TL;DR: A confidential information memorandum (CIM) is the seller's marketing document for a business being sold. You'll receive it after signing an NDA. It's 15 to 80 pages of curated information designed to make the business look attractive. Read it with one hand on the financials and one eye on what's missing.
The document that opens the door
You sign the NDA. The broker sends the file. You open a PDF that claims to tell you everything you need to know about a business.
It doesn't. But it tells you a lot.
A confidential information memorandum, commonly called a CIM or offering memorandum, is the primary document a seller distributes to qualified buyers in a structured M&A process. The seller's M&A advisor or business broker prepares it. Its job is to present the business in the best possible light and give you enough information to decide whether you want to dig deeper.
According to BuyerEdge, a well-prepared CIM covers eight core sections: executive summary, company overview, financial summary, products and services, market analysis, growth opportunities, management team, and asking price. The depth of each section varies by deal size and the sophistication of the sell-side team.
For lower middle market deals, CIMs typically run 20 to 50 pages. Larger transactions may produce 80-page documents with audited financials, detailed market analysis, and a full growth thesis. Smaller Main Street businesses may send you a 15-page summary. The format scales. The discipline required to read one does not.
You will not get this document without an NDA
That's by design. A CIM contains financial data, customer information, and operational details that could damage the business if they reached a competitor. Brokers gatekeep it. You sign the NDA, sometimes provide a buyer profile or proof of funds, and then the document arrives.
The NDA matters. It governs who you can share the information with, what you can do with it, and what happens if the deal falls apart. You're typically limited to your deal team: your attorney, accountant, and financial advisor. Direct contact with the business's employees, customers, or suppliers without permission is off-limits.
Read the NDA before you sign it. Exclusivity provisions, non-solicitation clauses, and remedies for breach vary. Some NDAs carry real teeth.
Don't start at the executive summary
Every CIM opens with an executive summary. The broker wrote it to hook you. Read it last.
Start with the financial summary. Revenue trends over the trailing three to five years tell you whether the business is growing, flat, or in decline. Gross margins tell you how the business competes. EBITDA or Seller's Discretionary Earnings (SDE) tell you what you're actually paying for.
SDE is the standard metric for owner-operator businesses: net income plus the owner's compensation plus genuine one-time expenses. EBITDA is more common as deal size increases and a professional management layer normalizes compensation. Neither number means much until you've scrutinized the add-backs.
Add-backs: where CIMs get creative
Sellers add back expenses to increase the earnings figure. Some add-backs are legitimate. Owner's salary above what a replacement manager would cost. Personal vehicle expenses run through the business. A one-time legal fee. These are standard.
Others are not. Watch for:
- Recurring costs labeled "non-recurring"
- Below-market rent when the seller owns the building and the lease will reset post-close
- Family members on the payroll who perform real functions
- System or infrastructure spend that will resume after the sale
A business showing $3M in reported net income with $900K in add-backs producing $3.9M in adjusted EBITDA deserves hard questions. Reconstruct the earnings yourself using the actual financial statements. Don't accept the broker's calculation at face value.
Customer concentration is the buried risk
Read the customer section before you read the business overview.
Customer concentration is the most common undisclosed risk in lower middle market acquisitions. A business generating $8M EBITDA where one customer represents 45 percent of revenue carries a fundamentally different risk profile than the headline number suggests. That single customer relationship affects your purchase price, your deal structure, and your hold period strategy.
Look for revenue by customer, contract terms and length, renewal history, and any churn data available. If the CIM presents revenue only in aggregate without concentration data, that absence is a signal. Good brokers include it because sophisticated buyers will ask. When it's missing, ask why.
Management team: the key-person question
The management section tells you who runs the business. More importantly, it tells you what breaks if the owner leaves.
In lower middle market transactions, the seller is often the primary revenue generator, the key operator, and the most important customer relationship all at once. That's manageable. But it has to be priced into the deal structure.
If the owner is the only person who knows how to service the top five clients, your transaction looks different. Expect an earnout tied to revenue retention. Expect a longer transition period. Expect a retained equity component that keeps the seller's skin in the game.
The CIM will describe the management team favorably. Look for depth: Is there a layer of management below the owner that can run operations? What's the average tenure of key employees? Does the organizational chart survive a founder exit?
The growth story requires skepticism
Every CIM includes a growth section. The market is expanding. New geographies are available. The product line can extend. Digital marketing is untapped.
Some of it is real. Some of it is storytelling. The distinction matters because sellers are often pricing in future growth when they set an asking price.
Ask the same question for every growth claim: What's the proof? Signed contracts are proof. Pipeline reports are not. A CRM showing "potential accounts" is not. If the growth thesis requires the buyer to execute something the current owner has never executed, factor that into your valuation, not theirs.
Red flags: what the document won't say directly
Experienced acquirers develop pattern recognition for signals that deserve deeper diligence. Common ones:
- No audited or reviewed financials for businesses above $3M EBITDA
- Revenue presented in aggregate without customer concentration data
- Adjusted EBITDA more than 40 percent above reported EBITDA
- The owner listed in every key role: CEO, head of sales, primary operator, key account manager
- A market analysis that selects the definition of "market" specifically to make growth look inevitable
- Risk factors buried in small print at the back of the document
The risk section is often the most honest part of a CIM. Brokers know sophisticated buyers will find problems in diligence. Including known risks protects the seller. Read that section first after the financials.
What a CIM cannot tell you
The CIM is a marketing document. It is not a diligence product. It is prepared by the sell side, reviewed by the seller, and designed to generate interest and competitive tension among buyers.
It cannot verify earnings quality. It cannot confirm customer retention rates. It cannot tell you whether the business's systems and processes survive without the owner. These are diligence questions, answered by tax returns, bank statements, CRM exports, customer interviews, and operational walkthroughs.
A CIM tells you whether the business is worth the time to investigate. That's its job. The due diligence process tells you whether to buy.
Where the CIM fits in the acquisition process
The CIM arrives early. You've identified the business through a broker, marketplace, or proprietary outreach. You've signed the NDA. Now you're deciding whether to proceed.
If the CIM passes your initial screens, you submit a list of clarifying questions to the broker. Those questions sharpen your thesis and signal that you're a serious buyer. Next comes a management meeting or business tour. Then an Indication of Interest (IOI), a non-binding preliminary offer with a proposed valuation range and deal structure.
The IOI leads to a Letter of Intent (LOI). The LOI locks in price, structure, exclusivity period, and key terms. Only after the LOI is signed does formal due diligence begin.
For operators new to the acquisition process, review the acquisition due diligence checklist before your first management call. Know what you're looking for before you sit across from the seller.
The operator's read
At Patriot Growth Capital, we see CIMs across multiple sectors and transaction sizes. The ones that deserve serious time share a few things: financial trends that hold up across multiple years, a management layer that doesn't collapse when the founder walks out, and customer relationships documented well enough to survive ownership transition.
The ones that don't? They stack add-backs. They tell you the market is growing without showing you their piece of it. They list the owner in every critical role. They're silent on customer concentration.
You can't fix a bad CIM in diligence. You can only confirm what you already suspected. Discipline starts at the document stage, not the closing table.
Frequently Asked Questions
What is the difference between a CIM and a teaser in business acquisition?
A teaser is a one-to-three page anonymous document distributed before NDA signing. It describes the business at a high level without revealing the company name. The CIM is the full document, shared only after NDA execution, and includes detailed financials, customer data, management bios, and the complete investment thesis.
Who prepares the confidential information memorandum in an M&A deal?
The seller's M&A advisor or business broker prepares the CIM. They interview the owner, gather financial statements, compile operational data, and package everything into a document designed to generate buyer interest. In larger transactions, the investment banking team leads preparation with multiple revisions over several weeks.
What should a buyer focus on first when reviewing a CIM?
Start with the financial summary, not the executive summary. Review three to five years of revenue trends, EBITDA or SDE, and gross margins. Then examine the customer section for concentration risk. Read the risk factors section before the growth story. The executive summary is marketing. The financials and risk disclosures are closer to fact.
Does a CIM guarantee the accuracy of the information provided?
No. A CIM is a marketing document prepared by the sell side. Errors, selective presentation, and optimistic add-backs are common. Nothing in a CIM should be accepted without verification against source documents: tax returns, bank statements, contracts, and customer data. Formal due diligence is the verification step.
