For an overseas buyer, a well-organised Cyprus acquisition data room should make the company’s evidence understandable without relying on repeated explanations from the seller. The objective is not to collect the largest possible number of files. It is to connect the proposed deal, the financial information and the unresolved questions in one controlled record.
This checklist focuses on preparing and managing that record. For the wider financial and tax review, read our Cyprus transaction advisory and due diligence guide. The steps below are practical recommendations, not an exhaustive statutory checklist or a substitute for transaction-specific advice.
1. Agree what the data room is intended to prove
Before issuing a document request, write a one-page scope note. Identify the exact target company, registration number, business activities, proposed transaction, relevant periods and intended completion timetable. Distinguish documents about the target from documents belonging to its shareholders or another group business.
Ask the buyer’s financial and legal advisers to agree the priority questions. A target with recurring subscription income may need a different evidence pack from a property-holding company. A small number of well-defined questions gives the seller a clearer starting point than an unedited generic request list.
2. Create a master index with document status
Give each request a reference number and record the document owner, period, upload date and review status. Useful statuses include requested, uploaded, clarification needed and reviewed. Avoid marking an entire folder “complete” merely because files have been uploaded.
Keep an explicit record where a document does not exist, is not applicable or has not yet been located. Those are different situations. The reviewer should decide whether alternative evidence addresses the question; a seller’s explanation should remain distinguishable from an independently supported conclusion.
- Use descriptive filenames with the entity, document type and period.
- Retain the original file and label revised versions clearly.
- Keep a short change log for replacements and late additions.
- Link each follow-up question to the relevant file or request number.
3. Separate corporate records from financial evidence
Start the corporate folder with the exact legal identity and the records your legal adviser requests. Cyprus provides an official service for obtaining certified company copies, with CY Login registration indicated on the government service page. Use the official channel where appropriate rather than treating an unverified commercial search result as an official extract. Source: Cyprus Government: certified company copies.
Record when each search or document was obtained and what it covers. Ask the seller to explain discrepancies in names, dates or ownership information. Keep those explanations beside the affected evidence so the buyer’s advisers can follow the resolution.
Do not use a corporate certificate as a substitute for the separate review of trading figures, cash, tax or contractual obligations. Each question needs evidence suited to its purpose.
4. Build a financial reconciliation folder
Request a consistent financial pack for the agreed periods, including the accounts and supporting records relevant to the scope. Preserve accounting exports in their original format and provide readable copies where needed. State the currency, period and entity clearly on summaries.
The most useful addition is a short reconciliation showing how the seller’s headline figures connect to the underlying records. For example, show the bridge between the final annual accounts and the corresponding trial balance, then identify how later management accounts were prepared. List reconciling items instead of forcing totals to agree.
Where the seller presents an adjusted earnings figure, give each adjustment its own reference, explanation and supporting file. Keep the buyer’s assessment separate from the seller’s proposed treatment. An unsupported adjustment should remain an open question, not become an agreed fact through repetition.
5. Make tax and payment evidence traceable
Organise the agreed tax, VAT and payroll material by period and type. Separate calculations, submitted returns, filing acknowledgements, payment evidence and authority correspondence. This helps the reviewer distinguish a prepared document from a filed return and a recorded liability from a payment.
For cross-border operations, include a country schedule explaining the activities and identifying the adviser responsible for each jurisdiction. Flag missing periods and unresolved correspondence. Do not label the target “fully compliant” simply because the folder contains several recent returns.
For background on one part of this review, see our Cyprus VAT registration guide. The acquisition review should still follow the target’s actual transactions and history.
6. Give overseas reviewers a clear explanation of local records
Where a document is in Greek, retain the source and add a short English description so an international buyer can understand its relevance. Label working translations as such. Ask the legal adviser whether a formal translation is needed for a particular document or transaction step.
Do not rename different documents with the same convenient English label. Explain the issuer, date, period and purpose instead. A simple cover note can prevent a reviewer from confusing a registration document with a filing acknowledgement or a payment receipt.
7. Control personal data and commercial confidentiality
Before uploading employee, customer or shareholder information, agree the lawful basis, purpose, access arrangements and any relevant cross-border transfer requirements with the appropriate adviser. The GDPR principles include data minimisation, purpose limitation, security and accountability. An acquisition project does not remove those obligations. Source: European Data Protection Board: basic principles.
Practical measures to discuss include staged disclosure, redaction, restricted folders and a defined retention plan. For an initial payroll analysis, consider whether a role-based summary can answer the question without exposing unnecessary personal identifiers. These measures should match the review’s needs; they are not a blanket assurance of GDPR compliance.
8. Close questions, not just upload requests
Maintain a single question log with the issue, supporting references, seller’s response, reviewer’s conclusion and remaining action. Prioritise matters that could affect the buyer’s decision or timetable. Avoid allowing significant questions to disappear into separate email chains.
Before the agreed review cut-off, prepare an outstanding-items summary and ask the advisers which matters need resolution, further investigation or consideration in the transaction documents. Preserve a dated record of the materials reviewed and any limitations. A tidy data room supports a decision; it does not guarantee that every risk has been found.
Planning a Cyprus acquisition from abroad?
Discuss the scope of your financial and tax due diligence with Achilleas Pafios & Co Ltd before setting the document timetable. Start with the target’s activity, countries involved, proposed transaction and available financial periods.
Request a consultation or contact us on WhatsApp. Please do not send a confidential data room or personal records in the initial enquiry; agree an appropriate transfer method first.