Closing a consulting firm: records retention and client file duties

Who owns what in a consulting firm's files#

A consulting firm's files fall into four ownership groups, and the group decides what happens to each file at closing. Engagement agreements usually draw these lines, though older or informal engagements may leave them vague.

The fourth group is the largest and the least reviewed. It is also where most of the firm's own knowledge lives, which matters for the archive plan and for any later licensing decision.

• 1Client-provided materials: data, documents and system access the client supplied. These generally remain the client's.
• 2Deliverables: reports, models and presentations produced for the client, often assigned to the client in the statement of work.
• 3Firm pre-existing materials: methods, frameworks, templates and tools the firm brought to the engagement and usually retained.
• 4Internal records: proposals, pricing, staffing and resource plans, time entries, project reviews and playbooks, owned by the firm but often containing client facts.

The obligations table#

The obligations table lists each record type with the source of the duty, what to check and the default action at closing. Retention periods vary by jurisdiction and record, so confirm each one with your accountant and counsel rather than relying on a generic chart.

Fill in the table from the firm's own contracts, not from memory. A single engagement with an unusual data processing addendum can change the default action for that client's files.

How to handle client return-or-destroy clauses#

Client return-or-destroy clauses come first because they are contractual promises that often survive the end of the engagement and the closing of the firm. Work through them engagement by engagement, starting with clients that supplied personal or regulated data.

Silence from a client is common. Decide in advance, with counsel, how long to wait and what default the contract supports, and keep a record of every attempt to reach the client.

• 1Pull every MSA, NDA and statement of work, including expired ones.
• 2List each clause that requires return, destruction or certification, and any exception for archival or legal copies.
• 3Write to each client offering return of its materials and asking for written instructions.
• 4Return or destroy as instructed, including copies in backups where the clause reaches them.
• 5Issue destruction certificates where required and keep a log of every action.
• 6Note any materials kept under an exception, and the reason.

Where client files hide#

Client files hide well beyond the official document system, so a records sweep must cover every place consultants actually worked. Former staff often hold the only copies of late-stage drafts and client exports.

Check SharePoint, Google Drive and Box; Teams and Slack channels; email attachments; project tools such as Asana or Smartsheet; the CRM and the professional services automation system, such as Kantata or Deltek; and the laptops and phones consultants used for client work. Offboarding should end with a written confirmation from each consultant that client materials were returned or deleted.

Building the archive plan#

The archive plan names who holds the records after dissolution, where they sit, who can access them and when each set is destroyed. Without a named custodian, records drift onto a former partner's personal drive with no index and no end date.

A workable plan has an index by record type and client, a keep-until date for each set taken from a retention schedule, encrypted storage in an account the custodian controls, an access log, and a budget for storage and eventual destruction. It should also say how former clients or authorities can request records once the firm is gone.

What the firm may keep and potentially license#

The records a closing firm may keep and potentially license are its internal records of how engagements were won, staffed, run and reviewed, once client identities and confidential client facts are removed. Client-provided data and client-owned deliverables are not part of that set.

Those internal records describe judgment at work: why a proposal was scoped a certain way, how consultants were matched to projects, what a project review concluded and which playbook steps changed afterward. That kind of decision trail is what AI developers look for in professional services records.

Confidentiality still binds the firm. A project review that names the client, quotes its numbers or describes its strategy carries the client's confidential information even though the firm wrote it, so preparation must remove those details or the record stays out.

Illustrative: a supply chain consulting firm closes after partner retirements#

Illustrative: a fictional supply chain consulting firm with more than fifty consultants and staff at its peak closes when its founding partners retire and no successor emerges. Its records sit in Salesforce, Kantata, SharePoint, Microsoft Teams and consultants' laptops.

The wind-down officer builds the obligations table from the engagement files. Clients with return-or-destroy clauses receive their data back along with destruction certificates for remaining copies. Deliverables are kept only where statements of work allow an archival copy, and time and billing records go onto the accountant's retention schedule.

The firm's proposals, staffing plans, project reviews and playbooks remain. Rather than store them indefinitely, the partners approve a metadata-only assessment of whether those internal records, with client names and confidential client facts removed, could be licensed. Anything that cannot be cleared is deleted on schedule.

How SourceX approaches closing firms#

SourceX approaches a closing firm's internal records through the SourceX five-step transaction, starting with a fit check on metadata alone. Client-provided data and client-owned deliverables are outside scope; the focus is the firm's own record of how work was scoped, staffed and reviewed.

Where a package proceeds, client identities and confidential client facts are removed during preparation, and the SourceX Evidence Packet records the rights basis and who approved the release. The firm or its successor keeps ownership.