The Ultimate M&A Due Diligence Checklist for Sellers
Once a strategic buyer signals real interest, due diligence begins — and it moves fast. This checklist walks sellers through the documents, data rooms, and disclosures that professional acquirers expect, organized by workstream so you can prepare in parallel.
On this page
Before you open the data room
The best sellers begin diligence prep 6–12 months before going to market. Two things matter more than any single document: (1) knowing your equity story — the three or four reasons a strategic acquirer would pay a premium — and (2) having clean, reconcilable financial data. Everything below either supports that story or removes friction from the buyer's confirmation process.
Organize the data room by workstream, not by document type. Buyers assign a lead per workstream; a well-structured room lets each lead work in parallel without waiting on you.
1. Financial due diligence
Buyers rebuild your financials from the ground up. Assemble at least three years of audited statements plus a current-year trial balance so the quality-of-earnings analysis moves quickly.
- Audited P&L, balance sheet, and cash-flow statements (3–5 years)
- Monthly management accounts for the trailing 24 months
- Revenue breakdown by product, customer, and geography
- Gross margin and contribution margin bridge
- Working-capital schedule and normalized net working capital
- Debt schedule, off-balance-sheet items, and lease commitments
- Capex history and forward capex plan
- Budget vs. actuals for the current and prior fiscal year
- Add-backs and normalization adjustments with supporting evidence
2. Legal and corporate
A clean corporate record shortens the SPA negotiation. Anything missing here becomes a specific indemnity — or a price chip.
- Certificate of incorporation, bylaws, and amendments
- Cap table with option grants, warrants, and convertible instruments
- Board and shareholder minutes for the last 3 years
- Material contracts (top customers, suppliers, partners, distributors)
- Change-of-control and assignment clauses flagged
- Litigation, arbitration, and regulatory correspondence
- Insurance policies and claims history
- Licenses, permits, and regulatory approvals
3. Commercial and customer
Commercial diligence is where buyers stress-test the growth story. Prepare cohort data before it is asked for.
- Customer concentration (top 10 and top 20 as % of revenue)
- Cohort retention, churn, and net revenue retention
- Pipeline, win rates, and sales-cycle length
- Pricing history and discount policy
- Competitive landscape and win/loss analysis
- Marketing spend by channel and CAC/LTV
4. Operations and supply chain
Operational diligence proves the business runs without you. Document processes, dependencies, and single points of failure.
- Organizational chart with reporting lines
- Standard operating procedures for core workflows
- Key vendors and single-source dependencies
- Manufacturing, logistics, and fulfillment metrics
- Facilities, leases, and equipment schedule
- Business-continuity and disaster-recovery plans
5. HR and people
Retention risk is a top-three deal killer. Anticipate the questions on key-person dependence and equity treatment.
- Employee census with role, tenure, and compensation
- Employment agreements, non-competes, and IP assignments
- Benefit plans, pensions, and accrued liabilities
- Equity plan and option grants with vesting schedules
- Employee-handbook and HR policies
- Recent employee-engagement or exit-interview data
6. Tax
Tax diligence protects the buyer against historic exposure. Prepare returns and any correspondence with tax authorities.
- Federal, state, and local tax returns (last 3–5 years)
- Sales/VAT/GST returns and nexus analysis
- Transfer-pricing documentation
- Tax audits, disputes, and closing agreements
- R&D credits and other incentive claims
7. Technology and IT
For software and tech-enabled businesses, IT diligence is often the longest workstream. Have the security posture ready.
- System architecture and data-flow diagrams
- Source-code repositories and third-party licenses (open-source inventory)
- IP ownership and inventor-assignment records
- Security certifications (SOC 2, ISO 27001) and audit reports
- Data-processing agreements and GDPR/CCPA compliance
- Incident history and vulnerability-management program
8. ESG and compliance
European and institutional buyers increasingly weight ESG. A short, honest disclosure beats a glossy report.
- Environmental permits and emissions data
- Health and safety incidents
- Anti-bribery and sanctions-screening program
- Diversity, equity, and inclusion metrics
- Supplier code of conduct
Common seller mistakes
- Waiting for the LOI to start. Diligence readiness is a leverage tool. Buyers who see a clean, complete room bid with more confidence and negotiate fewer indemnities.
- Optimistic add-backs. Every add-back needs a source document. Aggressive normalization erodes trust and gets priced out in the quality-of-earnings report.
- Late disclosure of known issues. Litigation, customer losses, and key-person departures always surface. Flagging them early is far cheaper than a re-trade.
Not sure who your strategic buyer is yet?
Before you build the data room, know who you're building it for. Our initial AI M&A assessment identifies one potential strategic buyer and explains why they could be a strong fit.