Every business you look at will arrive wrapped in a 30-page PDF designed to make you say yes. The CIM is the single most important document in an acquisition — and the single most misread. Here's how to pull the verifiable facts out of it and ignore the rest.
Deal Alert AI is reader-supported. We earn commissions from affiliate links at no cost to you.
This post is based on a video from our Deal Alert AI YouTube channel. Watch the original or read the full breakdown below.
The first time I opened a Confidential Information Memorandum, I read it like a brochure. Sixteen pages of clean charts, a tidy growth story, a list of "untapped opportunities" that made the business sound like it was one weekend of work away from doubling. I got excited. I signed the LOI. And then I spent the next three weeks discovering everything the document had carefully declined to mention.
That was an expensive education. The lesson is simple: a CIM is a sales document. It is written by someone whose compensation is tied to the sale closing. That doesn't make it dishonest — most brokers I've worked with are straight shooters — but it does mean the document is built to present the business in its best light. Your job is not to be persuaded. Your job is to extract the small number of verifiable facts buried in it, and then go verify them somewhere else.
This guide walks through what a CIM actually is, how online business CIMs are structured, and the specific reading method I use to separate signal from marketing. If you're evaluating listings on Empire Flippers, Flippa, or any brokered marketplace, this is the skill that saves you from overpaying.
A Confidential Information Memorandum — also called an Information Memorandum, an IM, or on smaller deals just "the prospectus" — is a 15 to 50 page document prepared by the broker or the seller that summarizes every material aspect of a business for prospective buyers. You typically get access after signing an NDA and, on larger platforms, after proving you have the funds to transact.
The document exists because sellers can't take fifty phone calls explaining the same business fifty times. The CIM is the standardized answer. It covers what the business does, how it makes money, what the financials look like, how it operates day to day, and why the asking price is what it is. On a $150K content site the CIM might be twelve pages. On a $4M SaaS deal it might be forty-five pages with an appendix of cohort charts.
Here's the part buyers forget: the broker is paid by the seller. Typically 10 to 15 percent of the sale price on smaller deals, sliding down as deal size increases. The broker's incentive is a clean, fast, high-priced close. That doesn't mean fabrication — reputable brokers stake their entire business on not misrepresenting deals, and platforms like Empire Flippers actually verify financials before listing. But there's a wide gap between "not lying" and "telling you everything you need to know." The CIM lives in that gap.
We scan Empire Flippers, Flippa, Acquire.com and Quiet Light daily — scoring every listing. Start free.
Almost every CIM you'll read follows the same seven-section skeleton. Knowing the structure lets you read faster and lets you notice when a section is suspiciously thin.
Executive summary. One or two pages laying out the investment thesis. Revenue, profit, multiple, asking price, and three to five bullet points on why this business is attractive. This is the most heavily marketed part of the document. Read it once for orientation, then largely ignore it.
Business overview. What the business does, when it was founded, how it evolved, and where it sits in its market. This is where you learn whether the business has one revenue stream or five, whether it pivoted, and whether the current model has been stable long enough to underwrite. A business that changed monetization models eight months ago does not have a 24-month track record, regardless of what the revenue chart shows.
Financial summary. Trailing twelve and twenty-four months of revenue, expenses, and profit, usually with an add-back schedule reconciling reported profit to "seller's discretionary earnings." This is the section that determines the price. It is also the section where the most value gets manufactured.
Traffic and analytics. Sessions, users, traffic sources, keyword rankings, email list size, conversion rates. For content and e-commerce businesses this is effectively a second financial statement — traffic is the raw material that becomes revenue.
Operations overview. Team structure, contractor relationships, tech stack, recurring workflows, hours required from the owner. This section tells you what you're actually buying into on a Monday morning.
Competitive landscape. Who else plays in this space and why this business holds its position. Often the weakest section, because a genuinely honest competitive analysis rarely flatters the seller.
Growth opportunities. A list of things the new owner could do. This is the section buyers love and the section that deserves the most skepticism, for reasons I'll get into below.
Start with a mechanical question: does the arithmetic work? Take stated revenue, subtract stated expenses, and see if you land on stated profit. You'd be surprised how often the numbers in the narrative text don't match the numbers in the table. When they don't, that's not necessarily fraud — it's often a formatting error or a definitional difference — but it's your first question for the broker.
Then move to add-backs. An add-back is an expense the seller argues won't transfer to you, so it gets added back to profit to arrive at seller's discretionary earnings. Legitimate add-backs exist: the seller's health insurance, a one-time legal fee for a trademark filing, the cost of a website redesign that won't recur. Those are real and defensible.
The problem is that add-backs multiply the asking price. If a business trades at a 40x monthly multiple, every $1,000 of monthly add-back adds $40,000 to the price. So a seller who can convince you that $3,000 a month of "owner compensation" is discretionary just moved the price $120,000. I've seen CIMs where add-backs represented 30 percent of stated SDE, described in a single line that read "owner-related and non-recurring expenses." That's not a schedule, that's a request for trust.
My rule: every add-back needs a name, a dollar amount, a date, and a reason it won't recur under new ownership. If a $2,400 monthly "consulting fee" gets added back but the consultant was writing the content that generates the traffic, that fee absolutely recurs — you'll either pay the consultant or pay someone else. Strip it out and re-run the valuation. On a deal I looked at last year, removing three unjustified add-backs took SDE from $11,400 a month to $8,900, which at the listed 38x multiple meant the business was worth $338K, not $433K. Same business. Same CIM. Ninety-five thousand dollars of difference.
Almost every CIM shows traffic during a favorable window. If sessions peaked eleven months ago and have declined since, a chart starting from that peak looks like stability. A chart starting six months later looks like decline. Brokers know which chart to include.
So the first request is always the same: twenty-four months of Google Analytics data, ideally with view-only access to the actual property rather than a screenshot. Screenshots can be cropped. Live access can't. Then look at three things. First, the overall trajectory — is the twenty-four month line up, flat, or down? Second, seasonality — is the recent strength just Q4, or is the business genuinely growing? Third, the source mix — is organic search share increasing or decreasing relative to paid and direct?
Pay particular attention to any traffic inflection that begins within six months of the listing date. Sometimes it's genuine and the seller decided to sell after a good run. Often it's a sprint: a burst of new content, an aggressive link-building push, a paid campaign, or a temporary algorithm tailwind that the seller is trying to sell before it reverses. Ask directly: "What specifically changed in month X that caused this increase, and is it repeatable?" A seller with a real answer will give you one immediately. A seller without one will get vague.
For e-commerce and SaaS deals, apply the same logic to the metrics that matter in those models. For e-commerce it's repeat purchase rate and blended CAC over 24 months. For SaaS it's net revenue retention and monthly churn cohort-by-cohort. A SaaS CIM showing 4 percent monthly churn is showing you a business where the average customer leaves in about two years — that's a treadmill, and the CIM will describe it as "healthy engagement."
Here's the reframe that changed how I read CIMs. The growth opportunities section is not a list of what you can do. It's a list of what the current owner chose not to do. And the owner knows this business better than anyone alive. So the real question is: why didn't they?
There are only a handful of honest answers. They didn't have the capital. They didn't have the skill set. They didn't have the time because of other ventures. Or they tried it and it failed. The first three are real opportunities for a buyer with different resources. The fourth is a landmine dressed as a lawn ornament.
So ask. Every single item in that list deserves the question: "Did you ever test this? What happened?" I once saw a CIM for a supplement brand listing "launch on Amazon" as the headline growth opportunity — a seemingly obvious, high-value move. On the seller call it emerged they'd been suspended from Amazon eighteen months earlier over a compliance issue and the account was unrecoverable. That opportunity wasn't untapped. It was closed. It never would have appeared in the document.
The same applies to "expand into paid ads," "build an email funnel," "add a subscription tier," and "international expansion." These appear in roughly 80 percent of CIMs I read. They're template items. Treat them as zero value in your underwriting. Price the business on what it does today, and let any upside be genuine upside rather than something you already paid for.
The CIM tells you what works. It almost never tells you what doesn't. That absence is not a conspiracy — it's just how sales documents function. But it means there's a predictable list of things you have to source elsewhere.
Customer and supplier concentration. A CIM will say "diversified revenue base" when 44 percent of revenue comes from one affiliate partner. Ask for revenue broken down by partner, client, or SKU for the trailing twelve months. Any single relationship above 20 percent is a material risk that should affect price.
Platform dependency and account health. Has the site been hit by an algorithm update? Has an ad account been flagged? Has an Amazon listing been suppressed? None of this makes the CIM. Ask for account health screenshots and cross-reference traffic drops against known Google update dates.
Real owner hours. CIMs love the phrase "approximately 5 hours per week." That number is usually the maintenance floor, not the actual average. Ask the seller to walk you through the last full month, day by day. The gap between the stated number and the reconstructed number is often 3x.
Contractor fragility. The ops section will list a team. It won't say that the lead writer is the seller's cousin who is leaving when the deal closes, or that the developer who built the custom checkout is unreachable. Ask about every team member: how long, what contract, will they stay, and what happens if they don't.
Transition complexity. The transition section almost always understates difficulty because everyone involved is incentivized to make the deal feel easy. Migrating a payment processor, transferring a Google Ads account with history, moving an email list without tanking deliverability, reassigning app store ownership — each of these has real failure modes. Get the actual migration checklist before you close, not after.
Here's the sequence I run on every CIM before I get on a seller call. It takes about ninety minutes for a typical listing and it kills roughly two-thirds of the deals I look at — which is exactly the point. The goal of CIM analysis isn't to find reasons to buy. It's to eliminate deals cheaply so you spend your expensive diligence hours on the ones that survive.
The hardest part of CIM analysis isn't finding the facts — it's knowing whether the facts are good. Is a 41x multiple for a five-year-old content site with 70 percent organic traffic reasonable? Is 3.2 percent monthly churn acceptable for a $180K ARR B2B tool? Without comparables, you're guessing, and a persuasive CIM will happily fill the gap in your judgment with its own conclusions.
This is exactly why I built Deal Alert AI. The platform tracks listings across the major marketplaces and surfaces comparable deals by business model, revenue band, traffic profile, and multiple — so before you even open the CIM, you already know what the market pays for a business like this one. When the executive summary claims the asking price reflects a "conservative multiple relative to comparable transactions," you can check that claim in about thirty seconds instead of accepting it.
It also solves a subtler problem: deal flow discipline. Buyers overpay most often when they've only seen three deals and have fallen in love with one of them. When you're seeing every relevant listing across Empire Flippers, Flippa, and the other platforms in one feed, a single CIM loses its power to convince you. It becomes one data point among many, which is what it actually is. You can browse what's live right now at Deal Alert AI and see how the same business model prices across different sellers.
Everything you extract from a careful CIM read has a second use: it's negotiating material. Most buyers negotiate on vibes — they name a lower number and hope. Buyers who negotiate from documented findings get better outcomes, because they can point to specific line items and explain exactly why the price should move.
Structure it as a written summary you send to the broker before or alongside your offer. Three unjustified add-backs totaling $2,500 monthly. Traffic concentration at 68 percent from a single Google-dependent channel. A lead contractor who hasn't committed post-close. Each item gets a dollar impact. Then your offer reflects the sum. This isn't adversarial — it's the most efficient possible conversation, because it forces the seller to either produce documentation that refutes your finding or accept the adjustment.
Sometimes the answer is genuinely good. I've had sellers come back with contracts, bank statements, and contractor commitments that fully resolved my concerns and I closed at close to asking. That's a fine outcome — I paid full price for a business I actually understood. The disaster scenario isn't paying a high multiple. It's paying any multiple for a business whose real shape you never bothered to learn because a well-designed PDF told you a story you wanted to hear.
Read the CIM. Then read past it. The document is the beginning of your diligence, never the end of it — and the buyers who internalize that distinction are the ones still operating profitable acquisitions three years later. If you want the comparable data that makes this kind of analysis fast instead of painful, that's what Deal Alert AI exists to give you.
By Sophal Lanh, Founder of Deal Alert AI
We scan Empire Flippers, Acquire, Flippa, and Quiet Light daily. The best sub-$500K businesses are gone within 48 hours.