Business Acquisition Due Diligence Checklist: What to Verify Before Closing

Due diligence is where deals die. It's also where you confirm you have what you thought you had. The 45 to 90-day window between a signed LOI and a signed purchase agreement is the last defensible opportunity to walk away with your money intact.

Most first-time buyers approach DD as a paperwork exercise. It's actually a structured investigation designed to surface risk, verify assumptions, and inform your final terms. Done well, it either confirms the deal or gives you something to renegotiate. Done poorly, you find the problems after you own the business.

This checklist is organized by category. Work through all five areas. The depth of investigation should be proportional to deal size and complexity. A $1M service business needs less scrutiny than a $4M manufacturing operation. The categories apply to every deal regardless of size.

One priority note before we get into the lists: most buyers spend too much time on legal and not enough on customer concentration. If 30% of revenue comes from one client, you need to meet that client before closing and understand what actually keeps them there. Customer concentration doesn't show up in the legal files. It shows up in the P&L, and you need to chase it down yourself.

1. Financial Due Diligence

Financial DD is the foundation. Every number in the CIM gets verified here. The SDE the broker quoted, the margins they advertised, the add-backs that made the deal pencil. All of it gets tested against source documents.

The single most important thing you're doing in financial DD: confirming that the tax returns match the CIM financials. If the seller reported $380K in SDE to the broker but the tax returns show $220K in net income and modest add-backs, you have a problem. Either the books are structured to minimize taxes (common), or someone inflated the CIM numbers (also not rare). You need to understand which before closing.

Documents to Request

• 3 years of business tax returns (federal and state). These are the ground truth. Everything else gets reconciled against them.
• 3 years of profit & loss statements. Monthly detail, not just annual summaries. Monthly data reveals seasonality, one-time events, and anomalies that annual figures smooth over.
• 3 years of balance sheets. Review for debt levels, working capital position, and any hidden liabilities not discussed in the CIM.
• Current and prior year AR aging report. How collectible is the receivables base? Are there accounts 90+ days past due that have been sitting on the books for years?
• Current AP aging report. What does the business owe? Any vendors being stretched beyond terms?
• 12 months of bank statements. Revenue reported on the P&L should flow through the bank. Discrepancies between P&L and deposits require explanation.
• Cash flow statements. P&L profit and cash flow are not the same thing. A profitable business can have poor cash flow if it's funding working capital growth.
• Debt schedule. All outstanding loans, lines of credit, equipment financing, and other obligations. Understand what gets paid off at close vs. what transfers.
• Working capital analysis. Define the working capital peg, the normalized amount of working capital the business needs to operate. This is typically negotiated into the purchase agreement, and getting it wrong creates a cash flow problem on day one.
• Add-backs documentation. Request documentation for every line item the seller claimed as a discretionary add-back. Owner salary: W-2 or K-1. Personal vehicle: business purpose records. One-time legal expense: invoices. Add-backs without documentation are adjustments you can't rely on.
• Owner compensation detail. Salary, distributions, benefits, vehicle allowances, life insurance premiums run through the business. Understand the full picture before you calculate what's left to service debt.
• Customer revenue breakdown. Request revenue by customer for the last 3 years. This is your customer concentration analysis, the most important data set in the whole due diligence package.
• Inventory count and valuation (if applicable). Verify that inventory on the books reflects actual inventory on hand. Stale or obsolete inventory shouldn't count toward purchase price.

2. Legal Due Diligence

Legal DD requires a business acquisition attorney. This is not optional. You need someone who reviews acquisition documents regularly, not a generalist who handles wills and real estate closings.

What you're looking for: undisclosed liabilities, obligations that survive closing, encumbrances on assets you're buying, and anything that changes the economics of what you thought you were buying.

Corporate Structure

• Entity documents. Articles of incorporation or organization, bylaws or operating agreement, current ownership structure, and any amendments.
• Ownership history. Any prior ownership changes, buyouts, or contested equity? Messy cap tables create messy closings.
• Asset purchase vs. stock purchase determination. Most small business acquisitions are structured as asset purchases. If you're buying stock, you're assuming the company's entire legal history, including any liabilities that haven't surfaced yet. Make sure you understand the structure and why.

Contracts and Agreements

• All material customer contracts. Are they assignable? Do any contain change-of-control provisions that allow the customer to terminate on a sale?
• Supplier and vendor agreements. Same questions: assignability and change-of-control provisions. A business with a sole-source supplier relationship that terminates on change of ownership is a different business than the one described in the CIM.
• Employment agreements, non-competes, and non-solicitation agreements for key employees. Do any expire soon? Do any allow the employee to leave post-close?
• Independent contractor agreements. Worker classification is an IRS/DOL enforcement area. Misclassified contractors create tax liability that can follow the business.
• Partnership or joint venture agreements (if applicable).
• Seller non-compete agreement. This is one you're creating at close, but verify scope, duration, and geography before you sign the purchase agreement. A seller non-compete that doesn't cover the relevant market geography or doesn't last long enough is limited protection.

Real Estate and Leases

• Lease agreement and all amendments. When does it expire? What are the renewal options and terms? What are the rent escalations? A business with 18 months left on its lease and a landlord who can double rent at renewal is carrying undisclosed risk.
• Lease assignability. Can the lease be assigned to the buyer, or does it require landlord consent? Get that consent in writing before closing.
• Personal guarantees on the lease. Is the seller personally guaranteeing the lease? At close, that guarantee typically needs to transfer to you. Understand what you're signing.

Licenses, Permits, and Regulatory Compliance

• All business licenses and permits. Are they in good standing? Are any held personally by the owner (rather than the entity), meaning they don't transfer automatically?
• Professional licenses (if the business requires them). Contractor licenses, healthcare licenses, financial services licenses. What happens if the license holder leaves post-close?
• Industry-specific regulatory compliance. Any open violations, warnings, or pending enforcement actions?
• Environmental. For businesses with industrial operations or owned real estate, environmental review is often required by SBA lenders. Even for asset-light businesses, understand whether the physical location has any environmental history.

Litigation and Disputes

• Litigation history. All pending, threatened, or recently settled lawsuits: customer disputes, employment claims, vendor disputes, IP disputes.
• Workers' compensation claims history.
• EEOC or labor board complaints.
• Tax liens or judgments. Run a UCC lien search on the entity and on the seller individually.

Intellectual Property

• Trademarks, patents, and copyrights. Are they registered? Are they held by the entity being sold, or by the owner personally? IP held personally needs to be explicitly transferred.
• Domain names and social media accounts. Surprisingly often these are registered under the owner's personal email rather than the business.
• Software licenses. Any licensed software critical to operations? Does it transfer or require renegotiation at close?

3. Operational Due Diligence

Operational DD is where you assess the business as a living system, beyond the financial statements. The question goes past "does this cash flow?" into "can I actually run this, and what will it take?"

People and Key-Person Risk

• Full employee roster with titles, tenure, compensation, and roles. Who are the institutional knowledge holders? If three people walked out the door on day two of your ownership, what would break?
• Owner's actual role. This is different from what the CIM says. Talk to the owner. Shadow them for a day if possible. What decisions flow through them that currently have no documented process?
• Retention conversations (with seller permission). Key employees who know the business is for sale may be actively job-searching. Where possible, establish direct relationships and understand their intentions.
• Compensation benchmarking. Is the team paid at market? Below-market compensation is a retention risk you'll have to address post-close.
• HR compliance. I-9 records, FLSA compliance, state-specific employment requirements. HR violations create liability that survives the closing.

Customer Concentration and Relationships

• Customer revenue breakdown by account (3 years). Any customer above 20% of revenue is a concentration risk that materially affects your DSCR if they leave. Any customer above 30% is a dealbreaker absent a very long-term contract and a direct relationship with that customer.
• Customer tenure and churn data. How long do customers typically stay? What's the annual churn rate? For recurring revenue businesses, this is the most important metric in the whole package.
• Customer introductions. For any customer representing more than 15% of revenue, request an in-person or video introduction before close. Understand why they stay, whether the relationship is with the business or the owner, and what it would take for them to leave.
• Contract terms and renewal dates for top customers. Are their contracts month-to-month or multi-year? When do the next renewals come up?

Suppliers and Vendor Relationships

• Top 10 suppliers by spend. Payment terms, relationship history, any current disputes or credit holds.
• Single-source dependencies. Is there a critical input or service provided by only one vendor with no viable alternative? That's a concentration risk that can affect business continuity.
• Pricing agreements and expiration dates. Any favorable pricing arrangements that are personal to the current owner and may not survive a change of control?

Operations and Systems

• Equipment list and condition assessment. Physical inspection of all significant equipment. Request maintenance records. Any deferred maintenance creates capital expenditures that need to be factored into your post-close plan.
• Technology infrastructure. What software runs the business? Is it current? Any end-of-life systems that need replacement? Who has the admin credentials?
• Standard operating procedures. Are core processes documented? A business where everything lives in the owner's head is operationally fragile.
• Quality control processes (if applicable). For manufacturing, food service, or regulated businesses.
• Cybersecurity posture. Basic review: are systems current, are credentials managed, is there a backup procedure? Small businesses are frequent ransomware targets.

4. Market Due Diligence

Most buyers underinvest in market DD and overinvest in reviewing documents that confirm what they already know. Understanding the market context is how you determine whether the business has a future, not just a past.

• Industry trends. Is this sector growing, flat, or in structural decline? What's the 5-year demand picture? A business in a declining industry needs to be priced accordingly. You're buying a diminishing asset, and that should show in the multiple.
• Competitive set. Who are the main competitors? Has a well-funded competitor entered the market recently? Is the business's competitive position stable or eroding?
• Customer acquisition channels. How does the business get new customers? Referrals, direct sales, digital marketing, broker relationships? How dependent is the funnel on the owner personally?
• Pricing power analysis. Have prices been raised in the last 3 years? If not, why not? A business that hasn't raised prices in four years while input costs have risen is carrying a margin risk that isn't visible on last year's P&L.
• Technology disruption risk. Is there a credible path for AI, automation, or a software competitor to undermine this business model in the next 5 years? This is easy to dismiss and expensive to ignore.
• Regulatory risk. Any pending legislation or regulation that could materially affect the business model, operating costs, or customer behavior?
• Seasonality and concentration. Does revenue concentrate in certain months? How does cash flow look in the slow season? Can the business cover debt service in its slowest quarter?

5. SBA-Specific Due Diligence

If you're using SBA 7(a) financing, there's an additional layer of DD driven by lender requirements. Your SBA lender will run their own process, but you should understand what's coming so you can prepare documents and avoid surprises.

For the complete financing framework, read the SBA 7(a) loan guide.

• Business valuation. SBA lenders typically require a third-party valuation for deals above a certain size. The lender won't finance a deal where the purchase price materially exceeds appraised value without additional equity injection. Know this before you submit the LOI.
• Collateral assessment. SBA 7(a) loans are collateralized. The lender will assess business assets (equipment, receivables, inventory) and may require a lien on personal assets. Understand what you're pledging and what happens if the business underperforms.
• DSCR verification. The lender will independently calculate DSCR using their own methodology, which may differ from your CIM-based calculation. Run your own conservative DSCR scenario before closing to ensure you're not surprised. The free SBA calculator can model this. For the methodology, see the DSCR explainer.
• Environmental review. Required for deals involving real estate. Phase I Environmental Site Assessment is standard. Phase II may be required if Phase I surfaces concerns. Environmental issues can delay or kill closings.
• Goodwill allocation. SBA rules require that the purchase price be allocated between tangible assets and goodwill. The ratio affects how much of the loan can be used for which purposes. Work with your attorney to structure this correctly.
• Seller note standby agreement. If the seller is carrying a note, SBA requires it to be on standby for the first 24 months, meaning no principal payments during that period. The seller needs to understand and agree to this structure before closing.
• Equity injection documentation. The lender will verify that your down payment is coming from legitimate sources. Bank statements showing the funds are required. Gift funds have specific documentation requirements. Borrowed funds generally don't count as equity injection.
• Buyer eligibility. Confirm your personal credit score, criminal history review, and any prior SBA defaults are clean. Issues here can delay or block financing.

6. Deal-Specific Questions to Answer Before Close

Beyond the category checklists, every deal has a set of situation-specific questions that need answers before you sign. These tend to be the ones that actually determine whether you close and on what terms.

• Why is the seller selling? And is the real reason different from the stated reason? Retirement is the most common answer. Sometimes true, sometimes a cover for a business that's deteriorating. Dig until you have a credible explanation that's consistent with the financial trends.
• What will the seller do post-close? A seller with no transition plan, no hobbies, and no other business interests sometimes comes back and tries to undo the sale. It's rare but real.
• What's the transition plan? Who introduces you to key customers and employees? How long is the seller available post-close? What's been committed in writing vs. verbally?
• What does the seller know that isn't in the CIM? Ask this directly. Some sellers will tell you. The conversation itself is informative. An honest seller responds differently than one with something to hide.
• Are there any handshake deals or informal arrangements? Undocumented customer pricing, informal payment arrangements with vendors, promises made to employees that aren't in writing. These exist in small businesses and can surprise you post-close.
• What keeps the business from growing? The seller has run this business for years. They know the bottlenecks. Ask them. The answer tells you a lot about operational challenges and about the seller's candor.

Managing the Due Diligence Process

Sixty to ninety days sounds like a lot of time. It isn't. Here's how to avoid running out of clock.

Prioritize by Risk

Not all items carry equal risk. Customer concentration, add-back verification, and lease terms can each individually crater a deal. Spend the first two weeks on the items that are most likely to surface a dealbreaker. If any of those fail, you've preserved time and negotiating leverage.

Build a Document Request List on Day One

Send a comprehensive document request list to the seller or broker on the first day of the DD period. Sellers who are serious about closing respond quickly. Sellers who are slow or evasive on document production are telling you something.

Track Issues and Price Adjustments Separately

As you find issues, categorize them: dealbreakers (kill the deal), price adjusters (renegotiate), and manageable risks (accept and price in). The goal at the end of DD is a clear-eyed view of what you're actually buying and what it's worth given what you found.

Maintain Your Walk-Away Number

Decide your walk-away number before DD starts. The further you get into a process, the more committed you feel. Sunk cost is real. If the DD findings change the economics of the deal, renegotiate or walk. Don't close on a deal you wouldn't have started if you'd known then what you know now.

For the full acquisition process from sourcing to close, see the complete guide to buying a small business. For what comes before DD, read how to read a CIM. For what comes after, how to write an LOI covers the document that governs the DD period itself.