Buyer NDA Before Due Diligence: When Liquidated Damages Belong in the Draft

By Adv. Alex Blumin · Updated: 24 Oct 2026 (Asia/Jerusalem)

The mistake does not start when someone forwards a deck. It starts when you open a data room to a prospective buyer without a written confidentiality agreement, or with a generic NDA that never says who is bound and what happens if the deal dies.

The mid-market pattern in Israel looks familiar: early interest, a “we’re just looking,” a shared Drive folder, and later, after talks stall, the same information shows up in another context. Not always as a blunt leak. Often as residual use: insight into customers, margins, supplier dependence, IP structure. Without paper, it is hard to say what was allowed.

This post is not an NDA encyclopedia. It is about one M&A trap: opening diligence to a buyer without a confidentiality frame built for the deal, and when a liquidated-damages clause actually helps the draft instead of just sounding tough. No names. No promised outcomes. Just what you see when the room opens too early.

Opening the data room without a buyer NDA

There is a difference between an early conversation around an anonymized teaser and access to customer lists, contracts, code, payroll, or internal forecasts. The moment you hand over material that identifies the business, you are no longer “gauging interest.” You are transferring sensitive information to a party that may remain a competitor, a supplier, or someone else’s buyer.

In practice, the buyer-side NDA should be in place before broad access, not after files are already downloaded. If material already went out without paper, stop widening access until there is a signature, and document what left. That does not replace an agreement; it limits damage.

One more practical point: an LOI stamped “non-binding” does not replace a confidentiality agreement. Confidentiality can, and usually should, bind expressly even while price and structure stay open. I covered the LOI trap separately: when “non-binding” still binds.

When liquidated damages help, and when they are noise

A liquidated-damages clause in an NDA sets a pre-agreed amount for defined breaches of confidentiality. It is not a criminal fine and not a substitute for every remedy. The practical question is when it helps negotiation and deterrence, and when it only slows the signature.

When it tends to help:

• When harm from a leak is hard to quantify in real time (customer book, pricing, roadmap) and the parties want a clear number up front instead of a later fight over “what the secret was worth.”
• When there is a concrete risk of misuse if the deal falls (buyer who is also a competitor, or a player in the same vertical).
• When the amount is reasonable relative to the exposure, not an astronomical figure meant only to scare, and not a token that deters no one.

When it can hurt the draft:

• When the number is too high for the deal, the other side refuses to sign, or demands exceptions that hollow out the clause.
• When it tries to cover every possible breach instead of defined behaviors (transfer to a third party, use outside the evaluation, approaching your customers off the information).
• When you forget that under Israeli law a stipulated sum may still be tested for reasonableness / punitive character, an extreme figure is not automatically enforced as written.

Working rule: liquidated damages are a tool for clear breach categories, not a substitute for defining confidential information, limiting use, and naming who is bound. Without those, the number on the page does not do the work.

Who is bound, not only the entity that signed

A prospective buyer almost never reviews alone. There are advisors, accountants, bankers, co-investors, and sometimes affiliates or controlling shareholders. If the NDA binds only the signing entity, and the information flows to ten people around it with no frame, you have a structural hole, not a misunderstanding.

Check before you open the room:

1. Definition of “representatives”, who may receive information (professional advisors with a need to know), and who must sign themselves or be expressly covered.
2. Affiliates, whether they come in automatically, and only for the evaluation, or whether the file can leak across a whole group.
3. Financing sources / deal partners, disclosure to a potential lender needs a frame; otherwise “checking ability to pay” becomes a handoff to someone who never signed.
4. Non-solicit / commercial-use limits, a useful NDA restricts not only copying, but using the information to compete, solicit employees or customers, or build a counter-offer off what was seen in diligence.
5. Return / deletion, what happens to files, notes, and advisor copies when the process ends.

If the other side says “we’re a large company; everyone is under our internal confidentiality policy”, that is not a substitute for a contractual commitment to you. An internal policy does not give you a direct remedy.

Residual use after the deal dies

The deal did not close. The LOI expired. The data room shut. May the buyer “remember” what they saw and build strategy on it? That is the fight over residual information, what stays in someone’s head after a legitimate look.

Over-broad residual language effectively says: anything that remains in unaided memory may be used. For a tech or services seller with concentrated customers, that can hollow out confidentiality exactly where it hurts, one-customer dependence, gross margin, weak contracts.

What is practical:

• Define purpose of use sharply, only to evaluate the proposed transaction, not to build a competing product and not to negotiate with your customers.
• Separate information the buyer already knew / public / independently developed from what was disclosed in the room.
• Set a reasonable confidentiality period after the review ends, not an empty forever, and not a window too short for commercially sensitive material.
• Tie the NDA to the next stage: if you move to an SPA, some disclosures migrate into reps and the disclosure schedule, I wrote about that friction in private-company share transfers.

If a room already opened without a clear frame, put a buyer NDA in place retroactive to first disclosure, stop further expansion, and document who got what. No theatrics. Close the hole.

Takeaway

Opening diligence without a buyer NDA, or with an NDA that never defines who is bound, for what purpose, and what happens after the deal dies, is handing a competitor information dressed up as “just looking.” Liquidated damages can help when harm is hard to quantify and the amount is reasonable; they do not replace definitions, use limits, and coverage for representatives. Before you open the room, paper that fits the deal, not a generic template signed in a rush.

CTA: Before you open a data room or sign a prospective-buyer NDA, initial conversation · transactions & M&A · Adv. Alex Blumin · Updated: 24 Oct 2026

Related: LOI, when “non-binding” still binds · Private-company share transfer, where deals stall

FAQ (EN)

Do you need an NDA before due diligence on an acquisition? Not every first call needs a full NDA, but once there is access to identifying information, customers, contracts, internal financials, IP, a prospective-buyer confidentiality agreement should come before broad access, not after the download.

When does a liquidated-damages clause belong in a buyer NDA? When breach harm is hard to quantify up front, when there is a concrete misuse risk if the deal falls, and when the amount is reasonable relative to the exposure. An extreme figure can stall signing or crack on enforcement; a token amount does not deter.

Who should be bound, only the buying company? Usually professional representatives with a need to know as well, and sometimes affiliates and financing sources, inside a defined frame. If only the signing entity is bound and information flows to a wide circle without coverage, you have a structural gap.

What happens to the information if the deal does not close? Confidentiality and use limits should continue for a defined period. Watch over-broad residual clauses that allow use of everything “left in memory.” Define purpose, return/deletion, and a bar on competitive use based on what was seen in the room.

Does an LOI with a confidentiality clause replace a standalone NDA? Sometimes confidentiality sits in the LOI as a binding clause. In practice, before a wide data room a dedicated confidentiality document (or a clear annex) that defines information, representatives, use, term, and remedies is safer, especially if the LOI itself stays non-binding on price and structure.