Skip to content

Systems and records

Exit prep: documenting your systems and data history for buyers

By SourceX Editorial · Updated

Short answer

Exit preparation for systems means giving buyers a data room folder that answers four questions before they ask: which systems hold the company's records, how far back each history really goes, how the data can be exported, and what rights limit its use. Document migrations and gaps plainly; an explained gap costs less than a discovered one.

Key takeaways

  • Buyers judge records by accessible history and export proof, not by how long the company has existed.
  • A history map of every migration, retired system and legacy archive answers the questions that stall IT diligence.
  • Check deletion schedules and retention settings before any cleanup, because some help desk deletions cannot be reversed.
  • Vendor terms, customer contract data clauses and existing data licenses belong in the same folder as the system register.
  • Start the folder before a banker is engaged so gaps can be fixed rather than only disclosed.

What belongs in the systems section of a data room?#

The systems section of a data room should hold five things: a register of every system that stores company records, a history map showing how those records moved over time, proof that each history can be exported, the vendor terms that govern each system, and a rights file for the data itself. Together they let a buyer judge the records without logging in to anything.

Most sell-side data rooms already cover IT security, software licenses and infrastructure cost. What they usually miss is history. A buyer planning integrations, an AI roadmap or a data license wants to know whether years of tickets, deals or job records still exist in usable form, and that question rarely has an owner inside the company.

What belongs in the systems section of a data room?
FolderWhat goes in itBuyer question it answers
System registerEvery system holding records, with owner, plan, admins and renewal dateWhat do we inherit, and who controls it?
History mapMigrations, retired systems, archives and known gaps, by dateHow far back do the records really go?
Export evidenceExport method, format, field list and a dated test export logCan we get the data out when we need it?
Vendor termsOrder forms, terms of service, API terms and data-use clausesWhat does each vendor allow or restrict?
Rights fileCustomer contract data clauses, privacy notices, employee policies and data licensesCan the records be used, migrated or licensed?

How do you build a system register buyers will trust?#

A trustworthy system register lists every system that holds records, not only the ones IT pays for. Shadow tools matter: a sales team's old HubSpot portal, a shared drive of estimates, or a retired on-premise ERP still running on a server nobody wants to switch off.

Build the register from three sources and reconcile them: accounts payable for paid subscriptions, single sign-on or identity logs for active apps, and short interviews with department heads for everything else. Record unknowns as unknown. A buyer forgives a blank field more readily than a confident answer that diligence later disproves.

  • System name, vendor and product edition or plan tier.
  • Business owner and every current administrator, listed by role rather than personal email.
  • Record types held, such as tickets, deals, jobs, invoices, issues or drawings.
  • Earliest record date still retrievable, checked inside the system rather than remembered.
  • Integrations that copy data in or out, and which system is the system of record.
  • Contract term, renewal date, notice period and what happens to data on cancellation.
  • Export route: built-in export, API, vendor service request or database backup.
  1. 01Your work records
  2. 02Personal details removed
  3. 03You approve the release
  4. 04Licensed to AI developers
How it works with SourceX: Your work records → Personal details removed → You approve the release → Licensed to AI developers.Illustrative

Mapping data history: migrations, gaps and legacy archives#

A history map is a timeline of where each record family lived and when it moved. It shows, for example, that support tickets sat in one help desk until a migration, that only open tickets were carried over, and that the earlier closed tickets survive as a JSON archive on a file server.

Write down what each migration dropped. Common losses include attachments, internal notes, field history, call recordings and the links between records, such as a ticket's link to the engineering issue that fixed it. HubSpot is a common case. Its knowledge base says a record export carries each record's current property values and its associations, while calls, notes and other activities come out through a different method. An archive made only from record exports can therefore lack the conversations behind the deals.

Then check what is deleting history today. Zendesk admins can set up ticket deletion schedules that remove archived tickets once they reach a chosen age, and Zendesk cannot restore tickets deleted this way. Settings like that are easy to forget and painful to discover in the middle of diligence.

Which data rights questions will buyers ask?#

Buyers ask data rights questions because records the company cannot use freely are worth less to them. The rights file should let the buyer's counsel answer each question by opening a document instead of sending another information request.

Vendor terms deserve a careful read because they change. When HubSpot updated its Developer Terms, its changelog said they limit AI and machine learning training on data pulled through its APIs, apart from legitimate single-customer uses, and that customer data belongs to the customer rather than to HubSpot or app developers. Counsel on the other side will want to see that the company read the version that applies to it.

Which data rights questions will buyers ask?
QuestionWhere the answer livesWhat to include
Do customer contracts limit how their data is used?MSAs, DPAs, order forms and online customer termsA summary of data-use, confidentiality and deletion clauses by customer tier
What were customers and users told?Privacy notices and in-product termsEach version with the period it covered
Do vendors restrict data or API use?Vendor, API and developer termsClauses on export, AI training and third-party access
Are any records already licensed or shared?Data licenses, data-sharing agreements and partner integrationsA register with scope, term, exclusivity and termination rights
Are any records on legal hold?Litigation files and hold noticesSystems covered and whether deletion is suspended

Pre-exit IT cleanup that helps rather than hurts#

Pre-exit IT cleanup should make records easier to verify, not smaller. The instinct to delete old data before a sale can destroy history a buyer values, and it can cause real problems if any records are subject to a legal hold, a pending dispute or a customer contract that requires them to be kept.

  • Do move admin rights from departed employees to role-based accounts the company controls.
  • Do run and log a test export from every core system, noting the format and what came out.
  • Do document retention and deletion settings as they stand, with screenshots and dates.
  • Do consolidate scattered archives into one documented location with a simple index.
  • Do not shorten retention periods or run bulk deletions until counsel has reviewed holds and contracts.
  • Do not cancel a legacy subscription until its history has been exported and checked.
  • Do not describe history as complete when a migration dropped fields or attachments.

Illustrative: a vertical software company prepares its systems folder#

Illustrative: a fictional maker of scheduling software for landscaping contractors is preparing for a sale run by its private equity owner. Its records sit in Jira, GitHub, Zendesk and HubSpot, plus a Salesforce org the company left during an earlier CRM migration.

The operating partner asks the CTO to build the history map first. It shows that the Salesforce org still holds early deal history on a single remaining admin license, that the help desk migration carried closed tickets but not their attachments, and that an admin had switched on a Zendesk deletion schedule for archived tickets during a cost review. Counsel reviews the schedule and the company pauses it while the sale process runs.

The result is a systems folder that answers the buyer's first round of IT questions without follow-up calls. The rights file shows no existing data licenses and no exclusivity, and the history map explains the attachment gap in a short note instead of leaving it to be found.

How SourceX connects to exit preparation#

SourceX helps companies understand and license their operational records, and the documentation it relies on overlaps with a good systems folder. Each package that moves through the SourceX five-step transaction, Supply, Rights, Preparation, Approval and Delivery, is documented in a SourceX Evidence Packet covering provenance, licensing rights, permitted use, the privacy record and release authorization.

For a company preparing for sale, that means any data license signed before exit is recorded in the terms a buyer's counsel will ask about. The initial fit check uses metadata only, such as system names, years of history and record types, so nothing is shared while the owners decide whether licensing belongs in the exit plan at all.

Frequently asked questions

When should a company start building the systems folder?

Start before a banker is engaged or a process is announced. History maps and rights files take time because they depend on people who remember old migrations and on contract reviews. Starting early also leaves room to fix problems, such as moving admin access or recovering an archive, rather than only disclosing them.

Should raw data samples go in the data room?

Usually not in early rounds. Field lists, record counts by year and a dated export log show that history exists without exposing customer or employee information. If a buyer needs samples later, counsel can arrange restricted access or redacted extracts under the confidentiality agreement.

What if a past migration lost part of our history?

Disclose it plainly in the history map: what was lost, when, why, and whether any partial copy survives. Buyers expect gaps in older companies. A documented gap with a known boundary is far easier to plan around than an assumption of completeness that diligence later contradicts.

Does licensing data before a sale complicate the exit?

It can if the license is exclusive, long or hard to terminate, because those terms travel with the company. A non-exclusive, time-limited license with clear permitted use and deletion terms is easier for an acquirer to accept. Record every license in the rights file with its scope and termination rights.

Who should own the systems folder?

Give it one accountable owner, usually the CTO, COO or head of IT, with counsel owning the rights file. In a portfolio company, the operating partner often sets the template and deadline so every company presents its systems the same way, which also makes companies easier to compare.

Sources

  • HubSpot's record export includes current property values and associations, while activities such as calls and notes must be exported with a separate method. Source
  • Zendesk admins can create ticket deletion schedules that delete archived tickets after a set period, and deleted tickets cannot be restored. Source
  • HubSpot's updated Developer Terms restrict using data accessed through HubSpot APIs to train, fine-tune or improve AI models, with a carve-out for legitimate single-customer use cases, and state that customer data belongs to the customer. Source

Related resources

See if your company qualifies

A short company assessment. No data uploads are needed.

See if your company qualifies