Acquisition Due Diligence: The 4-Phase Framework I Use Before I Buy Any Business

Acquisition due diligence is the 30-90 day pre-close investigation where a buyer verifies a target business across four phases — Financial, Legal, Operational, and Commercial — before signing the Share Purchase Agreement. The goal is simple: confirm the numbers the seller pitched, uncover the risks they didn’t disclose, and either re-price the deal, add protections like escrows and holdbacks, or walk away. Cash flow with DSCR ≥1.5x, clean tax returns, and no customer concentration over 15% are non-negotiable checkpoints.

Look, I’ve done 300+ deals over 30 years. The ones that made me money all cleared the same four phases. The ones that almost buried me? I got lazy in one of them — usually Legal or Commercial — and paid for it in year one.

This page is the map. It’s the framework I run between the signed LOI and the closing table. It is not legal advice, and it is not accounting advice. I’m going to say this once at the top and again at the bottom: your attorney and your CPA drive Legal and Financial DD. Full stop. I’m giving you the checklist so you know what to demand from them and what to demand from the seller.

The framework below is the same one we teach inside Dealmaker Academy and run live inside the Protégé Community.

Phase 1: Financial Due Diligence

Financial due diligence is the forensic review of a target’s three-year historical performance to confirm earnings quality, working capital needs, and debt capacity before you finalize price and structure. This is where you hand the work to a CPA and demand a Quality of Earnings (QoE) report. Your job is to know what’s in it and what it means for your offer.

The seven Financial DD items I check on every deal:

1. Three years of tax returns, P&Ls, and bank statements. Reconcile them line by line. Tax return revenue should match the P&L. Bank deposits should match reported revenue. Discrepancies are red flag #1.
2. Quality of Earnings (QoE) report. A CPA-produced adjusted EBITDA that normalizes for owner add-backs, one-time items, and accounting quirks. This is the number your offer should be based on — not the seller’s pitch deck.
3. DSCR modeled at ≥1.5x. Debt service coverage ratio below 1.5x means the cash flow can’t safely carry the debt plus your required return. Non-negotiable.
4. Working capital peg. Nail down the normalized working capital the business needs to operate. That number goes into the SPA. Get this wrong and you write a check at closing you didn’t budget for.
5. Customer concentration. No single customer over 15% of revenue. Above that, price the risk in or negotiate a specific indemnity if that customer walks.
6. AR aging and bad debt reserve. How old are the receivables? What’s actually collectible? This directly hits the working capital peg.
7. Off-balance-sheet liabilities. Personal guarantees, contingent liabilities, unfunded pension exposure, deferred taxes. Ask. Then have the CPA confirm.

Deeper dives on the numbers side: Financial Assessment Frameworks and Evaluating Acquisition Costs.

Phase 2: Legal Due Diligence

Legal due diligence is your attorney’s review of contracts, corporate records, litigation exposure, and regulatory standing to identify liabilities that would transfer with the business at close. This is 100% attorney territory. Your job as the buyer is to keep the diligence list moving, escalate red flags, and price protections — escrow, holdback, seller indemnity — into the SPA.

The six Legal DD categories your attorney will work through:

1. Corporate records and cap table. Articles, bylaws, minute books, stock ledger. Who actually owns the shares. Any dormant shareholders who show up at closing kill the deal.
2. Material contracts. Customer contracts, supplier contracts, leases, licenses. Read the change-of-control clauses — some contracts terminate on sale, which vaporizes revenue you just paid for.
3. Litigation and disputes. Pending, threatened, and closed within the last five years. Ask the seller in writing. Then have your attorney search court records independently.
4. Regulatory and compliance status. Industry licenses, permits, environmental filings, data privacy compliance. Details in Compliance Requirements For Acquisitions.
5. Employment matters. Employee contracts, non-competes, ongoing HR claims, worker classification. Misclassified 1099 contractors are a common landmine.
6. Intellectual property. Trademarks, patents, domain names, source code, trade secrets. Confirm the company actually owns what it thinks it owns.

More on the legal side: Legal Standards In Acquisitions.

Phase 3: Operational Due Diligence

Operational due diligence is the on-the-ground review of how the business actually runs day to day — people, processes, systems, and physical assets — to size post-close integration risk. This is the phase most buyers underweight, and it’s the one that decides whether year one is a grind or a glide.

The six Operational DD checks I run before I take the keys:

• Owner dependency. If the seller works 40+ hours in the business, that’s a job you have to fill. Owner-operator is not the same as owner-investor. Subtract market wage for that role from earnings before you re-check DSCR.
• Key employees. Who runs what. Get retention agreements signed before close, not after. Interview the top 3 employees under NDA.
• SOPs and documentation. Written procedures for the core functions. If everything lives in the seller’s head, you’re buying institutional risk.
• Systems and IT. CRM, accounting, inventory, e-commerce platform. Modernization cost estimate goes in your acquisition budget.
• Physical assets and deferred maintenance. Walk the site with a qualified vendor. Anything broken now comes out of your pocket in month one.
• Supplier concentration. One supplier controlling inventory is a hostage situation waiting to happen. Diversify or price the risk.

Phase 4: Commercial Due Diligence

Commercial due diligence is the outside-in review of the market, competitors, and customer base — the ceiling on what this business can become, not just what it is today. Financial DD tells you what you’re buying. Commercial DD tells you whether it’s worth buying in the first place.

The five Commercial DD questions I answer before I fund the deal:

• Is the industry growing, flat, or shrinking? Pull the 5-year outlook from IBISWorld, trade publications, association reports. A great business in a dying industry is still a bad deal.
• Who are the top 3 competitors and how does the target stack up? Price, service, market share, online reputation. If the target is losing to competitors on measurable metrics, the trend is against you.
• Customer interviews. Talk to the top 5 customers under NDA. Ask why they buy, what they’d change, whether they’d stay if ownership changed. See Customer Verification Processes.
• Growth levers. Pricing power, adjacent products, new geographies, digital marketing, bolt-on acquisitions. If you can’t name three concrete post-close moves, you don’t have a deal — you have a lateral.
• Threats. Regulation, tech disruption, platform dependency, cyclical peaks, talent shortage. Weight these heavy. Detail in Risks Of Business Acquisition.

Deal-Killers: When to Throw the Red Flag

Some findings aren’t re-priceable — they’re walk-aways. If DD surfaces any of the following, throw the red flag and end the process. No amount of price reduction fixes these.

• Undisclosed criminal issues. Fraud, tax evasion, environmental crimes, wire fraud. Walk.
• Bank statements don’t match tax returns. The seller is either lying to you or lying to the IRS. Either way, walk.
• Undisclosed material litigation. If your attorney finds a lawsuit the seller didn’t mention, trust is broken. Walk.
• Customer concentration over 40% in one account. Even with indemnities, one phone call ends the business. Walk unless the price is essentially the working capital.
• Environmental contamination. Superfund exposure, contaminated soil, asbestos. This is generational liability. Walk.
• Seller refuses reasonable reps and warranties. If they won’t stand behind their own numbers, why should you? Walk.
• Cash flow can’t hit DSCR 1.5x under a base case. The math doesn’t work. Walk.

Throwing the red flag is a skill. Sunk-cost bias will pull you toward closing anyway. Don’t.

Deep Dives on Each Sub-Topic

Every phase above has its own working page inside this silo. If you’re actively running DD on a live deal, these are your working checklists:

• Risks Of Business Acquisition: Key Considerations For Buyers
• Evaluating Acquisition Costs For Informed Decision-Making
• Compliance Requirements For Acquisitions
• Benefits Of Thorough Evaluation For Informed Decisions
• Financial Assessment Frameworks In Business Evaluations
• Customer Verification Processes For Effective Due Diligence
• Alternative Investment Strategies For Informed Decision-Making
• Negotiation Tactics For Buyers To Maximize Value
• Legal Standards In Acquisitions And Their Implications

How DD Feeds Negotiation

Due diligence isn’t just verification — it’s ammo. Every finding either re-prices the deal, re-structures the deal, or re-papers the SPA with protections.

• Financial issues → price adjustment. QoE adjustments come off the purchase price.
• Working capital gap → escrow. Hold 10-20% of the price in escrow for 12-18 months to true up the peg.
• Customer concentration → earnout or seller note holdback. Tie a portion of consideration to that customer staying.
• Legal exposure → specific indemnity. Named risk, named cap, named survival period.
• Operational risk → transition services agreement. Seller stays 60-180 days to hand off relationships.

Focus on terms over price. A seller-financed deal at 90% of asking with a 5-year note, a real working capital peg, and a 15% escrow beats an all-cash deal at 75% every day of the week. The full negotiation playbook lives inside Dealmaker Academy.

Frequently Asked Questions

What is acquisition due diligence?

Acquisition due diligence is the 30-90 day investigation a buyer conducts between signing the Letter of Intent and closing the deal. It covers four phases — Financial, Legal, Operational, and Commercial — and its purpose is to verify what the seller represented, surface undisclosed risks, and either re-price the deal, add protections in the Share Purchase Agreement, or walk away.

How long does acquisition due diligence take?

Most small-to-mid market business acquisitions run 30 to 90 days of active due diligence between LOI and close. Simple asset deals with clean books can close inside 30 days. Deals with regulatory complexity, environmental exposure, or multi-entity structures often stretch to 120 days or more. Speed matters — sellers get cold feet in long DD periods — but never sacrifice thoroughness for speed.

Who performs due diligence on a business acquisition?

The buyer coordinates DD, but the work is shared. A CPA handles Financial DD and produces the Quality of Earnings report. An attorney handles Legal DD, drafts the SPA, and negotiates reps and warranties. The buyer handles Operational and Commercial DD directly, or hires a specialist for larger deals. Never try to run Legal or Financial DD yourself — that’s where deals get broken.

What are the biggest red flags in due diligence?

The biggest DD red flags are bank statements that don’t match tax returns, undisclosed litigation, customer concentration over 40% in a single account, environmental contamination, sellers who refuse standard reps and warranties, and cash flow that can’t model DSCR 1.5x under a base case. Any one of these is a walk-away, not a re-price.

What is a Quality of Earnings (QoE) report?

A Quality of Earnings report is a CPA-produced document that adjusts a target’s reported EBITDA to a normalized figure by removing one-time items, non-recurring expenses, and legitimate owner add-backs. The QoE-adjusted EBITDA is the number your offer and multiple should be built on — not the number in the seller’s pitch deck.

What compliance requirements apply to business acquisitions?

Compliance requirements vary by industry and jurisdiction, but almost every acquisition touches employment law, tax compliance, industry-specific licensing, data privacy (GDPR/CCPA where applicable), environmental filings, and antitrust filings on larger transactions. Your attorney maps the specific list for your target. See the deep dive on Compliance Requirements For Acquisitions for the working checklist.

What is a working capital peg and why does it matter?

A working capital peg is the normalized amount of working capital the business needs to operate day to day, negotiated into the SPA. At close, if actual working capital exceeds the peg, the seller keeps the surplus; if it falls short, the buyer gets a purchase-price credit. Getting the peg wrong is one of the most expensive DD mistakes — it can cost hundreds of thousands in unbudgeted post-close cash.

Can I skip due diligence on a small acquisition?

No. The dollar size of the deal doesn’t change the categories of risk you inherit — it just changes how much time each category deserves. Even a $500K acquisition needs verified tax returns, an attorney-drafted SPA, key contracts reviewed, and customer concentration checked. Skipping DD on a small deal is how buyers turn a small check into a big lawsuit.

Where can I learn how to run DD on a live deal?

Dealmaker Academy walks the full four-phase DD framework with Carl Allen and the coaching team on real acquisition targets. The Protégé Community is where active dealmakers post their live DD questions and get answers from operators actually closing deals. For a one-on-one walk-through of a specific target, book a coaching call.

---

Next move: pick the phase you’re weakest on — Financial, Legal, Operational, or Commercial — and click into the deep-dive page above. If you’re about to sign an LOI, run this framework end-to-end before you do. And bring your CPA and attorney into the room on day one, not day 60. Due diligence is legal and accounting territory — my job is to hand you the map, theirs is to walk it with you.