--- title: "Private Placement Memorandum (PPM): Sections + Secure Sharing" lang: en canonical_url: https://www.peony.ink/blog/private-placement-memorandum description: "What a private placement memorandum is, its standard sections, when a PPM is required for a Reg D offering, how it differs from a CIM, and how to distribute it securely without leaking or showing a superseded version." date: "2026-06-22T12:00:00.000Z" last_updated: "2026-07-25T12:00:00.000Z" author: "Deqian Jia" --- # Private Placement Memorandum (PPM): Sections and How to Share It Securely _Last updated: July 2026_ > **Quick answer:** A private placement memorandum (PPM) is the disclosure document an issuer gives prospective investors when raising capital through a private securities offering — almost always a [Regulation D](https://www.peony.ink/blog/reg-d-data-room-506b-vs-506c) offering. It describes the company, the **terms of the offering**, the **use of proceeds**, and — most importantly — every material **risk factor**, so investors can decide on full information and the issuer earns the strongest **antifraud (Rule 10b-5)** protection. A PPM is **legally optional** for a Reg D deal sold entirely to accredited investors, but **effectively required** the moment a non-accredited investor joins a 506(b) offering. The cluster frame to keep in mind: **a PPM discloses; the [data room](https://www.peony.ink/blog/private-placement-data-room) proves.** The PPM makes the representations; the data room holds the evidence behind them — and, just as important, controls how the PPM itself is distributed: per-recipient access, dynamic watermark, one current version (a superseded PPM is a real liability), and a who-saw-what-version audit trail. ![Inside a private placement memorandum: the confidentiality legend, the offering terms, risk factors, the company and cap table, and subscription procedures](https://www.peony.ink/images/blog/private-placement-memorandum-anatomy.png) I'm Deqian Jia, co-founder of [Peony](https://www.peony.ink/), a data room company used by **8,000+ teams** across M&A, fundraising, and private placements. A large share of the sensitive documents that move through our platform are PPMs — and the moment a PPM leaves an issuer's hands, how it was written and how it's distributed start working either for them or against them. Most of what's written about PPMs stops at "here are the sections." That's the easy half. The half that actually creates or destroys liability is **distribution** — getting the right (current) version in front of the right (qualified) investor, provably, without it leaking — and the **financial exhibit** investors most want to touch. That's where this guide goes deep. This post is the **PPM-document spoke** of our private-placement cluster. For the offering-exemption decision (506(b) vs 506(c), general solicitation, accredited-investor verification) see [Reg D Data Room: 506(b) vs 506(c)](https://www.peony.ink/blog/reg-d-data-room-506b-vs-506c); for building the room itself see [How to Set Up a Private Placement Data Room](https://www.peony.ink/blog/how-to-set-up-a-private-placement-data-room); and the [private placement data room hub](https://www.peony.ink/blog/private-placement-data-room) ties the whole workflow together. --- ## What is a private placement memorandum (PPM)? A private placement memorandum is the disclosure document an **issuer** delivers to prospective **investors** when offering securities in a private placement — a capital raise conducted under an exemption from full SEC registration, almost always **Regulation D** under the Securities Act. Its purpose is disclosure, not persuasion: it tells an investor what the company is, what security is being offered and on what terms, what the money will fund, and every material way the investment could go wrong. The scale of this market is large and almost entirely private. According to the SEC, issuers raised roughly **$259 billion through Rule 506(b)** offerings and about **$16 billion through Rule 506(c)** offerings in the agency's July 2022–June 2023 reporting window — capital that mostly never touches a public registration. Most of those deals were documented with a PPM. Two terms worth pinning down up front, because they decide whether you need a PPM at all: - **Accredited investor** — broadly, an individual with income over **$200,000** (**$300,000** jointly with a spouse) in each of the last two years, or a net worth over **$1 million** excluding their primary residence, or who holds a Series 7, 65, or 82 license. (Entities have their own tests.) - **Form D** — the brief notice an issuer files with the SEC on **EDGAR within 15 days** of the first sale in a Reg D offering. You file it whether or not you used a PPM. ## How is a PPM different from a pitch deck or a CIM? People conflate the PPM with two documents it only superficially resembles, and getting the distinction wrong creates real problems. A **startup pitch deck** is built to sell a forward vision and raise capital on optimism — it accentuates upside and is held to no securities-disclosure standard. A PPM is the opposite instrument: a sober, counsel-drafted disclosure document whose risk-factors section is designed to be exhaustive rather than flattering. A **CIM (confidential information memorandum)** is the document people most often confuse with a PPM, and the difference is fundamental. A CIM is an **M&A sell-side marketing document** — it markets a whole company for sale to qualified buyers on proven, defensible numbers, and it carries no securities-law disclosure mandate because no new securities are being issued. A PPM is a **securities-offering disclosure document** — it offers securities to investors and discloses risk to earn antifraud protection. Different audience (buyers vs investors), different purpose (sell a business vs offer securities), different legal frame (none vs Regulation D and the Securities Act). If you want the full anatomy of the M&A document, we cover it in [How to Write a CIM](https://www.peony.ink/blog/how-to-write-a-cim) — but do not repurpose a CIM as a PPM or vice versa. The clean mnemonic: **a PPM offers securities and discloses risk; a CIM markets a business for sale.** ## Is a PPM legally required for a Reg D offering? This is the question that surprises most first-time issuers: **for a Reg D deal sold entirely to accredited investors, a PPM is not legally required.** Regulation D does not mandate a specific disclosure document for an all-accredited offering under Rule 506(b) or 506(c). The nuance that matters: **the moment a single non-accredited investor participates in a 506(b) offering**, Reg D requires you to furnish specified disclosure — financial statements and offering information — to those non-accredited investors, and the PPM is the standard vehicle for delivering it. So for a 506(b) deal that includes non-accredited investors, a PPM becomes **effectively required**. (506(c) offerings, by contrast, must be sold only to verified accredited investors and may use general solicitation — that decision is covered in our [506(b) vs 506(c) guide](https://www.peony.ink/blog/reg-d-data-room-506b-vs-506c).) Even when it's optional, experienced issuers and securities counsel almost always produce one anyway, for one reason: **the PPM is your strongest antifraud shield.** Under Rule 10b-5 and the broader antifraud provisions, you are liable for material misstatements _and_ material omissions in connection with the sale of a security. A complete PPM with a thorough risk-factors section is the cleanest record that you disclosed the material facts. The right way to think about a PPM isn't "a formality I might skip" — it's liability protection you write for yourself. ## Does the PPM change under 506(b) vs 506(c)? Barely — and that surprises most issuers who ask. The document's skeleton is identical under both exemptions: cover legends, offering terms, use of proceeds, risk factors, description of securities, subscription procedures. What the exemption choice really changes is **the obligation and the evidence around the document**, in three ways: - **The disclosure obligation.** Under **506(b)**, one non-accredited participant makes furnishing specified disclosure to those investors mandatory — the PPM goes from best practice to effectively required. Under **506(c)**, every investor must be verified accredited, so the PPM stays technically optional but remains your Rule 10b-5 shield. - **The consistency surface.** 506(c) permits **general solicitation** — and everything you publish while advertising the offering (the deal page, the webinar, the email campaign) must stay consistent with the PPM. The memorandum remains the master disclosure that your marketing cannot contradict; an advertised claim the PPM doesn't support is exactly the kind of inconsistency a plaintiff's lawyer looks for. - **The delivery process.** A 506(c) PPM travels with an accreditation-verification workflow — the SEC's **"reasonable steps to verify"** standard — so the subscription procedures typically reference the verification step, and your distribution system should be able to show that verification preceded access. So don't expect counsel to hand you a radically different document when you switch exemptions. Expect the **workflow around it** to change — and see our [506(b) vs 506(c) guide](https://www.peony.ink/blog/reg-d-data-room-506b-vs-506c) for that full split, including the March 12, 2025 SEC no-action letter on verification. ## What are the standard sections of a PPM? There's no single legally mandated format, but a stable section order recurs across well-drafted PPMs. Here's the canonical backbone, with what each section is for: | # | Section | What it does | | --- | ------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- | | 1 | Cover page | The confidentiality notice **and the restricted-securities legend** — stating the securities aren't registered and can't be freely resold. Counsel owns this. | | 2 | Executive / offering summary | A short overview of the company and the offer. | | 3 | Terms of the offering | Security type, price, minimum investment, total raise, and closing mechanics. | | 4 | Use of proceeds | Exactly how the capital will be deployed. | | 5 | Business description | The company, its market, and its model. | | 6 | Management / the team | Bios and relevant track record of the people running it. | | 7 | Capitalization / cap table | Ownership before and after the raise; dilution. | | 8 | **Risk factors** | The longest, most heavily lawyered section — an exhaustive catalog of what could go wrong. | | 9 | Financial statements | Historical financials and, where relevant, projections with stated assumptions. | | 10 | Description of securities & investor rights | Voting, distributions, transfer restrictions, information rights. | | 11 | Subscription procedures | How an investor commits — the subscription agreement and the investor questionnaire. | The front matter (the cover legends) and the **risk factors** carry the legal weight; the business and financial sections carry the investment case. Have your securities counsel own the cover legends, the risk-factors section, and the description of securities — those are where liability is won or lost. (The cover page, incidentally, is why the document you receive is conventionally titled a **"Confidential Private Placement Memorandum"** — the confidentiality legend is part of the document's first page, not an afterthought, and it's one more reason the memorandum shouldn't circulate as a loose email attachment.) ## Why is the risk factors section the most heavily lawyered part of the PPM? Because it's where the PPM does its real legal work. Under **Rule 10b-5**, an issuer is liable not only for false statements but for **material facts it fails to disclose**. The risk-factors section exists to surface every material risk so no investor can later claim they weren't warned: - **Business and market risks** — competition, customer concentration, execution, key-person dependence. - **Financial and liquidity risks** — cash runway, leverage, the possibility of needing more capital on worse terms. - **Risks of the securities themselves** — illiquidity, transfer restrictions, no public market, subordination, dilution. - **Conflicts of interest** — related-party arrangements, sponsor economics, allocation conflicts. - **The blunt one** — that an investor could **lose their entire investment.** Securities counsel drafts this section to be **specific to your company** rather than generic (boilerplate risk factors are weaker protection), comprehensive rather than flattering, and consistent with everything else in the document — because a risk that's contradicted by an optimistic claim elsewhere in the PPM is worse than no disclosure at all. The discipline is the inverse of marketing: everywhere else you make the case; here, you and your lawyer imagine every way it fails and write it down. ## How do you distribute a PPM securely to investors? This is the half of the PPM story that gets neglected, and it's where issuers create avoidable exposure. **Never email the PPM as a loose attachment.** An emailed PDF can be forwarded to anyone — competitors, unqualified recipients, people who were never part of the offering — and you lose all visibility into where it went. That undercuts both the confidentiality the cover page promises and the controlled-offering posture Reg D assumes. The controlled workflow is to distribute the PPM through a **data room** with per-recipient access. The mechanics that matter: - **Per-recipient access, not a shared link.** Each prospective investor gets their own access, so you know exactly who has what — and can cut one off without affecting the rest. - **Gate before the PPM is visible.** Require a **signed NDA** and, where you want it, a **pre-qualification questionnaire** and **email identity verification** before the document opens. This is how you collect and log the evidence of who you let in. - **Dynamic watermark on every page.** Each investor's view carries their name, email, and a timestamp — a forwarding deterrent and a forensic trail if a copy ever surfaces where it shouldn't. - **Screenshot protection and instant revoke.** Block desktop screenshots, and revoke a single viewer's access the instant a conversation ends or a recipient turns out to be unqualified. On Peony, **dynamic watermarking, screenshot protection, granular per-file permissions, and single-viewer instant revoke** are on the **[Data Room plan ($52/admin/month)](https://www.peony.ink/pricing)**; **NDA gating, link-level revoke, e-signatures, and analytics** are available from the **Business plan ($30/admin/month)**. One honest caveat, because it's the line issuers most often get wrong: a data room can **collect and log the evidence** — the signed NDA, the questionnaire responses, the verified email — and **gate access** behind it, but it **does not verify accredited-investor status for you.** That determination stays with the issuer and securities counsel. (For a 506(c) raise, where accreditation must be _verified_, see the verification discussion in our [506(b) vs 506(c) guide](https://www.peony.ink/blog/reg-d-data-room-506b-vs-506c) — including the March 12, 2025 SEC no-action letter that added a high-minimum-investment-plus-written-representation verification path.) ## How do you share the offering's financial model without it dying in a PDF? The offering's **financial model** — your projections, the sources-and-uses, the return math behind the terms — is the exhibit sophisticated investors most want to interrogate, and it's the one legacy data rooms handle worst. They flatten every upload to a static PDF, so the model arrives **dead**: no working formulas, nothing to interrogate. The issuer then ends up emailing the real `.xlsx` so an investor can "play with the assumptions" — which is precisely the uncontrolled, un-watermarked leak the data room was supposed to prevent. Peony renders an **Excel model as a live, interactive spreadsheet right in the browser** — the formulas compute, so an investor can change an assumption and watch the outputs move, a Google-Sheets experience inside the room with no download and no emailed file. For a fully bespoke model you can also publish it as an **HTML artifact, which Peony renders live with the JavaScript executing** (the same capability that runs interactive, AI-generated artifacts in place). Both paths stay wrapped in the full control layer — dynamic watermarking, screenshot protection, per-viewer permissions, and instant revoke. Two concrete wins for a PPM: - **One version of the truth.** There's exactly one current model in the room, so no investor can circulate a stale copy from their inbox. - **Show outputs, hide the secret sauce.** Publish a version with the proprietary assumption tabs excluded — investors see returns and sensitivities, not your full underlying logic. This is the clearest functional gap between Peony and convert-to-PDF incumbents, and it lands on exactly the document an investor most wants to touch before they subscribe. ## How do you keep every investor on the current version of the PPM? A quiet but real liability: if you **amend the PPM mid-raise** — a changed term, a corrected figure, a new risk factor — and an investor subscribes based on a **superseded version** still sitting in their inbox, you've effectively made an offering on outdated disclosure. That's the exact material-misstatement exposure the PPM was meant to close. Emailing PDFs makes it nearly inevitable, because every old version keeps living in every recipient's mailbox indefinitely. Distributing through a data room fixes this **structurally**: - **One current PPM in the room.** Swap in the amended version and every investor immediately sees only the current one — no stale copy floats around, because no file was ever emailed out. - **A who-saw-what-version audit trail.** You get a per-investor, per-version record of who opened which version of the PPM, and when. If a dispute ever arises about what an investor was shown before subscribing, that log is the evidence you'll want — and it's a record an emailed-PDF process simply cannot produce. When an investor is ready to commit, the same room captures the **e-signature on the subscription agreement** and the investor questionnaire, so the commit step lives inside the controlled environment too — not in a separate, unlogged email thread. ## What does a PPM cost, and who should write it? A PPM is drafted by **securities counsel** — this is not a do-it-yourself document. The risk-factors section, the cover legends, and the description of securities are exactly where legal liability is won or lost, and a template pulled off the internet is weaker antifraud protection than a PPM written specifically for your company and your offering. - **Cost** varies widely with deal complexity and firm. A custom PPM from securities counsel commonly runs into the **low five figures and up**; simpler, standardized offerings sit at the lower end, while complex multi-class or fund offerings cost more. - **Timeline:** the drafting itself is typically a few weeks, but the binding constraint is usually the _issuer_ — assembling clean financial statements, the cap table, and the use-of-proceeds detail counsel needs is what stretches the calendar. The useful way to frame the spend: the PPM is one of the highest-leverage documents in the entire raise — it's both the instrument that lets you offer the securities and your primary record of having disclosed the material facts. Under-investing in it is a false economy. ## How does a PPM differ by offering type — real estate syndication, hedge fund, or oil & gas? The skeleton stays constant across vehicles; the center of gravity moves. If you're searching for a vehicle-specific PPM, here's what actually differs: - **Real estate syndication PPM.** Built around **one identified property**: the property description and business plan become the heart of the document, the **distribution waterfall and sponsor promote** dominate the description of securities, and the sponsor's track record carries the management section. The room around it should make every pro-forma assumption provable — that workflow is our [real estate syndication data room guide](https://www.peony.ink/blog/real-estate-syndication-data-room). - **Hedge fund PPM.** Describes an **ongoing trading vehicle**, not a single raise: the strategy and instruments, the fee terms (a management fee plus a performance-based incentive allocation), and — critically — the **liquidity terms** (lock-ups, gates, redemption notice periods), which are effectively part of the security itself, plus valuation, custody, and brokerage disclosures. It pairs with the fund's LPA and subscription documents, and it's maintained and updated as the fund evolves rather than retired at a closing. (For the standing document room a manager runs alongside it, see [Peony for hedge funds](https://www.peony.ink/solutions/hedge-funds).) - **Oil & gas program PPM.** Dominated by the **interest structure** — working interests versus royalty interests — plus drilling and geological risk factors, operator arrangements, and the distinctive tax-treatment disclosures those programs carry. The underlying asset diligence lives in an [oil & gas data room](https://www.peony.ink/blog/best-data-room-for-oil-and-gas-companies). What does **not** change across any of them: the distribution discipline. Per-recipient access, one current version, and a who-saw-what-version record matter identically whether the offering is a building, a fund, or a drilling program — the vehicle changes the disclosure's content, never the evidentiary standard for delivering it. That pattern is consistent across the **8,000+ teams** running raises on Peony, from single-property syndications to fund vehicles. ## The bottom line A private placement memorandum is a **disclosure** document, not a marketing one: it offers securities, sets the terms, and — through an exhaustive risk-factors section — earns the issuer antifraud protection under Rule 10b-5. It's legally optional for an all-accredited Reg D deal but effectively required once a non-accredited investor joins a 506(b) offering, and most serious issuers produce one regardless because it's the cheapest liability protection they can buy. But writing a clean PPM is only half the job. **A PPM discloses; the data room proves.** Distribute it per-recipient behind an NDA and pre-qualification — never as a loose email — watermark every page, keep exactly one current version so no one acts on a stale draft, share the financial model **live** instead of as a dead PDF, and keep a who-saw-what-version audit trail. That's the workflow that turns a well-drafted PPM into a defensible one. [See Peony for fundraising →](https://www.peony.ink/solutions/fundraising) · [Start a data room →](https://www.peony.ink/pricing) --- ## Related resources - [Private Placement Data Room (Hub)](https://www.peony.ink/blog/private-placement-data-room) — the full private-placement workflow this PPM spoke sits under - [Reg D Data Room: 506(b) vs 506(c)](https://www.peony.ink/blog/reg-d-data-room-506b-vs-506c) — the exemption decision, general solicitation, and accredited-investor verification - [How to Set Up a Private Placement Data Room](https://www.peony.ink/blog/how-to-set-up-a-private-placement-data-room) — building and structuring the room itself - [How to Write a CIM](https://www.peony.ink/blog/how-to-write-a-cim) — the M&A sell-side document a PPM is often confused with (different document, different rules) - [Real Estate Syndication Data Room](https://www.peony.ink/blog/real-estate-syndication-data-room) — the single-asset raise the most common PPM variant is written for - [Best Data Rooms for Oil & Gas Companies](https://www.peony.ink/blog/best-data-room-for-oil-and-gas-companies) — the asset-diligence layer under an O&G program PPM - [Peony for Hedge Funds](https://www.peony.ink/solutions/hedge-funds) — the standing document room alongside a fund PPM - [Peony for Fundraising](https://www.peony.ink/solutions/fundraising) - [Peony Pricing](https://www.peony.ink/pricing) ## FAQ ### What exactly is a private placement memorandum, and how is it different from a pitch deck or a CIM? A private placement memorandum (PPM) is the disclosure document an issuer gives prospective investors when raising capital through a private securities offering — almost always a Regulation D offering exempt from full SEC registration. Its job is disclosure: it describes the company, the terms of the securities being offered, what the money will be used for, and — critically — every material risk, so an investor can make an informed decision and the issuer earns antifraud (Rule 10b-5) protection. That makes it a fundamentally different animal from two documents people confuse it with. A startup pitch deck sells a forward vision to raise capital on optimism; a PPM is a sober, lawyer-drafted disclosure instrument whose risk-factors section is designed to be exhaustive, not flattering. And a CIM (confidential information memorandum) is an M&A sell-side marketing document used to sell a whole company to qualified buyers on proven numbers — it carries no securities-law disclosure mandate and addresses buyers, not investors in a new securities issuance. A simple way to hold the distinction: a PPM offers securities and discloses risk to protect the issuer; a CIM markets a business for sale to maximize price. Don't repurpose one as the other. ### Do I actually need a PPM for my Reg D raise, or is it optional? It depends on who's investing. For a Rule 506(b) or 506(c) offering sold entirely to accredited investors, a PPM is not legally required — Regulation D doesn't mandate a specific disclosure document for an all-accredited deal. But the moment even one non-accredited investor participates in a 506(b) offering, Reg D requires that you furnish specified disclosure (financial statements and offering information) to those non-accredited investors, and a PPM is the standard vehicle for delivering it — so for a 506(b) deal with non-accredited investors a PPM becomes effectively required. Even in an all-accredited deal where it's optional, most experienced issuers and securities counsel still produce one, because the PPM is your strongest antifraud shield: U.S. securities law (including Rule 10b-5) holds you liable for material misstatements and material omissions in connection with the sale of a security, and a complete PPM with a thorough risk-factors section is the cleanest record that you disclosed the material facts. Treat the PPM less as a formality and more as liability insurance you write yourself. (Note: you still file a Form D with the SEC on EDGAR within 15 days of your first sale regardless of whether you use a PPM.) ### Does the PPM change if I raise under 506(b) versus 506(c)? The core document barely changes — cover legends, offering terms, use of proceeds, risk factors, and subscription procedures are the same skeleton under both exemptions. What changes is the obligation and the evidence around it. First, the disclosure obligation: under 506(b), the moment a non-accredited investor participates, furnishing specified disclosure to those investors becomes mandatory and the PPM shifts from best practice to effectively required; under 506(c), every investor must be verified accredited, so the PPM stays technically optional but remains your Rule 10b-5 antifraud shield. Second, the consistency surface: 506(c) permits general solicitation, so everything you publish while advertising the offering — the deal page, the webinar, the email campaign — must stay consistent with the PPM, which remains the master disclosure your marketing cannot contradict. Third, the process around delivery: a 506(c) PPM travels with an accreditation-verification workflow (the SEC's 'reasonable steps to verify' standard), so the subscription procedures typically reference the verification step and your distribution system needs to show verification preceded access. In short: the memorandum is stable; the evidence you must keep around it is what the exemption choice really changes. The full split is in our Reg D 506(b) vs 506(c) guide. ### What are the standard sections of a PPM, in order? There's no single legally mandated format, but a stable order recurs across well-drafted PPMs: (1) cover page — the confidentiality notice and the restricted-securities legend stating the securities are not registered and can't be freely resold; (2) executive summary / offering summary; (3) terms of the offering — security type, price, minimum investment, amount being raised, closing mechanics; (4) use of proceeds — exactly how the capital will be deployed; (5) business description — the company, market, and model; (6) management / the team — bios and relevant track record; (7) capitalization / cap table — ownership before and after the raise, dilution; (8) risk factors — the longest and most heavily lawyered section, an exhaustive catalog of what could go wrong; (9) financial statements — historical financials and, where relevant, projections with stated assumptions; (10) description of the securities and investor rights — voting, distributions, transfer restrictions, information rights; (11) subscription procedures — how an investor commits, including the subscription agreement and investor questionnaire. The front matter and the risk factors carry the legal weight; the business and financial sections carry the investment case. Have securities counsel own the cover legends, the risk factors, and the description of securities. ### How do I distribute a PPM to investors without it leaking or being forwarded? Never email the PPM as a loose attachment — an emailed PDF can be forwarded to anyone, including competitors and people who were never qualified to see the offering, and you lose all visibility into where it went. The controlled workflow is to distribute it through a data room with per-recipient access: each prospective investor gets their own link, gated behind a signed NDA and, where you want it, a pre-qualification questionnaire and email identity verification before the PPM is even visible. Apply dynamic watermarking so every page each investor sees carries their name, email, and a timestamp — a forwarding deterrent and a forensic trail if a copy ever surfaces where it shouldn't. Turn on screenshot protection and keep the ability to instantly revoke a single viewer's access if a conversation ends or a recipient turns out to be unqualified. On Peony, watermarking, screenshot protection, granular per-file permissions, and single-viewer instant revoke are on the Data Room plan ($52/admin/month); NDA gating, link-level revoke, e-signatures, and analytics are available from the Business plan ($30/admin/month). One honest caveat: a data room can collect and log the evidence — the signed NDA, the questionnaire responses, the verified email — but it does not verify accredited-investor status for you; that determination remains the issuer's and counsel's responsibility. ### Is emailing my PPM as a PDF attachment a compliance risk? It's three risks stacked. First, control: an emailed PDF can be forwarded to anyone — competitors, unqualified recipients — and under 506(b), uncontrolled circulation sits badly with an exemption that prohibits general solicitation. Second, version risk: every copy you ever email lives on in recipients' inboxes indefinitely, so when you amend the PPM mid-raise, an investor can subscribe against superseded disclosure — real material-misstatement exposure. Third, and least appreciated: no evidentiary record. Your sent folder proves you transmitted a file; it does not prove the investor received, opened, or reviewed the current risk factors — which is precisely what you need to show if a Rule 10b-5 claim ever arrives. Distributing through a data room reverses all three: per-recipient links behind email verification and an NDA, exactly one current version in the room, and a per-investor, timestamped log of who viewed which version and when. On Peony, that workflow — email authentication, NDA gating, personalized links, and the access log — starts on the Business plan ($30/admin/month). Emailing the PPM isn't illegal; it just leaves you unable to prove the thing you may one day most need to prove. ### My PPM has a financial model attached — how do I share it without it dying in a PDF? The offering's financial model — your projections, the sources-and-uses, the return math behind the terms — is the exhibit sophisticated investors most want to interrogate, and it's the one legacy data rooms handle worst: they flatten every upload to a static PDF, so the model arrives dead, with no working formulas. Issuers then end up emailing the real .xlsx so an investor can 'play with it,' which is exactly the uncontrolled leak the data room was supposed to prevent. Peony renders an Excel model as a live, interactive spreadsheet right in the browser — the formulas compute, so an investor can change an assumption and watch the outputs move, a Google-Sheets experience inside the room with no download and no emailed file. For a fully bespoke model you can also publish it as an HTML artifact, which Peony renders live with the JavaScript executing. Both stay wrapped in the same control layer as the rest of the PPM — dynamic watermarking, screenshot protection, per-viewer permissions, and instant revoke — and there's exactly one current version in the room, so no investor can circulate a stale model from their inbox. If you want investors to see outputs but not the proprietary assumption tabs, publish a version with the sensitive sheets excluded. ### An investor is reviewing a PPM version I've since amended — how do I avoid the liability of someone acting on a stale one? This is one of the quietest liabilities in a private placement: if you amend the PPM mid-raise — a changed term, a corrected number, a new risk factor — and an investor subscribes based on a superseded version they still have in their inbox, you've effectively made an offering on outdated disclosure, which is exactly the kind of material-misstatement exposure the PPM was meant to close. Emailing PDFs makes this almost inevitable, because every old version keeps living in every recipient's mailbox. Distributing through a data room fixes it structurally: there is one current PPM in the room, you swap in the amended version, and every investor immediately sees only the current one — no stale copy floats around because no file was ever emailed out. Just as important, a data room gives you a per-investor, per-version audit trail: a record of who opened which version of the PPM, and when. If a dispute ever arises about what an investor was shown before they subscribed, that who-saw-what-version log is the evidence you'll want — and it's the kind of record an emailed-PDF process simply can't produce. ### How much does a PPM cost, who writes it, and how long does it take? A PPM is drafted by securities counsel — this is not a do-it-yourself document, because the risk-factors section, the cover legends, and the description of securities are precisely where legal liability is won or lost, and a template downloaded off the internet is weaker antifraud protection than a PPM written specifically for your company and offering. Cost varies widely with the complexity of the deal and the firm, but a custom PPM from securities counsel commonly runs into the low five figures and up; simpler, more standardized offerings sit at the lower end, and complex multi-class or fund offerings cost more. On timeline, the drafting itself is typically a few weeks, but the binding constraint is usually you: assembling clean financial statements, the cap table, and the use-of-proceeds detail counsel needs is what stretches the calendar. The most useful way to think about the cost is that the PPM is one of the highest-leverage documents in the raise — it's both the instrument that lets you offer the securities and your primary record of having disclosed the material facts, so under-investing in it is a false economy. ### How is a real estate syndication, hedge fund, or oil & gas PPM different from a standard company PPM? The skeleton is constant — cover legends, terms, use of proceeds, risk factors, description of securities, subscription procedures — but the center of gravity moves with the vehicle. A real estate syndication PPM is built around one identified property: the property description and business plan become the heart of the document, the distribution waterfall and sponsor promote dominate the description of securities, and the sponsor's track record carries the management section. A hedge fund PPM describes an ongoing trading vehicle rather than a single raise: the strategy and instruments, the fee terms (a management fee plus a performance-based incentive allocation), and — critically — the liquidity terms (lock-ups, gates, redemption notice periods) that are effectively part of the security itself, plus valuation, custody, and brokerage disclosures; it's maintained and updated as the fund evolves rather than retired at a closing. An oil & gas program PPM is dominated by the interest structure (working interests versus royalty interests), drilling and geological risk factors, operator arrangements, and the distinctive tax-treatment disclosures those programs carry. What does not change across any of them: the distribution discipline — per-recipient access, one current version, and a who-saw-what-version record matter identically whether the offering is a building, a fund, or a drilling program. --- _Markdown version of [https://www.peony.ink/blog/private-placement-memorandum](https://www.peony.ink/blog/private-placement-memorandum.md) for AI agents and LLMs; canonical HTML: https://www.peony.ink/blog/private-placement-memorandum. Every page on peony.ink is available as markdown — append `.md` to the URL or request it with `Accept: text/markdown`. More: [llms.txt](https://www.peony.ink/llms.txt)._