A pending sale is one of the easiest facts to accidentally leak, and a customer conversation run at the wrong time or without the right consent can do more damage to a deal than almost any other diligence step. Getting the sequencing right matters as much as asking the right questions.
Key takeaways
Talking to a handful of a target's actual customers is one of the most direct ways to test whether a pipeline number or a revenue-concentration claim holds up. It is also one of the fastest ways to blow up the deal it's meant to support, if the sale becomes public before either side wants it to be. The two goals — get real evidence, keep the process contained — have to be planned together, not treated as a scheduling detail.
A business sale process runs on layered disclosure by design, and customer access sits at the far end of that sequence. “Information is released in layers as a buyer proves their seriousness — general details before an NDA, more detail after one, and full financials and records only during formal due diligence,” and that same source notes that “even inside the seller's own organization, only a small circle — the owner, maybe a controller or one or two trusted managers — typically knows a sale is being explored.” A buyer asking to speak with customers before an NDA is signed, or before the seller has decided how the conversation will be framed, is asking the seller to move faster than its own internal disclosure process has gone — a request that is reasonable in substance and badly timed in practice.
A premature or clumsy leak doesn't just embarrass the seller — it changes the deal the buyer is actually buying. Confidentiality failures can affect employees, customers, suppliers and lenders, and competitors, and the buyer's own leverage moves with it: a buyer may “reassess price or walk away if they sense the target business is destabilizing.” A reference call run without the seller's coordination, that spooks a key customer into asking around, can cost the buyer more in destabilized pipeline than it gains in verified information — which is exactly the kind of trade-off a pipeline diligence exercise is supposed to avoid, not create.
Consent problems run in both directions on a customer call — the customer's consent to talk, and the underlying contract's consent-to-assign requirements. On the contract side, a contract “is a bundle of rights and obligations between specific parties” that does not automatically follow an asset sale, so a reference call is also often the first practical moment to learn whether a customer even knows their contract has an assignment clause that will need their sign-off. On the personal-information side, PIPEDA's consent principles still apply to whatever customer data changes hands in the process: “consent must be informed: explain what you're collecting, why, and who sees it,” it “must be voluntary,” and “customers can withdraw consent at any time… and you must honour that request.” Handing a buyer's diligence team a customer list, or letting them view account-level data in a system, is a disclosure decision with its own consent logic — separate from, and in addition to, the commercial question of whether the customer relationship is even worth the call.
Direct contact is not the only route to the same evidence, and it is often the wrong first move with a customer the seller considers fragile. A deal report's own standard contents already include much of what a reference call is trying to confirm indirectly — a customer and revenue concentration breakdown, and whether that revenue is recurring or one-off and correspondence covering contract renewals, complaints and payment history, all reviewable inside a controlled data room under the same NDA that would otherwise govern a direct call. Where the underlying question is assignability rather than relationship health, reading the actual contract language answers it without a call at all. The sequencing question, in practice, is which few customers are worth the seller's coordination and the residual leak risk, and which questions a document review can answer just as reliably without touching the relationship.
A workable sequence for customer contact
Wait for the seller's own coordination — who is told, in what order, and using what framing — rather than setting an independent schedule.
Confirm the NDA is signed and covers the specific use of any customer information shared.
Ask the seller which customers know the business may be sold, and start there rather than with a customer who doesn't.
Treat any customer data reviewed as subject to PIPEDA consent principles, not just as an internal spreadsheet.
A buyer wants to verify that a target's top five customer contracts are assignable before signing a binding offer. Rather than calling the customers directly, the deal team asks the seller to make the introductions, sequenced over two weeks starting with the customer the seller is most confident will react well. Each call is framed by the seller as exploring a partnership, with the buyer introduced by name only after the customer confirms interest in continuing. Two of the five calls surface a contract with a change-of-control clause the seller hadn't flagged as an issue; none of the five customers learn anything they weren't meant to before the seller was ready to tell them. The information gained — assignability risk on two of five key contracts — is the same information a buyer-led, unsequenced call might have produced, without the risk of the seller's own organization finding out about the sale from a customer instead of from the owner.
Generally not directly, and rarely without the seller's active coordination. Confidentiality in a business sale is staged — general details before an NDA, specifics after one — and customer contact sits at the far end of that sequence because a leak at this stage risks the customer relationship the buyer is trying to protect.
Usually not, beyond a small circle. Even inside the seller's organization, typically only the owner and one or two trusted managers know a sale is being explored, which is the same discretion a buyer's diligence team needs to match when planning any customer contact.
Its general consent principles — informed, voluntary, and revocable — apply to any personal information collected or shared, and a business sale doesn't create a blanket exemption from them. Treat any customer data reviewed during diligence with the same consent discipline as any other collection or use of that data.
Nobody publishes Canadian transaction data, so every valuation in this country quotes an American benchmark. We are building the Canadian one — multiples, asking-to-sale spreads and days on market, by sector and by city. Leave an email and you will see it first.
No pitch, no listings. One email when the first report lands.
