The Business Acquisition Due Diligence Checklist Every Buyer Needs

By MercConsulting · Published 2026-07-19

A category-by-category due diligence checklist for buying a business: financials, legal, customers, HR, and assets, plus the red flags that derail deals.

A business acquisition due diligence checklist is the structured list of financial, legal, operational, and personnel items a buyer verifies with actual documentation before closing on a company — confirming the business is what the seller says it is, not just what the seller believes it is. A complete checklist spans five categories: financial records, legal and liability exposure, operations and customer base, employees and key-person risk, and technology or physical assets. Most buyers work through it during a 30-to-90-day window between a signed letter of intent and closing, with a CPA and an attorney coordinating the review. Rushing any one category is the most common reason buyers overpay, or find out after the wire clears that they bought a different business than the one they signed for.

Sellers are rarely lying outright. More often they're optimistic, or they genuinely don't track the number you're asking about, or a "minor" contract issue never occurred to them as worth mentioning. Due diligence isn't an accusation — it's the process that turns a seller's story into something you can rely on when your capital and your next several years are riding on it.

This checklist walks through each category in the order a disciplined buyer should work through it, what to request, and the red flags that most often derail deals late. If you haven't yet worked through sourcing, screening, and offer structure, our companion guide on how to buy an existing business covers the full process this checklist plugs into.

"We were three weeks from closing when the accountant found a second set of books — not fraud exactly, just a lot of personal expenses run through the company that made the real profit about a third lower than what we'd been told. We renegotiated. If we hadn't looked, we'd have paid full price for a business that earned a third less than advertised."

Financial Due Diligence: Verifying the Numbers Are Real

Financial diligence is where most deals get confirmed or fall apart, because the purchase price is almost always built on a multiple of earnings — and earnings are the number sellers have the most incentive to present favorably.

• Three to five years of tax returns, cross-checked against bank statements, not just the seller's internal profit-and-loss reports.
• Monthly financial statements for the trailing 12 to 24 months, to catch seasonality and any recent change in margin a single annual number would hide.
• Accounts receivable and payable aging, to see how much revenue is actually collected versus booked, and whether the business is quietly behind on its own bills.
• Owner add-backs. Sellers often add back personal expenses and above-market compensation to present a higher "adjusted" earnings figure. Every add-back needs a receipt, not just a spreadsheet line.
• Debt schedule — every loan, credit line, and lease the business carries, and whether it survives the sale or is paid off at closing.

A quality-of-earnings review — a CPA-led analysis of whether reported profit reflects the business's actual sustainable cash flow, adjusted for one-time items and owner perks — is standard on larger deals and worth the cost on smaller ones too. It's the difference between buying what the P&L says and buying what the business actually earns.

Legal and Liability Due Diligence: What Could Attach to the Business

This is the category that hides liabilities a P&L will never show. A business can be profitable on paper and still carry legal exposure worth more than the purchase price.

• Corporate formation documents confirming the entity is in good standing and the seller has authority to sell it.
• Contracts and leases, reviewed for assignability and change-of-control clauses that could let a counterparty terminate the moment ownership changes.
• UCC filings and liens against the business's assets, which can follow the assets after a sale if not cleared before closing.
• Pending or past litigation, judgments, and regulatory actions — a pattern of prior claims tells you something a single lawsuit doesn't.
• Licenses and permits required to operate, and whether they transfer with the sale or must be reapplied for.
• Unpaid taxes, including sales and payroll tax, which in some structures can attach directly to a successor entity.

Operational and Customer Due Diligence: Is the Revenue Durable?

A business can have clean books and still be a fragile asset if its revenue depends on relationships that could walk the day ownership changes.

• Customer concentration. If one or two customers account for a large share of revenue, you're buying a business only as stable as those relationships — and they were built with the current owner, not with you.
• Contract terms and renewal history for top customers — real agreements versus informal handshake arrangements.
• Vendor dependency, especially any single-source relationship that could disrupt operations post-transition.
• Documented processes versus workflows that exist only in the owner's head, which tells you how much value walks out the door when the seller does.

Employee and HR Due Diligence

The people who actually run the business day to day are frequently worth more than any asset on the balance sheet, and they're the category most buyers under-diligence.

• Key-person dependency. Identify who actually knows how to run the business, and whether that knowledge leaves with the seller or stays with a team.
• Employment agreements and non-competes for management and anyone whose departure would meaningfully hurt operations.
• Employee classification. Confirm anyone treated as a contractor genuinely meets that standard; misclassification is a liability that follows the business.
• Turnover history and any recent employment claims, which can signal a culture problem financials won't reveal.

Technology, IP, and Physical Assets

Confirm ownership, not just usage. A business can use software, a trademark, or equipment for years without owning the rights outright.

• Software and technology stack — whether licenses are transferable, and whether anything is tied personally to the seller rather than the entity.
• Trademarks and domain names, confirmed as registered to the business, not to the owner personally.
• Equipment, verified by condition and remaining useful life, not just book value.

How a Due Diligence Review Actually Runs

Diligence isn't one document dump reviewed all at once — it moves in phases, each one narrowing toward a go or no-go decision.

Most buyers underestimate how long this takes. For a small to mid-size business, plan on four to eight weeks — faster with clean seller records, slower if documents have to be assembled from scratch.

Red Flags That Should Slow You Down

• The seller resists providing bank statements to verify tax returns, or the two don't reconcile.
• Revenue is heavily concentrated in one or two customers with no long-term contract.
• Key employees don't know a sale is happening this late, which usually means an undisclosed retention problem.
• Add-backs to earnings keep growing every time you ask a follow-up question, rather than being documented up front.
• Pressure to close faster than your diligence timeline allows. A seller with clean records rarely needs to rush a serious buyer.

None of these automatically kill a deal. What matters is whether the seller can document an explanation, and whether price and structure adjust to reflect the actual risk.

Who Should Lead the Review

A broker helps you find and screen deals. A CPA verifies the financial file and can lead a quality-of-earnings review. An attorney reviews contracts and drafts the purchase agreement. What's often missing from a first-time buyer's team is someone coordinating all three and telling you honestly when a finding is serious enough to change the price — even after you've mentally already bought the business.

MercConsulting has guided Houston-area owners through business formation, acquisition, and growth since 1998, and our portfolio of client work includes acquisitions where a diligence finding changed the price, the deal structure, or the buyer's decision to walk. We run the same AI-assisted document review internally that we use on client engagements, moving through large contract and financial files faster than a manual review typically allows, without skipping the judgment calls that matter. See our acquisition consulting services, or read more about how we work with owners from first look to close.

Once diligence confirms the deal, the entity you hold the business through matters as much as the price you paid. If you're acquiring more than one business over time, a holding company structure is worth evaluating before you close, since it separates the newly acquired business from your other assets.

Frequently Asked Questions

What is due diligence when buying a business?

Due diligence is the documented process of verifying that a business is what the seller represents — confirming financials against bank records, checking for undisclosed liabilities, reviewing contracts for assignability, and assessing customer and employee risk before you're contractually committed to close.

How long does due diligence take when buying a business?

A thorough review of a small to mid-size business typically takes four to eight weeks, faster with clean seller records, slower if documents have to be assembled from scratch. Most letters of intent build in a 30-to-90-day exclusivity period specifically for this.

What documents should I request from the seller?

At minimum: three to five years of tax returns and bank statements, monthly financial statements, a debt schedule, customer and vendor contracts, corporate formation documents, lien filings, litigation history, licenses and permits, and employment agreements for key staff. The list expands based on industry and what early findings turn up.

What is a quality of earnings review, and do I need one?

It's a CPA-led analysis that adjusts a business's reported profit for one-time items and owner perks, to show the sustainable cash flow a buyer can actually expect going forward. It's standard on larger deals and worth the cost on smaller ones too, since it's often where the biggest gap between claimed and actual earnings gets caught.

What are the biggest red flags in acquisition due diligence?

A seller who resists providing bank statements, heavy revenue concentration in one or two customers, key employees unaware a sale is happening, growing earnings add-backs, and pressure to close faster than your timeline allows. None automatically kill a deal, but each needs a documented explanation first.

Do I need a CPA and an attorney for due diligence?

Yes, both. A CPA verifies the financial file and can lead a quality-of-earnings review; an attorney reviews contracts, checks liability exposure, and drafts the purchase agreement to reflect what diligence found. Professional review costs far less than an unassignable lease or an earnings number that doesn't hold up after closing.

This article is for educational purposes only and is not legal, tax, or investment advice. Consult qualified professionals about your specific situation.