You signed the NDA, introduced yourself professionally, and the CIM landed in your inbox. It's 47 pages. The cover has a professional logo and a headline like "Premier Home Services Platform: Exceptional Growth Opportunity."
Most first-time buyers read it cover to cover. That's a mistake. By page 47, you've spent two hours on a document that should have taken you 90 minutes to evaluate, and you still aren't sure whether the deal is worth pursuing.
This guide shows you how to read a CIM the right way: fast, systematic, and with clear criteria for a go/no-go decision. Speed to No buys weekends. The goal is knowing which CIMs deserve careful reading and triaging the rest in minutes.
What Is a CIM?
A CIM (Confidential Information Memorandum) is the broker's pitch document for the business. It's prepared by the seller's broker, which means it's written to present the business in the most favorable light possible. That's not deceptive; it's the broker doing their job. Your job is to look past the framing and find the actual numbers.
CIMs range from 20-page PDF summaries to 80-page bound reports. Larger doesn't mean better. Some of the best businesses have clean, concise CIMs; some of the worst have exhaustive ones filled with graphs that obscure declining fundamentals.
A typical CIM includes: executive summary, business overview, financial summary (P&L, EBITDA, SDE), customer and revenue breakdown, employees and management structure, operations overview, facilities, market position, growth opportunities, and a reason for selling. Some include tax returns; most don't until you're further along.
One more thing to remember: everything in a CIM is unverified until due diligence. The financials haven't been audited. The add-backs haven't been substantiated. The customer concentration data may be selectively presented. The CIM gets you to an LOI decision, not a closing decision.
Where to Look First
Don't start on page one. Start with the financials. The financials will tell you whether this deal is worth reading the rest of.
The three things to find in the first 15 minutes:
1. Revenue and SDE Trend (Last 3 Years)
Find the P&L summary. You want three years of revenue and three years of SDE (Seller's Discretionary Earnings), specifically SDE rather than EBITDA. They're different. SDE adds back the owner's compensation, benefits, and personal expenses on top of EBITDA. It represents the total economic benefit to a full-time owner-operator.
Look at the direction. Is revenue growing, flat, or declining? Is SDE moving with revenue, or is it being propped up by add-backs while revenue softens? A business with $400K SDE on $2M revenue in 2023, $380K SDE on $1.8M revenue in 2024, and $360K SDE on $1.6M revenue in 2025 is telling you something. The broker will call it "stable adjusted earnings." You should call it a declining business with a declining SDE trend.
2. The SDE Add-Back Schedule
Most CIMs present an "adjusted" or "recasted" P&L showing SDE higher than net profit. That's legitimate. Owner compensation, personal vehicle, health insurance, personal travel expensed through the business, one-time legal fees: these are all reasonable add-backs.
What you're watching for is add-back inflation. A $450K SDE built on $250K net profit with $200K in add-backs is worth scrutinizing carefully. Go through each add-back line by line. Can you verify it? Would it recur under your ownership? A discretionary add-back for the owner's personal vacation is non-recurring. A $40K add-back for "one-time equipment repair" that somehow appears every year is not.
3. Owner's Role and Hours
Find the section describing the owner's involvement. What do they actually do? How many hours per week? This is a financial question disguised as an operational one.
If the owner is working 60 hours a week as the lead technician, primary sales relationship, and bookkeeper, the SDE is understated because the replacement cost of those roles is buried in the owner's comp add-back. A $350K SDE business where replacing the owner requires three hires at $60K, $80K, and $50K is a $160K SDE business.
Skip the manual CIM extraction
Searcher OS uploads your CIM and extracts financials, risks, and key metrics automatically, then populates your SBA calculator for instant deal modeling.
Try it free →Standard CIM Sections
Once the financials pass initial scrutiny, read the rest in this order, not the order the broker wrote it:
Customer Concentration
This is the section most buyers skip and shouldn't. Find it. It may be buried in "Operations" or "Revenue Breakdown." You're looking for the percentage of revenue from the top 1, 3, and 5 customers.
The threshold that matters: if any single customer exceeds 20% of revenue, you have customer concentration risk that affects both your DSCR and your negotiating position. A business where 35% of revenue comes from one municipal contract is not the same as a business where the top 50 customers each represent 2%. The financial statements may look identical.
Employee Roster and Key-Person Risk
How many employees? What are their tenures? Is there a management layer that functions without the owner, or does every decision escalate to the seller? Key-person risk is the operational equivalent of customer concentration. One departure can collapse operations in the same way one customer departure can collapse revenue.
Reason for Selling
The reason for selling is always given as retirement, health, family, or "wanting to pursue other interests." That's fine. Those are legitimate reasons. What you're looking for is whether the stated reason is consistent with the business trajectory. A 52-year-old owner "retiring" from a business with declining revenue for three years is a different story than the same person retiring from a growing one.
No clear reason for selling is a yellow flag. An evasive answer to a direct question about it in the call is a red flag.
Market Position and Competition
Broker-prepared CIMs always describe the business as well-positioned in a growing market with significant barriers to entry. Read this section for what it doesn't say. What is the actual competitive set? Is this a business that survives on relationships and reputation, or on a structural advantage (proprietary technology, exclusive contracts, hard-to-replicate equipment)? Relationship-based businesses are owner-dependent. Structurally-advantaged businesses are more transferable.
Growth Opportunities
This section is aspirational. Treat it as a bonus, not a basis for your underwriting. You're buying historical performance. If the growth opportunities were obvious and executable, the current owner would have captured them. Sometimes they're real (an obvious geographic expansion, an untapped service line). More often, they're filler.
Red Flags That Should Accelerate You to a No
Some findings should prompt a fast pass instead of further analysis. If you encounter any of these, the bar for continuing is high:
- Declining revenue three years in a row. This is the clearest signal that something structural is wrong. Revenue can decline for cyclical reasons, but three consecutive years of decline requires a very compelling explanation.
- Customer concentration above 20% from a single customer. One customer departure doesn't just hurt; it potentially kills DSCR. A business with $400K SDE and 35% of revenue from one client has an effective DSCR much closer to zero than the financials suggest.
- Owner working 60+ hours per week with no management layer. This isn't just an operator-dependence problem. It's a hidden cost problem. The owner's SDE overstates what a new buyer will actually earn unless they're prepared to work the same hours, which defeats part of the purpose of buying an existing business.
- Aggressive add-backs that inflate SDE significantly. Add-backs above 30 to 35% of net profit warrant hard scrutiny. If the broker is adding back $150K on $200K net profit to get to $350K SDE, every one of those add-backs needs to be individually verifiable and genuinely non-recurring.
- No clear reason for selling. "Pursuing other interests" from a healthy, cash-flowing business with a fully engaged owner is odd. People don't sell golden geese without a reason. If the CIM doesn't tell you what it is, ask directly.
- Pending litigation or regulatory issues. The legal section will often mention ongoing disputes as "immaterial" or "being resolved in the ordinary course." Take this at face value only after your attorney reviews it. Environmental issues, regulatory compliance problems, and employee lawsuits that aren't disclosed until DD are the kind of surprises that can kill a closing months in.
Green Flags That Earn Further Attention
The inverse is equally important. These signals don't make a deal good by themselves, but they meaningfully reduce risk and increase confidence:
- Recurring revenue and long-term contracts. A business where 60% of revenue is under contract for 12+ months is fundamentally more predictable than one that re-earns 100% of revenue each year. Recurring revenue doesn't survive transitions automatically, but it gives a new owner runway.
- Absentee or part-time owner involvement. An owner working 10 to 15 hours per week means management is functioning independently. The business isn't dependent on the owner's personal relationships or technical skills to operate. This is the cleanest version of an acquisition target.
- Growing revenue with stable or expanding margins. Three years of consistent revenue growth (even modest growth of 5 to 8% per year) with stable margins is a strong signal of operational health. It's not a guarantee, but it's the baseline you want.
- Diversified customer base. No single customer above 10% of revenue, no industry vertical above 30%. Revenue spread across many customers means a single departure is manageable, not catastrophic.
- Clean books and willingness to provide tax returns. A seller who proactively offers to share tax returns, bank statements, and POS reports is a seller who knows the numbers will hold up. Reluctance to provide supporting documentation is a yellow flag. The business either has something to hide or is run in a way that makes reconciling numbers difficult. Both are problems.
- Experienced management team in place. A GM, operations manager, or department heads who've been with the company 3+ years and can operate without the owner is a structural advantage. It de-risks the transition and suggests the business has institutional knowledge that doesn't walk out the door on day one.
Speed to No: The Two-Hour Decision Framework
The goal of a CIM review is not to complete a full financial analysis. It's to answer one question: Does this deal merit deeper investigation?
A structured two-hour review looks like this:
- Minutes 0 to 15: Financials scan. Find the three-year P&L. Check revenue trend, SDE trend, and the add-back schedule. If the trend is declining and add-backs are aggressive, you may not need to go further.
- Minutes 15 to 30: Owner and customer concentration. How many hours does the owner work? What's the top-customer concentration? Any single point of failure immediately visible?
- Minutes 30 to 60: Structure and operations. Employees, management layer, facilities, lease terms, key contracts. Is the business portable to a new owner without structural disruption?
- Minutes 60 to 90: Quick model. Take the SDE, run it through your SBA loan model at the asking price. Does the deal pencil at the asking multiple? This doesn't require a full calculator. A back-of-envelope DSCR check takes five minutes. For a more detailed model, use the free SBA loan calculator.
- Minutes 90 to 120: Decision. Pass or pursue? If it's a pursue, what are the specific questions you need answered in the initial seller call? Write them down.
This is a triage pass. Deals that pass triage get a deeper analysis before you submit an LOI. The CIM review filters; it doesn't render the verdict.
The CIM-to-Financial-Model Pipeline
When a deal passes triage, the next step is translating the CIM's numbers into a deal model. The key inputs you need from the CIM:
- Asking price. Usually on the front page or in the financial summary.
- SDE (most recent year and trailing average). The most recent year matters most. If 2025 SDE is significantly higher or lower than the 3-year average, understand why.
- Revenue (3 years). For the trend context.
- Real estate: Owned or leased? If the business owns its property, that may be sold separately or included, which affects the capital requirement significantly.
- Working capital estimate. Many CIMs don't include this; you'll need to estimate it from AR/AP data or ask. Working capital required at closing typically runs 1 to 3 months of revenue.
With those inputs, plug the numbers into an SBA loan model: asking price, proposed down payment (10 to 15%), seller note if applicable, loan amount, interest rate (~10.5% as of 2026), 10-year term. What's the DSCR? Does it clear the SBA minimum of 1.25x? For a step-by-step model, see how DSCR works.
AI-Assisted CIM Analysis
The manual process of reading a CIM (finding the financials, building out the add-back schedule, cross-referencing revenue figures) takes 60 to 90 minutes on a well-formatted document. On a poorly organized CIM, it can take longer.
AI-assisted analysis tools can now extract financial data, flag risk factors, and summarize key metrics from a CIM in under a minute. The output isn't perfect. Edge cases, unusual formats, and scanned PDFs still require manual review. But for standard broker-prepared CIMs, automated extraction compresses the data-gathering step significantly, so you can spend your time on interpretation rather than extraction.
I built Searcher OS partly because I was tired of manually pulling numbers from 40-page PDFs. Upload the CIM, and the financials populate automatically: SDE, revenue, asking price, margin trend, customer concentration flags. The calculator auto-populates for instant DSCR modeling. It doesn't replace judgment, but it compresses the mechanical work so you can focus on the parts that actually require thinking.
What Comes After the CIM
If a deal passes your CIM review, the typical next step is an introductory call with the broker and sometimes the seller. This call has a specific purpose: validate the story behind the numbers, not rehash what's in the CIM.
The questions you want answered:
- What does the owner do day-to-day, specifically?
- What's the real reason for selling, and why now?
- Who are the key employees, and do they know the business is for sale?
- What percentage of revenue is truly recurring vs. one-time project work?
- Is there any customer concentration that isn't reflected in the CIM?
- What does transition look like? How long is the seller willing to stay involved?
The answers to these questions, combined with the CIM data, will determine whether you submit an LOI. If you do submit, that triggers the formal due diligence process, a much deeper examination that goes well beyond what's in the CIM. For a full breakdown, see the business acquisition due diligence checklist.
The Discipline That Separates Good Searchers
Most buyers who struggle with the CIM process are struggling with one of two things: they're either reading too slowly (trying to absorb everything before making a decision) or they're reading too charitably (ignoring red flags because the business otherwise seems attractive).
The mental model that helps: every CIM you spend time on has an opportunity cost. Time spent on a bad deal is time not spent on a good one. The searchers who close efficiently are disciplined about both ends. They triage fast and they kill fast when the numbers don't work.
The full acquisition process is covered in the complete guide to buying a small business. For the financial analysis side, the DSCR explainer covers the math behind qualifying a deal for SBA financing, and the free SBA calculator lets you model any deal scenario in minutes.