Numbers
- Monthly profit and loss, balance sheet, and tax returns for three years, plus the current year to date.
- A one-page split of revenue: managed-services MRR, projects, hardware and software pass-through, and anything else.
- Which earnings figure you can defend, EBITDA or SDE, and the add-backs you would actually show a buyer.
- Logo retention or gross revenue retention, and the definition you used.
Clients and contracts
- Top ten clients by revenue, with each as a percent of the total.
- Managed-services agreements: term, price escalation, and whether they can be assigned in a sale.
- Verbal agreements written down, or marked as verbal so they are not described as contracts.
Delivery
- Hours per week the owner still spends on tickets, projects, or escalation.
- Who runs the desk if the owner is away for two weeks.
- RMM and PSA names, and whether a buyer could be given a read-only export.
- Written roles for service, vCIO or account management, and back office.
Cyber
- MFA on email and privileged admin accounts.
- EDR on the endpoints you manage, including your own staff.
- A backup restore that has been tested, with a date.
- Cyber insurance declarations, and any CMMC, NIST, SOC 2, or HIPAA work you would mention in a teaser.
The decision
- A timeline: exploring, a 6–12 month prep, in market this year, or a conversation about shutting down.
- What “done” means for the owner after close: a weekend, 90 days, or a longer role.