Diligent vs BoardPro for Debt Advisory Boards Guarding NDAs

A debt advisory firm's board often includes outside directors with their own industry relationships, sometimes including competing lenders or referral sources, and a single undifferentiated board packet assumes every director should see every deal's confidential detail. That assumption breaks down the moment an outside director's own professional relationships create a genuine conflict with a specific deal in the packet, which is exactly the scenario that led to the NDA breach.

A term sheet or deal detail covered by an NDA often carries confidentiality obligations lasting well beyond the transaction's closing or collapse, and a board packet distributed once doesn't stop being sensitive just because the deal itself is old news internally. Documents need ongoing access control matched to how long the underlying NDA actually requires confidentiality, not a one-time distribution followed by indefinite open access. A firm that only thinks about confidentiality at the moment of distribution, rather than across the document's full lifecycle, is the firm most likely to be caught by a lapsed control years after the original deal closed.

A firm that handles a conflict by having an outside director verbally recuse themselves from discussion, while still receiving the full written packet including the conflicted deal's details, has only solved half the problem. Genuine conflict management requires restricting document access itself, not just meeting participation, since a director who never speaks about a deal in the room can still read every detail about it in the packet they were sent.

Before sending any packet containing deal-specific confidential information, confirm which directors have a potential conflict with that specific deal, build a restricted version of the packet excluding conflicted material for those directors, confirm any NDA-covered documents carry the confidentiality marking they require, and set a review date for when access to that specific document should be reconsidered or restricted further. Running through this checklist takes only a few minutes once it becomes routine, which is a small cost against the relationship damage a single misdirected packet can cause.

A firm with a small number of active deals and directors whose conflicts are well understood and infrequent can manage this on BoardPro with disciplined manual practice: building a separate, restricted packet for any deal with a known conflict, and a clear internal rule about who prepares and reviews packets before they go out. It requires more manual diligence than a platform with built-in per-document permissions, but it can work at this scale if the discipline is consistent.

A firm running many simultaneous deals, with a board that includes several outside directors each carrying different potential conflicts, benefits from Diligent's document-level permissioning: restricting specific deal documents to specific directors automatically, rather than relying on someone remembering to build a separate packet correctly every single time. At this scale, the manual approach becomes the weak point precisely because it depends on nobody making a mistake under routine time pressure.

Beyond the immediate legal and relationship repair with the affected lender or borrower, review the firm's conflict list against every director's current outside relationships, since those relationships change over time and a conflict review done once at board formation goes stale. Rebuild the packet distribution process around the restriction-first checklist rather than trusting recusal alone to manage the next conflict that arises.

After a confidentiality breach, work through these steps in order:

1. Handle the legal and relationship repair with the affected lender or borrower first, since that damage is the most urgent and the hardest to undo.
2. Review the conflict list against every director's current outside relationships, because a review done once at board formation goes stale.
3. Rebuild packet distribution around the restriction-first checklist instead of trusting someone to remember to build a restricted version each time.
4. Match document access controls to the actual NDA term, so restrictions do not lapse just because the deal is no longer active internally.

Most small-business boards worry about confidentiality in general terms, keeping competitors from learning about strategy or financial performance. A debt advisory board carries a sharper version of that same concern, because its own directors often work directly inside the industry whose confidential information the firm is handling, sometimes for parties on opposite sides of the same transaction. That proximity is exactly why the usual small-board instinct, that a trusted director can see everything, needs a deliberate exception carved out for deal-specific material tied to a live conflict, even when every director involved is acting in complete good faith.