Most first-time buyers treat due diligence as a checklist they work through after signing a letter of intent. That's partially right — but the order matters enormously, and skipping steps or doing them in the wrong sequence is one of the most common and costly mistakes in small business acquisitions.
This guide gives you a complete, phase-by-phase due diligence framework — organized so the most critical work happens first, and so that every phase builds on the one before it.
Why the order matters: financial first, always
Every phase of due diligence costs time and money. Legal review alone can run $10,000–$20,000. Operational assessment takes weeks of your time. Commercial diligence requires conversations with customers and competitors. None of that investment makes sense until you've verified the financial foundation of the deal.
If the adjusted EBITDA turns out to be materially lower than represented — because add-backs don't hold up, because revenue is concentrated in one customer, because the business has been declining for two years — everything built on top of that foundation needs to be renegotiated or the deal needs to be walked away from. You want to know that before you've spent $25,000 on lawyers and months of your life.
Financial due diligence anchors everything else. Verify the numbers first. Then — and only then — spend meaningful time and money on legal, operational, and commercial review.
Phase 1: Financial due diligence
Start here. Don't advance significantly to any other phase until you have independent verification of the business's adjusted earnings, cash flow, and working capital.
- Commission a Quality of Earnings (QoE) report from an independent CPA or boutique transaction advisory firm — this is your most important due diligence investment
- Obtain 3–5 years of business tax returns (federal and state) and reconcile to internal P&L statements — flag any meaningful discrepancies
- Review trailing-twelve-month (TTM) P&L and compare year-over-year for revenue trend, gross margin stability, and expense anomalies
- Obtain and review 12–24 months of business bank statements — verify that cash deposits match reported revenue
- Review the seller's add-back schedule; request documentation (invoices, payroll records, bank statements) for each claimed add-back
- Review accounts receivable aging — identify any overdue, disputed, or uncollectable balances that may not survive the transition
- Review accounts payable aging — understand what the business currently owes and whether any obligations are past due
- Analyze working capital: calculate current assets minus current liabilities and establish what "normal" working capital looks like for deal structuring purposes
- Review payroll records and confirm headcount, roles, compensation levels, and any bonuses or deferred compensation obligations
- Identify all related-party transactions — rent paid to owner-related entities, services from family members, management fees — and verify they're at market rates
- For product businesses: review inventory records and reconcile to balance sheet; assess age, obsolescence, and salability
Phase 2: Legal due diligence
After financial verification confirms you want to proceed, legal review protects you from undisclosed liabilities, unfavorable contracts, and title issues that could affect your ownership rights. Engage a transaction attorney before finalizing the purchase agreement.
- Review all customer contracts — terms, pricing, renewal dates, cancellation rights, and whether they're assignable to a new owner
- Review all vendor and supplier agreements — note any auto-renewals, exclusivity clauses, and change-of-control provisions that could affect post-close terms
- Examine the business premises lease — confirm term remaining, renewal options, rent escalation schedule, and assignability
- Conduct a UCC lien search on the business and its assets — confirm no undisclosed security interests exist
- Search for pending or threatened litigation, judgments, and regulatory actions against the business or its principals
- Verify ownership of the business name, domain, trademarks, patents, and any proprietary intellectual property
- Review employee offer letters, NDAs, non-competes, and IP assignment agreements
- Confirm the seller has full authority to sell — review operating agreement, any right of first refusal held by partners or investors, and required approvals
- Verify all business licenses and permits are current, transferable, and not conditioned on the identity of the current owner
- Review any outstanding loans, lines of credit, or equipment financing — confirm what gets paid off at close and what, if anything, transfers
- Confirm the deal structure (asset sale vs. entity sale) and understand the tax and liability implications of each for your situation
Phase 3: Operational due diligence
Operational due diligence answers the question every buyer eventually faces: what actually breaks when the current owner walks out the door? The goal is to understand not just what the business does, but how dependent it is on the current owner's personal involvement, relationships, and institutional knowledge.
- Map all core business processes — sales, fulfillment, customer service, billing, HR — and identify which are documented vs. owner-dependent
- Meet key employees individually; assess retention risk, morale, and whether any are likely to leave after an ownership change
- Review the organizational chart and understand who does what — identify any single points of failure below the owner level
- Audit the technology stack: CRM, accounting software, POS, project management, communication tools — confirm transferability, licensing costs, and any data migration requirements
- Inspect physical assets: equipment condition, vehicles, fixtures, and leasehold improvements — note any deferred maintenance that will require capital post-close
- Review maintenance records and active service contracts for critical equipment
- Identify single-source supplier dependencies — if one vendor supplies 60% of inventory, understand what happens if that relationship changes
- Review and evaluate the seller's transition plan: how long will they stay post-close, what will they document, and what customer/vendor introductions will they make?
- Review current insurance coverage (general liability, workers' comp, professional liability, property) and understand what needs to be replaced or continued
Phase 4: Commercial due diligence
Commercial due diligence validates the growth thesis — or exposes the risks to it. Don't skip this phase because you're excited about the deal. The most important questions about a business's future often aren't answered by its financial statements.
- Request a full customer list (or representative sample) and analyze revenue by customer — identify concentration and dependency on any single relationship
- Review customer churn data for the past 3 years — how many customers left, when did they leave, and why?
- Speak directly with 2–3 key customers (with seller's coordination) to validate the relationship and gauge their continuity appetite under new ownership
- Research the competitive landscape — who are the main competitors, how does this business differentiate, and is its market position strengthening or eroding?
- Review Google reviews, Yelp, Glassdoor, BBB, and any industry-specific review platforms — assess reputation and identify any recurring complaints
- Evaluate the business's digital footprint: website traffic, SEO positioning, social media presence, and online lead generation effectiveness
- Validate the seller's stated growth opportunities — are they real and actionable with reasonable capital, or aspirational language designed to support the asking price?
- Assess macro risks: regulatory changes, industry headwinds, technology disruption, or demographic shifts that could materially affect the business in the next 3–5 years
What to do when due diligence turns something up
Finding issues during due diligence doesn't mean the deal is dead — it means you now have information the seller didn't lead with, and you need to decide what to do with it. Most findings lead to one of four responses:
- Price adjustment — reduce the purchase price to reflect verified earnings or quantified risk
- Deal restructuring — add an earnout, escrow holdback, or seller note to shift risk appropriately and align seller incentives with post-close performance
- Representations and warranties — require the seller to stand behind specific factual claims in the purchase agreement, with indemnification if they prove false
- Walk away — sometimes the right answer is no deal. That's not a failure. It's the due diligence working exactly as intended
Next → Before you can evaluate what you're finding in due diligence, you need to understand the earnings metrics behind the business. Read Post 14: SDE vs. EBITDA — Which Earnings Metric Should You Actually Trust? →