Short answer: The M&A due diligence process is the structured review that tests whether a proposed acquisition is worth the price and risk. It usually runs from initial screening through LOI, data-room review, management meetings, specialist diligence, findings review, negotiation, and closing. The main workstreams are financial, tax, legal, commercial, operational, HR, IT, cyber, regulatory, and integration diligence.
Due diligence is where the deal story meets evidence. A buyer may like the company, the market, and the strategic logic. A seller may have a strong CIM, attractive financials, and serious buyer interest. But until diligence tests the details, both sides are still working with assumptions.
That is why diligence is not just a checklist. It is a decision process. It helps buyers decide whether to proceed, renegotiate, change structure, request protections, or walk away. It helps sellers understand what buyers will test, where the process can slow down, and which issues should be prepared before exclusivity.
What is M&A due diligence for?
M&A due diligence is the investigation of a target company before signing or closing a transaction. The goal is to confirm the deal thesis, validate valuation, identify risk, and decide how those risks should be reflected in price, structure, protections, or integration planning.
For a buyer, diligence answers questions such as:
- Are the reported earnings real, recurring, and convertible into cash?
- Are customers, contracts, employees, technology, assets, and liabilities transferable?
- Does the growth plan match the evidence?
- Are there legal, tax, regulatory, cyber, HR, environmental, or operational issues that could change the deal?
- Can the business be integrated or operated after closing?
For a seller, diligence is where preparation pays off. Clean records, clear explanations, and a well-managed data room can reduce surprises and keep the process credible. Alehar's seller due diligence preparation checklist covers that pre-process work in more detail.
Where diligence fits in the M&A timeline
The exact timeline depends on deal size, buyer type, regulatory requirements, financing, and complexity. In many mid-market transactions, focused diligence after LOI may run several weeks. Larger, regulated, cross-border, or highly complex transactions can take much longer.
| Stage | What happens | Typical output |
|---|---|---|
| 1. Initial screening | Buyer reviews teaser, public information, strategic fit, sector logic, and high-level valuation. | Initial interest or decision to pass. |
| 2. NDA and early information | Seller shares CIM, limited financials, and selected operating information. | Initial questions and buyer view of value. |
| 3. Indication or LOI | Buyer submits valuation, structure, assumptions, exclusivity, and diligence conditions. | LOI or term sheet for negotiation. |
| 4. Data-room launch | Seller opens the data room, request lists are assigned, and advisor workstreams begin. | Diligence tracker and Q&A process. |
| 5. Specialist diligence | Financial, legal, tax, commercial, HR, IT, cyber, operational, and regulatory reviews run in parallel. | Findings, risks, adjustments, and open items. |
| 6. Management sessions | Buyer and advisors meet management to test assumptions and resolve questions. | Clarified story, follow-up requests, and risk prioritization. |
| 7. Findings and negotiation | Buyer translates findings into price, structure, working capital, warranties, indemnities, escrow, or earnout terms. | Updated deal terms and purchase agreement inputs. |
| 8. Closing readiness | Parties resolve approvals, financing, filings, closing deliverables, and transition planning. | Signed definitive agreements and closing package. |
The process is rarely perfectly linear. Financial findings can create legal questions. Customer findings can change valuation. Regulatory concerns can affect timing. A strong process keeps the workstreams connected rather than treating each advisor report as a separate file.
Core M&A due diligence workstreams
Every transaction does not need every workstream at the same level of depth. Scope should follow the deal thesis and the risks that matter most.
| Workstream | What it reviews | What it can affect |
|---|---|---|
| Financial diligence | Quality of earnings, revenue, margins, working capital, cash flow, debt-like items, capex, and forecasts. | Price, multiple, working-capital target, debt adjustment, earnout, financing. |
| Tax diligence | Income tax, VAT/GST/sales tax, payroll tax, transfer pricing, historic filings, structure, and exposures. | Structure, indemnities, escrow, purchase price, closing conditions. |
| Legal diligence | Corporate records, contracts, litigation, IP, employment, compliance, licenses, leases, and consents. | Representations, warranties, disclosure schedules, indemnities, closing deliverables. |
| Commercial diligence | Market, customers, competition, pricing power, churn, pipeline, product fit, and growth assumptions. | Valuation, strategic fit, forecast reliance, buyer conviction. |
| Operational diligence | Processes, capacity, suppliers, facilities, service delivery, quality, procurement, and scalability. | Integration plan, capex, margin plan, synergy assumptions. |
| HR and people diligence | Management depth, compensation, incentives, retention risk, benefits, culture, key employees, and contractor status. | Retention plan, transition risk, integration, cost base, closing conditions. |
| IT and cyber diligence | Systems, data, security, privacy, technical debt, licenses, uptime, architecture, and cyber controls. | Integration cost, risk mitigation, capex, warranties, transition services. |
| Regulatory and antitrust diligence | Sector rules, approvals, licenses, merger-control requirements, competition issues, and filings. | Timing, approvals, deal certainty, closing conditions, remedies. |
| Integration diligence | Operating model, systems migration, people plan, customer handover, reporting, and synergy plan. | Post-close value creation and Day 1 readiness. |
Financial diligence usually drives the economics
Financial diligence often becomes the central workstream because it connects directly to price. Buyers want to know whether EBITDA is real, whether revenue is durable, whether working capital is normal, and whether cash flow supports the valuation.
Common financial diligence questions include:
- Are revenue and expenses recorded in the correct periods?
- Which revenue is recurring, project-based, one-time, concentrated, or at risk?
- Are add-backs supportable and properly documented?
- Do gross margin and EBITDA trends match management's explanation?
- What is the normal level of working capital required to run the business?
- Are there debt-like items, unpaid taxes, deferred revenue, customer deposits, or contingent liabilities?
- Does the forecast tie to historical performance, pipeline, capacity, and cost structure?
If this workstream finds issues, the result may be a lower valuation, more conservative structure, tougher working-capital mechanism, escrow, earnout, seller note, or delayed closing. Alehar's financial due diligence scope guide and sell-side QoE checklist go deeper here.
Commercial diligence tests the deal thesis
Commercial diligence asks whether the buyer's strategic logic is true. It is not only about whether the target has customers. It tests whether those customers will stay, whether the market is attractive, whether competition is intensifying, and whether growth assumptions are credible.
For a seller, this means customer and market evidence should be ready before buyer meetings. Customer concentration, churn, contract renewal risk, pricing pressure, pipeline quality, and competitive differentiation can all affect buyer confidence.
For a buyer, commercial diligence should be connected to valuation. A growth thesis that relies on cross-sell, geographic expansion, new channels, or pricing improvement needs evidence. Otherwise, the upside may remain attractive but unpriced.
Legal, tax, and regulatory diligence shape risk allocation
Legal and tax diligence often determine what must be fixed, disclosed, carved out, indemnified, or made a condition to closing. Buyers review corporate authority, share ownership, contracts, consents, litigation, employment matters, intellectual property, leases, financing arrangements, taxes, licenses, privacy, and compliance.
Regulatory diligence depends on the sector and transaction. In the United States, certain larger transactions may require Hart-Scott-Rodino premerger notification and a waiting period before closing. The FTC explains that parties to covered transactions submit information to the FTC and DOJ and cannot close until the waiting period has passed or the government grants early termination. The FTC and DOJ's 2023 Merger Guidelines also describe factors and frameworks the agencies may use when reviewing mergers and acquisitions.
The practical point is not that every deal has an antitrust issue. It is that regulatory timing should be identified early. Waiting until the purchase agreement is almost final can create avoidable timing and certainty problems.
How findings affect the deal
Diligence findings matter because they translate into economics and legal protections.
| Finding | Possible deal impact |
|---|---|
| Lower supportable EBITDA | Lower price, lower multiple, more buyer diligence, or revised debt financing. |
| Customer concentration or churn risk | Earnout, customer-retention condition, lower valuation, or targeted indemnity. |
| Working-capital volatility | Higher working-capital peg, post-closing true-up, escrow, or more conservative closing cash assumptions. |
| Unresolved legal or tax issue | Specific indemnity, escrow, closing condition, purchase price adjustment, or deal pause. |
| Key-person dependency | Retention package, transition agreement, earnout, buyer concern about transferability. |
| IT or cyber weakness | Remediation plan, capex adjustment, warranty, insurance requirement, or integration delay. |
| Regulatory approval requirement | Longer timeline, outside date, filing covenant, remedies, or closing condition. |
This is why sellers should not think of diligence as a documentation exercise. It is a negotiation engine. The facts that emerge during diligence often determine the final deal, not only the initial LOI.
Common due diligence red flags
Some red flags are deal-breakers. Others are manageable if surfaced early. The risk increases when the seller appears surprised or evasive.
- Financial statements do not reconcile to tax returns, bank records, or management reports.
- Add-backs are aggressive, recurring, or unsupported.
- Revenue depends heavily on one customer, one owner relationship, or one channel.
- Contracts are unsigned, expired, non-transferable, or inconsistent with reported revenue.
- Employee, contractor, benefits, or incentive arrangements are poorly documented.
- Intellectual property ownership is unclear.
- Tax, litigation, regulatory, cyber, or compliance issues are known but not prepared.
- The forecast is not connected to pipeline, capacity, pricing, or historical performance.
- The owner is essential to day-to-day operations and customer relationships.
For a fuller list, use Alehar's due diligence red flags checklist.
How sellers should manage diligence
Sellers can make diligence smoother by preparing before buyers enter the data room. The priority is not to hide issues. It is to understand the issues, gather evidence, and explain them consistently.
A practical seller process includes:
- Build a data-room index before buyer outreach.
- Assign owners for finance, legal, HR, tax, IT, operations, commercial, and management Q&A.
- Create a diligence tracker with request status, owner, due date, and response quality.
- Prepare support for key claims in the CIM and management presentation.
- Rehearse likely buyer questions on EBITDA, growth, customers, contracts, management depth, and risks.
- Decide which issues need to be fixed, disclosed, or explained before exclusivity.
This connects directly to the broader sell-side M&A process. A strong sale process does not wait for buyer diligence to organize the facts.
How buyers should scope diligence
Buyers should not treat diligence as an unlimited fishing exercise. Scope should follow the investment thesis and the material risks.
Start with the deal thesis. If the acquisition is about customers, test retention, concentration, and account transferability. If it is about technology, test architecture, technical debt, security, roadmap, and team depth. If it is about margin expansion, test cost structure, pricing, procurement, and operational capacity. If it is about synergies, test the integration assumptions before relying on them in valuation.
The best diligence process produces decision-useful findings, not just long reports. At each stage, the buyer should know what would change price, structure, risk allocation, or the decision to proceed.
How Alehar helps with M&A due diligence
Alehar helps owners, management teams, buyers, and investors manage diligence around the decision that matters: should the deal proceed, and on what terms?
For sellers, Alehar can help prepare the data room, test the financial story, identify likely red flags, coordinate advisors, and keep buyer diligence connected to the sale process. For buyers, Alehar can support financial and commercial review, risk triage, valuation logic, and decision support.
If you are preparing for a transaction, Alehar's selling your company advisory helps sellers get ready before buyer diligence starts. Contact Alehar to discuss your upcoming sale, acquisition, or diligence process.
