fraud claim.

In that case a seller sued the buyer over statements the buyer made in negotiations. The same rule applies to the reverse claim, a buyer suing a seller over what its CIM said:

"...fraud claims arising out of M&A transactions often are brought against sellers"

Sidley Austin, Enhanced Scrutiny, November 2024

In England and Wales, a contract term excluding liability for a pre-contract misrepresentation has no effect unless it passes a reasonableness test (section 3 of the Misrepresentation Act 1967). In Germany, liability for intent can't be waived in advance (section 276(3) BGB), so no disclaimer covers a figure the seller knowingly misstated.

So management signs off every figure in the CIM as one it'll have to defend, and the seller's counsel checks that the purchase agreement carries an explicit non-reliance clause. This is general information, not legal advice: your own counsel drafts the documents.

How the CIM is distributed and tracked

Email attachments are the wrong channel for a CIM, because a forwarded file can't be traced. Each signed party gets its own watermarked copy, so a leak points back to whoever received it.

The virtual data room comes later, for the shortlist after first-round offers. KPMG's sell-side guide recommends watermarking, download restrictions and tracking buyer activity inside it, and the activity log shows which bidders are doing real work before final offers.

On spectup mandates we record which party received what and on which day, and the data room opens last, to parties that have already made an offer. That record is the seller's protection if a bidder later disputes what it was shown, and the evidence if the memorandum turns up with a party that never signed an NDA.

Where a CIM loses the seller money

A CIM is priced twice. The first time is the IOI, where every buyer prices from the same document; the second is diligence, where the winning buyer checks every figure against its own evidence. Sellers lose money in the second pricing, on numbers they wrote themselves.

The arithmetic is the multiple. In an illustrative case, an offer priced at 8x adjusted EBITDA loses EUR 4M when a EUR 500,000 add-back fails in diligence.

Put in only the add-backs and the forecast you can defend after exclusivity. The buyer's QoE and the monthly actuals settle both then, when the seller has no other bidder to turn to.

State the reason for sale. Left blank, it gets filled with the worst guess, such as a shrinking market or a lost customer, and priced in.

I'd rather take an add-back out of the CIM than defend it in the QoE: one that's never claimed can't be retraded.

Live competition is what protects the price. A sale clears just above the second-highest offer, so the seller's job is to keep more than one bidder pricing off the same document until the end.

How spectup runs the CIM on a sell-side mandate

spectup is mandated by the seller and works for nobody else on the transaction. The memorandum runs in six steps inside that mandate.

1. Range and floor first. The price range the company goes to market at, the lowest price the owner will accept and what spectup is paid are agreed before any work starts.

2. Equity story and numbers pack. We write the equity story and build the numbers pack with management, and the memorandum is drawn in-house, never briefed out, like every M&A memo our pitch deck service produces.

3. Acquirer list. The list draws on three network layers: 440+ direct relationships with acquirers, sponsors and lenders from transactions we closed, 2,500+ investors and LPs met on client mandates, and the buyer books of 30+ partner firms.

4. Strike list, then a no-names approach. The owner strikes off every name they don't want approached, and nobody is contacted before that list is final. The approach goes out with no names first, and the memorandum only against a signed NDA, recorded per party and per day.

5. Staged release. The facts a buyer retrades on, such as named customers, margin detail and contract end dates, go out only once it has put a number in writing.

6. One deadline. Offers arrive on one date, comparable like for like, with the underbidder kept live to the end. A buyer bidding alone only has to beat the owner's floor.

What to have ready before the CIM is drafted

Three decisions come before the first draft of the confidential information memorandum: whether the monthly close is clean enough to check the forecast against actuals without a restatement, whether every add-back has its invoice, contract or payroll record on file, and whether to commission a sell-side quality of earnings report so the CIM reconciles to a number a buyer's accountants recognise.

If you're planning a sale in the next 12 months, start the add-back file this quarter, and book a 30-minute call on fit with spectup before the first draft is written.