The documents needed to sell a med spa should prove earnings, ownership, provider and clinical continuity, memberships, equipment rights, and the lease. Organize source records with reconciled summaries, a dated index, and controlled access. Keep patient information and sensitive personnel data restricted. A useful data room answers transaction questions rather than merely holding a large file collection.
What makes an evidence room useful to a buyer?
A buyer needs to test assumptions, not admire folder volume. For every major claim in the marketing materials, identify the supporting records, report definition, period, and reviewer. Revenue growth should connect to monthly statements and operating data; transferable equipment should connect to ownership and finance documents.
Use clear filenames and a stable index. Include the document owner, date received, covered period, version, access tier, and open questions. Avoid replacing a file silently when a number changes. Retain the original and explain the correction so the parties can reconstruct what was reviewed.
A document reconciliation explains how source records produce or differ from a reported summary. It is more valuable than an unexplained assertion that two totals are close enough. The reconciliation should identify timing, definitions, adjustments, and remaining differences without concealing the original evidence.
Which financial documents belong in the room?
Prepare monthly profit and loss statements, balance sheets, general ledgers, tax returns, bank statements, merchant settlements, payroll, debt schedules, inventory records, and support for proposed add-backs. Cover complete periods and the current year through a stated date. Mark estimates and incomplete months.
IRS recordkeeping guidance identifies supporting documents as the basis for recording business transactions. Apply that principle to the sale: invoices, payroll records, statements, and system exports should support the earnings bridge. A handwritten adjustment list without source evidence is not a substitute.
Add a financial definitions note. Explain cash versus accrual reporting, sales tax, tips, refunds, discounts, packages, membership revenue, and intercompany charges where relevant. Buyers should understand the meaning of the numbers before comparing periods. Have the accountant review corrections that affect earnings or obligations.
How should provider and staff information be organized?
Begin with an anonymized roster showing role, license category, tenure, work schedule, compensation method, and production where appropriate. Include an explanation of owner duties and replacement assumptions. Keep names and sensitive personal information in a more restricted tier until disclosure is justified and authorized.
Provide employment or contractor agreements, amendments, compensation plans, benefits information, accrued obligations, and relevant training or credential records to appropriate reviewers. Explain which providers are essential to particular services or patient relationships. Do not assume an agreement alone proves that someone intends to remain.
Reconcile production totals to the operating reports and financial model. Distinguish collections, treatment revenue, booked appointments, and completed visits. A provider table that uses different definitions from the earnings schedule creates unnecessary diligence friction even if both exports came from legitimate systems.
What membership and patient-economics records are needed?
Retain active contract versions, enrollment cohorts, recurring collections, failed charges, cancellations, freezes, redemptions, unused benefits, gift cards, and refund requests. Reconcile the opening and closing balances. Map members to the contract version that governs their benefits rather than relying only on current website terms.
For commercial retention analysis, prepare aggregated or appropriately reviewed de-identified reports. Explain the observation window, patient definition, duplicate handling, and repeat-visit calculation. A database count by itself does not establish active demand or a right to disclose the underlying records.
HHS’s Privacy Rule summary describes permitted uses and disclosure safeguards for covered entities. Have counsel determine applicability and the legal basis for transaction review. A general NDA should not be treated as authorization for unrestricted patient charts in a shared business folder.
Which clinical and entity records should counsel review?
Collect formation and ownership documents, professional licenses, management agreements, medical-director contracts, delegation and supervision documents, relevant protocols, permits, insurance, and material regulatory correspondence. Include amendments and expiration dates. Separate historical gaps from prospective improvements in a truthful issue log.
Match legal documents to actual operations. Confirm which entity provides care, collects money, employs staff, owns devices, and holds the lease. Identify changes required by the proposed buyer or structure. A complete set of signed documents can still describe a business model that no longer matches reality.
Restrict clinical and claims materials to authorized reviewers and appropriate safeguards. The seller’s commercial team can maintain a status register without seeing every sensitive underlying record. Ask qualified counsel and clinical advisors what evidence is needed and how it should be reviewed, rather than copying everything into one unrestricted archive.
How do you document devices, premises, and other assets?
Create a device register with model, serial number, owner, location, financing, service arrangements, maintenance history, software, consumables, and anticipated transfer requirements. Add invoices, leases, payoff information, and condition evidence where available. Mark current quotes separately from old estimates.
For premises, include the lease, amendments, options, guaranties, landlord correspondence, permitted use, assignment terms, and occupancy costs. Note pending disputes, repairs, or consent requirements. The buyer should understand the rights it can obtain, not only the rent historically paid.
Document brand and system assets: domains, trademarks where relevant, phone numbers, social accounts, booking software, payment processing, marketing agreements, and vendor relationships. Identify administrator access and transfer restrictions without placing passwords in the data room. Plan secure credential handover separately from document disclosure.
How should access and version control work?
The FTC’s Start with Security guide emphasizes sensible access limits and protection of sensitive information. Choose a platform and process appropriate to the data, use individual accounts, limit privileges, and remove access when a recipient no longer needs it. Keep an activity and disclosure record where feasible.
| Stage | Typical material | Control question |
|---|---|---|
| Initial qualification | Blind business summary | Can the practice be identified unnecessarily? |
| Confidential commercial review | Financial and anonymized operating summaries | Is the recipient qualified and bound appropriately? |
| Detailed diligence | Supporting business contracts and records | Who needs each file? |
| Restricted specialist review | Permitted sensitive clinical or personnel material | What legal basis and safeguards apply? |
This table is a planning example, not a legal disclosure rule. Counsel should tailor the tiers. A buyer’s advisors may need different access from its operating team, and a competitor-buyer may create additional commercial sensitivity requiring careful sequencing.
How do you keep requests from consuming the business?
Assign a coordinator and one request register. Group duplicate questions, identify the responsible source, and record when an answer is reviewed and accepted. If a document does not exist, say so and propose appropriate alternative evidence. Do not fabricate a record to fill a checklist cell.
- Index the source records and access tiers.
- Reconcile key financial and operating summaries.
- Identify missing, expired, or conflicting evidence.
- Approve staged release and specialist review.
- Maintain version and question logs.
- Refresh results and archive the final reviewed set.
Use the seller hub, buyer evidence guide, preparation plan, and 90-Day Pre-Sale Sprint to prioritize work. The best evidence room makes the business easier to understand while preserving the boundaries needed to protect patients, staff, and the seller.
Keep a final delivery manifest after closing or process termination. Record which materials transferred, which access was revoked, which records must be retained, and who remains responsible for unresolved requests. Follow counsel’s retention and privacy instructions. A transaction folder should not become an indefinite uncontrolled copy of every sensitive record simply because the sale conversation has ended.
Before granting buyer access, have an advisor test a representative earnings claim from the summary to the source. Can the reviewer find the covered period, identify the adjustment, and reproduce the total without calling the owner? Also test a restricted recipient account to confirm it cannot see protected folders. These checks address two different failures: evidence that is difficult to use and access that is broader than intended. Correct both before expanding disclosure.
What else do owners and buyers ask?
Should I put patient charts in the general data room?
No blanket approach is appropriate. Determine the legal basis, necessary detail, authorized reviewers, and safeguards with counsel before sharing identifiable clinical information. Early commercial analysis can often use aggregated or appropriately de-identified reporting. Keep any permitted restricted clinical review separate from routine financial and marketing folders.
What if my reports do not reconcile perfectly?
Identify the differences and work with the accountant or system owner to explain them. Timing, definitions, refunds, taxes, and manual entries can cause legitimate differences. Preserve the source exports and reconciliation. Do not force totals to match by deleting inconvenient records or present an unresolved difference as verified earnings.
Do buyers need every employee’s personal details immediately?
Usually the initial commercial questions can be addressed with a role-based, anonymized roster and defined production or compensation data. Later disclosure should follow the transaction stage, necessity, legal obligations, and appropriate protections. Restrict sensitive personnel records and agree when direct staff conversations may occur before releasing identifying information broadly.
Can a spreadsheet summary replace missing source documents?
A summary helps organize information but does not create evidence that does not exist. Explain its origin, assumptions, and limits, then seek alternative support where appropriate. Buyers and advisors may need to narrow conclusions, adjust terms, or pause when material claims cannot be substantiated. Never reconstruct records as though they were original.
Which sources support this guide?
Sources were checked during research. Regulations, lender policies, and market conditions can change. Use the linked primary material and your advisors to confirm applicability.
- Recordkeeping — Internal Revenue Service
- Summary of the HIPAA Privacy Rule — HHS Office for Civil Rights
- Start with Security: A Guide for Business — Federal Trade Commission
Educational analysis prepared with AI-assisted research for The Med Spa Broker. “Last reviewed” records the source and editorial check date; it does not imply review by an attorney, clinician, or independent appraiser. Read our editorial standards.