Due diligence tests the accounts and contracts but rarely asks where the data lives. Five questions an investor can ask without being technical.

Most organisations keep far more information than they need. It sits in old email accounts, shared drives, forgotten SharePoint sites and the digital equivalent of boxes under the stairs. Nobody is quite sure what is in it, and nobody feels able to remove it.

This is usually described as caution, or as corporate memory. It is neither.