Three Days Before You Sign: A Pre-Signature Integrity Protocol for 2026 Deals
Deal velocity has become a competitive credential. Term sheets move in days, diligence runs in parallel workstreams, and the signature date is often set before the questions are drafted. The result is a familiar pattern: small ethical questions that no one owns get deferred to post-close integration, where they become expensive, public, or both.
The answer is not a slower process. It is a narrower, more disciplined one. Seventy-two working hours is long enough to surface what a signature will make permanent, and short enough that deal teams will actually run it. The protocol below is designed to be executed by the deal team itself, with one non-negotiable condition: the protocol owner reports outside the deal team's incentive structure, whether to the general counsel, the chief risk officer, or an audit committee designee.
Why 72 hours is the right interval
A week invites postponement. A single day invites theater. Three working days forces prioritization: it is enough time to run targeted questions, convene the right approvers once, and produce a written record — and it is short enough that invoking it does not read as an obstacle. Start the clock when the term sheet is final. If the deal accelerates, the protocol does not shrink; the diligence scope does.
Day one: surface the red flags
Assign two people who did not build the financial model. Their task is not to validate the thesis but to find the questions the thesis makes inconvenient. Ten questions cover most of the ground:
- Which number in this model, if wrong by 10 percent, would make the deal unattractive — and who independently verified it?
- Which representation rests on a single source, and who controls that source?
- Has any principal, director, or beneficial owner been subject to regulatory action, sanctions screening, or litigation alleging fraud?
- Which counterparties in this structure operate in jurisdictions we have never reviewed?
- What were we explicitly asked not to diligence, and by whom?
- What does the counterparty's revenue depend on that could disappear with a single regulator's decision?
- How is labor sourced in the parts of the operation we cannot see?
- What did the prior auditor, quality reviewer, or compliance officer leave, and why?
- Which of our own policies will this entity be unable to meet on day one?
- If this deal appeared on the front page in six months, which sentence would we least want to read?
Log every question in a shared record, with the answer, the source, and a status of closed, open, or accepted-unresolved. The uncomfortable-question log is the deliverable, not a clean report.
Day two: fix decision rights and evidence standards
Speed failures are almost always authority failures. Resolve them in a single session.
Decision rights. Name the individual who may approve, the individual who may veto, and the thresholds that trigger each. Veto authority should sit with legal or risk on defined matters — sanctions exposure, unresolved conduct findings, anti-corruption red flags — and that authority must be exercised with a documented rationale, not a verbal caution.
Evidence standards. Adopt three rules. First, two independent sources for any material representation. Second, contemporaneous documents only; a recollection of a conversation is not evidence. Third, the phrase we were told does not close a question — it only identifies who bears the residual risk.
A dissent register. Any team member may record a reservation without blocking the deal. Dissents are read aloud before signature and attached to the approval memo. Most post-close regret can be traced to a concern somebody held privately.
One record. A single shared log, no side channels. Chat threads and verbal sidebars are where unresolved questions quietly die.
Day three: set triggers and write the memo
Walk-away triggers belong in four categories, and each category needs a named owner before signature.
- Hard triggers — no cure, no deal. Falsified records, sanctioned-party exposure in the ownership chain, refusal of audit rights, refusal to warrant anti-corruption compliance, any request to omit a known liability from representations.
- Soft triggers — cure required. Incomplete beneficial ownership disclosure, unresolved labor findings, missing certifications with a credible remediation path and escrowed consideration.
- Structural triggers. Price above the walk-away valuation, indemnity caps below modeled exposure, or earn-out terms that incentivize the very behavior we just diligenced.
- Temporal triggers. Questions unresolved by a stated date convert automatically into a hard trigger. Deadlines prevent the quiet drift that turns an open item into a signed one.
Then write the two-page memo: what we verified, what we assumed, what we chose not to know, who owns each residual risk, and what post-signature event would cause us to reopen the decision. Three signatures — business owner, legal, risk — with no delegation and no signature-in-absentia.
The handoff most teams skip
Within thirty days of close, transfer the residual risk register into the integration plan with named owners and review dates. Add a ninety-day look-back against the memo: which assumptions held, which did not, and which open questions were never closed. That review is the only mechanism that improves the next deal.
What the protocol costs
Twenty to twenty-five person-hours, concentrated in three days. Set that against the cost of a post-close remediation, a restatement, or a reputation event, and the arithmetic is not close. Integrity in dealmaking is not a matter of moving more slowly. It is a matter of deciding, in advance and in writing, which questions will be answered before the pen moves — and which answers will end the conversation entirely.