When acquiring a company, you inherit all its legal and regulatory liabilities—a concept called "successor liability." Effective diligence is not a legal checkbox exercise but a core part of valuation. This guide provides a tactical framework for uncovering risks in employment, data privacy, IP, and corporate governance, helping you adjust the deal price or walk away before it’s too late.
Key takeaways
- Treat compliance diligence as a valuation exercise, not a legal chore. Problems directly reduce the company’s value.
- Employment issues are the #1 source of hidden M&A risk. Aggressively probe contractor classification and equity hygiene.
- A weak data privacy or security posture can trigger fines that wipe out the value of the deal. Verify their GDPR/CCPA process.
- Contamination from "copyleft" open-source licenses can force you to open-source your own proprietary code.
- Use diligence findings as leverage: negotiate a lower price, demand a specific indemnity, or walk away.
- Start preparing now. Run a self-audit and create a "diligence-ready" data room to maximize your own valuation for a future exit.
An acquisition looks like the ultimate growth hack. You can buy a team, a product, or a customer base overnight, leapfrogging your roadmap by years. But the single biggest mistake founders make is believing they are just buying the assets. In a typical startup acquisition (a stock purchase), you are buying the entire legal entity, and with it, every liability it has ever accrued. Every past mistake is now your problem. This is successor liability.
Imagine you acquire a 15-person startup for what seems like a great price. Six months post-close, you discover they misclassified all their engineers as independent contractors. Now you are on the hook for federal and state back taxes, fines, and penalties. A conservative estimate for remediation is 30-40% of the contractors' total historical compensation. If you're talking five engineers paid $150,000 a year for two years, you could easily be looking at a $450,000–$600,000 bill. Your "great deal" just became a financial and operational nightmare.
Regulatory and compliance diligence isn’t a checkbox exercise to hand off to your lawyers. It’s a core part of valuing the company and understanding the true cost of the acquisition. A poorly-run, non-compliant company is worth less. Your job is to find the rot before you sign.
Founders new to M&A wrongly believe that the "reps and warranties" in the purchase agreement protect them. In the agreement, the seller will represent (or "rep") that they are compliant with all laws. If you discover a breach after the deal closes, your only recourse is to sue the founders you just acquired for that cash.
This is a terrible plan. It’s hostile, expensive, and the outcome is uncertain. You don't want to be suing your new Head of Product. The purpose of diligence is not to have a legal claim later, but to uncover facts now so you can avoid paying for them.
A disorganized or defensive response to your diligence requests is a major red flag. A poor compliance culture is a leading indicator of…
Dilige…
Frequently asked questions
- What's the difference between a stock purchase and an asset purchase?
- In a stock purchase, you buy the entire company, inheriting all its past, present, and future liabilities. In an asset purchase, you only buy specific assets (like code or customer lists), leaving most liabilities with the seller. Asset purchases are cleaner but often less tax-advantaged for the seller.
- What is 'successor liability' in an M&A deal?
- It's the legal principle that the acquiring company is held responsible for the liabilities of the target company. If they failed to pay taxes or violated a law before you bought them, you are now legally on the hook to fix it and pay the penalties.
- How much does M&A legal diligence typically cost?
- Costs vary with deal complexity, but for an early-stage startup acquisition, expect to spend $25,000 to $100,000+ on legal and financial diligence. This is a small price to pay to avoid inheriting a seven-figure liability.
- What is Reps & Warranties Insurance (RWI)?
- RWI is an insurance policy that covers losses from breaches of the seller's representations and warranties. It allows you (the buyer) to get paid out by a third-party insurer instead of having to sue the seller, making the deal much less contentious.
