Business Sale Due Diligence Checklist (2026): What Buyers Will Ask For
Quick Answer
A business sale due diligence checklist spans seven areas: (1) financial, 3-5 years of financial statements and tax returns, monthly P&Ls, the add-back schedule, AR/AP aging, working-capital detail; (2) legal/corporate, formation documents, cap table, minute books, material contracts, leases, litigation, permits and licenses; (3) tax, federal/state/local returns, audit history, sales-and-use tax, payroll tax, nexus analysis; (4) operational, customer and supplier lists with concentration, inventory, equipment, processes/SOPs; (5) HR, org chart, employee census, comp and benefits, agreements, classification (W-2 vs 1099), open claims; (6) IT and data, systems, software licenses, cybersecurity, data-privacy compliance; (7) commercial, market position, pipeline, churn, contracts assignability. Sellers who assemble all of this before going to market close faster and at higher prices, because diligence has nothing to drag on.

More deals die in due diligence than at the negotiating table, and most of those deaths are preventable. Diligence is where the buyer checks whether the business is what you said it is. If the financials don’t reconcile, the contracts aren’t assignable, a big customer concentration surfaces by surprise, or the corporate records are a mess, the buyer slows down, re-trades the price, or walks. The fix is boring and powerful: assemble the diligence package before you go to market, so there’s nothing to discover and nothing to drag on.
This is a seller-side checklist, what buyers will ask for, organized so you can build your data room ahead of time. We’re CT Acquisitions, a buy-side M&A advisory firm; sellers pay nothing, the buyer pays our fee at closing. For the full sale process see our how to sell your business guide; for what the business is worth, our free 90-second valuation tool; for how fast it can go when you’re prepared, our guide on selling a business quickly.
What this guide covers
- Seven diligence areas: financial, legal/corporate, tax, operational, HR, IT/data, commercial
- Financial is the heaviest: 3-5 years of statements and tax returns, monthly P&Ls, add-back schedule, AR/AP aging, working-capital detail, all reconciling to each other
- The deal-killers: financials that don’t tie out, undocumented add-backs, customer concentration surprises, non-assignable key contracts, worker-classification issues, unresolved tax exposure, sloppy corporate records
- Build the data room before launch. A prepared package compresses diligence from months to weeks and removes the buyer’s re-trade leverage
- Get a quality-of-earnings review on larger deals, doing your own QoE first surprises no one and protects the price
- Free valuation: know your number before diligence starts, our 90-second tool
1. Financial diligence
- Financial statements (income statement, balance sheet, cash flow), 3-5 years, annual and monthly; ideally reviewed or audited
- Federal, state, and local income tax returns, 3-5 years, reconciled to the financials
- Trailing-twelve-month (TTM) and year-to-date P&L
- The add-back / normalization schedule, every adjustment to reported earnings (owner comp above market, personal expenses, one-time items) with supporting documentation
- Accounts receivable aging and accounts payable aging
- Working capital detail and historical levels (this drives the working-capital adjustment in the purchase agreement)
- Debt schedule, all loans, lines of credit, leases, capital commitments, with terms and balances
- Revenue detail by customer, product/service line, and channel; recurring vs. non-recurring split
- Gross margin analysis and trends
- Budget vs. actual for recent periods; financial projections and the assumptions behind them
- Bank statements and reconciliations (often requested for verification)
- Capital expenditure history and near-term capex needs
2. Legal and corporate diligence
- Formation documents, articles/certificate, bylaws or operating agreement, and all amendments
- Capitalization table, ownership history, options/warrants, any equity agreements (including buy-sell agreements)
- Minute books and resolutions; evidence of good standing in every state of operation
- Material contracts, customer agreements, supplier agreements, distribution/reseller agreements, partnership and JV agreements (with change-of-control / assignment provisions flagged)
- Real-property leases and any owned real estate; equipment leases
- Loan agreements, security agreements, guarantees, UCC filings
- Litigation, past, pending, and threatened; settlements; demand letters
- Permits, licenses, and regulatory approvals required to operate (and their transferability)
- Insurance policies (and loss-run / claims history)
- Intellectual property, registrations, applications, assignments, licenses in and out; confirmation that IP created by employees/contractors is assigned to the company
- Environmental matters, if applicable
3. Tax diligence
- Federal, state, and local tax returns (income, franchise), 3-5 years
- Audit history and any open audits or assessments; correspondence with tax authorities
- Sales-and-use tax returns and nexus analysis (where the business is registered vs. where it has economic nexus, a frequent buried liability)
- Payroll tax filings and deposits
- Property tax filings
- Any tax elections, NOL carryforwards, credits, or unusual positions
- Transfer-pricing documentation, if there are related entities
- Worker-classification analysis (1099 vs. W-2), this has both tax and HR exposure
4. Operational diligence
- Customer list with revenue by customer and concentration analysis (flag anyone over 10-15%)
- Supplier/vendor list with spend and concentration; single-source dependencies; key supplier contracts
- Backlog / pipeline / contracted future revenue
- Inventory detail, valuation method, obsolescence, turns
- Equipment and fixed-asset register, age, condition, maintenance records, replacement timeline
- Facilities, locations, capacity, utilization, lease terms
- Documented processes / SOPs, the more the business runs on documented systems vs. the owner’s head, the better
- Quality systems, certifications, warranty/return history
- Key dependencies, on the owner, on specific employees, on specific customers or suppliers, on specific software
5. HR and people diligence
- Organization chart and employee census (titles, tenure, location, comp, full/part-time)
- Compensation and benefits, plans, costs, retirement plans, health insurance, bonus structures
- Employment agreements, offer letters, handbooks, policies
- Restrictive covenants, non-competes, non-solicits, confidentiality agreements with employees and contractors
- Independent-contractor agreements and the classification analysis behind them
- Key-employee retention agreements and stay bonuses (have these in place before diligence)
- Open claims, EEOC charges, wage-and-hour issues, workers’ comp, union matters
- Turnover history and any recent or planned departures
6. IT and data diligence
- Systems inventory, ERP, CRM, accounting, industry-specific software
- Software licenses and SaaS subscriptions (and their assignability/transferability on a change of control)
- Hosting and infrastructure (cloud accounts, on-prem hardware)
- Cybersecurity posture, controls, prior incidents/breaches, insurance
- Data-privacy compliance, what personal data is collected, how it’s handled, applicable obligations
- Custom-developed software and ownership of the code
- Disaster recovery / backup procedures
7. Commercial diligence
- Market position, share, competitive landscape, key competitors
- Customer churn / retention metrics and cohort behavior
- Sales pipeline, conversion rates, customer acquisition cost, lifetime value
- Pricing history and power
- Contract terms with customers, length, renewal mechanics, termination rights, assignability on a change of control (critical, can a key customer walk when you sell?)
- Growth opportunities and the credible path to realize them
- Industry trends, regulatory shifts, technology shifts that could help or hurt
How we know this: the ranges, timelines, and dynamics on this page come from the transactions we’ve worked on and the buyer mandates in our network of 100+ active capital partners. They’re informed starting points, not guarantees, your actual outcome depends on the specifics of your business and your situation.
The diligence findings that actually kill deals
- Financials that don’t reconcile, the tax returns, the P&L, and the bank statements tell different stories. Instant credibility loss.
- Undocumented add-backs, the seller claims $400K of normalizations with no support. Buyers strike them, and the price drops.
- Customer concentration surprise, a buyer learns mid-diligence that one customer is 35% of revenue and on a month-to-month contract.
- Non-assignable key contracts, the biggest customer or supplier agreement requires consent to assign, and consent is uncertain.
- Worker-classification exposure, a workforce of “1099 contractors” who look like employees, with back-tax and benefits liability.
- Sales-tax nexus liability, the business has economic nexus in states where it never registered or remitted.
- IP not assigned to the company, software or content created by contractors that the company doesn’t actually own.
- Sloppy corporate records, missing minute books, unclear ownership history, lapsed good standing.
- Owner dependency, diligence reveals the business is the owner, and there’s no transferable team or system.
Almost every one of these is fixable, or at least disclosable, before you go to market. That’s the whole point of building the package early.
How to prepare
- Assemble the data room before launch, organized by the seven areas above. A buyer who gets clean, complete materials moves fast and trusts you.
- Do a sell-side quality-of-earnings review on larger deals, find and fix (or document) the issues a buyer’s QoE would surface, before they do.
- Clean up the obvious exposures 12+ months out, worker classification, sales-tax registration, lapsed licenses, corporate housekeeping.
- Lock in key-employee retention with stay bonuses before diligence starts.
- Surface concentrations and known issues proactively, disclosed problems are negotiable; discovered ones are deal-killers.
- Know your number, get a defensible valuation up front so the price you’re negotiating is grounded; our free 90-second tool gives you a sector-adjusted range.
A prepared business with a complete data room can compress diligence from months to weeks, which is the single biggest reason some sales close in 90-150 days and others drag for a year. See our guide on selling a business quickly and our broker alternative guide for how the buyer-paid, off-market model fits, you pay no advisory fee; the buyer does.
Before Diligence Starts
Know your number before a buyer scrutinizes it
Diligence goes better when you already know what the business is worth and why. Our free 90-second tool gives you a sector-adjusted valuation range based on current 2026 transactions, no email gate, no obligation.
Get a Free Valuation →The five pillars of how CT Acquisitions works
Buyer pays our fee. Founders never write a check.
No engagement letter. No upfront cost. No exclusivity contract.
Search funders, family offices, lower-middle-market PE, strategics.
Confidential introductions to the right buyers. No bidding war.
Not 9-12 months. Not 18 months. Months, not years.
No Pitch · No Pressure
Getting ready to sell?
We’ll walk you through what buyers will dig into, where deals usually break, and how to prepare so yours doesn’t. No engagement letter, no retainer, no obligation.
Start a Confidential Conversation →Frequently asked questions
What is a due diligence checklist for selling a business?
It’s the list of documents and information a buyer will request to verify the business is what the seller represented, organized into roughly seven areas: financial (statements, tax returns, add-backs, AR/AP, working capital), legal/corporate (formation docs, cap table, contracts, leases, litigation, licenses), tax (returns, audits, sales-and-use tax, payroll tax, classification), operational (customers, suppliers, inventory, equipment, processes), HR (org chart, census, agreements, classification, claims), IT/data (systems, licenses, cybersecurity, privacy), and commercial (market position, churn, pipeline, contract assignability).
What documents do buyers ask for in due diligence?
The core set: 3-5 years of financial statements and tax returns plus monthly P&Ls and a documented add-back schedule; AR and AP aging and working-capital detail; corporate formation documents, the cap table, minute books, and material contracts and leases (with change-of-control provisions flagged); sales-and-use and payroll tax filings and any audit history; customer and supplier lists with concentration; the employee census, comp and benefits, and employment/contractor agreements; the systems and software inventory with license transferability; and insurance, IP registrations and assignments, permits and licenses, and any litigation.
How long does due diligence take when selling a business?
Typically 30-90 days for a privately held business, running alongside negotiation of the definitive purchase agreement, but it varies enormously with preparation. A business with a clean, complete data room can get through it in a few weeks; an unprepared one with messy financials, disorganized records, and surprises can drag it out for months or have it collapse the deal. Building the diligence package before going to market is the single biggest lever on this timeline.
What kills deals in due diligence?
The recurring ones: financials that don’t reconcile across the P&L, tax returns, and bank statements; undocumented add-backs that get struck and drop the price; a customer-concentration surprise discovered mid-process; key customer or supplier contracts that aren’t assignable without consent; worker-classification exposure (1099 contractors who look like employees); sales-tax nexus liability in unregistered states; IP that the company doesn’t actually own; sloppy corporate records; and owner dependency, the discovery that the business is essentially the owner with no transferable team.
How do I prepare my business for due diligence?
Assemble the data room before you go to market, organized by the seven diligence areas, with clean accrual financials, a documented add-back schedule, and a 2-3 year review. On larger deals, run a sell-side quality-of-earnings review to find and fix issues before a buyer’s QoE does. Clean up obvious exposures 12+ months out, worker classification, sales-tax registration, lapsed licenses, corporate housekeeping. Lock in key-employee retention with stay bonuses. Surface concentrations and known issues proactively, and get a defensible valuation up front.
What is a quality of earnings report?
A quality-of-earnings (QoE) report is an independent analysis, usually by an accounting firm, that scrutinizes a business’s reported earnings: which revenue and EBITDA are sustainable and recurring, which ‘add-backs’ are legitimate normalizations versus aggressive ones, what one-time items distort the picture, and how working capital behaves. Buyers commission a QoE in diligence; sophisticated sellers commission their own (a ‘sell-side QoE’) first, so the earnings number going into negotiations is already vetted and there are no surprises that hand the buyer re-trade leverage.
Should I worry about customer concentration before selling?
Yes, it’s one of the most common diligence problems. Any single customer above roughly 10-15% of revenue draws scrutiny; above 25-40% it can suppress the multiple or scare off buyers entirely, especially if that customer is on a short-term or month-to-month contract that could walk when ownership changes. If you can, diversify before listing. If you can’t, disclose it on day one, with the customer’s history, contract terms, and relationship strength, because a disclosed concentration is negotiable while a discovered one is a deal-killer.
Can I sell my business without preparing a data room?
You can try, but it’s the slow, expensive way. Without an organized data room, diligence becomes a months-long scavenger hunt, momentum dies, the buyer’s confidence erodes, and every gap or surprise becomes leverage to re-trade the price. Sellers who assemble the package before going to market routinely close in 90-150 days at full price; sellers who don’t routinely watch deals drag for a year or fall apart. Preparation isn’t optional if you care about speed and price, it’s the mechanism that delivers both.
Related research
- Free Business Valuation Tool, your business is worth in 90 seconds
- The Business Broker Alternative Guide (national pillar)
- Business Brokers by State, with a free alternative
- The Complete Guide to Selling Your Business in 2026
- What’s My Business Worth? Founder’s Valuation Guide
- Who Buys These Companies? Buyer Types Explained
- How to Sell to Private Equity, A Founder’s Walkthrough
- Owner’s Pre-Exit Checklist, 90 Days Before You List
- CT Commentary, Founder & M&A Insights