Governance for M&A Advisors Handling Material Nonpublic Information

Every advisor and analyst with access to deal information should be covered by a written policy prohibiting trading on material nonpublic information learned through client work, reviewed and acknowledged at least annually. This is a baseline every firm in this space needs regardless of size or governance sophistication, and it should be documented as a formal firm decision with a dated acknowledgment record for every covered person, not just a verbal expectation everyone assumes is understood.

When the firm advises on two potentially competing transactions, or when information about one active deal could inform judgment on another, a real information barrier between deal teams needs enforcement mechanisms, restricted access to deal materials, no informal water-cooler discussion of active deal terms, not just a policy statement. Diligent's more granular access permissioning is a genuine advantage here if the firm wants deal-specific access control documented at the same level of rigor as its formal governance records.

A firm earning success fees contingent on a transaction's completion needs to understand whether its specific activities fall within the SEC's M&A broker exemption or require broker-dealer registration, a question that depends on transaction size, the firm's role, and specific statutory conditions that are easy to get wrong through informal assumption. This is a compliance question for securities counsel, not a board software question, but the board should have documented confirmation of the firm's regulatory posture on file, reviewed whenever the firm's typical deal size or role changes meaningfully.

Some advisory firms structure each significant engagement, or at least each fund-related engagement, through a separate entity for liability isolation purposes, which creates the same multi-entity governance complexity that argues for Diligent over BoardPro in other industries in this cluster. If your firm operates this way, Diligent's stronger multi-entity minute book handling is worth the additional structure regardless of overall firm size.

A client considering a significant engagement, especially a sophisticated PE or strategic buyer, may ask about the firm's own governance and compliance posture as part of vetting the advisor, information barrier practices, insider trading policy, regulatory registration status. A firm that can produce clean, organized answers to these questions signals exactly the kind of rigor a client wants from an advisor handling their own confidential transaction information.

Be ready to show a sophisticated client:

• Your information barrier practices, including how deal team walls are enforced in day-to-day work.
• Your written insider trading policy and dated acknowledgments from everyone with deal access.
• Your regulatory registration status, including how success fees fit broker-dealer rules or the SEC's M&A broker exemption.
• Organized answers to all of these, which signal the rigor a PE or strategic buyer is looking for.

Occasionally, two potential clients approach the same firm about advising on what turns out to be the same or a closely related transaction, sometimes on opposite sides of a potential deal. Resolve this at the engagement-acceptance stage, before either relationship deepens, with a documented decision about which engagement the firm accepts, declines, or handles through a formal wall if it takes both. Waiting until both relationships are underway to notice the overlap creates a far messier problem than catching it during initial engagement screening.

Not every engagement in this cluster involves live transaction information; a growth strategy engagement with no active deal component carries much lower information barrier risk and doesn't need the same wall enforcement as active M&A work. Apply the heavier governance specifically to engagements that actually generate material nonpublic information, rather than treating every strategy engagement with the same procedural weight, which would add unnecessary friction to work that doesn't carry the underlying risk and would eventually train the team to treat the real controls, the ones that actually matter most, as just another box to check without thinking, undermining the exact discipline the whole policy exists to protect in the first place. A short annual review, sorting current engagements into the two categories and confirming the wall applies only where it should, keeps that distinction from drifting as the firm's own mix of work shifts over time.