Financial Due Diligence: 8-Step Process
73% of M&A deals uncover material financial issues during due diligence. Follow this 8-step process to verify revenue, expenses, tax compliance, and projections.
Financial due diligence is the process that separates smart acquisitions from expensive mistakes. It is the systematic investigation of a target company's financial health, and skipping or rushing it is the fastest way to overpay for a business.
According to Bain & Company, 73% of M&A deals uncover material financial discrepancies during due diligence, and deals where thorough due diligence is performed are 2.3x more likely to meet return expectations. The average due diligence process takes 30-60 days and costs 1-3% of the deal value, but catching a single misrepresented revenue stream can save millions.
This guide walks you through financial due diligence in eight steps, from the initial document request to the final risk assessment report.
When Financial Due Diligence Is Required
Financial due diligence is essential in several scenarios:
- Acquiring a company -- the most common case
- Investing in a startup -- Series A and beyond typically require it
- Merging two businesses -- both sides need visibility
- Buying a significant asset -- real estate, IP portfolios, large equipment
- Taking on a major partnership -- joint ventures with financial commitments
The depth of due diligence scales with deal size. A $500K acquisition might require 2-3 weeks of focused analysis. A $50M deal demands a full team working 60-90 days.
Financial Due Diligence Checklist
Before diving into the steps, here is the master document checklist. Request all of these items at the start of the process to avoid delays.
| Category | Documents Required | Priority |
|---|---|---|
| Financial statements | 3 years audited P&L, balance sheet, cash flow | Critical |
| Tax returns | 3 years federal and state returns | Critical |
| Revenue detail | Customer list with revenue by customer, contract terms | Critical |
| Accounts receivable | Aging report, bad debt history | High |
| Accounts payable | Aging report, vendor contracts | High |
| Debt schedule | All loans, lines of credit, convertible notes | Critical |
| Cap table | Full capitalization table with option pool | Critical |
| Employee data | Headcount, compensation, benefits costs | High |
| Legal | Pending litigation, regulatory issues | Critical |
| Projections | 3-year financial model with assumptions | High |
| Bank statements | 12 months of all account statements | High |
| Insurance | All active policies and claims history | Medium |
Step 1: Request and Organize Documents
The first step is getting every document you need into a structured data room. Use a virtual data room (VDR) platform like Datasite, Intralinks, or even a well-organized Google Drive for smaller deals.
How to structure your request
Send a comprehensive document request list within the first 48 hours of entering due diligence. Delays in receiving documents are the number one reason due diligence timelines slip.
Organize documents into folders:
- Financial Statements
- Tax and Compliance
- Revenue and Customers
- Expenses and Vendors
- Debt and Equity
- Legal and Regulatory
- Projections and Models
- HR and Compensation
Red flag: slow or incomplete document delivery
If the target company takes more than 5 business days to provide basic financial statements, it usually means one of three things: they are disorganized (risk), they are hiding something (bigger risk), or they do not actually want to sell (waste of time).
Step 2: Verify Revenue Quality
Revenue verification is the most important step in due diligence. The goal is to answer one question: is the reported revenue real, recurring, and sustainable?
Revenue quality analysis
| Revenue Type | Quality Score | What to Verify |
|---|---|---|
| Contracted recurring (SaaS, subscriptions) | Highest | Contract terms, renewal rates, churn |
| Contracted non-recurring (project-based) | Medium-high | Backlog, pipeline, win rate |
| Transaction-based (marketplace, e-commerce) | Medium | Volume trends, customer concentration |
| One-time (services, consulting) | Low | Repeatability, customer dependency |
Key checks:
- Revenue recognition compliance -- Are they recognizing revenue according to ASC 606 / IFRS 15? Premature revenue recognition inflates numbers.
- Customer concentration -- If one customer represents more than 15-20% of revenue, that is a material risk. Losing that customer could devastate the business.
- Contract terms -- Are there cancellation clauses, most-favored-nation provisions, or auto-renewal opt-outs that could reduce future revenue?
- Revenue trend analysis -- Plot monthly revenue for the past 24 months. Look for inconsistencies, seasonality, and whether growth is accelerating or decelerating.
For a deeper framework on evaluating how revenue quality affects business value, see our guide on how to value a business.
Step 3: Analyze Expenses and Margins
After verifying revenue, examine where the money goes. The goal is to identify the true cost structure and determine whether margins are sustainable.
Expense normalization
Private companies often have expenses that would not exist in a post-acquisition scenario. Normalize for:
- Owner compensation above market rate -- Add back the excess
- One-time expenses -- Litigation costs, restructuring charges
- Related-party transactions -- Rent paid to owner's LLC at above-market rates
- Discretionary expenses -- Owner's personal expenses run through the business
Margin benchmarks by industry
| Industry | Gross Margin | Operating Margin | Net Margin |
|---|---|---|---|
| SaaS | 70-85% | 10-25% | 5-20% |
| E-commerce | 30-50% | 5-15% | 3-10% |
| Professional services | 50-70% | 15-25% | 10-20% |
| Manufacturing | 25-40% | 8-15% | 5-10% |
| Marketplace | 60-80% | 10-20% | 8-15% |
Compare the target's margins to industry benchmarks. If margins are significantly above industry median, investigate whether they are sustainable or the result of underinvestment (deferred maintenance, understaffing, reduced R&D).
Step 4: Check Working Capital
Working capital is the operational cash needed to run the business day to day. In acquisitions, working capital is typically included in the purchase price, so understanding the normal level is critical.
Working capital formula
Net Working Capital = Current Assets - Current Liabilities
What to analyze:
- Accounts receivable days -- How long does it take customers to pay? Industry average for SaaS is 30-45 days. If AR days are increasing, collection is getting harder.
- Accounts payable days -- How long does the company take to pay vendors? Stretching AP can artificially inflate cash.
- Inventory turnover -- For product businesses, slow-moving inventory is a hidden liability.
- Deferred revenue -- For SaaS companies, deferred revenue is a liability on the balance sheet but represents future revenue. Understanding the deferred revenue schedule is essential.
Working capital peg
In most acquisitions, a "working capital peg" is set based on the trailing 12-month average. If working capital at close is below the peg, the purchase price is reduced. This protects the buyer from the seller draining working capital before the deal closes.
Step 5: Review Tax Compliance
Tax issues are among the most common deal-breakers and post-close surprises. A thorough tax review can prevent six- or seven-figure liabilities from transferring to the buyer.
Tax compliance checklist:
- Federal and state returns filed on time for the past 3 years
- Sales tax nexus -- Does the company collect and remit sales tax in all required jurisdictions? Post-Wayfair, this is a common gap for SaaS and e-commerce companies.
- Payroll tax compliance -- Verify all payroll taxes are current, including contractor vs. employee classification.
- Transfer pricing -- For companies with international operations, verify transfer pricing documentation exists and is defensible.
- Outstanding tax disputes -- Any open audits, notices, or assessments from tax authorities.
- R&D tax credits -- If claimed, verify the methodology and documentation support the credits.
Red flags:
- Unfiled returns in any jurisdiction
- Large discrepancies between reported revenue and tax return revenue
- Misclassified 1099 contractors who should be W-2 employees
- No sales tax collection despite clear nexus obligations
Step 6: Assess Financial Projections
Every seller has a financial model showing hockey-stick growth. Your job is to stress-test every assumption.
How to evaluate projections:
- Compare projections to historical performance -- If the company grew 15% annually for the past 3 years but projects 40% growth next year, demand specific justification.
- Test key assumptions -- What drives revenue in the model? Customer acquisition rate? ARPU growth? Retention improvement? Each assumption should be supported by data.
- Run sensitivity analysis -- What happens to the model if growth is 50% lower than projected? If churn is 2x higher? If a key customer leaves?
- Check unit economics -- Do the projections show improving or declining unit economics? If margins are projected to improve, what specifically drives that improvement?
Projection red flags
| Projection Claim | What to Investigate |
|---|---|
| Revenue growth 3x+ historical rate | What new channel, product, or market justifies this? |
| Margin expansion of 10%+ | What specific cost reductions are planned? |
| Churn improvement without product changes | Unrealistic without concrete retention initiatives |
| Zero customer concentration risk | Every business has concentration risk -- hiding it is a red flag |
Use our business valuation calculator to model different scenarios based on adjusted projections.
Step 7: Evaluate Risk Factors
Every business has risks. The purpose of due diligence is not to find a risk-free deal but to identify, quantify, and price risks appropriately.
Risk categories to assess:
Customer risk -- concentration, contract terms, satisfaction levels, switching costs.
Market risk -- competitive dynamics, regulatory changes, technology disruption.
Operational risk -- key person dependency, technology debt, supply chain fragility.
Financial risk -- debt covenants, cash flow volatility, capital expenditure requirements. Understanding profit margins by industry helps you evaluate whether the target's margins are sustainable.
Legal risk -- pending litigation, IP ownership disputes, regulatory compliance gaps.
Risk quantification framework
For each identified risk, estimate:
- Probability of occurrence (low/medium/high)
- Financial impact if it occurs (dollar amount or percentage of revenue)
- Mitigation available (insurance, contractual protections, operational changes)
This analysis directly feeds into your valuation adjustment. A $10M business with $2M in quantified risks might justify a $7.5M-$8.5M offer, depending on mitigation options.
Step 8: Prepare the Due Diligence Report
The final step is synthesizing all findings into a clear, actionable report that supports the investment decision.
Report structure:
- Executive summary -- 1-2 pages with key findings and recommendation
- Revenue analysis -- Quality, sustainability, concentration risks
- Expense analysis -- Normalized EBITDA, margin sustainability
- Working capital -- Normal level, peg recommendation
- Tax compliance -- Issues found, estimated exposure
- Projection assessment -- Realistic vs. projected performance
- Risk register -- All identified risks with probability, impact, and mitigation
- Valuation implications -- How findings affect the proposed purchase price
Key deliverables:
- Quality of Earnings (QoE) report -- Adjusted EBITDA that reflects the true, recurring earnings power of the business
- Working capital analysis -- Proposed peg and adjustment mechanism
- Risk register -- Prioritized list of risks with dollar-value estimates
- Deal structure recommendations -- Escrow, earnouts, representations and warranties based on identified risks
Timeline for Financial Due Diligence
| Deal Size | Typical Timeline | Team Size |
|---|---|---|
| Under $1M | 2-3 weeks | 1-2 people |
| $1M-$10M | 3-6 weeks | 2-4 people |
| $10M-$50M | 4-8 weeks | 4-8 people |
| $50M-$250M | 6-12 weeks | 8-15 people |
| $250M+ | 8-16 weeks | 15+ people |
FAQ
How much does financial due diligence cost?
Professional due diligence typically costs 1-3% of the deal value. A $5M acquisition might require $50K-$100K in accounting and legal fees. For smaller deals under $1M, founders often handle due diligence themselves with guidance from an accountant, reducing costs to $5K-$15K.
Can I do financial due diligence myself?
For deals under $1M, a financially literate founder can handle most of the analysis using the 8-step framework above. For larger deals, hire a QoE (Quality of Earnings) firm. The cost of missing a material issue far exceeds the cost of professional help.
What is the most common due diligence finding?
Revenue quality issues are the most frequent finding, appearing in over 60% of deals. The most common specific issues are premature revenue recognition, customer concentration above 20%, and overstated recurring revenue where one-time fees are mixed into MRR/ARR figures.
Make Better Investment Decisions
Whether you are acquiring a company or preparing your own business for sale, financial due diligence protects everyone involved. Use our business valuation calculator to model deal scenarios, or sign up for culta.ai to keep your financial data organized and investor-ready at all times.
Sources
- Bain & Company. "M&A Due Diligence: Lessons from the Best Acquirers." 2024.
- Deloitte. "The State of the Deal: M&A Trends 2025." Due diligence timeline and cost data.
- PwC. "Global M&A Industry Trends." 2025 report on deal completion rates.
- Harvard Business Review. "Due Diligence and the M&A Success Rate." Research on correlation between diligence depth and deal outcomes.
- SRS Acquiom. "M&A Deal Terms Study." 2025 data on working capital adjustments and escrow terms.
Written by Team culta
The culta.ai team helps businesses track revenue, manage cash flow, and make smarter financial decisions across multiple entities.