Due Diligence Checklist for Buying or Selling a Business
A business due diligence checklist organizes the evidence a buyer needs to verify earnings, assets, liabilities, contracts, people, operations, and transferability before closing. Sellers use the same checklist to prepare complete records and explain exceptions. Every request should have an owner, deadline, source document, finding, financial effect, proposed protection, and final resolution.
Due diligence is the organized investigation between initial interest and closing. Buyers test whether the opportunity matches the representations, operating model, price, financing, and agreement. Sellers assemble accurate records, identify exceptions early, control access appropriately, and respond consistently. Use the due diligence template to manage requests and the buyer red-flags framework to interpret unresolved issues.
Eight Due-Diligence Workstreams
- Financial quality and tax: reconcile tax returns, financial statements, general ledger, bank deposits, merchant statements, payroll, inventory, receivables, payables, debt, owner compensation, related parties, and claimed add-backs for matching periods.
- Revenue and customers: test contracts, invoices, orders, backlog, renewal, churn, collections, refunds, credits, deferred obligations, concentration, customer tenure, pricing, margins, and the cost to deliver each revenue stream.
- Operations and suppliers: document procedures, capacity, quality, callbacks, warranties, seasonality, purchasing, key vendors, alternate sources, service levels, safety, business continuity, and owner-dependent work.
- Employees and benefits: review roles, compensation, classification, tenure, turnover, agreements, policies, benefits, leave, claims, required credentials, key-person exposure, retention assumptions, and transition communications with qualified advisers.
- Assets, inventory, property, and technology: verify ownership, condition, liens, counts, obsolescence, maintenance, replacement capital, leases, zoning, environmental matters, cybersecurity, software, domains, phone numbers, data, and intellectual-property rights.
- Legal, regulatory, and insurance: review entity records, ownership, litigation, claims, taxes, licenses, permits, privacy, security, policies, exclusions, losses, contracts, defaults, assignment, change-of-control, and required third-party consents.
- Transaction economics and financing: test normalized cash flow, working capital, inventory, capital expenditure, debt service, equity injection, structure, allocation, seller financing, escrow, holdback, earnout, transaction costs, and downside cases.
- Transition and closing: define training, introductions, access, employees, customer and supplier communication, utilities, accounts, credentials, inventory count, prorations, approvals, lien releases, deliverables, closing conditions, and the first 100 days.
Buyer Review and Seller Preparation
| Workstream | Buyer objective | Seller preparation | Decision output |
|---|---|---|---|
| Earnings | Reconcile reported revenue, expenses, payroll, taxes, cash flow, and adjustments to source evidence. | Provide organized matching periods, a chart of accounts, adjustment support, and written explanations for variances. | Supported normalized earnings and a clear list of unresolved differences. |
| Working capital | Determine the receivables, inventory, payables, deposits, accruals, and cash needed to operate normally after closing. | Prepare monthly balances, aging, counts, seasonality, policies, exclusions, and a proposed definition consistent with the agreement. | A negotiated target, included/excluded accounts, measurement rules, and closing adjustment mechanism. |
| Transferability | Confirm that essential leases, contracts, licenses, permits, systems, data, and relationships can legally and operationally transfer. | Identify assignment and change-of-control terms, renewal dates, defaults, consent contacts, timelines, and alternatives. | Required consents or approvals, closing conditions, transition tasks, or a revised structure. |
| People and operations | Test who performs critical work, what knowledge is documented, and what replacement or retention costs are necessary. | Map roles, responsibilities, schedules, compensation, credentials, processes, access, and a lawful communication plan. | Replacement-cost adjustments, retention or transition plan, and first-day operating readiness. |
| Liabilities and risk | Identify debts, liens, taxes, claims, warranties, compliance duties, security incidents, and other obligations. | Maintain complete schedules, correspondence, policies, notices, payment evidence, and specialist contacts. | Exclusion, payoff, remediation, insurance, escrow, indemnity, price/term change, or decision not to proceed. |
A Practical Eight-Step Process
- Set scope and roles. Define the proposed structure, key assumptions, request categories, data-room rules, authorized participants, confidentiality duties, specialists, decision rights, and target milestones.
- Request primary evidence. Ask for source records covering consistent periods; identify unavailable, reconstructed, redacted, third-party, or seller-created information rather than treating all files as equivalent.
- Reconcile and sample. Tie summaries to ledgers, returns, statements, contracts, invoices, deposits, payroll, counts, titles, and confirmations. Select samples based on materiality and risk with professional guidance.
- Interview and observe. Compare documents with management explanations, employee roles, workflows, assets, premises, customers, suppliers, systems, and actual operating constraints.
- Record exceptions. State the claim, requested evidence, evidence received, missing item, responsible person, due date, finding, estimated effect, confidence level, specialist owner, and status.
- Quantify and protect. Translate supported findings into normalized earnings, capital, working capital, price, structure, financing, escrow, holdback, representations, indemnities, transition duties, and objective conditions as appropriate.
- Recheck before closing. Refresh time-sensitive financials, lien and litigation searches, consents, licenses, insurance, employees, contracts, inventory, working capital, assets, and other closing deliverables.
- Preserve the record. Retain the final request log, evidence, approvals, schedules, calculations, signed documents, credentials, and post-closing responsibilities under applicable retention and security rules.
Worked Exception-Log Example
Claim: seller discretionary earnings include a $60,000 owner-salary add-back. Evidence: payroll and role interviews show the owner performs essential estimating and sales work. Buyer model: a qualified replacement is estimated at $48,000 plus $9,000 of payroll burden and benefits, so only $3,000 of the presented adjustment remains before other buyer-specific costs.
Decision: confirm the role and replacement cost with appropriate advisers; revise normalized earnings; test debt service and working capital; and decide whether price, financing, transition support, or another deal term should change. The example illustrates a reconciliation process—it is not a valuation or staffing recommendation.
Confidentiality and Access Control
A confidentiality agreement does not eliminate disclosure risk. Use staged access based on need, redact personal and unnecessary sensitive data, keep a participant and download log, restrict copying where practical, use secure sharing, and obtain legal/privacy guidance before disclosing employee, customer, health, payment, credential, or other regulated information. Sellers should remain accurate and responsive; buyers should not contact employees, customers, landlords, suppliers, or regulators without authorization.
Official Guidance and Tax Allocation
The SBA’s guidance on buying an existing business advises reviewing the full landscape and identifies contracts, leases, cash flow, inventory, financial statements, tax returns, and professional legal/accounting help as important considerations.
The IRS explains that a business sale commonly involves multiple assets and that tax treatment can differ by asset. Its sale-of-a-business guidance and Form 8594 information provide federal tax context for applicable asset acquisitions. Buyer and seller should use qualified tax and legal advisers to determine structure, allocation, reporting, and consistency for their actual transaction.
Make every deal assumption traceable
Buyers can organize evidence before committing capital. Sellers can prepare records before access requests begin. Neither side should let a deadline replace verification or professional review.
Frequently Asked Questions
What should be included in a business due diligence checklist?
Include financial, tax, revenue, customer, supplier, employee, operational, asset, property, technology, cybersecurity, legal, regulatory, insurance, financing, transaction, transition, and closing workstreams. Each request should identify the source evidence, reviewer, finding, financial effect, required protection, owner, deadline, and resolution.
Is due diligence only for buyers?
No. Buyers use diligence to test claims and understand what they would acquire. Sellers use the same structure to organize records, identify exceptions, prepare explanations, control access, and reduce avoidable delays. The objectives differ, but the underlying evidence should remain complete, consistent, and traceable.
How long should business due diligence take?
There is no reliable universal duration. Timing depends on company size, record quality, transaction structure, financing, third-party consents, licenses, property, environmental matters, specialists, responsiveness, and findings. Set milestones, but do not treat an arbitrary date as a substitute for completing material review.
How can confidentiality be protected during diligence?
Use staged need-based access, appropriate confidentiality terms, secure sharing, redaction, participant and download logs, controlled communications, and legal/privacy review. Do not assume an NDA eliminates risk, and do not contact employees, customers, landlords, suppliers, or regulators without authorization.
Can due diligence change or stop a business sale?
Yes. Supported findings can change normalized earnings, working capital, price, structure, financing, escrow, holdback, representations, transition duties, closing conditions, or the decision to proceed. A missing document is not automatically misconduct, but material unresolved facts should not be ignored merely to meet a closing date.