Building a franchise: how to keep your know-how confidential

Turning an existing business into a franchise network means sharing valuable knowledge: costing methods, recipes, working practices or purchasing terms. This creates a particular challenge. Prospective partners need enough insight to assess and implement the concept, yet confidential information must not be shared without control. Effective protection therefore begins before the first detailed discussion with a prospective franchisee — not just when the franchise agreement is signed.

1. Identify the knowledge that needs protection

Not everything created within your business automatically qualifies as a trade secret. Under section 2, point 1 of Germany’s Trade Secrets Act (GeschGehG), information must, among other things, be neither generally known nor readily accessible, and have commercial value precisely because it is secret. It must also be subject to reasonable confidentiality measures, and there must be a legitimate interest in keeping it confidential.

A shop layout visible to the public cannot simply be turned into a trade secret by labelling it confidential. An internally developed calculation method linking purchasing, staffing and demand, however, may qualify for protection.

Start by compiling an inventory with four entries for each item:

• Information: What exactly needs to be protected?
• Value: What commercial advantage does it provide?
• Access: Who needs access, and for which task?
• Safeguard: How will you prevent unauthorised access and document the measures taken?

Describe the information precisely. “Our entire business concept” is too vague to be useful in practice. A better example would be “an internal costing spreadsheet containing purchasing terms and site-specific contribution margins”. Also appoint someone to update the inventory whenever changes occur.

2. Understand the legal framework

Germany has no dedicated franchise law or franchise-specific registration procedure. Contractual relationships are governed primarily by the German Civil Code (BGB), the German Commercial Code (HGB) where applicable, and competition and intellectual property laws. The Trade Secrets Act is particularly important for confidential business know-how.

Unlike a trade mark, know-how cannot be entered in a register to secure protection. What matters is whether you actually take reasonable steps to protect it. A confidentiality clause alone is no substitute for access controls if all your documents are stored where anyone can access them.

Standard-form confidentiality clauses are also subject to the rules on standard terms under sections 305–310 of the BGB. They must be clear and must not place the other party at an unreasonable disadvantage. In particular, have a specialist lawyer review contractual penalties, the scope of confidentiality obligations and any duties that continue after the agreement ends.

Nor should confidentiality be used to withhold information material to a prospective franchisee’s decision. Duties to consider the other party’s interests and disclose relevant information arise during contract negotiations under sections 311(2) and 241(2) of the BGB. Protection and disclosure must therefore be planned together.

3. Release information in stages during recruitment

Before recruiting franchise partners, decide which documents will be shared and at what stage. This protects your know-how and helps ensure that applicants are treated consistently.

At the initial contact stage, information suitable for public use will usually suffice: the products or services offered, the broad division of responsibilities and an outline of how the relationship works. Complete recipes or detailed supplier terms do not belong in a presentation circulated without restrictions.

When there is serious interest, a separate confidentiality agreement may be appropriate. It should clearly set out the permitted purpose of use, the information covered, authorised recipients and how copies must be handled. Information that is already public, or can be shown to have been lawfully obtained elsewhere, should not be covered indiscriminately. Disclosures permitted by law must not be prohibited.

Before making a decision, applicants must receive the information they need to carry out a properly informed assessment. Also allow their legal or tax advisers to review it under agreed arrangements. A secure data room may be more suitable than email attachments that can be forwarded without control.

Keep a record of which version of each document was provided and when. Confidentiality is no substitute for full and accurate disclosure.

4. Make protection workable in day-to-day operations

Knowledge must remain accessible within a franchise network. Excessive restrictions hinder work and can easily lead to ad hoc copying. Allocate access rights according to responsibilities: a member of service staff needs different information from the management team or accounts department.

A combination of organisational and technical measures works well in practice:

• Individual user accounts rather than shared passwords.
• Access to confidential content restricted to authorised roles.
• Multi-factor authentication for storage containing particularly sensitive information.
• Clear confidentiality labels and version details on documents.
• Defined approval procedures for printing, downloading and access by external service providers.
• Brief training sessions on handling confidential information.

The franchise agreement should specify how franchisees must ensure confidentiality among their employees and service providers. Suitable obligations will depend on the legal relationship involved. General professional experience must not simply be declared the exclusive property of the franchisor.

Test the arrangements in your own business first: can someone who has left still access internal folders? Are sensitive files being sent through personal accounts? Close these gaps before sharing information with franchise partners.

5. Prepare for incidents and the end of access

Appoint a contact person for lost documents, accidental forwarding and suspicious access. Document how access rights will be revoked, logs preserved and potential recipients contacted. If a breach is suspected, evidence should be secured lawfully and legal advice sought on further action.

Also set rules for returning and deleting confidential documents when discussions break down or access rights end. Statutory retention requirements must be taken into account; any necessary archive copies should have access restricted and remain confidential.

Practical next step: Select your business’s five most valuable pieces of confidential information. For each, check who has access, which agreement applies and which safeguards you can demonstrate are in place. Only then widen the circle of recipients.