Business Acquisition Due Diligence Checklist (2026)
You've signed the letter of intent. The seller has agreed on price. Now the real work starts: due diligence. This is where deals fall apart — or where buyers discover the business is worth even more than they paid. The difference between a buyer who gets burned and one who closes confidently is almost always the depth of their due diligence process.
This checklist covers every category you need to investigate before wiring money. Work through each section systematically. Flag anything that doesn't add up. And remember: due diligence isn't just about finding problems — it's about confirming the story the seller told you during negotiations.
Before you start due diligence, make sure you understand what the business is worth. If you haven't done the valuation math yet, read our guide on how to value a small business first.
1. Financial Due Diligence
Financials are the foundation. Every number the seller quoted you during negotiations needs to be verified against source documents. Seller-provided spreadsheets are a starting point, not a source of truth.
Financial Checklist
-
☐
3 years of federal tax returnsTax returns are harder to manipulate than internal P&Ls. Compare revenue and income figures to what the seller quoted. Unexplained discrepancies between tax filings and claimed earnings are a serious red flag.
-
☐
3 years of profit & loss statementsReview month-by-month to identify seasonality, revenue trends, and unusual expense spikes. A business showing flat annual revenue can hide a dramatic decline in recent months if you only look at annual totals.
-
☐
Current balance sheetVerify assets, liabilities, and any debt you will assume. Check accounts receivable aging — old receivables (90+ days) are often uncollectable and should be excluded from deal value.
-
☐
12 months of bank statementsBank deposits should match reported revenue. This is the simplest check against inflated income claims. Patterns of large round-number cash withdrawals can indicate unreported expenses or personal use of business funds.
-
☐
SDE / EBITDA reconciliationAsk the seller to provide an add-back schedule showing every adjustment to arrive at the stated SDE or EBITDA. Every add-back should be verifiable and genuinely non-recurring. Sellers frequently overstate add-backs — scrutinize each one.
2. Legal Due Diligence
Legal issues are the most common source of post-close surprises. A business can look healthy on paper and have a lawsuit, lien, or regulatory violation that changes everything. This section requires an acquisition attorney — don't skip it on smaller deals.
Legal Checklist
-
☐
Business entity documentsArticles of incorporation or organization, operating agreement, and bylaws. Confirm the seller actually has the legal authority to sell and that there are no minority owners who haven't agreed to the transaction.
-
☐
Pending or threatened litigationRequest a written representation of all current and threatened legal claims. Run a court search in the relevant jurisdictions. Undisclosed litigation discovered post-close is one of the most common causes of buyer-seller disputes.
-
☐
Intellectual property ownershipConfirm the business owns (not just licenses) its key IP: trademarks, domain names, proprietary software, and trade secrets. If the business was built on open-source software or third-party tools, verify the licenses allow commercial use and transfer.
-
☐
Licenses and permitsVerify all required business licenses, professional certifications, and regulatory permits are current and transferable. Some licenses are non-transferable and require re-application — this can delay operations after close.
-
☐
Tax complianceConfirm federal, state, and local taxes are current. Request a tax clearance certificate if available in your state. Unpaid payroll taxes are a buyer liability in some asset sale structures.
3. Operational Due Diligence
Operational due diligence answers the question: can this business run without the current owner? A business that depends entirely on the seller's relationships, knowledge, or effort is a job you're buying, not a company. Price accordingly — or walk.
Operations Checklist
-
☐
Standard operating procedures (SOPs)Does the business have documented processes for its core operations? Written SOPs signal an owner who has built a system, not just a collection of tribal knowledge. Their absence means the transition risk is higher than it looks.
-
☐
Technology and software stackList all software subscriptions, tools, and systems the business uses. Confirm licenses are transferable. Identify any proprietary systems and understand who built and maintains them. Ask whether any key vendors can be replaced if needed.
-
☐
Supplier and vendor contractsReview all material supplier agreements, pricing terms, and exclusivity clauses. Identify vendors with change-of-control provisions that could renegotiate terms or terminate contracts at close.
-
☐
Equipment and asset conditionPhysically inspect key equipment. Request maintenance records. Identify any deferred maintenance that will become your problem post-close. Equipment near end-of-life is a capital expense you need to budget for.
-
☐
Real estate and lease termsIf the business leases space, review the lease term, renewal options, rent escalations, and assignment provisions. A lease expiring within 18 months of close with no renewal option is a significant operational risk.
Run the Numbers Before You Go Deeper
Before spending 40 hours on deep due diligence, get an instant valuation range and risk score. Plug in the deal's financials and see if the price even makes sense.
Run a Free Deal Report →4. Customer Due Diligence
Revenue is only as good as the customers generating it. Customer concentration, contract terms, and satisfaction levels determine how much of that revenue actually survives the transition. This is the area most buyers underinvest in — and where the most value is either confirmed or destroyed.
Customer Checklist
-
☐
Customer concentration analysisGet a full revenue breakdown by customer for the last 3 years. If any single customer accounts for more than 20% of revenue, that concentration is a material risk. If 3 customers represent more than 50%, the business is fragile regardless of its financials.
-
☐
Contract terms and renewal datesReview all customer contracts. When do they expire? Are they on auto-renewal? Do they have change-of-control clauses that allow customers to exit when ownership changes? B2B businesses with month-to-month contracts carry significantly higher transition risk than those with multi-year agreements.
-
☐
Customer churn and retention dataAsk for cohort-level retention data or at minimum a list of customers from 3 years ago and which are still active. High churn hidden behind new customer acquisition is a business with a leaky bucket — you'll spend all your energy refilling what's lost.
-
☐
Top customer conversationsIf the seller will allow it — and in deals over $1M, you should require it — speak directly with 2–3 top customers before close. Confirm the relationship isn't personal to the current owner, and get a read on their intention to continue. Do this carefully and only with seller permission.
5. Employee Due Diligence
The people risk in a small business acquisition is underrated. Key employees who leave post-close can be as damaging as losing a major customer. Understand who is critical, whether they know a sale is happening, and what it takes to retain them.
Employee Checklist
-
☐
Organizational chart and role breakdownMap every role, its compensation, tenure, and whether it is filled by an employee or contractor. Identify which roles are genuinely interchangeable and which represent single points of failure. The dispatcher who has every client relationship memorized and no documentation is a risk.
-
☐
Employment agreements and non-competesReview agreements for key employees. Do non-compete clauses apply to departing employees — or only to the seller? A seller's non-compete protects you. An employee with no non-compete who leaves and starts a competing business takes clients with them.
-
☐
Payroll records and benefits obligationsVerify payroll matches reported labor costs in the P&L. Confirm there are no unpaid wages, accrued vacation liabilities, or benefit obligations you're assuming. In asset sales you typically don't assume these, but confirm the deal structure explicitly.
-
☐
Independent contractor classificationIf the business uses 1099 contractors for ongoing, directed work, there is potential misclassification liability. The IRS and state labor boards have become more aggressive here. If contractors look like employees, that's a tax and labor exposure you're buying.
6. Market and Industry Due Diligence
A well-run business in a structurally declining industry is a bet against time. And a mediocre business in a fast-growing market can outperform its financials. Market context doesn't change your valuation math — but it changes your conviction in the projections behind it.
Market Checklist
-
☐
Competitive landscapeWho are the primary competitors? Is competition intensifying or stable? Has any well-funded competitor entered the local market recently? A business with a strong local moat is worth more than one in a commoditized market where a national chain could open next door.
-
☐
Industry growth trendsIs the underlying market growing, flat, or shrinking? Look at 5-year industry data, not 1-year. COVID-era distortions have normalized — but some industries saw permanent shifts that won't revert. Understand which category this business sits in.
-
☐
Regulatory environmentAre there pending regulations that could restrict operations, increase costs, or require new licensing? This matters especially in healthcare, food service, childcare, financial services, and construction. A regulatory change post-close can restructure unit economics without warning.
-
☐
Online presence and reputationReview Google reviews, Yelp, and any industry-specific review platforms. A business with a 3.2-star rating on Google isn't just a marketing problem — it's evidence of a customer experience problem the seller hasn't solved. Check review response patterns over the last 12 months.
How to Use This Checklist Effectively
Don't treat due diligence as a box-checking exercise. The goal is not to complete the checklist — it's to build a defensible picture of the business you're buying and the risks you're accepting.
A few principles that separate thorough buyers from those who get burned:
- Follow the anomalies. If something in the financials doesn't reconcile, don't accept the explanation and move on. That's the thread you pull. Most deal-killers are found by asking "why doesn't this add up?" a second time.
- Verify, don't just review. A document that says revenue is $600K means nothing until you confirm the bank deposits match. A customer list means nothing until you've spot-checked 3–4 names against accounts receivable.
- Use specialists for legal and tax. Financial analysis you can do yourself. Legal and tax exposure requires a professional who knows what to look for. The $5,000–$15,000 you spend on a good acquisition attorney is the cheapest insurance you'll ever buy.
- Set a walk condition in advance. Before you start due diligence, write down the 3–4 things that would make you walk from this deal. Revenue concentration above X%. Litigation exposure above $Y. Owner unwilling to stay for 90-day transition. Having a pre-committed walk condition prevents you from rationalizing problems you discover mid-process.
Due diligence isn't about killing deals. It's about buying the right ones — at the right price, with the right protections. If you find issues, renegotiate. Lower the price. Add representations and warranties. Require an escrow holdback. Most deals with problems are fixable if the price reflects the risk.
The best time to discover a problem is before you close. The second best time is the moment you suspect something is off. There is no third best time.
Frequently Asked Questions
How long does due diligence take when buying a small business?
Typical due diligence for a small business ($500K–$5M) takes 30–60 days. Complex deals with real estate, multiple entities, or regulatory issues can run 90 days. Simpler owner-operated businesses can close in 21 days if the seller has clean records. The timeline depends more on the quality of the seller's documentation than on deal complexity.
What documents should I request during due diligence?
Start with 3 years of tax returns, 3 years of P&L statements, current balance sheet, all customer contracts, lease agreements, employee agreements, any pending litigation documents, and bank statements for the last 12 months. These core documents answer 80% of your due diligence questions before you spend time on deeper analysis.
What are the biggest red flags in small business due diligence?
The top red flags: revenue concentrated in 1–2 customers (more than 30% from a single client), declining revenue over multiple years, inability to produce clean tax returns, owner who cannot step back during transition, undisclosed litigation, and equipment or lease agreements expiring within 12 months of close. Any single one of these warrants a lower offer or a walk.
Can I run due diligence without a broker or attorney?
You can do the financial and operational analysis yourself. But for legal review (contracts, IP, litigation, entity structure) and for any deal over $500K, use an acquisition attorney. The cost ($3K–$10K) is negligible against deal size and the risk of missing a material liability.
Ready to Analyze Your Deal?
Run a Free Deal Report on Your Target Acquisition
Plug in your deal's financials and get an instant valuation range, risk score, owner dependency rating, and revenue stability analysis. Before you go deep on due diligence, confirm the numbers make sense.
Run a Free Deal Report →