Small Business Due Diligence: What to Check Before You Buy
You found a business that looks right. The financials seem reasonable, the asking price falls in your range, and the seller sounds motivated. This is the moment that separates buyers who close good deals from buyers who inherit someone else’s problems.
Due diligence is not a formality you rush through to get to closing. It is the process that tells you whether the business you think you are buying is actually the business you are buying. Most first-time buyers either skip steps because they feel pressured to move fast, or they drown in paperwork without knowing which items actually matter. Both approaches lead to expensive surprises.
This article gives you the structured methodology. If you have not yet worked through the cost framework, start with What Does It Actually Cost to Buy a Small Business?. If you are still searching for deals, start with How to Find a Small Business to Buy.
What Due Diligence Actually Is (And When It Starts)
Due diligence is a bounded investigation period, typically 30 to 90 days, that begins after you and the seller sign a Letter of Intent (LOI) but before closing. It is your contractual right to verify every claim the seller has made about the business. The LOI should include a due diligence contingency that protects your deposit and allows you to walk away if you find material problems.
The investigation covers two categories. Financial due diligence proves the numbers are real. Operational due diligence proves the business works without the current owner. Both must pass for the deal to be sound.
The goal of due diligence is not to find a perfect business. No business is perfect. The goal is to identify risks before they become your risks, quantify them honestly, and decide whether the deal still makes sense with those risks priced in.
Run the Numbers First
Before you invest time and money in a full investigation, run the basic acquisition math through the Business Buyers Calculator. If the asking price does not make sense against the earnings, or the financing math does not work at the headline level, a deeper investigation will not fix that. The calculator gives you a five-minute financial screen before you commit weeks of effort and professional fees.
The 15 Documents Every Buyer Should Request on Day One
On the first day of due diligence, send the seller a formal document request list. This sets the tone: you are conducting a professional investigation, not asking permission. Every serious seller expects this, and most brokers will have much of it ready.
The Day One Document Request
- Federal tax returns for the past three years
- Profit and loss statements for the past three years
- Balance sheets (current and year-end for past three years)
- Bank statements for the past 12 to 24 months
- Accounts receivable aging report
- Accounts payable aging report
- Customer list with revenue by customer for the past two years
- Vendor and supplier list with contract terms
- Employee roster with roles, tenure, compensation, and classification (W-2 vs. 1099)
- Lease agreements for all real estate and equipment
- Business licenses and permits
- Insurance policies (general liability, professional liability, workers compensation)
- Pending or threatened litigation disclosures
- Standard operating procedures and training materials
- Digital asset inventory: domain names, software subscriptions, admin credentials, customer data systems
If the seller hesitates to provide any of these, that is useful information in itself. A cooperative seller with a clean business has no reason to resist a standard document request.
Financial Due Diligence: Proving the Numbers
The asking price is almost always based on the business’s earnings. If the real earnings are lower than claimed, you are overpaying. This section is where deals are made or broken.
Tax Returns vs. Seller’s Financials
Request three years of federal tax returns and the seller’s internal profit and loss statements. Then compare them line by line. Discrepancies are common and not always fraudulent, but every discrepancy must be explained and reconciled.
The operating principle is the same one built into the Business Buyers Calculator: use the verified figure from tax returns and bank statements, not the listing’s claim. Reported revenue should reconcile to actual bank deposits. When it does not, stop and find out why before anything else.
Verify Every Add-Back
Seller’s Discretionary Earnings (SDE) is the figure most small business valuations rest on. The seller will present the most flattering version by adding back personal expenses and one-time costs. Your job is to challenge every add-back. For a deeper explanation of SDE and how multiples work, see What Does It Actually Cost to Buy a Small Business?.
Common add-backs to scrutinize:
- Owner’s vehicle: Is it genuinely a personal expense, or does the business require it for operations?
- Family payroll: Are family members on the payroll actually working, or is this disguised profit distribution?
- One-time legal or consulting expenses: Were they genuinely one-time, or do similar costs recur every year?
- Owner’s travel and meals: How much is personal versus legitimately business-related?
- Above-market rent to a related entity: Does the owner pay rent to a property they also own, and is the rate inflated?
Legitimate add-backs exist. But every one is a claim to test, not a fact to accept. Bring your accountant into this process early. Their fee is a fraction of the cost of overpaying for a business based on inflated earnings.
Example: How Add-Backs Change the Math
A landscaping business is listed at $350,000 SDE. During due diligence, your accountant reviews the add-backs and finds:
- $40,000 owner vehicle expense is a legitimate add-back (the owner uses a personal vehicle, not a company truck)
- $25,000 in family payroll is not legitimate (the owner’s spouse is on payroll but does not work in the business)
True SDE drops to $325,000. You also discover that the largest customer accounts for 32 percent of revenue. At a 3.5x multiple, the asking price was based on $350,000. The verified number and the concentration risk together mean the deal needs to be repriced, restructured, or declined.
This is a simplified example. Real due diligence involves dozens of line items and professional verification.
Revenue Concentration Risk
What percentage of revenue comes from the top one to three customers? If a single customer accounts for more than 20 to 25 percent of revenue, the business has concentration risk. Ask the direct question: what happens to this revenue if that customer leaves after the sale?
Concentration risk does not automatically kill a deal. But it should be priced into your offer and addressed in the transition plan.
Recurring vs. One-Time Revenue
Recurring revenue from subscriptions, contracts, or retainers is worth more than project-based or one-time revenue because it is more predictable. Verify the actual renewal and retention rates from the customer data, not the seller’s verbal claims. A business that reports $300,000 in “recurring” revenue but has a 40 percent annual churn rate has a very different risk profile than one with 90 percent retention.
Accounts Receivable and Liabilities
Review the aging report on receivables. How much is current versus 30, 60, or 90-plus days overdue? Stale receivables may not be collectible.
Review all outstanding liabilities: vendor payables, loans, tax obligations, and any pending legal claims. Any liability not identified and addressed in the purchase agreement can become your problem after closing.
Operational Due Diligence: Proving the Business Works
Key Employee Dependency
Who actually runs the business day to day? If the owner is the primary salesperson, operator, and client relationship holder, you are buying a job, not a business. The most important question in operational due diligence is whether the business can function without the current owner.
Identify which employees are critical to operations and what their intentions are after the sale. Request the organizational chart and, with the seller’s permission, interview key employees before closing. The employee who knows how everything works is often more important to the deal than the equipment.
Customer and Supplier Contracts
Are key customer relationships contractual or handshake? Do customer contracts contain change-of-ownership clauses that allow the customer to exit after a sale? The same questions apply to supplier agreements: are pricing terms locked or renegotiable when ownership changes?
A business with strong contractual relationships transfers more cleanly than one built on personal loyalty to the current owner.
Systems and Processes
Is the business documented, or does it run on institutional knowledge stored in the owner’s head? Request standard operating procedures, training materials, vendor contact lists, the full software stack with admin credentials, and a list of every SaaS subscription the business depends on.
The less documented a business is, the longer your transition period and the higher your operational risk. A business that runs on undocumented processes is harder to take over, harder to manage, and harder to resell.
Legal, Compliance, and Insurance
Verify that all business licenses and permits are current and will transfer to a new owner. Check for any pending or threatened litigation. Review intellectual property: trademarks, patents, proprietary processes, and domain names. Confirm that all workers are properly classified as W-2 employees or 1099 contractors. Misclassification creates significant tax liability that a new owner inherits.
Review the business’s insurance coverage: general liability, professional liability, workers compensation, and any industry-specific policies. Many first-time buyers overlook insurance entirely, only to discover post-closing that coverage is inadequate or that premiums are a material operating cost they did not budget for.
When You Need a Business Attorney
Due diligence regularly surfaces legal questions that require professional review: entity structure decisions, contract assignments, intellectual property transfers, and compliance gaps. If you do not already have a business attorney, LegalZoom can connect you with vetted legal professionals who specialize in small business transactions without the overhead of a traditional retainer. The cost of legal review (typically $2,000 to $5,000 for a small acquisition) is small relative to the transaction value and the risk of missing something material.
The Owner Transition: The Question Most Buyers Forget to Ask
How long will the seller stay to help transition the business? Industry standard is 30 to 90 days of seller involvement after closing, but this must be negotiated explicitly and written into the purchase agreement. A verbal promise to “be available” is not a transition plan.
Ask five specific questions before closing:
- Who introduces you to customers? If the seller does not personally hand off key relationships, those relationships may not survive the transition.
- Who trains your staff on working with a new owner? Employees need to hear from the seller that the transition is real and supported.
- Who controls vendor relationships? Pricing, payment terms, and priority status are often tied to the seller’s personal history with vendors.
- Who approves pricing and exceptions? If only the seller knows the logic behind pricing decisions, you will struggle to maintain margins.
- Who handles emergencies? The first operational crisis after closing will test whether the transition plan is real or theoretical.
If the answer to all five questions is “the owner,” the business has high owner-dependency risk and the transition plan needs to be more extensive than average. Note that SBA lenders often require a seller training period as a condition of the loan, which gives you leverage to negotiate this. For more on SBA loan requirements, see How SBA Loans Work When You Are Buying a Small Business.
Red Flags That Should Stop the Deal
Walk-Away Signals
- Seller refuses to provide tax returns or limits access to financial records
- Revenue has declined more than 10 percent year-over-year with no clear explanation
- Single customer accounts for more than 30 percent of revenue
- Key employees indicate they plan to leave after the sale
- The business relies on one supplier with no backup
- Pending litigation that could result in material liability
- The seller is rushing to close and resisting a standard due diligence period
- Lease is expiring soon with no renewal guarantee
- Seller cannot clearly explain revenue changes, margin shifts, or customer losses when asked directly
The presence of one red flag is a negotiation point. The presence of three or more is usually a walk-away signal. There will always be another business.
How to Respond to What You Find
Not every problem is a deal-breaker. The severity of the finding determines your response:
| Finding | Response |
|---|---|
| Minor issue (small discrepancy, cosmetic concern) | Request explanation; document and move on if resolved |
| Moderate issue (lower-than-claimed earnings, aging receivables) | Negotiate a price reduction reflecting the true numbers |
| Significant issue (key employee departing, customer concentration) | Seller holdback, extended transition, or restructured deal terms |
| Severe issue (material misrepresentation, undisclosed liabilities) | Walk away. The due diligence contingency protects your deposit. |
How to Organize Your Due Diligence
Due diligence generates a significant volume of documents, conversations, and findings. Without a system, important details get lost.
Create a shared document request list and send it to the seller on Day One. As findings come in, organize them into three categories:
| Category | Meaning | Action |
|---|---|---|
| Verified | Matches the seller’s claims | Document and move on |
| Flagged | Needs explanation or additional documentation | Add to weekly check-in agenda with seller |
| Deal-Breaker | Material misrepresentation or unacceptable risk | Changes the valuation, deal terms, or triggers a walk-away |
Set weekly check-ins with the seller to work through flagged items. Bring your accountant and attorney into the process early, not at the end when their ability to influence the outcome is limited.
Budget for the due diligence process itself. Attorney fees, CPA review, and business insurance quotes are real costs. The Business Buyers Calculator includes an “Other Upfront Costs” field specifically for budgeting these expenses alongside the down payment.
A Note on Tone
Due diligence is not adversarial. A good seller expects it and cooperates because buyer confidence leads to a cleaner close. A seller who treats reasonable questions as personal attacks is telling you something important about what the transition will look like.
Where to Find Businesses With Built-In Verification
Pre-Vetted Marketplaces
Established marketplaces like Empire Flippers pre-verify financials before listing a business for sale, including revenue verification, traffic validation, and seller interviews. Empire Flippers primarily serves digital businesses: content sites, ecommerce stores, SaaS companies, and online service businesses. This does not replace your own due diligence, but it eliminates the most common first-round failures (fabricated revenue, misrepresented traffic, phantom businesses) before you invest time in a deep investigation.
For businesses found through brokers, direct outreach, or classified listings, the full verification burden is on you. That is not a reason to avoid those channels. Some of the best deals are found off-market. It just means your due diligence process needs to be more thorough from the start.
This article explains the process. The Checklist is the tool you bring into the room.
The Checklist gives you every verification step in a printable format. The Guide covers the full acquisition framework from search to close.
Access the Free Vault →Frequently Asked Questions
Know someone thinking about buying their first business? Forward this to them before they sign anything.
