If prepping to go to market, managing management meetings and negotiating LOIs feels like a marathon, due diligence is the ultramarathon that comes after, the one for which you can't possibly prepare.
You've signed the LOI. You've celebrated with your team (or at least taken a relieved breath). The buyer seems excited. The price looks good. The finish line is in sight.
And then the real work begins.
Due diligence, or "DD" as it's universally called, is the buyer’s ~90 day deep-dive into every corner of your business. It's their chance to verify that what they believe about the company is true and that there are no landmines waiting for them post-closing.
For founders, DD is exhausting, invasive, and deeply stressful. It's where deals slow down, prices and structures sometimes get renegotiated, and occasionally, transactions fall apart entirely.
But here's the thing: most DD failures are preventable.
The founders who survive this phase and extract the full value they've negotiated aren't the ones with perfect businesses. They're the ones who understand what buyers are really looking for, how to manage the process without losing their sanity, and when to push back on unreasonable demands.
This chapter is your playbook for getting through DD intact, with your valuation (mostly) preserved and your sanity (mostly) in check.
What Due Diligence Actually Is
At its core, due diligence is the buyer's "trust but verify" exercise.
Up until now, they've relied on your pitch deck, your management presentation, and some higher-level financial information. They liked what they saw enough to issue an LOI. But that LOI is non-binding on valuation and deal terms. It's essentially a well-dressed offer to keep talking.
Due diligence is where they stress-test that narrative.
They'll bring in third-party firms to examine your financials, interview your customers, review your code, scrutinize your contracts, and audit your compliance. They're looking for three things:
- Confirmation: Does the business perform as represented?
- Risk identification: What problems exist that weren't disclosed?
- Value validation: Is the purchase price justified?
The entire tenor of your relationship changes during DD. The buyer goes from "we're really excited about this and we have to buy this company" to "prove it." Suddenly, you're defending decisions you made three years ago that seemed perfectly reasonable at the time.
This shift catches a lot of founders off guard. They expect DD to be a formality, a quick check-the-box exercise before closing. It’s not. It’s an interrogation, and the buyers now have most of the leverage in the transaction.
Why DD Kills More Deals Than Valuation Disputes
You'd think the hard part in getting a deal done would be agreeing on price, but in reality, once both sides have invested time and energy getting to an LOI, price and structure are usually workable. What kills deals is what happens after the LOI is signed.
DD failures fall into three categories:
1. Material Misrepresentation
This is the nuclear option. If the buyer discovers something significant that wasn't disclosed: significant financial issues (churn, concentration, misrepresented growth and/or profitability), undisclosed litigation, revenue recognition issues. They'll likely walk. Not renegotiate. Walk.
Even if it wasn't intentional, even if you didn't think it mattered, even if your lawyer says it's "not that big of an issue," this could be game over.
2. Death by a Thousand Cuts
More common than outright deal killers are the accumulation of smaller issues: sloppy bookkeeping, missing documentation, technical debt, weak contracts, key-person dependencies.
None of these kill the deal on their own. But together, they create a narrative of operational weakness. The buyer starts to question everything. Their internal champion loses confidence. The deal price drops or the structure of the deal gets worse.
3. Process Fatigue
Finally, there's the slow death of a deal that just won't close. DD drags from 45 days to 60 to 90. The buyer keeps asking for "one more thing." Your team is burned out and are slow to respond to requests. You're still running the business, but barely. Momentum dies.
Eventually, someone just gives up.
The founders who make it through DD are the ones who prepare early, stay organized, and know when to push back. Let's talk about how.
The Four Dimensions of Due Diligence
Buyers will examine your business across four key workstreams: financial/tax, operational/go-to-market, technical, and legal. Each has its own teams, its own documentation request lists, and its own ways of killing deals.
Let's take them one at a time.
1. Financial Due Diligence
Financial DD is where most of the value discussion happens. The buyer's finance team and their third-party accounting firm will tear through your financial model, accounting records, revenue metrics and unit economics.
What They're Looking For:
Revenue Quality and Sustainability
Not all revenue is created equal. The buyer wants to know:
- Is your revenue recurring, usage-based or one-time?
- Are your contracts month-to-month, annual or multi-year?
- How much of your projected ARR is contracted vs. assumed renewals?
- Do you have auto-renewal clauses or do customers actively re-sign?
They'll also scrutinize your revenue recognition. If you're recognizing a 3-year contract upfront instead of ratably, that'll get adjusted. If you're booking revenue before delivering value, that'll get adjusted.
Churn and Customer Concentration
Churn gets dissected with equal intensity:
- What's your gross vs. revenue churn?
- Can we recreate your reported metrics from raw billing data? Will there be differences between our recreated figures and your BI or SaaS reporting dashboard?
- Do cohorts improve or degrade over time?
- Are you losing small customers or large ones?
- What are the leading reasons/indicators of churn?
If your churn story doesn't hold up, your valuation won't either.
Also, if a single or small subset of customers represents too large a chunk of your revenue, alarm bells may go off. This depends on context, but buyers will be wary of one customer's retention - or lack thereof - representing too large a risk.
Unit Economics and Profitability
Buyers will rebuild your CAC, LTV, and payback period from scratch. They won't just take your word for it.
They'll look at:
- CAC by channel (is paid search sustainable or are you arbitraging a temporary inefficiency?)
- LTV assumptions (are you assuming 5-year retention when your oldest cohort is only 18 months old?)
- Gross margin (are you accounting for COGS appropriately or burying direct costs below the line?)
Working Capital and Cash Conversion
Finally, they'll examine your balance sheet.
- What's your AR aging? Are customers actually paying on time?
- Do you have deferred revenue liability (i.e., are you collecting upfront and recognizing over time)?
- What are your payment terms with vendors?
- Do you have any off-balance-sheet liabilities they should know about?
Working capital adjustments are one of the most common post-LOI renegotiation points. If you represented your business as "cash flow positive" but you're actually just collecting a year upfront and burning it over 12 months, that's going to surface here.
2. Technical Due Diligence
For strategic and PE tuck-in buyers, technical DD can be just as important as financial. They want to know if your product is an asset or a liability.
Code Quality and Architecture
They'll bring in their CTO (or hire a third-party firm) to review:
- Your codebase structure and documentation
- Technical debt and shortcuts
- Scalability constraints (can you handle 10x growth?)
- Dependency on outdated frameworks or unsupported libraries
If your product is held together with duct tape and wishes, they'll find out.
Security Posture and Compliance
This is especially critical if you handle sensitive data (healthcare, finance, anything with PII).
- Do you have SOC 2? ISO 27001? GDPR compliance?
- Have you ever been breached? If so, how did you handle it?
- What's your vulnerability management process?
- Do you run penetration tests regularly?
If you've been sloppy with security, this is where it catches up to you. Buyers may point to expensive remediation as a reason for price reduction.
Technical Debt and Scalability
Buyers want to know what they're inheriting.
- Is the platform monolithic or modular?
- Can features be turned on/off easily?
- What happens if traffic doubles tomorrow?
- Are there any known performance bottlenecks?
Team Capabilities and Dependencies
Finally, they'll assess your technical team:
- Who wrote the core modules?
- Are there key-person dependencies (i.e., is there one engineer who's the only one who understands critical parts of the system)?
- Is the team staying on post-close?
- What's your technical hiring velocity and retention rate?
If your entire product roadmap depends on one 10x engineer who's already halfway out the door, that'll surface and need to be handled through comp agreements, non-competes, etc.
3. Legal Due Diligence
Legal DD is where deals die quietly. Founders often underestimate how much a messy cap table, poorly drafted contracts, or missing IP assignments can derail a transaction.
Cap Table Cleanliness
The buyer's lawyers will demand a complete cap table with all equity grants, option exercises, warrants, and convertible notes fully documented.
- Do you have fully executed stock purchase agreements for all shareholders?
- Are all option grants documented with board approval?
- Have you issued any side letters or special terms to investors?
- Are there any lingering disputes over equity?
If your cap table is a mess, you'll spend valuable time in DD cleaning it up, and the buyer may lose confidence fast.
Customer Contracts and Commitments
Buyers will review every customer contract over a certain threshold or the top 20 most valuable customers.
- Do you have signed agreements in place?
- What are your SLAs and liability caps?
- Are there any unusual terms (like unlimited liability, IP ownership transfers, or guaranteed uptime requirements)?
- Have you breached any contracts?
If you've been sloppy with contracts, especially if you've overpromised or agreed to non-standard terms to close deals — this is where it surfaces.
IP Ownership and Employment Agreements
The buyer needs to confirm you actually own what you're selling.
- Do all employees and contractors have signed IP assignment agreements?
- If you built the product before incorporating, did you formally assign your pre-incorporation IP to the company?
- Are there any open-source licenses that create obligations or restrictions?
- Do you have any IP disputes or claims pending?
Missing IP assignments are shockingly common and can delay (or kill) deals entirely.
Regulatory Compliance and Litigation
Finally, they'll look for legal landmines:
- Are you in compliance with all relevant regulations (labor law, data privacy, etc.)?
- Have you ever been sued? Are there any threatened claims?
- Do you have any outstanding regulatory inquiries or audits?
- Are all your contractors properly classified (or have you been treating employees as 1099s)?
Heading into due diligence and want to make sure you’re prepared? We’ve helped dozens of founders get through it cleanly.
Schedule a CallThe Due Diligence Timeline
The typical due diligence process runs 45-90 days from LOI signing to definitive agreement execution. But here's the reality: that timeline is more aspirational than actual.
Most deals can drag on if not properly managed. And yes, "time kills all deals" is an accurate and important adage to remember.
Week 1-2: Data Room Setup and Initial Review
The buyer will send you multiple detailed due diligence request lists across each workstream (finance, tax, legal, tech, etc.). Your job is to populate a "data room" (a secure online folder system) with all requested documents.
This is where you'll feel like you're drowning in document requests: three years of financial data, all customer contracts, employment agreements, board minutes, cap table details, technical architecture docs, security policies, and on and on.
If you're prepared, this can take a week or two. If you're not, it can take much longer and the buyer can start to get antsy.
Week 3-4: Deep-Dive Analysis and Management Interviews
The buyer's teams (finance, technical, legal) dig into the materials and start asking questions. Lots of questions.
You'll also have management interviews where the buyer's team sits down (usually via Zoom) with you, your CTO, your CFO (if you have one), and potentially your head of sales or customer success.
These aren't casual conversations. They're structured interviews designed to probe weak points. Expect detailed questions about specific customer cohorts, technical decisions, or contract terms.
Week 5-6: Follow-Up Requests and Issue Resolution
This is where deals start to drag.
The buyer identifies issues — some legitimate, some overblown — and asks for more information. You scramble to respond. They ask follow-ups. You respond again. Rinse, repeat.
The best-case scenario is that issues are minor and you clear them quickly. The worst case is that each answer raises three more questions and the deal stalls.
Week 7-8 (If You're Lucky): Final Negotiations and Definitive Purchase Agreement
Assuming DD clears without major surprises, you move to negotiations on the definitive purchase agreement (the actual binding contract).
Even if DD went smoothly, expect plenty more opportunities for potential price adjustments, escrow/holdback negotiations, net working capital gamesmanship or earnout modifications based on what was found throughout the process.
When Deals Extend (And Why That's Bad)
If DD stretches past 90 days, it’s usually not ideal.
Either the buyer is finding problems and losing confidence, you the seller are not responding quickly or accurately enough, or the buyer is dragging their feet because they're getting cold feet (internal budget constraints, politics, shifting investment theses, etc).
Long DD processes kill founder morale, distract the team, and give buyers negotiating leverage. If a buyer is slow-walking you, it may be because they're hoping you'll get fatigued and accept worse terms.
Your Data Room Strategy
The data room is your first impression in DD. Do it right, and you look organized and buttoned-up. Do it wrong, and you look sloppy, which makes buyers assume everything else may be sloppy too.
What to Include (and What to Hold Back)
The buyer will send a DD request list. Don't just dump everything into a folder and call it done. Make sure that your folder structure and file naming is organized and intuitive. You've done the work of pulling all of this documentation together, so best to ensure it can be easily digested and the Buyers can move the process along quickly on their end.
If there are any sensitive items that you'd prefer not to include until there's more certainty in the transaction closing, that's ok! The most common ones would be customer lists / contact info, scheduling customer reference calls, sensitive internal memos/docs with proprietary information (especially if buyer is strategic), personal financial information that may not be relevant.
The Art of Progressive Disclosure
You don't need to upload everything on Day 1. The request lists will usually indicate the priority of the request, so start with the highest priority items to ensure they can kick off their longest and most crucial workstreams. As the buyer digs deeper and asks specific questions, provide more detail.
This approach has two benefits:
- You don't overwhelm them (or yourself) with 500 documents upfront
- You maintain some control over the information flow
That said, don't be coy. If they ask for something reasonable, provide it. Playing games with information access is a great way to kill trust.
Common Data Room Mistakes
- Incomplete customer contracts: missing signatures, missing amendments, or (worst of all) unsigned agreements where you just have an email chain
- Disorganized financials: mixing cash-basis and accrual accounting, missing months, inconsistent categorization, sub-ledgers don't tie to financials
- Sloppy HR documentation: unsigned agreements, wrong party names, missing exhibits
Managing the Process Without Losing Your Mind
Due diligence is a grind. It's not uncommon for founders to spend 20-30 hours per week on DD while still trying to run the business, manage the team, and avoid tipping off customers that something's happening.
Here's how to survive it.
Designate a DD Lead
If at all possible, appoint someone else to quarterback the DD process. This could be a CFO, COO or other trusted senior executive. If it's you, make sure you have a plan in place for someone to cover some of your ongoing responsibilities in running the business. It's nearly impossible to run the business as effectively as you had been while executing DD, so prepare for that early.
Set Boundaries with the Buyer
Buyers will take as much time and access as you give them. You need to set boundaries.
Be firm but reasonable. You're not trying to obstruct DD. You're trying to keep the process running smoothly while upholding the asset they're looking to buy, which they will understand if presented that way.
Handle the "One More Thing" Problem
Midway through DD, the buyer will inevitably say: "Just one more thing — can you pull data on X?"
Then another. And another.
At some point, you need to push back.
If a request is reasonable and relevant, comply. But if it's a fishing expedition, say so: "We've provided detailed financials, customer contracts, and cohort analysis. What specific concern are you trying to address with this request?"
Often, the buyer is just checking boxes or their junior analyst is trying to look thorough. A polite pushback reminds them that your time is valuable.
Keep Your Team Productive During DD
Your senior team knows a deal is happening. They're probably distracted, nervous, and gossiping with each other.
Contain the distraction:
- Limit who's involved in DD (the fewer people, the better)
- Set clear expectations ("This will be intense for 8 weeks, then it's over")
- Keep the business metrics front-and-center ("Our job is to keep growing through this")
The worst thing you can do is let performance slip during DD. Buyers watch your numbers closely during this period. If you miss your plan two months in a row, they'll assume you've checked out — and they'll adjust their offer accordingly.
The Top 6 Due Diligence Deal Killers
Let's talk about what actually kills deals. Not the theoretical stuff, the real landmines that blow up transactions.
1. Revenue Quality Issues
This is the number one deal killer. If the buyer discovers that your "recurring" revenue is actually a series of one-time projects or that your retention metrics are materially worse than what was presented, the deal may be over.
How to avoid it: Be honest about your revenue model from the start. If your revenue is lumpy, say so. If you have non-recurring components, disclose it early.
2. Undisclosed Customer Concentration
If you didn't mention that one customer is 30% of your ARR and the buyer finds out during DD, they'll assume you're hiding other things too.
How to avoid it: Disclose customer concentration upfront. If it's a risk, address it proactively ("Our top customer is 25% of ARR, but here's our plan to diversify…").
3. Sloppy Financials or Poor Bookkeeping
If your financials don't reconcile, if you can't explain variances month-to-month, or if your accounting is a mess, buyers lose confidence fast.
How to avoid it: Clean up your books before you go to market. Hire a part-time CFO or experienced bookkeeper six months before you plan to sell. The ROI is massive.
4. IP That Isn't Actually Owned
Missing IP assignment agreements — especially from founders or early contractors — are shockingly common. If you can't prove you own your code, the deal can die.
How to avoid it: Get IP assignments signed by everyone who's ever written code for you. Do this now, not when you're already in DD.
5. Technical Debt or Security Gaps
If your platform is a security risk, the buyer will either demand you fix it before closing (on your dime) or adjust the price to account for remediation costs.
How to avoid it: Get a third-party security audit six months before going to market. Fix critical issues. Be transparent about the rest.
6. Key Person Dependencies
If your business falls apart without you (or without one critical engineer or salesperson), buyers will structure the deal to trap you in an earnout or offer a lower upfront price.
How to avoid it: Build a real management team. Document processes. Make yourself replaceable.
Worried about potential deal killers in your business? Let’s identify and fix them before buyers do.
Schedule a Call
“We had a long, difficult due diligence across multiple potential buyers, and Discretion never dropped the ball. They are transparent and communicative, and the outcome they achieved was significantly better than if we’d handled it ourselves.”
George Hartley
Founder, SmartrMail
Red Flags vs. Yellow Flags
Not all issues are created equal. Some can kill deals outright. Others just create negotiating friction.
Red Flags (Deal Killers)
- Material misrepresentation about revenue, retention, customers, or liabilities
- IP ownership disputes or missing assignments on core technology
- Active litigation that could materially impact the business
- Undisclosed regulatory violations or pending investigations
- Key customers threatening to leave
Yellow Flags (Price Adjustments)
- Technical debt or deferred infrastructure investment
- Customer concentration (but with mitigating factors)
- Weak contracts (missing signatures, inconsistent terms)
- Team turnover or key-person dependencies
- Slightly off-plan performance during DD
If you hit a red flag, the deal may be dead. If you hit a yellow flag, expect the buyer to use it as leverage to renegotiate terms.
When to Push Back
Buyers will test your boundaries during DD. Some requests are reasonable. Some are not.
Unreasonable Requests
- Access to customer contact lists early in DD (they might start calling your customers prematurely)
- Detailed employee compensation data beyond what's needed to understand labor costs
- Requests for information you've already provided in a different format
- "Unlimited" access to your team or office without structure
Fishing Expeditions
If a buyer keeps asking for "one more analysis" without explaining what specific concern they're addressing, they're either stalling or don't know what they're doing.
Push back: "We've provided detailed revenue analysis. What specific risk are you trying to assess with this additional cut?"
Indefinite Timeline Extensions
If DD drags past 90 days without a clear path to close, something's wrong.
Either the buyer is losing confidence, has internal budget issues, or is hoping you'll get desperate and accept worse terms.
Signs of Buyer's Remorse
- Requests slow down or stop entirely
- They stop responding to questions
- They introduce new "decision makers" late in the process
- They start asking for concessions on terms already agreed to in the LOI
If you see these signs, force the conversation: "We've been in DD for eight weeks. What specifically needs to happen for us to move to final docs?"
Post-LOI Negotiation Through DD
Even if your LOI specified a fixed price, expect some negotiation based on DD findings.
How Findings Can Drive Price Adjustments
Buyers will use DD findings to justify price cuts:
- Churn is higher than we thought — we need to adjust purchase price by $XXX
- There's more technical debt than disclosed — we need $XXX escrow for remediation
- Customer concentration is a bigger risk — we need to lower the upfront and add an earnout
Some of this is legitimate. Some of it is just negotiating tactics. Your job (and your banker's or lawyer's) is to separate real concerns from opportunistic lowballing.
Escrow and Holdback Mechanics
If the buyer identifies legitimate risks, they'll often propose a larger than normal escrow or holdback, where they would retain an amount of the purchase price for a specified period of time to cover any potential future issues.
Typical escrow/holdback terms are usually 10-15% of the purchase price, held for 12-18 months and released if no claims are made in that time. If the request is unreasonable (e.g., 40% holdback because "we're not sure about the churn risk"), push back hard.
Working Capital Adjustments
Almost every deal includes a working capital adjustment at closing. The buyer will compare your actual working capital at close to a "target" working capital (usually based on historical averages).
If you're above target, you get a payment. If you're below, you owe them a payment.
This is where founders get surprised. If you've been running the business lean during DD and let AR slip or deferred paying vendors, you could owe a six-figure true-up at closing.
One of the most common mistakes we see Sellers make is allowing for Deferred Revenue to be defined and treated as Indebtedness in the purchase agreement. This is not a debt-like liability and your banker and/or lawyer should push to have it included in working capital and excluded from Indebtedness. This can have hundreds of thousands, if not millions of dollars of impact, depending on the size of the deferred revenue balance.
Earnout Modifications
If DD reveals underperformance or risk, buyers often propose adding or expanding earnouts.
Example: "Your churn is higher than we thought. Let's keep the headline price but move $3M from cash-on-close into a 12-month earnout tied to retention."
This may be reasonable — or it may be a way to cut the upfront cash price while keeping the headline number high.
The Founder's Mindset
DD is emotionally exhausting. You're being interrogated about every decision you've made for years. It's personal, it's invasive, and it feels like an attack.
Here's how to survive it:
Honesty is Non-Negotiable
If you lie, shade the truth, or hope they won't find something, you will get caught. And when you do, the deal is over. If there's bad news, disclose it early and with context. Buyers can handle known risks. They can't handle being blindsided.
Perfect is the Enemy of Closed
Your business will have issues. Every business does. Don't try to present a flawless picture — it's not believable. Instead, be honest about weaknesses and show you've thought about how to address them.
Keep Running the Business
The worst thing you can do during DD is take your eye off the ball. If revenue slips, churn spikes, or a key customer leaves during DD, the buyer will use it as leverage — or walk entirely.
Set aside dedicated time for DD, but protect time for running the business.
Trust But Verify Your Advisors
Your lawyer and banker will guide you through DD. Listen to them — but don't outsource all decision-making.
If your lawyer says "This is a standard request," ask: "Standard for who? What are the risks if we comply?"
If your banker says "Just give them what they want," ask: "What leverage do we have to push back?"
You're the one living with the outcome. Stay engaged.
The Light at the End
If you make it through DD without major surprises, the rest of the process moves quickly.
You'll finalize the definitive purchase agreement (the actual binding contract), resolve any remaining open items, and set a closing date.
At closing, you'll sign a mountain of paperwork, wire instructions will be exchanged, and (usually within 24-48 hours) the money hits your account.
And then it's over.
DD is brutal, but it's also proof that both sides are serious. The buyer is spending real time and money to validate the deal. You're being transparent and thorough. The best DD processes aren't painless — they're just efficient, honest, and focused on getting to close. If you've done your homework, built a real business, and approached DD with honesty and discipline, you'll get through it. And when you do, you'll wonder why everyone said it was so hard. (Spoiler: it's still hard. But you'll have survived it.)
Need someone in your corner through due diligence and closing? That’s exactly what we do.
Schedule a CallFrequently Asked Questions
What is due diligence in a SaaS acquisition?
How long does due diligence typically take?
What are the most common due diligence deal killers?
What is a data room and how should I set it up?
Can the buyer change the price after signing the LOI?
What is a Quality of Earnings (QoE) analysis?
What is the difference between a red flag and a yellow flag in due diligence?
How do I handle unreasonable buyer requests during due diligence?
Should deferred revenue be treated as debt in the purchase agreement?
How do I keep my business running during due diligence?
This guide is for informational purposes only and does not constitute legal, tax, or financial advice. Consult qualified advisors before making decisions regarding your transaction.