Private equity exit readiness checklist, including the records section most lists skip

What an exit readiness checklist is for

An exit readiness checklist is a pre-launch audit. It finds the gaps a buyer's diligence team would find, early enough to fix them on the sponsor's timetable rather than the buyer's. The version below has eight sections, and section 7 is the one standard lists leave out: a records and archives review that asks what operational history the company holds, without anyone opening, copying or sharing a single record.

That section earns its place for two reasons. First, a diligence team can ask what data a business owns and whether it is allowed to use it, and a written answer beats an improvised one. Second, a company with years of connected records may be able to license them to AI developers for one lump-sum payment, which is a decision the sponsor wants made before the teaser goes out, not halfway through confirmatory diligence.

Run it a year or two before the target launch, with a named owner per section and every item marked Ready, In progress or Gap.

Who owns each section

The checklist

1. Financial reporting and quality of earnings

• Audited or reviewed financial statements for every period a buyer will underwrite, with no open audit findings
• A documented monthly close, with management accounts that tie to the general ledger
• Each EBITDA adjustment listed separately, with support a sell-side quality of earnings provider can test
• Net working capital by month, so the peg discussion starts from data
• Revenue by customer, product and cohort reconciled to reported revenue
• One-time items, including any license fees or settlements, kept apart from run-rate earnings

2. Equity story and value creation evidence

• A scorecard of the value creation plan: what was promised at entry, what was delivered, and the KPI that proves it
• KPI definitions frozen and used the same way in board packs, the model and the CIM
• Forward initiatives the next owner can underwrite on its own assumptions
• A plain account of AI: what runs in production, what is planned, and which revenue lines could be exposed

3. Commercial and customers

• Customer contracts in one repository, with assignment and change-of-control clauses flagged
• CRM pipeline and win-loss history clean enough to export without manual repair
• Concentration, churn and pricing history explained before a buyer calculates them

4. People and management

• A management team that can present and answer without the sponsor in the room
• Named successors for the CEO and CFO roles
• The incentive plan waterfall modeled at several exit values, with retention arrangements agreed
• Contractor classification reviewed

5. Legal and corporate housekeeping

• Minute books, cap table and subsidiary chart up to date
• IP assignment agreements signed by the employees and contractors who built product, code or content
• Litigation, claims and permits summarized
• Every version of the privacy policy and customer terms archived with its effective dates

6. Technology, security and privacy

• A system architecture diagram and a full software list with owners and renewal dates
• Security policies, incident history and the latest penetration test
• A personal data map: what is collected, where it sits and on what basis

7. Records and archives (the section most checklists skip)

Metadata only: system names, dates and owners. Nobody exports or shares content to complete it.

• Every system that holds operational records, listed by name: email, Slack or Teams, shared drives, CRM, ERP and finance, the support desk, engineering and project tools, call recording, HR
• The earliest year of retained history in each system, and whether archives of retired systems still exist
• The person who can run a full export of each system
• Retention settings, scheduled deletions and tool cancellations planned before closing, with exports taken first
• Ownership screened: records the company created for itself versus material it holds for clients, and contractor-made material with no written assignment
• Customer and employee promises that limit how records may be used
• Any existing license or data-sharing agreement over the same records, with its scope, term and exclusivity
• A decision on a data license: pursue before launch, leave to the next owner, or rule out

8. Data room and process

Vendor due diligence means reports the seller commissions before launch, so buyers can read findings instead of building them from scratch.

• A data room index that mirrors these eight sections
• Draft disclosure schedules, including any data license or data-sharing agreement
• Vendor due diligence scope agreed with the sell-side adviser, covering the areas where this company's likely buyers will probe hardest
• Vendor due diligence reports commissioned where they shorten the buyer's work

Two records checks that need counsel

Ownership and privacy are legal questions, so route them to counsel early. On ownership, federal copyright law gives the employer the rights in a work made for hire and lets an owner transfer or license individual rights separately (17 U.S.C. section 201); material written by outside contractors or held for clients may fall outside that. On privacy, FTC staff wrote in January 2024 that a company's promises not to use customer data for undisclosed purposes, such as training models, are enforceable whether they appear in a privacy policy, terms of service or marketing (FTC staff post). That post is staff guidance, not a rule.

This is general information, not legal, tax or financial advice. Confirm with your own counsel before acting.

How to read the results of section 7

The who qualifies page sets out the full company baseline, including the authorized sponsor requirement.

Why the license decision belongs before launch

Data licenses for AI training are typically exclusive for an agreed term, so a license signed mid-process becomes a new disclosure item, a fresh question in every management meeting and a possible point in the purchase agreement. Settled beforehand, it is a closed item: either the company has been paid, or the inventory simply sits in the data room as evidence.

The guide to how buyers assess AI readiness at exit shows how a documented records asset supports the equity story, and the breakdown of exit valuation levers by type explains why license proceeds stay outside run-rate EBITDA. Platforms built by acquisition need one extra pass: in professional services, the firm's own operating records and its clients' files often share systems, and the page on accounting firm roll-ups shows how to separate them.

Red flags that end the records review

• Archives were purged under a retention policy nobody revisited after the acquisition.
• The valuable records are mostly clients' material, as at outsourcers and agencies, and clients have not consented.
• The data is mainly consumer personal information or patient health records.
• A receiver, trustee or other third party controls the company's assets.
• Nobody inside the company can produce an export without the original vendor.
• Records were generated with AI tools to have something to sell.

Next step

Give section 7 to the CFO of one portfolio company this quarter; it fits on a single page and touches no confidential content. If the answers look promising, register as a partner and introduce the company, or ask the CEO to apply at sourcex.si/apply through your referral link. The page for private equity operating partners explains how the program works across a whole portfolio.

Partners earn 25% of the eligible platform fees SourceX actually collects from the referred company's licensing deals, capped at $100,000 per referred company. Rewards become payable only after the buyer pays and SourceX receives its fee; an introduction, meeting or signed agreement alone does not trigger payment, and no reward is guaranteed. Operating partners should check fund documents and their firm's conflicts policy before accepting a reward linked to a portfolio company; the guide to management fee offsets and referral income covers the question.