Pre-Sale AI Audit and Buyer Diligence Pack
A sophisticated buyer's AI-diligence document request in 2026 produces a 30-page response โ not 30 documents, a 30-page synthesized pack with cross-references to underlying source documents stored in a structured data room. This lesson installs the exact structure of that pack, the 15 sections it contains, the source documents each section references, the production cadence in the T-12 to T-3-month pre-sale window, and the response discipline that determines whether the buyer's investment committee underwrites at the premium tier (top-quartile 8x-10x adjusted EBITDA per Mercer Capital and ECHELON Q3-Q4 2025, premium-top ~11.6x) or discounts to the broader market.
Why a 30-Page Pack and Not a Document Dump
A sophisticated buyer's diligence team โ typically the buyer's CCO, CTO or technical lead, head of integration, outside counsel, and the M&A advisor's deal team โ has 30-90 days to read the seller's diligence response and produce the buyer-side recommendation memo to the investment committee. A document dump (every file in a data room with no synthesis) forces the team to reconstruct the practice's AI maturity story from raw documents; the reconstruction takes weeks and lands in a place the buyer's CCO cannot defend at investment committee. A 30-page synthesized pack โ the seller's narrative of its AI maturity tied to source documents โ is what the buyer's team can read in two sittings, send to investment committee with confidence, and use as the basis for the bid.
The pack is not the only diligence artifact. The data room behind it contains every source document the pack references: WSPs, ADV history, monthly governance committee minutes, ROI dashboards, prompt library exports, vendor contracts, SOC 2 Type II reports, Marketing Rule audit working files, Reg S-P incident files, advisor training records, NIGO custodian exports. The pack is the synthesized layer that makes the data room navigable. The L4 capstone deliverable (30-page strategic AI plan) is structurally identical to the pack โ the practice that completes the L4 capstone has effectively produced the diligence pack template; the pre-sale exercise is the update and tailoring to the buyer's request list.
The 15-Section Pack Structure
The pack has 15 sections, organized around the 15 document categories in the buyer's standard diligence request (L4 Ch8 L1). Each section is 1-3 pages with named source-document cross-references.
Section 1 โ AI Use Policy and WSPs
The practice's AI Use Policy (the L1 capstone deliverable), the WSPs under FINRA Rule 3110 reasonable design covering AI tools, the agentic-AI WSPs under L4 Ch3 L3, and SEC Compliance Rule 206(4)-7 compliance procedures. Cross-references the source documents in the data room. Page count: ~2 pages narrative + named WSP section references.
Section 2 โ Prompt Library and Change Log
Current version of the firm-approved prompt library (the L2 capstone 25-prompt advisor library extended through L3 + L4); change log showing version history; principal-review-approved status of each prompt; the integration with the L4 Ch5 L1 90-day adoption training. Cross-references prompt library file exports in the data room. Page count: ~2 pages narrative + library summary.
Section 3 โ Vendor List with Contracts, SOC 2, and Reg S-P Oversight
The AI vendor inventory (Jump or Zocks, Holistiplan, FP Alpha, Wealth.com, RightCapital, eMoney, MoneyGuidePro, Orion Eclipse, 55ip, Wealthbox or Redtail or Salesforce FSC, Practifi, Smarsh or Global Relay, Catchlight, SmartAsset, Microsoft Copilot Enterprise); for each: contract status, SOC 2 Type II date and findings summary, Reg S-P 17 CFR Part 248 vendor oversight file status, BAA / DPA status, integration patterns. Cross-references vendor folder in the data room. Page count: ~3 pages.
Section 4 โ ADV Part 2A and 2B History
Current ADV Part 2A and 2B with AI-specific disclosures (Items 4, 5, 8, 14, 17 + Brochure Supplement 2B per L4 Ch7 L2). Three years of amendment history with rationale for each amendment. Any off-cycle amendments and the trigger documentation. Cross-references the ADV files and the IARD filing records in the data room. Page count: ~2 pages.
Section 5 โ Form CRS
Current Form CRS; any AI-related disclosures or references; cross-reference with engagement letter AI language. Page count: ~1 page.
Section 6 โ AI Risk Register and Governance Committee
The L4 Ch6 L1 AI Risk Register with the twelve named risks, current mitigation status, named owners; the AI Governance Committee charter, membership, decision rights; 12+ months of monthly meeting minutes with attendance, decisions, action items. Cross-references the register, charter, and minutes folder in the data room. Page count: ~3 pages narrative + register summary.
Section 7 โ Principal Review Queue Logs
The principal review queue under FINRA Rule 2210 + Marketing Rule 206(4)-1; sampling rates (100% Reg BI / 100% testimonial-endorsement-rating / 100% hypothetical performance / 25-50% other AI content); 12+ months of exception logs with category breakdown; remediation logs; AI-to-AI red-team screening configuration if any. Cross-references the principal review folder. Page count: ~2 pages.
Section 8 โ Smarsh / Global Relay Archive Coverage
Archive coverage reports under FINRA Rule 4511 + SEC Rule 204-2; โฅ99% coverage threshold on AI-touched artifacts (the L4 Ch5 L1 day-90 checklist standard); WORM compliance attestation under SEC Rule 17a-4(f) for BD applicable; tamper-proof timestamp methodology; retention policy. Cross-references archive vendor reports in the data room. Page count: ~2 pages.
Section 9 โ ROI Dashboards (24+ Months Trailing)
The L4 Ch5 L2 ROI dashboard for 24+ trailing months showing the five metrics (hours recovered, households per advisor, meeting-to-follow-up SLA, NIGO rate, close rate); methodology documentation; trajectory shape commentary (clean ramp vs. noisy + reversals); the ROI multiple (typically 4x-8x for well-deployed practice); the dashboard's links to governance committee minutes and risk register. Cross-references the dashboard files and the underlying source data in the data room. Page count: ~3 pages narrative + dashboard summary.
Section 10 โ Marketing Rule Audit and Substantiation
The L4 Ch7 L1 Marketing Rule audit: the 20-location catalog; the substantiation file under 206(4)-1(d) for each AI-related claim; the remediation log; the ongoing-discipline elements (prompt library encoding compliance, principal review queue, CCO quarterly regulatory scan, AI Governance Committee standing entry); the L4 Ch7 L2 testimonial / endorsement / third-party-rating / ADV / hypothetical-performance disclosure mechanics applied. Cross-references the audit catalog, substantiation file, and remediation log. Page count: ~3 pages.
Section 11 โ Reg S-P Incident History and IRP
The written Incident Response Program under Reg S-P 17 CFR Part 248 May 2024 amendments; 30-day breach notification compliance documentation; vendor oversight files; the practice's Reg S-P incident history (if clean, document the clean record; if any incidents, document the remediation, the IRP activation timeline, the affected-client notifications, the state-DOI / NY DFS 72-hour rule compliance, the E&O carrier engagement, the ADV update if material). Cross-references the IR plan and incident folder. Page count: ~2 pages.
Section 12 โ Cybersecurity Playbook (L4 Ch4) and NY DFS Attestations
The L4 Ch4 cybersecurity architecture: vendor inventory with SOC 2 Type II currency, MFA enforcement, endpoint encryption, identity/access management, data classification; the May 2024 Reg S-P 17 CFR Part 248 amendments compliance; NY DFS 23 NYCRR 500 third-party-service-provider attestations if applicable; the E&O insurance application and renewal history (L4 Ch4 L2). Cross-references the cybersecurity folder and insurance records. Page count: ~2 pages.
Section 13 โ Advisor Training Records
The L4 Ch5 L1 90-day adoption training plus ongoing training; per-advisor completion of AI tool training; state CE for dually-licensed advisors (Model #275 + state-specific AI CE if applicable); Firm Element CE under FINRA Rule 1240; certification or designation status (CFP, CFA, etc.) of producing advisors. Cross-references the training records folder. Page count: ~1 page.
Section 14 โ NIGO Trend from Custodian Portals
The 12-24 month NIGO trend from Schwab Advisor Services, Fidelity Wealthscape, Pershing NetX360+, BNY Mellon (whichever the practice uses); NIGO category breakdown (signature missing, beneficiary mismatch, ACAT-related, etc.); the correlation with the L4 Ch5 L2 dashboard's NIGO metric (operational AI maturity leading indicator). Cross-references the custodian export files. Page count: ~1 page.
Section 15 โ 50-State Matrix (Dually-Licensed Practices)
For dually-licensed advisors selling annuities, the L4 Ch6 L2 50-state matrix: per-state license status, Model #275 adoption, state DOI bulletins on AI, overlay frameworks (NY Reg 187, Colorado SB 21-169, California DOI + CPRA), mandatory disclosure language, fairness-testing requirements, training-hour requirements, NY DFS-style cyber overlay, enforcement intensity. For IA-only practices, this section is omitted or one paragraph explanation of why not applicable. Page count: ~2 pages for dually-licensed; 0-1 page for IA-only.
Production Cadence โ T-12 to T-3 Months
The pack is not produced from scratch in the days before diligence. The L4 capstone deliverable provides the template; the T-12 to T-3 pre-sale window updates and tailors. The cadence:
T-12 months: capstone refresh โ confirm the L4 capstone (30-page strategic AI plan) is current; identify any sections that have drifted; commission the AI Governance Committee to refresh the Marketing Rule audit (L4 Ch7 L1), the WSPs, the ADV currency.
T-9 months: data room setup โ establish the structured data room with the 15 source-document folders; populate each folder; document the cross-references that the pack will use. M&A advisor engaged (ECHELON, Mercer Capital, AmplifiedRD).
T-6 months: first pack draft โ produce the 30-page synthesized pack with cross-references; outside counsel reviews; the AI Governance Committee reviews; the practice owner and partners sign off. Identify any remaining gaps and prioritize closing them.
T-3 months: pack finalization โ refresh the pack with the latest dashboard, the latest committee minutes, the latest ADV currency; complete any gap remediations; outside counsel signs off; practice ready for buyer engagement.
Diligence response: when the buyer's diligence request arrives, the response is the pack + the data room access + the interview availability. The 30-90 day buyer diligence runs against an already-assembled response. The buyer's diligence team reads the pack first; the data room confirms; the interview validates.
Response Discipline During Buyer Diligence
The buyer's diligence is iterative. Initial requests produce follow-up questions; specific document pulls; clarifications; sometimes additional requests. The response discipline has four elements.
Single-point coordination. One named person โ typically the seller's M&A advisor's lead or the practice owner if self-running โ coordinates all buyer requests. Direct buyer-to-staff communication is documented and routed. Inconsistent responses across staff members trigger the buyer's CCO's discount memo.
Timely response SLA. Initial buyer requests responded to within 48 business hours; follow-up clarifications within 24 hours; document pulls within 72 hours. Delays signal disorganization; consistent timely response signals operational maturity.
Transparency on weaknesses. If a gap exists (e.g., a Reg S-P incident in the prior 18 months, an outstanding Marketing Rule audit item, a tool inventory drift), proactive disclosure with documented remediation is the discipline. Hiding gaps is the canonical seller failure pattern โ discovery during diligence triggers the buyer's CCO's discount memo and the buyer's investment committee's confidence loss.
Interview preparation. The 3-5 hour interview with the seller's CCO, head of advisory, ops lead, and internal champion (L4 Ch8 L1) requires preparation: rehearse common questions, align on consistent messaging, prepare specific examples for each diligence dimension, anticipate the buyer's specific concerns. The L4 capstone artifact set is the script.
What the Buyer's Investment Committee Reads
The 30-page pack is the seller's narrative; the buyer's investment committee reads it alongside the buyer-side recommendation memo prepared by the buyer's diligence team. The committee's decision is informed by three artifacts: (1) the seller's pack + data room + interviews; (2) the buyer's CCO's supervisory architecture defense memo; (3) the buyer's integration team's 90-day post-close integration plan and cost estimate.
The pack's specific decision-driving sections for the investment committee are Section 1 (WSPs โ does the supervisory architecture survive our defense?); Section 6 (Risk Register + Governance โ is governance institutionalized?); Section 9 (24+ months ROI Dashboards โ is the operating-leverage continuation thesis defensible?); Section 10 (Marketing Rule audit โ are we inheriting enforcement risk?); Section 11 (Reg S-P incident history โ are we inheriting litigation/regulator overhang?). Clean reads on all five = top-of-premium-tier bid (10x to ~11.6x). Gaps on any of the five = targeted discount.
Three Named 2026 Scenarios
Scenario A โ 15-advisor practice with clean 9/10 checklist, 36 months trailing dashboard, complete L4 capstone. Pack production: T-9 data room setup, T-6 first draft, T-3 finalization. Diligence response: standard pack + clean data room + confident interviews. Bid range: top of premium tier (10x-11.6x). Outcome: $50M-$60M on $5M EBITDA; premium-top positioning.
Scenario B โ 8-advisor practice with 5/10 checklist, 14 months trailing dashboard, partial L4 capstone, Reg S-P incident remediated 9 months ago. Pack production: T-12 capstone refresh including gap analysis; T-9 data room setup with proactive disclosure of Reg S-P incident; T-6 first draft with substantiated remediation documentation; T-3 finalization. Diligence response: pack with transparent gap acknowledgment + remediation documentation; outside counsel reviews Reg S-P substantiation for buyer's CCO review. Bid range: middle of premium tier (8x-9x). Outcome: $24M-$27M on $3M EBITDA; the proactive disclosure preserves the premium tier rather than dropping to broader-market.
Scenario C โ 4-advisor solo-style practice with 2/10 checklist, no dashboard, ad-hoc AI use without WSPs. Pack production: realistically a 6-month gap-closing sprint at T-12 to T-6 to build the minimum-viable supervisory architecture; T-3 first draft of partial pack; diligence response acknowledges the build-in-progress. Bid range: broader-market median (6x-7x) at best; possibly discount given the AI-maturity absence + integration cost the buyer assumes. Outcome: $9M-$11M on $1.5M EBITDA vs. $12M-$15M premium tier; recommendation = delay sale 12-18 months to build the architecture if owner can afford the delay.
Key Takeaways
- 30-page synthesized pack, not document dump. The pack is the seller's narrative tied to source documents in a structured data room. The buyer's diligence team reads the pack first; the data room confirms; the interview validates.
- 15 sections aligned to the 15 buyer diligence document categories: AI Use Policy + WSPs, prompt library, vendor list + SOC 2 + Reg S-P oversight, ADV history, Form CRS, AI Risk Register + Governance Committee minutes, principal review logs, Smarsh/Global Relay archive coverage, ROI dashboards 24+ months, Marketing Rule audit + substantiation, Reg S-P incident history + IRP, Cybersecurity playbook + NY DFS attestations, advisor training records, NIGO trend, 50-state matrix if dually licensed.
- Production cadence T-12 to T-3 months: T-12 capstone refresh, T-9 data room setup + M&A advisor engaged, T-6 first pack draft + outside counsel review + committee review, T-3 pack finalization, diligence response when buyer engages.
- Response discipline: single-point coordination (M&A advisor or practice owner); timely SLA (48h initial / 24h follow-up / 72h document pulls); proactive transparency on weaknesses with documented remediation; interview preparation.
- Five sections drive the investment committee decision: Section 1 WSPs, Section 6 Risk Register + Governance, Section 9 ROI Dashboards trajectory, Section 10 Marketing Rule audit, Section 11 Reg S-P incident history. Clean reads on all five = top-of-premium-tier bid (10x to ~11.6x). Gaps = targeted discount.
- The L4 capstone is the template. Practices that complete the L4 capstone have effectively produced the diligence pack template; pre-sale exercise is the update and tailoring to the buyer's request list.
- Hide-the-gaps is the canonical seller failure pattern. Discovery during diligence triggers discount memo + confidence loss; proactive disclosure with remediation documentation preserves the premium tier.
- L4 Ch8 L1 develops the buyer's underwriting framework (5 dimensions + 10-item checklist + premium multiples 8x-10x; premium-top ~11.6x per Mercer Capital and ECHELON Q3-Q4 2025). This L4 Ch8 L2 lesson operationalizes the seller's response. L4 Ch8 L3 develops the post-close integration.
Skill.re