Newsletter

Steps in Due Diligence for Small Businesses

Buying a small business? Due diligence is your safety net. Here’s what you need to know:

  • What is it? A structured process to evaluate a company’s finances, legal standing, operations, and risks before finalizing a deal.
  • Why does it matter? Nearly 50% of deals fall apart during this phase due to hidden issues.
  • Key steps:
    1. Prepare: Draft a Letter of Intent (LOI), sign confidentiality agreements, and set up a secure Virtual Data Room (VDR) for document sharing.
    2. Financial Review: Verify financial health, check tax records, and identify risks like hidden liabilities or unreliable revenue streams.
    3. Legal Review: Examine contracts, licenses, and compliance with regulations.
    4. Operations & Market: Assess daily workflows, market position, and key personnel.
    5. Final Review & Valuation: Summarize findings, negotiate a fair price, and plan for a smooth transition.

Pro Tip: Tight budgets? Focus on critical risks like financial accuracy, customer dependency, and legal liabilities. A thorough process ensures fewer surprises after the purchase.

Let’s break it down step by step.

5-Step Due Diligence Process for Small Business Acquisition

5-Step Due Diligence Process for Small Business Acquisition

Everything to Do Before Buying a Business (Due Diligence 101)

Step 1: Preparation Phase

The preparation phase sets the stage for a smooth transaction by establishing intent, safeguarding sensitive information, and organizing key documents for review.

Letter of Intent and Confidentiality Agreements

The Letter of Intent (LOI) outlines the initial terms of the deal and marks the beginning of the due diligence process. It’s crucial to specify that the buyer’s offer hinges on a satisfactory review. As Bob House, President of BizBuySell.com, explains:

"Due diligence is, in almost all sales, a condition of the buyer’s offer. And if it’s not, it should be."

This contingency gives buyers the ability to back out if their investigation uncovers major concerns.

Confidentiality agreements (NDAs) play a vital role in protecting the seller’s sensitive financial, legal, and operational data during this process. These agreements typically include:

  • Nondisclosure clauses to prevent any leaks of information.
  • Nonsolicitation provisions to stop buyers from recruiting the seller’s employees.
  • Noncompetition clauses to restrict buyers from competing with the seller.

Sellers must also disclose any existing nondisclosure or noncompetition agreements they are bound by. Amber Sheppard, Esq., from FindLaw, cautions:

"Failure to produce or disclose these documents [material contracts and LOIs] could result in voiding your agreement to purchase."

Additionally, ensure the business is in Good Standing with the Secretary of State and seek advice from legal and accounting professionals before signing any agreements.

Virtual Data Room Setup

A Virtual Data Room (VDR) acts as a secure digital space where sellers can organize and share documents with potential buyers. For smaller businesses, this eliminates the need for physical file storage while ensuring sensitive information remains protected.

To manage a VDR effectively, documents should be grouped into clear categories like Corporate Matters, Financials, Operations, Legal/Compliance, and Human Resources. Below is a breakdown of essential documents to include:

VDR Category Essential Documents to Include
Corporate Matters Articles of incorporation, bylaws, organizational charts, shareholder lists
Financials Audited financial statements (3 years), tax returns, general ledgers, accounts payable/receivable
Legal & IP Material contracts, permits, licenses, patents, trademarks, pending litigation records
Human Resources Employee contracts, benefit plans, resumes of key personnel, personnel handbooks
Physical Assets Real estate leases, deeds, mortgages, inventory schedules

Due Diligence Checklist

A detailed checklist ensures that no critical aspect of the business is missed. Standard due diligence involves examining financial statements and tax returns for at least the past three years, along with auditor’s letters and responses from the last five years.

Key areas to cover include:

  • Corporate Organization: Articles of Incorporation, bylaws, minute books, and shareholder lists.
  • Financial Records: Audited statements, ledgers, and schedules for accounts payable and receivable.
  • Legal and Regulatory Compliance: Certificates of Good Standing, business licenses, permits, and any ongoing litigation.
  • Physical and Real Assets: Deeds, mortgages, and Uniform Commercial Code (UCC) filings.
  • Intellectual Property: Patents, trademarks, copyrights, and work-for-hire agreements.
  • Human Resources: Employee lists with three years of salary history, personnel handbooks, and any records of labor disputes.
  • Material Contracts: Loan agreements, joint ventures, distribution agreements, and noncompetition clauses.
  • Tax Compliance: Federal, state, and local tax returns for the past three years.

For businesses heavily reliant on a few customers, include a schedule of the 12 largest customers by sales over the past two years. Additionally, list all law, accounting, and consulting firms engaged over the last five years to provide insight into advisory relationships that may continue after the acquisition.

Once these preparations are complete, the process moves on to a detailed financial review.

Step 2: Financial Review

Once you’ve prepared, it’s time to dive into the financial review. This step is all about assessing the financial health of the business by verifying its reported numbers and spotting any potential risks or opportunities. Roman Beylin, Founder of DueDilio, underscores the significance of this step:

"Financial due diligence is pivotal in assessing the financial health of a target company during an acquisition. It ensures that buyers have a transparent view of what they are acquiring, uncovering potential financial risks and validating the business’s worth."

For small businesses, a basic financial review typically costs between $2,000 and $5,000 and takes one to two weeks to complete. On the other hand, a deeper dive, like a full-scope Quality of Earnings (QoE) report, can cost upwards of $30,000 and may take as long as eight weeks.

Financial Document Review

Start by reviewing key financial documents. This includes balance sheets, income statements, and cash flow statements for at least the past three years. Additionally, examine federal, state, and local income tax returns from the last three to five years, along with sales tax returns and employment tax filings.

Banking and cash records also deserve close attention. Check bank statements, reconciliations, and cash ledgers to confirm cash flows. A "Proof of Cash" analysis, which costs between $1,000 and $4,000, can be particularly useful for identifying unrecorded transactions that might signal fraud.

Beyond these basics, delve deeper into financial verification. Use the Proof of Cash method to match cash transactions recorded in the books with actual bank deposits. Review any outstanding loans, leases, credit agreements, and contingent liabilities to get a full picture of the company’s financial obligations. Internal documents like the general ledger, internal control procedures, and auditor’s reports from the past five years can reveal hidden liabilities. Watch out for common red flags, such as undisclosed liabilities (like compliance issues or pending lawsuits) or non-recurring expenses being treated as operational costs. Accounts receivable older than 90 days might indicate unreliable client payments, while outdated or unsellable inventory can artificially inflate the company’s value. These steps pave the way for verifying revenue trends in the next phase.

Revenue Verification

Next, ensure that reported revenue reflects sustainable income rather than one-off sales. Cross-check invoices, customer contracts, and payment records against the income statement to confirm accuracy.

Pay attention to revenue concentration risk. If a business relies heavily on a single client, it becomes vulnerable. Reviewing the 12 largest customers and identifying any major clients lost in the past two years can provide valuable insights into market stability. Additionally, confirm that unfilled orders are backed by actual contracts to validate future revenue projections.

The Proof of Cash method proves useful here as well. By comparing cash transactions in the books with actual bank deposits, you can uncover discrepancies that might indicate fraud or weak internal controls. Also, analyzing accounts receivable aging – especially those older than 90 days – helps evaluate client payment reliability and overall cash flow health. High levels of uncollectible debts can create a misleading picture of financial performance.

Financial Metrics Comparison

After verifying the accuracy of financial documents and revenue figures, compare key financial metrics to spot inconsistencies. The table below highlights critical metrics, how to analyze them, and potential red flags:

Financial Metric Comparison Method Potential Red Flag
Revenue Growth Compare year-over-year sales Inconsistent growth or unsustainable seasonal spikes
Profit Margins Compare to industry benchmarks Margins much higher than peers, suggesting unrecorded expenses
Inventory Value Physical count vs. book value Outdated or unsellable inventory inflating value
Cash Flow Bank deposits vs. reported sales Discrepancies hinting at unrecorded or missing sales
Accounts Receivable Evaluate payment reliability High percentage of overdue accounts (90+ days)
Debt-to-Equity Analyze capital structure Excessive leverage or hidden liabilities

Be sure profits are coming from core operations, not one-off events. Confirm that revenue recognition policies align with industry norms and are applied consistently. By cross-checking these metrics with verified data, you’ll get a clearer picture of the business’s true earning power. This thorough evaluation reveals whether the company has a solid financial foundation or if its performance is being overstated.

With the financial review complete, the next step is to examine the legal framework that supports the business.

Now it’s time to shift gears and dive into the legal side of things. This step is all about identifying potential liabilities, ensuring regulatory compliance, and confirming the business is legally protected. A detailed legal review can help you sidestep hidden risks that could derail the acquisition.

Contracts and Licenses

Start by examining the company’s core legal documents, such as Articles of Incorporation or Organization, bylaws or operating agreements, and minute books. Verify the business’s good standing with a Certificate from the Secretary of State. Amber Sheppard, Esq. from FindLaw highlights the importance of this:

"If the company was not active with the secretary of state when it signed a contract, then that contract could be void."

Next, review all material contracts – like distributor, supplier, and customer agreements – along with equipment and real estate leases, loan agreements, and joint venture obligations. Pay special attention to change-of-control clauses, which could require renegotiation or even termination after the sale. Don’t forget to confirm that all registered "Doing Business As" (DBA) names are legally protected and properly tied to the parent company.

Check the Uniform Commercial Code (UCC) filings for active liens or financial obligations. As business attorney Craig Delsack explains:

"Knowing the current financial status of the target debtor business before extending credit is crucial, and it is the number of active, existing liens already in effect for that particular debtor party that most interests any future lender or secured party."

Regulatory Compliance Check

Ensure the business complies with all industry and local regulations. Gather relevant licenses, permits (such as liquor or operating permits), and correspondence with regulatory agencies. For companies in regulated industries, confirm compliance with standards like HIPAA for healthcare, SEC/FINRA for financial services, or FDA/USDA for food and pharmaceuticals.

Review workplace safety records, waste disposal practices, and hazardous substance usage to confirm compliance with environmental standards. Examine recent federal, state, and local tax returns for any outstanding taxes, liens, or audits. Keep in mind that certain jurisdictions, like New York, may hold buyers accountable for a seller’s unpaid taxes or legal violations under successor liability rules.

Request a detailed schedule of any pending litigation and descriptions of threatened legal actions. Review regulatory correspondence, injunctions, consent decrees, and settlement agreements. Investigate the history of labor disputes, including wrongful termination, harassment claims, and workers’ compensation issues. Lastly, check the company’s insurance claims history for recurring risks or gaps in coverage.

Intellectual Property Assessment

Take a close look at the company’s intellectual property (IP) – including patents, trademarks, trade names, and copyrights. Verify ownership and confirm that "work for hire" agreements ensure the business owns these assets, not individual creators. Review any licenses, IP assignments, or consulting agreements that might affect ownership rights.

Investigate any claims or disputes related to intellectual property, such as cease and desist letters. Confirm that trademarks and patents are properly registered and free from infringement issues. This step is crucial to avoid purchasing a business that doesn’t fully own the assets it claims to have.

A thorough legal review paves the way for assessing the company’s daily operations and market position with confidence.

Step 4: Operations and Market Assessment

After addressing financial and legal concerns, it’s time to dive into the nuts and bolts of daily operations and market dynamics. This step evaluates how the business functions day-to-day and its position in the market to gauge its potential for growth. As Marsha Lewis from M&A Science explains:

"Operational due diligence may be the most forward-looking kind of due diligence that exists."

Operational Efficiency Review

Start by analyzing how the business transforms inputs into outputs. On-site visits can uncover inefficiencies like bottlenecks, outdated equipment, or safety concerns.

Assess the relationships with suppliers and distributors to ensure they are well-established and not overly reliant on personal connections. Review the technology infrastructure for any outdated systems that may hinder scalability.

Take a close look at inventory management. Excess inventory can tie up cash, while shortages may signal production issues. Keith Crawford, Global Head of Corporate Development at State Street Corporation, highlights the importance of operational expertise in these evaluations:

"You need to include in the deal team those individuals that maybe don’t know so much about deal tactics or valuation, but know the underlying business."

Compare the company’s key performance indicators (KPIs) to industry benchmarks to pinpoint its strengths and weaknesses. Identify "quick wins" – small, immediate improvements that can add value soon after the acquisition. Don’t forget to calculate the replacement costs for aging equipment, as this can impact your final valuation.

Once you’ve assessed operations, it’s time to shift focus to the market and competitive landscape.

Market and Competitor Analysis

Knowing the competitive landscape is crucial. Research shows that 42% of startups fail because there’s no real market demand for their product or service. Confirm that the business serves a viable market and look for opportunities to grow by addressing customer pain points or frustrations with current solutions.

Conduct a SWOT analysis to evaluate both direct and indirect competitors. Elliott Holland, Founder of Guardian Due Diligence, emphasizes the importance of understanding the industry:

"The health of the industry will impact your success, so try to know it inside and out."

Examine the customer base to see if revenue heavily depends on a few clients or if customer loyalty is tied to the current owner. Recurring revenue streams with low seasonality are strong indicators of financial stability. Use digital tools to analyze competitors’ web traffic, marketing strategies, and customer engagement. Segment the target market by demographics, behaviors, and preferences to uncover growth opportunities. Combine historical sales data with market trends to create realistic sales forecasts, which will help with budgeting and planning.

While market positioning is essential, the strength of the team running the business is just as critical.

Key Personnel Assessment

Interview key employees and leadership to understand their roles, expertise, and future plans. Management consultant Stas Lawicki cautions:

"A longstanding team isn’t necessarily a productive one – quite often it’s the opposite."

Check whether employees are cross-trained to reduce risks tied to turnover. If customer loyalty depends heavily on the current owner, a solid transition plan will be necessary to maintain relationships.

Management audits and direct observation can provide a clearer picture of how the business operates. Elliott Holland points out:

"The existing team can also be a great source of information about how the business realistically operates – which might differ from the story you get from the current owner or upper management."

Review the organizational structure, turnover rates, employee contracts, and compensation agreements. For online businesses, check if traffic and visibility rely on the founder’s personal involvement, as this could pose a risk. Use digital tools and professional references to verify the backgrounds of senior leaders and ensure their qualifications align with their claims.

This thorough review of operations, market dynamics, and personnel provides a solid foundation for determining the business’s true value.

Step 5: Final Review and Valuation

After completing detailed reviews of all aspects of the business, the final step is to pull everything together and determine the true value of the business. This stage organizes the findings into a clear and actionable picture, helping you decide on the next steps and the overall worth of the business.

Findings Summary

Bring together the results from your financial, legal, and operational reviews into one unified document. Categorize any issues based on their severity – some may be deal-breakers, others might require price adjustments, and some can be addressed after the acquisition through tools like indemnities, escrows, or earnouts.

Pay close attention to potential red flags such as inconsistent financial records, hidden legal liabilities, high turnover in leadership, or unusual accounting practices. Analyze customer concentration to assess revenue stability – if a single client accounts for too much of the business, it could pose a major risk. Keith Crawford, Global Head of Corporate Development at State Street Corporation, highlights the importance of verifying assumptions:

"In our preliminary non-binding bid, we have a long list of assumptions. One of the assumptions is that all third party contracts are at or near their historical costs and fee levels. That’s gonna impact your underlying valuation if you come in and you’re paying 25% more on a large third party contract."

Compare your initial assumptions with the findings from due diligence. A Quality of Earnings (QoE) report can help verify adjusted EBITDA and confirm that margins remain consistent as the business scales. This process often takes 30 to 60 days and provides the foundation for your valuation strategy.

Valuation and Price Negotiation

Once you’ve gathered all the necessary insights, finalize the valuation using one of three common methods.

  • The asset-based approach focuses on inventory and equipment value, making it ideal for unprofitable businesses or those facing liquidation.
  • The income approach is better suited for service-based businesses with minimal physical assets, as it emphasizes future cash flow potential.
  • The market approach compares the business to similar companies in the industry and is often used for small businesses.

Mark Meloche, Director of Growth & Transition Capital at BDC, underscores the importance of trust during this phase:

"Due diligence is about trust – and verification. You’re trusting what you’re being told by the other side. But you’re also verifying, making sure the numbers match the reality on the ground."

Before entering negotiations, set a clear walk-away price to avoid letting emotions influence your decisions. If there’s a gap between your valuation and the seller’s asking price, consider bridging it with tools like earnouts (payments tied to future performance) or vendor take-back financing, where the seller loans you part of the purchase price. Rochelle Robinson, President of Wealthidian, offers a reminder:

"A business valuation is not an exact science and can be highly subjective."

You’ll also need to decide whether to structure the deal as an asset purchase – where you buy specific business assets – or a stock purchase, which involves acquiring the entire legal entity. This choice has important implications for liability and taxes. For sole proprietorships or LLCs, an asset sale is often the only legal option.

Integration Planning

Integration planning should begin during the due diligence phase. Develop clear communication strategies to keep employees, customers, and suppliers informed and reassured throughout the transition.

It’s often a good idea to negotiate for the seller to stay involved for a set period after the sale. This can provide continuity and help preserve critical relationships and institutional knowledge. If certain employees are key to the business’s success, secure their commitment with employment contracts and incentives to retain them after the acquisition.

Identify quick wins – immediate operational improvements you can implement based on your findings. Plan which functions will be consolidated and how to implement these changes with minimal disruption. Additionally, ensure that all intellectual property assignments are properly signed by employees, freelancers, and contractors to avoid future legal challenges.

Building trust with the seller during this phase can make a big difference. When both parties respect each other, unforeseen challenges are easier to navigate. By laying this groundwork, you’re not just buying a business – you’re setting the stage for a smooth transition and long-term success.

Conclusion

Performing due diligence is a critical step in protecting your investment when acquiring a small business. This thorough process examines financial records, legal obligations, operational systems, and market positioning to uncover risks that might otherwise go unnoticed. Typically, due diligence takes 30 to 60 days to complete. Skipping steps or rushing through it can expose you to hidden liabilities, overvalued businesses, or unexpected challenges.

The numbers speak for themselves: startups that work with expert advisors raise seven times more capital, achieve 3.5 times higher user growth, and are five times more likely to survive beyond three years. Advisors not only verify the seller’s claims but also identify potential red flags and ensure the purchase price reflects the business’s actual value. These statistics highlight how professional guidance can significantly impact the outcome of an acquisition.

Acquiring a small business comes with its own set of hurdles, such as over-reliance on the founder, informal agreements, and unaudited financial records. Mark Meloche, Director of Growth & Transition Capital at BDC, puts it succinctly:

"The goal is to try to minimize the surprises post-close as much as possible, especially any potentially fatal surprises".

This is why assembling a team of skilled professionals – attorneys, CPAs, and business advisors with experience in small business acquisitions – is essential.

For business leaders managing teams of 15–40 employees and navigating complex transitions like digital transformation or acquisitions, having the right advisory support can make all the difference. Growth Shuttle offers flexible advisory services tailored to your needs, from $600/month consultations to comprehensive weekly support. Their expertise ensures you have a reliable process in place, helping you avoid costly mistakes and build a solid foundation for success.

FAQs

What are the key risks to watch for during due diligence when buying a small business?

When evaluating a small business for acquisition, several potential risks often come into play. Here are some of the most common ones to watch out for:

  • Financial discrepancies: Inaccurate records or inflated revenue figures can paint a misleading picture of the business’s actual performance.
  • Hidden obligations: Unresolved debts, pending lawsuits, or unpaid taxes can surface unexpectedly and create significant financial strain.
  • Operational roadblocks: Inefficiencies like outdated systems or unclear workflows can slow down productivity and impact profitability.
  • Workforce challenges: Issues such as high employee turnover or unresolved workplace disputes can disrupt operations and lower morale.
  • Questionable market data: Unreliable customer or market insights might lead to incorrect assumptions about the business’s competitive standing.

Addressing these risks thoroughly is critical to avoiding unpleasant surprises and ensuring a well-informed acquisition decision.

What steps should I take to verify the accuracy of a small business’s financial records during due diligence?

To keep financial records precise during due diligence, start by matching all statements with their original source documents. Take a close look at the last three years of balance sheets, income statements, and cash flow statements to ensure everything lines up and is free of errors. Confirm that tax filings are up to date and that the business adheres to GAAP-compliant accounting practices. For added security, consider using a virtual data room or consulting with a financial advisor to spot any inconsistencies or potential issues. These steps can help reduce financial risks and enable well-informed decision-making.

When you’re diving into due diligence for a small business, one of the first things to tackle is reviewing the key legal documents that define the company’s structure and operations. These include essentials like the articles of incorporation, bylaws, shareholder lists, organizational charts, and agreements tied to stock options, warrants, or convertible securities. It’s also important to confirm the business has a current certificate of good standing, recent state filing reports, and all necessary licenses and permits in place.

Another area to scrutinize is the critical contracts that the business relies on. This includes supplier agreements, customer contracts, employment agreements, and any documents related to intellectual property or ongoing litigation. These contracts reveal the company’s obligations, potential risks, and overall stability. Verifying that everything is accurate and up-to-date is key to avoiding future legal or operational headaches.

Related Blog Posts