Systems and records
Exit prep: documenting your systems and data history for buyers
By SourceX Editorial · Updated
Short answer
Exit preparation for systems means giving buyers a data room folder that answers four questions before they ask: which systems hold the company's records, how far back each history really goes, how the data can be exported, and what rights limit its use. Document migrations and gaps plainly; an explained gap costs less than a discovered one.
Key takeaways
- Buyers judge records by accessible history and export proof, not by how long the company has existed.
- A history map of every migration, retired system and legacy archive answers the questions that stall IT diligence.
- Check deletion schedules and retention settings before any cleanup, because some help desk deletions cannot be reversed.
- Vendor terms, customer contract data clauses and existing data licenses belong in the same folder as the system register.
- Start the folder before a banker is engaged so gaps can be fixed rather than only disclosed.
What belongs in the systems section of a data room?#
The systems section of a data room should hold five things: a register of every system that stores company records, a history map showing how those records moved over time, proof that each history can be exported, the vendor terms that govern each system, and a rights file for the data itself. Together they let a buyer judge the records without logging in to anything.
Most sell-side data rooms already cover IT security, software licenses and infrastructure cost. What they usually miss is history. A buyer planning integrations, an AI roadmap or a data license wants to know whether years of tickets, deals or job records still exist in usable form, and that question rarely has an owner inside the company.
| Folder | What goes in it | Buyer question it answers |
|---|---|---|
| System register | Every system holding records, with owner, plan, admins and renewal date | What do we inherit, and who controls it? |
| History map | Migrations, retired systems, archives and known gaps, by date | How far back do the records really go? |
| Export evidence | Export method, format, field list and a dated test export log | Can we get the data out when we need it? |
| Vendor terms | Order forms, terms of service, API terms and data-use clauses | What does each vendor allow or restrict? |
| Rights file | Customer contract data clauses, privacy notices, employee policies and data licenses | Can the records be used, migrated or licensed? |
How do you build a system register buyers will trust?#
A trustworthy system register lists every system that holds records, not only the ones IT pays for. Shadow tools matter: a sales team's old HubSpot portal, a shared drive of estimates, or a retired on-premise ERP still running on a server nobody wants to switch off.
Build the register from three sources and reconcile them: accounts payable for paid subscriptions, single sign-on or identity logs for active apps, and short interviews with department heads for everything else. Record unknowns as unknown. A buyer forgives a blank field more readily than a confident answer that diligence later disproves.
- System name, vendor and product edition or plan tier.
- Business owner and every current administrator, listed by role rather than personal email.
- Record types held, such as tickets, deals, jobs, invoices, issues or drawings.
- Earliest record date still retrievable, checked inside the system rather than remembered.
- Integrations that copy data in or out, and which system is the system of record.
- Contract term, renewal date, notice period and what happens to data on cancellation.
- Export route: built-in export, API, vendor service request or database backup.
- 01Your work records
- 02Personal details removed
- 03You approve the release
- 04Licensed to AI developers
Mapping data history: migrations, gaps and legacy archives#
A history map is a timeline of where each record family lived and when it moved. It shows, for example, that support tickets sat in one help desk until a migration, that only open tickets were carried over, and that the earlier closed tickets survive as a JSON archive on a file server.
Write down what each migration dropped. Common losses include attachments, internal notes, field history, call recordings and the links between records, such as a ticket's link to the engineering issue that fixed it. HubSpot is a common case. Its knowledge base says a record export carries each record's current property values and its associations, while calls, notes and other activities come out through a different method. An archive made only from record exports can therefore lack the conversations behind the deals.
Then check what is deleting history today. Zendesk admins can set up ticket deletion schedules that remove archived tickets once they reach a chosen age, and Zendesk cannot restore tickets deleted this way. Settings like that are easy to forget and painful to discover in the middle of diligence.
Which data rights questions will buyers ask?#
Buyers ask data rights questions because records the company cannot use freely are worth less to them. The rights file should let the buyer's counsel answer each question by opening a document instead of sending another information request.
Vendor terms deserve a careful read because they change. When HubSpot updated its Developer Terms, its changelog said they limit AI and machine learning training on data pulled through its APIs, apart from legitimate single-customer uses, and that customer data belongs to the customer rather than to HubSpot or app developers. Counsel on the other side will want to see that the company read the version that applies to it.
| Question | Where the answer lives | What to include |
|---|---|---|
| Do customer contracts limit how their data is used? | MSAs, DPAs, order forms and online customer terms | A summary of data-use, confidentiality and deletion clauses by customer tier |
| What were customers and users told? | Privacy notices and in-product terms | Each version with the period it covered |
| Do vendors restrict data or API use? | Vendor, API and developer terms | Clauses on export, AI training and third-party access |
| Are any records already licensed or shared? | Data licenses, data-sharing agreements and partner integrations | A register with scope, term, exclusivity and termination rights |
| Are any records on legal hold? | Litigation files and hold notices | Systems covered and whether deletion is suspended |
Pre-exit IT cleanup that helps rather than hurts#
Pre-exit IT cleanup should make records easier to verify, not smaller. The instinct to delete old data before a sale can destroy history a buyer values, and it can cause real problems if any records are subject to a legal hold, a pending dispute or a customer contract that requires them to be kept.
- Do move admin rights from departed employees to role-based accounts the company controls.
- Do run and log a test export from every core system, noting the format and what came out.
- Do document retention and deletion settings as they stand, with screenshots and dates.
- Do consolidate scattered archives into one documented location with a simple index.
- Do not shorten retention periods or run bulk deletions until counsel has reviewed holds and contracts.
- Do not cancel a legacy subscription until its history has been exported and checked.
- Do not describe history as complete when a migration dropped fields or attachments.
Illustrative: a vertical software company prepares its systems folder#
Illustrative: a fictional maker of scheduling software for landscaping contractors is preparing for a sale run by its private equity owner. Its records sit in Jira, GitHub, Zendesk and HubSpot, plus a Salesforce org the company left during an earlier CRM migration.
The operating partner asks the CTO to build the history map first. It shows that the Salesforce org still holds early deal history on a single remaining admin license, that the help desk migration carried closed tickets but not their attachments, and that an admin had switched on a Zendesk deletion schedule for archived tickets during a cost review. Counsel reviews the schedule and the company pauses it while the sale process runs.
The result is a systems folder that answers the buyer's first round of IT questions without follow-up calls. The rights file shows no existing data licenses and no exclusivity, and the history map explains the attachment gap in a short note instead of leaving it to be found.
How SourceX connects to exit preparation#
SourceX helps companies understand and license their operational records, and the documentation it relies on overlaps with a good systems folder. Each package that moves through the SourceX five-step transaction, Supply, Rights, Preparation, Approval and Delivery, is documented in a SourceX Evidence Packet covering provenance, licensing rights, permitted use, the privacy record and release authorization.
For a company preparing for sale, that means any data license signed before exit is recorded in the terms a buyer's counsel will ask about. The initial fit check uses metadata only, such as system names, years of history and record types, so nothing is shared while the owners decide whether licensing belongs in the exit plan at all.
Frequently asked questions
When should a company start building the systems folder?
Start before a banker is engaged or a process is announced. History maps and rights files take time because they depend on people who remember old migrations and on contract reviews. Starting early also leaves room to fix problems, such as moving admin access or recovering an archive, rather than only disclosing them.
Should raw data samples go in the data room?
Usually not in early rounds. Field lists, record counts by year and a dated export log show that history exists without exposing customer or employee information. If a buyer needs samples later, counsel can arrange restricted access or redacted extracts under the confidentiality agreement.
What if a past migration lost part of our history?
Disclose it plainly in the history map: what was lost, when, why, and whether any partial copy survives. Buyers expect gaps in older companies. A documented gap with a known boundary is far easier to plan around than an assumption of completeness that diligence later contradicts.
Does licensing data before a sale complicate the exit?
It can if the license is exclusive, long or hard to terminate, because those terms travel with the company. A non-exclusive, time-limited license with clear permitted use and deletion terms is easier for an acquirer to accept. Record every license in the rights file with its scope and termination rights.
Who should own the systems folder?
Give it one accountable owner, usually the CTO, COO or head of IT, with counsel owning the rights file. In a portfolio company, the operating partner often sets the template and deadline so every company presents its systems the same way, which also makes companies easier to compare.
Sources
- HubSpot's record export includes current property values and associations, while activities such as calls and notes must be exported with a separate method. Source
- Zendesk admins can create ticket deletion schedules that delete archived tickets after a set period, and deleted tickets cannot be restored. Source
- HubSpot's updated Developer Terms restrict using data accessed through HubSpot APIs to train, fine-tune or improve AI models, with a carve-out for legitimate single-customer use cases, and state that customer data belongs to the customer. Source
Related resources
- DataSales call transcripts
- QuestionDo AI companies buy private business data?
- QuestionPublic data vs proprietary data: what's the difference for AI?
- InsightWhat if the buyer misuses my data?
- InsightDiligence questions buyers ask about your existing data licenses
- InsightIf AI training is fair use, why do buyers still license data?
See if your company qualifies
A short company assessment. No data uploads are needed.