Due Diligence Checklist: 28-Point Checklist When Buying a Business in 2026

Published 2026-05-13 by businessbuy.site Editorial — GetServices.ai — Contact: [email protected] +1 (313) 729-1534
Original URL: https://businessbuy.site/blog/due-diligence-checklist-buying-business/ | Reading time: 14 min | For USA, Canada, UK, Australia buyers using SBA / bank financing

Business buyers reviewing financial documents together during due diligence

TL;DR — The 28-Point Due Diligence Framework: Don't trust the CIM. Verify. In 2026, 63% of deals that die in DD die because tax returns don't match P&L. Use this: 10 Financial + 6 Legal + 6 Operational + 6 Commercial = 28. Get 3yr tax returns (1120, 1120-S, 1065), Quality of Earnings (QOE) if >$1M revenue, debt schedule + AR/AP aging, UCC lien search, active lawsuits, IP assignment, SOPs + W-2 key employees + supplier & lease assignability, then customer concentration, churn, & reviews. Close only if DSCR ≥1.25x after your salary. Red flag = walk.

First-Time Buyer Safe This is the checklist brokers use internally. We wrote it for first-time buyers spending $100k–$3M. If you use SBA 7(a), your lender will ask for 70% of this list anyway — get ahead. Keep a single data room folder (Google Drive) with 5 subfolders: Financial, Legal, Ops, Commercial, HR/Payroll.

1. Financial Due Diligence — 10 Points (Where Deals Die)

Goal: prove SDE/EBITDA is real, recurring, and transferable. Every dollar of add-back must have a receipt.

#	Check Item	What to Request	Pass / Fail Rule 2026
1	3-Year Tax Returns vs P&L	1120/1120-S/1065 + 3yr P&L + QuickBooks Online backup file	P&L revenue must be within 5% of tax. >10% gap = fail unless explained by deferred revenue
2	Recast SDE Proof	Owner add-back schedule with invoices	Add-backs <25% of unadjusted profit. Personal car, family payroll, one-time legal OK. No "owner didn't take salary"
3	Quality of Earnings (QOE)	For deals >$1M revenue or >$400k SDE, get light QOE ($4k-$8k) from accountant	QBE will test revenue recognition, customer cut-off, one-time COVID relief, PPP/ERC removal
4	Debt Schedule + UCC Liens	All notes, MCA, equipment loans, SBA EIDL, owner notes. Run UCC search in state	No hidden debt. SBA requires first lien. Pay off MCA before close — MCAs kill DSCR
5	AR Aging + Bad Debt	AR aging 0-30/31-60/61-90/90+ report last 12 months	AR >90 days <8% of total. If service business bills net-30, 90+ should be <5%
6	AP Aging + Vendor Terms	AP aging, credit holds, vendor letters	No vendor >60 days past due >3x in last year = cash flow stress
7	Bank Statements Cross-Check	12 months business checking + merchant processor statements	Deposits ~ revenue ±7%. Big cash business? Get POS Z-reports daily
8	Inventory + WIP Valuation	Count sheet, age, obsolescence reserve. WIP % complete	Inventory valued at cost, not retail. >180 days = write down 50%
9	Capex & Maintenance	3yr capex, R&M invoices, equipment age	Average annual capex must be <15% SDE or subtract from DSCR
10	Forward DSCR Model With Your Salary	Build: (SDE - $75k manager salary - capex avg - debt service)/debt service	DSCR ≥1.25x SBA standard, ≥1.35x if customer concentration >20%

Negotiation Script — Financial Gap

"I saw tax returns show $720k revenue vs P&L $810k. My lender will underwrite on tax returns. I'm comfortable moving forward at ${tax-based price}, or if you can provide merchant statements showing $810k, I'll bridge with a $30k earn-out on revenue retention. Which works?"

This does two things: forces proof and converts air to earn-out, not price.

Looking for SBA-Eligible Businesses With Clean Financials?

We filter World Businesses for Sale for listings with 3yr financials, SDE >$120k, and seller willing to carry 5% on SBA standby. Start here instead of random brokers.

View live USA businesses for sale →

Canada UK Australia

Sponsored links — we may earn commission at no extra cost to you.

2. Legal & Compliance Due Diligence — 6 Points

One lawsuit or missing IP assignment can void your asset purchase. Budget $1,500-$3,000 for lawyer review.

11. Active/Pending Lawsuits & Threats — Request: 5-year litigation log + insurance claims. Search PACER, county court, BBB complaints. Pass: Zero open wage claims, class actions, OSHA recordables >3. Fail: Any open >$25k or pattern of wage theft/sexual harassment — walk, SBA won't fund.
12. UCC Liens, Tax Liens, Judgments — Run UCC search in incorporation state + business location state. IRS transcript via Form 4506-C. Secretary of State good standing cert. Must be clear at close or paid from escrow.
13. Entity Structure, Cap Table & Contracts Assignability — Articles, EIN, operating agreement, cap table, profit distribution history. Review all contracts >$10k/yr for "change of control" or "consent required" clauses. 70% of government contracts are NOT assignable without re-bid — huge trap.
14. Intellectual Property Ownership — Trademark USPTO search, domain WHOIS, logo/designer assignment letter, software code assignment (did owner actually assign his contractor's work?). Ask: "Was any software/brand built by freelancer? Show IP assignment." No assignment = you don't own it.
15. Licenses, Certifications & Compliance — HVAC license, plumbing journeyman, food permit, alcohol license (Type 47/48 in California non-transferable), childcare license. Check: Is license in owner's name personally? Then you must re-qualify. Add 90 days to timeline.
16. Data Privacy, Employee Compliance — If business stores customer PII, CCPA/GDPR policy, breach history. For staff: I-9 audit, worker comp MOD rate <1.0, independent contractor misclassification (1099 vs W-2) — California, NJ, MA aggressively fine. IRS SS-8 issue.

Checklist Script for Attorney Call

Send your M&A attorney: “Please confirm: (a) asset purchase clears all liens via UCC-3, (b) IP assignment schedule Exhibit A, (c) non-compete 3yr/25 miles enforceable in this state, (d) change-of-control consents listed in disclosure schedule. Flat fee for APA review?”

3. Operational Due Diligence — 6 Points

You are buying a system, not a job. If owner works >50 hrs with no manager, you are buying a job + debt.

#	Operational Test	Document	Green Flag 2026
17	SOPs & Playbooks Exist	Google Drive SOPs, Loom training, checklists for open/close, sales call script	New hire can be productive in <14 days with SOPs
18	Key Employees & Retention	Anon org chart, tenure, pay, non-compete, W-2 last year, stay bonus plan	Manager >3yr tenure willing to stay 12mo, no single employee >20% revenue
19	Owner Dependency Test	Calendar audit last 30 days, what % time owner does sales vs operations	Business runs 2 weeks without owner at 80% efficiency. Owner <25% of sales
20	Supplier Contracts & Pricing	Top 5 suppliers: contract, pricing tiers, payment terms, exclusivity, termination without cause	Pricing locked YOY +2-3%, no single supplier >40% COGS, >2 alternative suppliers qualified
21	Lease & Facility	Lease copy, amendments, assignment clause, rent escalations, personal guarantee, demolition/relocation clause	Rent <10% revenue, 5+ years remaining + 5yr option, assignable with landlord consent not to be unreasonably withheld, no demolition clause next 3yr
22	Equipment List, Age & Maintenance Log	Fixed asset register, serials, maintenance log, warranty, replacement cost	Core equipment <7yr old, no deferred maintenance >$20k, liens released at close. Check HVAC, truck fleet DOT inspection

Real Example — Lease Trap 2025: Buyer in Austin bought auto repair $380k SDE, lease had only 18 months left. Landlord refused renewal unless rent +60% to market. DSCR collapsed. Rule: always get landlord estoppel + signed assignment letter BEFORE you remove financing contingency.

4. Commercial & Customer Due Diligence — 6 Points

Revenue quality > revenue size. One-time project revenue at 4x is worthless vs 1x recurring contracts.

23. Customer Concentration & Top-10 List — Get last 24mo customer revenue rank, % of revenue. Pass: No customer >15% (SBA prefers <20%), Top-10 <40%. Fail: >30% one customer = require 50% earn-out or walk. Call top 5 customers: "Have you considered leaving? Who is your contact post-sale?"
24. Churn, Retention & Recurring Revenue % — Calculate logo churn and dollar churn. For subscription/home services: monthly churn <4% good, >7% bad. What % of revenue is contracted recurring (maintenance contracts, subscriptions) vs one-time? 60%+ recurring = +0.5x multiple justified. Request: SaaS cohort report, or cleaning routes retention sheet.
25. Reviews, Brand & Lead Engine — Pull Google Reviews (count, recency, owner reply rate), Yelp, Glassdoor. Check Google Business Profile suspended history. Lead source breakdown: referral vs Google Ads vs LSA vs marketplace. If >50% leads come from one portal (Thumbtack, DoorDash, Amazon), you are renting an audience — risk up. Ask for ad accounts access read-only.
26. Pricing Power & Competition Moat — Last 2 price increases dates + % + churn after. Can you raise 5% day one? Test: call competitor as secret shopper. Look for license moat (plumbing, electrical), contract moat (3yr commercial cleaning), or brand moat (4.8* 400 reviews). No moat + commodity = cap multiple at 2.5x SDE.
27. Pipeline & Backlog Quality — Open proposals, win rate %, backlog months. Service: 2-3 months ideal. Too much backlog (6+ months) often means underpriced or understaffed. Too little (<2 weeks) means sales gap post-close.
28. Geography & Channel Risk — Where does revenue come from physically? SBA collateral location. If home services route radius >45 min, labor inefficiencies + fuel + churn spike. Map customers in Google My Maps. Also platform risk: Amazon FBA suspension rate, Shopify chargeback rate >1% fail.

Customer Call Script (Use After LOI, Before Close)

"Hi, I'm Shahaan, buying [Business] from [Owner] who is retiring after 12 years. We're keeping all staff. Quick 3 min: what keeps you with us? If you could improve one thing, what? Would you be open to a 12-month renewal at same pricing?" Do 10 calls, log notes. If 3+ say they will leave without owner — renegotiate price -20% or earn-out.

5. The 2026 Due Diligence Playbook: Red Flags, Data Room & Timeline

A) Top 12 Red Flags — Walk Immediately

Add-backs >30% of SDE inflated with "my wife's Tesla is marketing"
Tax returns show $0 profit but asking 4x SDE = fraud
Owner works 65 hrs, no manager, no SOPs — you buy a job
Customer concentration >40% or 1 client = 60% revenue
Lease <24 months + no option + landlord won't talk early
Cash business with no POS and bank deposits don't match
Open IRS/state tax lien, MCA stacking (2+ advances), EIDL default
Key employee is brother/spouse who will leave post-sale
Equipment >12 years, no maintenance log, near replacement cliff $150k
Google Reviews <4.2 or 25+ reviews filtered in last 90 days deleted? Manipulation
Seller refuses QOE or bank statements — classic concealment
Supplier can cancel without cause on change of control — COGS spike risk

B) Data Room Request List — Copy/Paste to Seller

Folder	Files to Request
01_Financial	3yr tax returns, 3yr P&L + Balance Sheet YTD, QuickBooks P&L by month, bank statements 12mo, merchant processor 12mo, AR aging, AP aging, debt schedule, inventory count, capex list, SDE add-back receipts
02_Legal	Entity docs, EIN letter, cap table, contracts >$10k, lease + amendments, insurance certificates, litigation log, IP assignments, trademark certs, licenses, UCC search, good standing cert
03_Ops_HR	Org chart anon, job descriptions, W-2 summary, payroll last 2 months, SOPs manual, equipment list + serials, maintenance logs, supplier list + pricing, vehicle list, keys/codes
04_Commercial	Customer top 20 list 24mo, churn cohort, Google Review profile + responses, ad accounts screenshots, pipeline/backlog, pricing history, competitor list, LSA/Ranking screenshots
05_Transition	Owner day-in-life calendar, training plan 2/4/8 weeks, introductions to key customers/vendors, non-compete draft, seller consulting agreement draft

C) Timeline — How to Use 28-Point Checklist in 21 Days

Day	Task	Owner
1-3	Financial 1-10: tax vs P&L, DSCR model, QOE kick-off if needed	You + CPA
4-7	Legal 11-16: UCC, lawsuits, IP, licenses	M&A attorney
8-12	Operational 17-22: site visits, SOP audit, lease estoppel letter to landlord, equipment inspection	You on-site
13-17	Commercial 23-28: customer calls, review audit, supplier calls	You + advisor
18-21	Renegotiation: issues list + price adjust/earn-out/holdback. Submit updated LOI amendment	You

Downloadable Mindset: Print the 28 points, tape to wall. Score each 0 (fail), 1 (needs fix), 2 (pass). Total 56. Close if >44 AND no single critical fail (4,11,21,23). 35-44 = renegotiate 15-25% or earn-out. <35 = walk. Best buyers walk from 4 of 5 deals — that's normal. Your job is not to find a perfect business; it's to not buy a bad one.

Negotiation Holdback Language to Use:
"Based on DD finding [AR 90+ $23k uncollectible / equipment needs $18k repair / top customer -12% last quarter], we propose: price same $650k but $50k held in escrow 90 days post-close released upon AR collection / equipment repaired / customer retains >95%. Plus seller note 10% on standby for lender. If escrow claim, we keep. This protects both of us and gets us to close Friday."

This converts a price fight into a mechanism — sellers accept escrow 3x more than price cut.

View live USA businesses for sale → | Canada | UK | Australia