TREADSTONE LAW · ONTARIO · DIGITAL LEGAL SERVICES · EST. MMXXI ·TSL
Home/Case Studies/Buying & Selling a Business
№ 383 Case Study — Buying & Selling a Business

Untangling a Toronto MSP Sale After a False Start

Two partners had already negotiated most of the sale of their IT services company before calling a lawyer, and the client data clauses they had waved through needed a hard second look before closing.

Buying & Selling a Business8 min readToronto, OntarioIT managed service provider sales
All Buying & Selling a Business case studies
ClientRivka and Baruch, selling the managed IT services company they built together in Toronto
The issueA near-complete sale agreement left client data handling and confidentiality obligations undefined
ServiceReviewed the underlying client contracts, rebuilt the data transfer terms, and added proper indemnity protection
ResolutionThe sale closed on the renegotiated terms with both sellers protected and client data handled properly

The situation

Rivka called our office on a Tuesday evening, apologizing before she had even explained why she was calling. She and her business partner Baruch had built a managed IT services company in Toronto over eleven years, growing it from a two-person operation run out of a spare room into a team of twelve serving small and mid-sized clients across the city. Baruch had worked night shifts as a security guard through the first few lean years to keep money coming in while the business found its footing, and Rivka had kept the books herself, doing the company's own bookkeeping long before they could afford to hire someone for it. They had built something real, and now that a buyer named Fiona had offered to purchase it for a figure in the mid six figures, they wanted to close quickly and move on to the next chapter.

The trouble was that Rivka and Baruch had already tried to handle the deal themselves. They had found a purchase agreement template online, filled in the blanks with input from Fiona's lawyer on the other side, and picked a closing date that was now only three weeks away, without either of them having stopped to think carefully about what the company actually held and what a change of ownership would mean for it. On the phone, Rivka explained that Fiona's lawyer had sent back a marked-up draft with new clauses about data handling and client confidentiality that neither she nor Baruch fully understood, and that Fiona had started asking pointed questions about how client data was stored, who had access to it, and what would happen to years of client records once the company changed hands.

Rivka and Baruch had come to us late, after weeks of negotiating without independent legal advice on their side of the table. That mattered, because several rounds of correspondence had already gone back and forth, some of it making informal commitments about timelines and terms that would now be awkward to walk back. It also meant we were picking up a file with a closing date already circulated to both sides, a buyer's lawyer who had been driving the paperwork alone for weeks, and two exhausted sellers who had reached the point where they simply wanted someone to tell them whether the deal in front of them was safe to sign.

What the documents showed

When we sat down with the draft purchase agreement and the company's own records, the picture that emerged was more complicated than Rivka and Baruch had realized. The business held detailed records for several hundred client accounts, including network credentials, backup schedules, and in a number of cases direct remote access to client computer systems. Several of those client relationships were governed by service agreements with their own confidentiality and data handling promises, made years earlier when Rivka and Baruch signed on new customers without giving much thought to what would happen if the company itself were later sold.

The draft agreement Fiona's lawyer had sent over addressed this only in general terms, with a single clause stating that the buyer would assume all existing client obligations. That kind of blanket language sounds reassuring but does very little on its own. It did not specify how existing client data would actually be transferred, who was responsible for notifying clients of the change in ownership, or what would happen to access credentials that needed to be reissued rather than simply handed over. It also said nothing about what would happen if a client objected to the transfer, or asked that their data be deleted rather than passed along to a new owner entirely.

We also found that a number of the underlying client service contracts contained their own consent requirements before the relationship, and the data tied to it, could be assigned to someone else. Rivka and Baruch had not reviewed their own client contracts with this question in mind; running the business had always been about operations, not about what a future sale would require of them. That gap was not unusual for a company this size, but it meant real work had to happen before closing, not paperwork that could simply be signed on the timeline the parties had already agreed to.

Beyond the data question, the draft agreement was thin in other ordinary respects. The working capital adjustment was not clearly defined, and the indemnity language limiting Rivka and Baruch's liability after closing was missing entirely. Read together, the documents showed a deal assembled in good faith by two sides without lawyers steering the technical terms, one that had quietly left both the sellers and the data of hundreds of clients exposed to ambiguity that nobody had intended to create. None of this meant Fiona was acting in bad faith. Her lawyer had drafted a standard template and layered in the confidentiality language as a general protection, the kind of clause that satisfies a checklist without actually answering the operational questions a business like this one raises. The gap was less about anyone's intentions and more about the fact that a template built for a generic asset sale does not anticipate a company whose entire value sits in client trust and the data that trust depends on.

What we did

  1. Reviewed every client service agreement against the sale terms. We went through the company's standing contracts to identify which clients had consent or notice requirements attached to any change of control, so Rivka and Baruch would know exactly which relationships needed extra steps before data could pass to Fiona and which could transfer without incident. This gave the sellers a concrete list rather than a vague sense of risk.
  2. Drafted a proper data transition schedule. We replaced the single vague clause with a detailed schedule covering how client data would be transferred, how access credentials would be reissued rather than simply handed over, and what would happen for the handful of clients whose contracts required individual notice or consent before their information could move to a new owner. Reissuing credentials mattered on its own: old logins left active after a sale can quietly stay valid for months, and neither Rivka nor Baruch wanted that loose end following them.
  3. Negotiated indemnity protection for Rivka and Baruch. The original draft left the sellers exposed to claims after closing with no cap and no time limit. We negotiated a defined indemnity period and a reasonable cap tied to the purchase price, so Rivka and Baruch would not carry open-ended liability for problems that surfaced months or years after they had handed over the business.
  4. Built a defined working capital adjustment. The draft agreement did not specify how outstanding invoices, prepaid client fees, and accrued expenses would be settled at closing. We negotiated a clear formula so the final purchase price would reflect the business's actual financial position on closing day, rather than a number frozen weeks earlier when the letter of intent was signed.
  5. Coordinated notice to clients requiring consent. For the client contracts that specifically required consent before assignment, we worked with Rivka and Baruch to prepare notice letters explaining the change in ownership and confirming continuity of service, timed so clients heard from the sellers directly rather than learning about the sale secondhand. We also set out, for Rivka and Baruch, what would happen if a client declined: the account would stay with them post-closing under a short transition arrangement rather than transfer by default.
  6. Pushed the closing date back by three weeks. The original timeline had been set before anyone understood what needed to happen with client data and consents. We negotiated a short extension with Fiona's lawyer, framed around getting the deal done properly rather than delay for its own sake, and both sides agreed once the reasoning was explained. The extension was documented as a formal amendment to the purchase agreement rather than an informal understanding, so neither side could later dispute what the new date actually was.
  7. Finalized and closed on the revised terms. Once the data schedule, indemnity terms, and working capital formula were settled, we reviewed the complete agreement with Rivka and Baruch line by line before signing, walking through each representation and warranty they were personally making about the business, so they understood exactly what they were agreeing to and what obligations, if any, would follow them after the sale closed.
  8. Confirmed the corporate resolutions and share transfer mechanics were in order. Because the sale was structured as a share transfer of the operating company, we made sure director and shareholder resolutions were properly prepared and that the share register would be updated correctly on closing, so Fiona took clean legal title to the business rather than an ownership interest clouded by paperwork gaps.

The outcome

The sale closed roughly three weeks later than originally planned, on terms that actually reflected what Rivka and Baruch were selling. The data transition schedule gave Fiona a clear, documented process for taking over client accounts, which protected the sellers from later claims that data had been mishandled during the transfer. The clients whose contracts required consent were notified properly and, in every case, agreed to continue with the business under new ownership, which meant the sale did not cost Rivka and Baruch a single client relationship on the way out.

The indemnity cap and time limit we negotiated meant Rivka and Baruch closed the sale without leaving themselves open to indefinite liability, a protection the original template agreement had not included at all. The working capital adjustment also worked in their favour, since several client invoices were still outstanding at closing and the formula ensured that value was accounted for in the final payment rather than absorbed as a loss. The corporate resolutions and share transfer paperwork were also completed cleanly, so Fiona received clear title to the company rather than an ownership stake tangled up in unresolved formalities that could have surfaced as a problem months later.

Rivka told us afterward that the three-week delay had felt frustrating in the moment, but that she and Baruch both understood, once they saw the revised agreement next to the original, how much exposure the first draft would have left them carrying. Baruch said plainly that he had assumed a purchase agreement was mostly a formality once both sides had agreed on a price, and that seeing what the data clause alone would have missed changed how he thought about the rest of the document. The sale closed cleanly, Fiona took over the client relationships with a documented handover process in place, and Rivka and Baruch walked away from the business they had spent eleven years building without an open-ended tail of risk following them into retirement.

What you can learn from this

  • If you are selling a business that holds client data, the purchase agreement needs to spell out exactly how that data transfers, not just say the buyer assumes existing obligations in general terms.
  • Review your own client contracts before you negotiate a sale. Consent and notice requirements buried in old agreements can change your timeline and your obligations to those clients.
  • A template purchase agreement found online will rarely address indemnity limits, working capital adjustments, or data handling in a way that actually protects a seller after closing.
  • Coming to a lawyer late in a negotiation is still better than not coming at all, but it usually means unwinding informal commitments already made, which takes time the parties did not budget for.
  • A short delay to fix the underlying terms of a sale is almost always worth it compared to closing quickly on an agreement that leaves obligations undefined.
This case study is entirely fictional. It does not describe any real client, file, or matter handled by Treadstone Law, and it is not a real file with details changed. All names, people, properties, businesses, dollar amounts, dates, and events are invented, and any resemblance to a real person, business, or situation is coincidental. Fictional scenarios like this one illustrate the kinds of legal issues people in Ontario commonly face and how a lawyer can help. They are general information, not legal advice — no two matters unfold the same way, and nothing here predicts the outcome of any real case. Reading a case study does not create a lawyer-client relationship. If you are facing something similar, speak with a lawyer about your specific circumstances.

This is a buying & selling a business problem we handle

Start a file online — flat, published fees, reviewed by a licensed lawyer before a dollar is owed.

ContactStart a File →