The most expensive surprises in small-business acquisitions are not discovered on day one of ownership, they are discovered in month three, when the buyer realizes something that diligence should have caught. A customer concentration issue that deflates revenue, an undisclosed legal matter, an employee classification problem, or a systems dependency the seller never mentioned. Each of these surfaces predictably in competent diligence and each routinely slips past inadequate diligence.
Due diligence is the buyer's single protection against paying too much or buying the wrong business. The work is tedious but the alternative is worse: accepting the seller's representations at face value and discovering the gaps after the wire has cleared. The ten areas below are the ones that, collectively, cover the substantial majority of preventable post-close problems.
The Ten Diligence Areas
Each of these areas should be scoped to the deal size, a $750K acquisition cannot support the same depth as a $15M one, but none should be skipped entirely.
| Area | Primary Question | Common Red Flags |
|---|---|---|
| Financial | Are the reported earnings real and sustainable? | Cash basis, large add-backs, inconsistent periods |
| Customer concentration | Is revenue dependent on a small number of customers? | Top customer >30%, no formal contracts |
| Customer retention | Will customers stay through ownership change? | High churn, relationship tied to outgoing owner |
| Employee dependency | Will key employees stay? | Single point of failure in any function |
| Vendor and supplier | Are critical supplies secure and diversified? | Single-source dependency, expired contracts |
| Legal and compliance | Are there pending or hidden legal issues? | Undisclosed litigation, classification errors |
| Intellectual property | Does the business own what it thinks it owns? | Founder-held IP, unsigned assignment agreements |
| Technology and systems | Will operations continue cleanly? | Homegrown systems, tribal knowledge, no documentation |
| Real estate and leases | Are physical premises secure? | Expiring lease, no renewal option, related-party |
| Working capital | What working capital is actually required? | Aging receivables, stale inventory, large payables |
Financial Due Diligence: The Core Work
Financial diligence is the most time-intensive and consequential category. The goal is not to audit the books but to validate that the reported earnings are real, sustainable, and appropriately classified.
Reconcile Tax Returns to Financial Statements
The three most recent tax returns should reconcile cleanly to the financial statements. Material differences are diligence triggers; sellers sometimes present higher earnings to buyers than they reported to the IRS. Both numbers cannot be right.
Validate Add-Backs Line by Line
Sellers typically present 'adjusted EBITDA' with add-backs for owner compensation, personal expenses, and non-recurring items. Each add-back needs documentation. Undocumented add-backs are the most common source of post-LOI EBITDA deflation.
Analyze Revenue Quality and Trend
Is revenue growing, flat, or declining in trend? Is it recurring or project-based? Is it diversified across customers? Revenue trend matters as much as revenue level; a declining business deserves a lower multiple than a flat one at the same EBITDA.
Quality-of-Earnings Report for Deals Above $2M
A professional Q of E report ($10K–$30K) provides an independent validation of earnings that sellers' internal financials do not. For larger deals, this is essentially standard; for smaller deals, it is often optional but still valuable.
Working Capital Analysis
The deal typically includes 'normalized working capital' — the amount of working capital needed to continue operations. Determining this figure affects the final purchase price substantially and is often under-analyzed by first-time buyers.
Customer Concentration and Retention
Revenue is not equal across customers. A business with $3M in revenue concentrated in three customers is a fundamentally different risk than one with $3M spread across 300 customers.
For deals above $1M, interview the top 5–10 customers during diligence (with the seller's knowledge and facilitation). The conversation is designed to surface: (1) how tied the relationship is to the outgoing owner personally, (2) whether the customer has plans to reduce or change the relationship, and (3) what would cause them to leave after ownership change. Customer interviews regularly surface risks that none of the other diligence work would have caught.
Employee and Vendor Dependencies
The human and supply chain infrastructure of the business warrants the same scrutiny as the financial and customer base.
Employee Diligence Red Flags
- Single employee is sole expert in a critical function
- No written employment agreements or IP assignments
- Large portion of workforce misclassified as contractors
- Key employee relationships depend on outgoing owner personally
- No documented processes for critical operational activities
Vendor and Supply Diligence Red Flags
- Single source for critical inputs with no backup supplier
- Handshake agreements on critical vendor terms
- Contracts expiring within 12 months with no renewal option
- Related-party transactions with seller-controlled entities
- Vendor relationships that depend on outgoing owner personally
Legal and Compliance Diligence
Legal diligence is where the largest hidden liabilities typically reside. The checklist below is the minimum scope.
- Corporate documents — formation, operating agreement, stock/member records
- All material contracts — customers, vendors, employees, real estate
- Litigation history — current, threatened, and historical
- Employment law compliance — W-2/1099 classification, wage-and-hour, benefits
- Regulatory licenses — current and transferable to buyer
- Tax compliance — federal, state, local filings current and paid
- Intellectual property — trademarks, patents, copyrights, trade secrets assigned to entity
- Environmental matters — for businesses with physical operations
- Insurance coverage — adequacy and continuity through transaction
- Change-of-control provisions — in contracts, leases, licenses, debt agreements
The purpose of due diligence is not to find reasons to walk away from the deal — it is to understand what is actually being purchased, price it correctly, and structure protections for risks that cannot be resolved before close. Buyers who approach diligence as a checkbox exercise consistently overpay and discover problems late. Buyers who approach it as the work of understanding the business deeply consistently identify mispricings and structural issues in time to address them.
Build a diligence tracker at LOI signing and update it daily. Every question raised, every document received, every flag identified goes into the tracker. At close, the tracker becomes the permanent record of what was disclosed and when — which matters if any post-close dispute arises about what the buyer knew or should have known.
Frequently Asked Questions
A reasonable target is 3–5% of deal size, or $60K–$100K for a $2M deal. This typically covers a quality-of-earnings review ($15K–$25K), legal diligence ($25K–$50K), tax diligence ($10K–$20K), and specific industry or operational reviews as needed. Underspending on diligence is false economy.
For small deals ($500K–$1M), many buyers do primary diligence themselves with occasional specialist support. For larger deals, professional diligence resources add value that far exceeds their cost. The question is where the buyer's own expertise is and where it isn't; diligence is only as good as the person doing it.
Representations and warranties are the seller's formal statements about the business (financial condition, legal status, customer relationships, etc.) included in the purchase agreement. If any rep is false, the buyer has recourse — typically against the escrow holdback. Strong reps are the backup protection when diligence misses something; weak reps leave the buyer exposed.
Three options: (1) walk away from the deal, (2) reprice to account for the issue, or (3) restructure to transfer the risk (escrow holdback, specific indemnification, earn-out contingency). The right choice depends on the issue's magnitude, whether it can be quantified, and the buyer's overall view of the deal.
Sources
- SMAART Company. Small Business Due Diligence Frameworks, 2026.
- International Business Brokers Association. Due Diligence Best Practices, 2025. ibba.org
- American Institute of Certified Public Accountants. Transaction Due Diligence Guide, 2026. aicpa.org
- Association for Corporate Growth. Middle Market Due Diligence Standards, 2025. acg.org
Discussion
Comments
Leave a comment