Due diligence is where good deals get confirmed and bad deals get caught. This business due diligence checklist covers the four workstreams every buyer should run, the documents to request, and the red flags that should stop a deal cold.
30-90 days
Typical Diligence Window
3 years
Financial History to Request
4
Core Workstreams
100+
Items on a Thorough List
Due diligence has one job: prove that the business you agreed to buy in the letter of intent is the business that actually exists. You are testing the seller's numbers and story, not taking them on faith.
It is not about finding a perfect business. Every small business has flaws. Diligence tells you which flaws are priced in, which ones justify renegotiation, and which ones mean you should walk.
When buying a business, due diligence starts after you sign an LOI and typically runs 30 to 90 days. The LOI should state the diligence period explicitly and let you exit without penalty if findings do not check out.
Run four workstreams in parallel: financial, operational, legal, and customer. Buyers who only check the financials routinely miss the problems that actually kill businesses, like a lease that cannot be assigned or one customer holding half the revenue.
Sequence matters. Verify the earnings first, because if the profit is not real, nothing else on this checklist is worth your time.
New to the process? Start with our step-by-step guide on how to buy a business, then come back here when you are ready to open the books.
Financial due diligence for a small business answers one question: is the profit real, and will it survive the ownership change? Work through these five areas in order.
Is the asking price actually fair?
Run the target's revenue and earnings through BridgeBook's free valuation calculator to see a typical market range before you negotiate. Takes about 5 minutes.
The financials tell you what the business earned. Operational diligence tells you whether it can keep earning it without the current owner in the building.
Legal diligence is where an experienced attorney earns their fee. These are the four areas that most often produce surprises in small business deals.
Read every material contract for assignability and change-of-control clauses. Many customer contracts, supplier agreements, and franchise agreements require consent to transfer, and the lease is the single most common deal-delayer: landlord consent to assignment can take weeks and sometimes comes with a rent increase. Whether contracts transfer automatically also depends on deal structure, which is covered in our guide to asset sales versus stock sales. In an asset sale, most contracts must be re-signed or formally assigned; in a stock sale, they usually ride along but so do the liabilities.
List every license the business needs to operate: state and local business licenses, professional licenses, health permits, liquor licenses, contractor licenses, DOT authority. For each one, confirm whether it transfers, how long the transfer takes, and whether the buyer must qualify personally. A license that cannot transfer, or that requires a credential you do not hold, is a structural problem to solve before closing, not after.
Customers are the asset you are actually buying. Three things determine whether they stay after the sale: concentration, retention, and what holds them to the business.
Request revenue by customer for the past 3 years. As a rule of thumb most buyers and lenders use: a single customer above 20% of revenue is a risk to price around, above 35% it should reshape the deal structure (earnout or holdback tied to that customer staying), and above 50% with no contract, most buyers should pass.
For each significant customer relationship, determine what actually keeps them: a signed contract with time remaining, switching costs, or a personal friendship with the seller. Contracts with auto-renewal and assignability clauses are the strongest. Relationships that exist because the owner coaches the customer's kid's baseball team are the weakest, and they are more common than sellers admit. Structure transition support and, where concentration is high, contingent payments around exactly these relationships.
Most diligence findings are negotiating points. These are not. If you hit one of these and the seller cannot fully resolve it, the correct move is to walk away, no matter how much time you have invested.
Knowing how the sell side stages information helps you ask for the right things at the right time, and tells you a lot about how well the deal has been prepared.
Brokered deals release information in stages. First you see a blind profile: industry, region, revenue, and earnings, with no identifying details. After you sign an NDA and show proof of funds, you receive the confidential information memorandum (CIM) with the business name and full story. The data room itself, with source documents, usually opens after your LOI is accepted. BridgeBook's marketplace works this way: listings are NDA-gated, and qualified buyers get access once they are verified.
A well-organized data room is indexed into numbered folders. Expect something close to this:
Most brokered deals run questions through the broker rather than directly to the seller, both to keep the sale confidential from staff and customers and to keep answers consistent and documented. Submit questions in writing, in batches, and keep a log of every answer: those written responses become the basis for the representations and warranties in your purchase agreement. A data room that is indexed, complete, and answered promptly is itself a diligence finding, it tells you the seller prepared properly. A data room that dribbles out documents one email at a time tells you something too.
Most small business deals allow 30 to 90 days of due diligence after the letter of intent is signed. Simple asset purchases under $1,000,000 often finish in 30 to 45 days. Larger or licensed businesses (healthcare, government contracting, multi-location) commonly need 60 to 90 days, and SBA lender underwriting frequently runs in parallel and sets the real timeline.
At minimum: 3 years of monthly profit and loss statements and balance sheets, 3 years of business tax returns, 12 to 24 months of bank and merchant processor statements, AR and AP aging reports, customer revenue by account, all material contracts and the lease, licenses and permits, an employee roster with compensation, and documentation supporting every add-back the seller claims.
The deal-stoppers are revenue that cannot be tied to bank deposits or tax returns, a seller who refuses to share tax returns, undisclosed litigation or tax liens, a single customer over roughly 50% of revenue with no contract, and a sudden revenue spike right before the sale that has no operational explanation. Any one of these justifies walking away or repricing the deal.
Yes. A CPA experienced in financial due diligence for small business acquisitions verifies earnings quality, add-backs, and tax exposure, and an attorney reviews contracts, liens, and the purchase agreement. On a typical deal under $5,000,000 this professional help usually costs a fraction of one percent of the purchase price and regularly pays for itself in renegotiated terms or avoided mistakes.
You have four options: renegotiate the price, restructure the deal (for example, shift more of the price to an earnout or holdback escrow), require the seller to fix the issue before closing, or walk away. A well-drafted letter of intent makes diligence findings a valid reason to exit without penalty, which is why you should never sign an LOI that locks you in before diligence is complete.
Browse NDA-gated listings on the BridgeBook marketplace, or book a free 45-minute consultation to talk through a deal you are evaluating.