M&A Diligence Checklist: How Founders Survive Scrutiny

Your M&A offer isn't the finish line. It's the start of an intense diligence sprint. Here's how to prepare and pass the buyer's test.

Getting an M&A offer kicks off a brutal diligence process where buyers scrutinize every part of your business, from your cap table to your customer contracts. To protect your deal and valuation, you must have your corporate, financial, commercial, and team data organized and defensible before you get the offer. This guide provides the checklist and the non-obvious context you need to survive.

Key takeaways

Getting an acquisition offer feels like the finish line. It’s not. It’s the starting gun for due diligence, an intense 30-to-90-day sprint where the buyer scrutinizes every cell in your spreadsheets, every line in your contracts, and every assumption in your strategy.

The buyer’s goal is simple: find reasons to lower the price or walk away. This process is a feature, not a bug. They use fatigue and a relentless barrage of questions as a negotiation tactic. Your job is to be so thoroughly prepared that you give them no ammunition.

A buyer's questions are not random. They follow a playbook designed to uncover every ounce of risk. This guide breaks down the core diligence streams and translates what buyers are really asking, so you can frame your answers to win.

This is the first gate. Before they even look at your product, buyers need to confirm you actually have the legal right to sell the company and that there are no hidden corporate bombs. This is where M&A lawyers earn their fees.

What They're Really Asking: Is your cap table a disaster? Are there 50 small investors from an old crowdfunding round I’ll have to chase for signatures? Is there a disgruntled ex-founder with enough equity to block the deal? You must have a clean, lawyer-verified cap table showing every security ever issued.

What They're Really Asking: Model the exact payout waterfall for me. I need to know every liquidation preference, participation right, and special voting threshold to understand who gets paid and whose approval is required.

What They're Really Asking: Are you a Delaware C-Corp? Anything else (like an LLC or, worse, a non-US entity) introduces tax and legal complexity that can add millions in costs and potentially kill the deal.

Their Question: Are there any contracts that prevent this deal?

What They're Really Asking: I need a list of every customer or vendor contract with a “change of control” clause. These clauses allow the other party to terminate the contract upon your acquisition. We…

A…

Frequently asked questions

How long does M&A diligence usually take?
Typically 30 to 90 days. A simple acqui-hire can be faster, while a complex strategic deal involving multiple business units can take longer. The more prepared you are, the faster it goes.
What is a QoE (Quality of Earnings) report and do I need one?
A QoE is a deep audit of your financials by a third-party accounting firm to verify your revenue and metrics. If you have over $3M in ARR, getting a QoE proactively can build immense credibility and accelerate the deal.
What's the most common reason deals fall apart in diligence?
It's often a "death by a thousand cuts" rather than one big thing. The most frequent deal-killers are messy cap tables, gaps in IP assignment from past contractors, major undisclosed liabilities, and co-founder misalignment on the future.
Should I tell my team we're in an M&A process?
No. You should only inform a tiny, core deal team (e.g., co-founders, CFO). Telling the broader team creates massive distraction and anxiety and can jeopardize the deal if it leaks or drags on.
What is a data room?
It's a secure online folder (using software like Intralinks, or even just a well-organized Google Drive) where you upload every document the buyer requests. Your ability to quickly and cleanly populate this is a test in itself.

Related fundraising guides (39)

Browse by topic (1)

Fundraising library · Pitch deck examples · Investor directory · Founder database