Start with the clause everyone skipped
Change-of-control provisions are the paradigm of terms negotiated once and read never. What matters now: whether the contract could be assigned without your consent, whether the acquisition triggers a termination or renegotiation right, and, critically, whether any such right expires within a fixed window of the transaction closing. Rights of this kind are frequently use-it-or-lose-it. The day to have counsel read the agreement is the day of the announcement, not the day the relationship first deteriorates, because by then the window may already have shut.
Inventory what they can now see
Over the life of the relationship, the supplier has accumulated a portrait of your business: volumes, pricing, forecasts, custom specifications, roadmap dependencies, and support tickets that describe your weaknesses in your own words. Confidentiality clauses survive the acquisition on paper, but once teams, systems and management chains merge, practical separation erodes in ways no clause fully polices. Two workstreams start now: audit what the supplier holds and invoke any return-or-destroy rights for material it no longer needs, and reclassify what you share from today onwards as if a competitor were reading it, because one may be.
Reassurance is a communications product
"Business as usual" and "no changes for customers" are standard transaction messaging, drafted before integration planning has finished and sincere in roughly the way a boarding announcement is sincere. The acquirer's real intentions surface later, and in behaviour rather than language: whether your account team survives the first restructure, where roadmap investment flows, how the renewal conversation is priced, and how the product line you depend on is positioned against the acquirer's existing platform. Judge on a six-to-eighteen-month horizon of actions, and discount every adjective in the press release to zero.
Optionality takes longer to build than integration takes to bite
Qualifying an alternative supplier (diligence, security review, contracting, migration, parallel running) usually takes longer than the acquirer needs to change strategy for the product you rely on. That asymmetry is the reason to start qualification immediately, even if you fully expect to stay. An option you never exercise still changes the renewal negotiation and caps your downside; an option you start building after the roadmap turns hostile arrives too late to do either. Where the economics permit, dual-source the genuinely critical components rather than betting the operation on the acquirer's goodwill.
Assemble the room
Inside the organisation: counsel on the change-of-control window while it is still open, procurement on the real alternative landscape, security and data owners on what is exposed, and the commercial owner of the relationship on what the supplier's behaviour has already started signalling. Outside it, the scarcest perspective is from people who have lived this from either chair: executives who have managed a critical supplier through a hostile ownership change, and operators from the acquiring side who know what integration playbooks actually do to inherited customers. Selected senior operators from the Global Board can supply both within days, confidentially.
