M&A Due Diligence | How Buyers Test the Business Before They Buy the Story

M&A due diligence is the disciplined process of testing whether the business a buyer thinks it is acquiring is the business that actually exists.

A seller presents a story: revenue is durable, customers are loyal, margins are defensible, systems are scalable, contracts are secure, intellectual property is owned, employees will stay, taxes are under control and the future can support the price. Due diligence does not begin by assuming that story is false. It begins by refusing to confuse a coherent story with verified reality.

The buyer therefore asks a harder set of questions. Which claims are supported by evidence? Which risks are already visible? Which liabilities are conditional rather than recorded? Which customers, employees, licences, suppliers, systems or contracts are load-bearing? Which assumptions inside the valuation fail if one hidden fact changes?

Due diligence is the point where an acquisition stops being a presentation and starts becoming an evidence test.

Educational boundary: this article explains corporate-finance and transaction concepts. It does not provide legal, tax, accounting or investment advice and does not recommend any transaction. Return to How Finance Works for the canonical Finance map, to Mergers and Acquisitions for the M&A transaction owner, and to M&A Synergies for the synergy-value owner.

M&A Due Diligence: The Short Answer

Suppose a buyer agrees in principle that a target might be worth S$300 million. That value depends on assumptions: recurring EBITDA is S$30 million, customer churn is stable, no large tax exposure exists, the software belongs to the target, the top salesperson will remain, working capital is normal, debt is fully disclosed and no regulatory approval threatens the business model.

Due diligence tests those assumptions against evidence. If recurring EBITDA is actually S$24 million, one customer provides 35% of revenue, a major contract can terminate on change of control, S$12 million of unpaid tax is disputed, and the core software includes code the target cannot clearly demonstrate it owns, the acquisition has changed even though the company name has not.

The buyer can respond in several ways:

reduce the price;
change the enterprise-value-to-equity-value bridge;
require the seller to repair an issue before closing;
seek an indemnity or escrow;
change the consideration mix;
build specific warranties into the agreement;
delay closing until an approval arrives;
restructure the transaction;
change the integration plan;
walk away.

Due diligence therefore does not merely “find problems.” It changes the decision architecture around price, risk, structure, protection and execution.

What Due Diligence Actually Does

A useful way to read diligence is as a four-stage machine:

claim → evidence → implication → deal response.

Claim	Evidence test	Possible implication	Possible deal response
Revenue is recurring	Customer contracts, invoices, renewals, churn cohorts	Revenue durability weaker than forecast	Lower valuation or earn-out
Margins are stable	Gross-margin bridge, supplier pricing, rebates, temporary savings	Normalised EBITDA lower	Price adjustment
No material litigation	Claims schedule, legal correspondence, counsel review	Potential contingent liability	Indemnity, escrow or walk-away
Technology is scalable	Architecture, incidents, technical debt, code ownership, cyber testing	Large post-close capex needed	Reduce synergy/NPV or require remediation
Key staff will stay	Contracts, compensation, interviews, turnover data	Capability may leave after closing	Retention plan or valuation reduction

The purpose is not maximum paperwork. It is to test the assumptions whose failure can change the economics or operability of the transaction.

Materiality: Not Every Fact Deserves Equal Attention

A target can contain thousands of contracts, invoices, employees, systems and historical events. A diligence process that treats every item as equally important becomes slow and noisy. Good diligence prioritises materiality: which facts could reasonably change value, legal exposure, control, closing certainty, financing, operating continuity or integration?

Materiality can be financial, operational or strategic. A S$50,000 contract is financially small in a S$1 billion company but can be strategically critical if it contains the exclusive licence to the core technology. One engineer can represent a tiny portion of payroll yet hold knowledge that cannot be replaced quickly.

This is why diligence is not simply a checklist. It is a system of priority.

The Data Room and Evidence Architecture

Modern transactions often organise documents in a controlled virtual data room. The data room can contain corporate records, financial statements, contracts, employee schedules, intellectual-property documents, tax filings, litigation materials, policies, licences, customer information, supplier agreements and technology documentation.

But the mere existence of a document does not make it sufficient evidence. Diligence asks:

Is the document complete?
Is it current?
Does it cover the relevant legal entity?
Does the contract match actual operating practice?
Are amendments missing?
Is the schedule reconciled to the financial statements?
Are representations supported by source records?
Are exceptions being hidden inside aggregated categories?
Does the seller’s explanation match third-party evidence?

The strongest diligence creates an evidence chain rather than collecting documents without interpretation.

Financial Due Diligence: Is the Reported Performance the Performance the Buyer Is Buying?

Financial due diligence tests historical earnings, cash flow, balance-sheet quality and the assumptions used to bridge historical performance into the valuation model.

revenue recognition;
gross margins;
customer and product profitability;
one-off income and expenses;
owner or related-party items;
provisions and contingencies;
capitalised costs;
working-capital trends;
cash conversion;
debt and debt-like obligations;
capital expenditure;
tax cash flows;
seasonality;
forecast track record.

The goal is not to restate the audit. An audit asks whether financial statements are fairly presented under the applicable reporting framework. Transaction diligence asks a different question: what is the sustainable economic performance and what cash obligations will the buyer inherit?

Quality of Earnings: From Reported EBITDA to Sustainable EBITDA

Many acquisitions use EBITDA or another operating measure as a valuation anchor. That makes normalisation important.

Suppose reported EBITDA is S$20 million. Management adds back S$3 million of “one-off” restructuring cost, S$2 million of founder expenses and S$1 million of litigation expense, producing adjusted EBITDA of S$26 million.

Diligence then asks:

Does restructuring recur every year?
Will founder expenses actually disappear under the buyer?
Is litigation truly exceptional or part of normal industry risk?
Were temporary supplier rebates inflating gross margin?
Was maintenance deferred before sale?
Were bonuses under-accrued?
Were losses capitalised instead of expensed?
Did a large customer place an unusual order before year end?

If sustainable EBITDA is only S$22 million, a valuation based on 10× EBITDA is potentially S$40 million lower than one built on S$26 million. A seemingly small accounting adjustment can therefore move transaction value materially.

The conceptual owners are Durable Earnings, Adjusted Earnings and Profit Quality.

Working Capital and Debt-Like Items

Private-company acquisitions frequently use a cash-free, debt-free enterprise-value framework with an agreed normal level of working capital. Diligence determines whether the target is actually delivering that normal operating balance sheet at closing.

Key tests include:

receivables ageing and collectability;
inventory quality and obsolescence;
supplier payment timing;
customer deposits and deferred revenue;
accrued bonuses and payroll;
unpaid capital expenditure;
leases or guarantees that behave like debt;
factoring and invoice-finance arrangements;
tax liabilities;
litigation or environmental obligations;
related-party balances;
off-balance-sheet commitments.

The concept is simple: the buyer should not pay an enterprise value that assumes a normal operating business and then discover that additional cash must be injected immediately after closing to restore inventory, pay overdue suppliers or settle obligations that economically belonged to the seller period.

See Working Capital, Hidden Liabilities and Market Capitalisation vs Enterprise Value.

Commercial Due Diligence: Does the Market Support the Forecast?

Commercial diligence moves outside the accounting records and asks whether customers, competition, market structure and demand support the target’s growth story.

market size and growth;
customer needs and switching behaviour;
competitive position;
pricing power;
product differentiation;
sales pipeline quality;
renewal behaviour;
customer concentration;
distribution strength;
new entrants;
substitution risk;
regulatory or technology disruption.

A financial model can forecast 15% annual growth because management believes the market is large. Commercial diligence asks whether the sales organisation, product, competitive position and customer evidence make 15% plausible.

Customers, Concentration and Churn

Customer quality is often one of the most important hidden dimensions of a transaction.

Suppose a target reports S$100 million of annual revenue. That sounds diversified until diligence reveals that one customer contributes S$30 million and the top five contribute S$65 million. If the largest customer’s contract renews every year and contains a change-of-control termination right, the acquisition case depends on a relationship the buyer does not fully control.

Diligence should inspect:

revenue by customer;
gross profit by customer;
contract length;
renewal dates;
termination rights;
change-of-control clauses;
churn by cohort;
pricing and discount history;
sales concentration by salesperson;
customer satisfaction and complaints;
pipeline conversion;
customer dependencies on particular staff or products.

A company can have excellent historical revenue and poor future durability if the customer base is concentrated, under-contractualised or highly price-sensitive.

Legal Due Diligence: What Rights and Obligations Actually Exist?

Legal diligence maps the target’s corporate existence, ownership, contracts, claims and obligations. The exact scope depends on jurisdiction and industry, but common areas include:

corporate records and share ownership;
constitutional documents;
material customer and supplier contracts;
financing agreements;
security interests;
leases;
employment agreements;
litigation and disputes;
intellectual-property ownership;
privacy and data obligations;
licences and permits;
insurance;
compliance policies;
sanctions and anti-bribery controls where relevant.

The core question is whether the rights used in the valuation survive the transaction and whether obligations outside the valuation can follow the target into the buyer’s ownership.

A contract can be commercially valuable yet legally fragile if it cannot be assigned or can terminate on change of control. A licence can be critical yet non-transferable. A guarantee can remain enforceable even if the accounting balance is small.

Tax Due Diligence: Historic Liability Can Become Future Cash Outflow

Tax diligence examines whether tax filings, positions, structures and exposures could affect price, cash flow, transaction structure or post-close risk.

corporate income tax;
GST/VAT/sales tax;
payroll and employment taxes;
withholding tax;
transfer pricing;
property and stamp duties;
tax losses and attributes;
cross-border structures;
open audits and disputes;
change-of-control limitations;
transaction taxes.

The important distinction is between a tax number on a return and the economic cash exposure the buyer could inherit. A historic position can become a post-closing assessment years later.

Because tax law is jurisdiction-specific and frequently technical, this area requires qualified professional analysis rather than generic rules.

Operational Due Diligence: Can the Business Actually Keep Doing the Work?

Operational diligence tests the machinery beneath the financial statements.

capacity utilisation;
production bottlenecks;
maintenance backlog;
quality systems;
supplier dependency;
inventory planning;
logistics;
service levels;
business continuity;
site condition;
health and safety;
capital-expenditure requirements;
process documentation;
operational controls.

A target can report high margins because maintenance was deferred before sale. Equipment can look productive while failure rates are rising. Warehouse inventory can support revenue while obsolescence is hidden in slow-moving stock. The buyer needs to know whether the historical earnings were produced by a sustainable operating system or by consuming tomorrow’s capability.

This connects to Maintenance Capex vs Growth Capex.

Technology and Cyber Due Diligence

Technology can be an asset, a dependency or a hidden liability. A software business can be worth hundreds of millions while the buyer later discovers fragile architecture, unsupported code, unresolved vulnerabilities or intellectual property contributed by contractors without clear assignment.

Technology diligence can include:

architecture and scalability;
technical debt;
software-development practices;
source-code ownership;
open-source licence compliance;
cyber incidents;
penetration testing and vulnerability management;
identity and access control;
backup and recovery;
cloud dependencies;
third-party software;
data quality;
privacy obligations;
technology headcount and key-person dependency;
planned platform replacement costs.

A technology problem matters financially when it changes future cash flow, capex, customer retention, regulatory exposure or the ability to achieve M&A Synergies.

People, Incentives and Key-Person Risk

Some companies are less transferable than they appear because their value is concentrated in particular people.

A founder may personally hold customer relationships. One engineer may understand the architecture. One regulator-facing employee may carry years of institutional knowledge. One sales leader may generate a disproportionate share of new business.

People diligence asks:

Who is critical to revenue, technology, operations or licences?
What are their contracts?
What happens to compensation after closing?
Who has change-of-control payments?
Who is likely to leave?
Which teams are already understaffed?
How high is voluntary turnover?
Are incentives aligned with the post-close plan?
Are there material employment claims?
Is culture compatible with the integration model?

Retention packages can therefore be part of acquisition cost even when they do not appear in headline purchase price.

Regulatory and Licence Diligence

Some businesses exist because law permits them to perform a regulated activity. Their licences, approvals, reporting obligations or ownership restrictions can therefore be part of the core asset.

Diligence may need to examine:

licence validity;
change-of-control approval;
foreign-ownership restrictions;
competition clearance;
capital requirements;
conduct obligations;
data or privacy regulation;
sector-specific safety rules;
reporting history;
regulatory investigations;
conditions attached to permits.

A target can be commercially strong yet impossible to operate under the buyer’s intended structure if required approvals cannot be obtained.

Environmental, Safety and Contingent Exposure

Physical businesses can carry obligations that are invisible in a clean revenue chart: contaminated land, hazardous materials, decommissioning duties, worker-safety claims, product recalls or remediation commitments.

The transaction question is not merely whether the liability is booked. It is whether the buyer can become economically responsible after acquiring the entity or asset.

This is why Contingent Liabilities belong inside M&A diligence.

Intellectual Property: Does the Target Own What the Buyer Thinks It Owns?

Technology, brands, designs, know-how, databases, content and patents can be central to a target’s value. Diligence tests ownership, registration, licences, employee and contractor assignment, infringement claims and restrictions on use.

A familiar risk appears when contractors built key software but the contract did not clearly assign intellectual-property rights to the target. Another appears when a brand is licensed rather than owned and the licence terminates on change of control.

These issues can convert a supposedly proprietary asset into a temporary or disputed right.

Suppliers and Dependency Risk

Customer concentration receives attention because it threatens revenue. Supplier concentration can be just as important because it threatens the ability to produce.

Diligence should identify:

single-source suppliers;
critical components;
long lead times;
price-reset clauses;
minimum purchase obligations;
supplier financial weakness;
geographic concentration;
sanctions or trade exposure;
change-of-control rights;
quality issues;
inventory buffers.

A company can appear profitable because one supplier has not repriced an old contract. If that contract resets shortly after closing, the buyer may inherit a structurally lower margin than the historical accounts suggest.

Red Flags: Signals That Deserve Deeper Testing

A red flag is not automatically a reason to abandon a deal. It is a signal that the risk deserves explicit resolution before the buyer treats the business as understood.

rapid revenue growth with worsening cash conversion;
large manual journal entries near period end;
many recurring “one-off” adjustments;
material customer concentration;
short or terminable customer contracts;
unusual related-party transactions;
aggressive revenue recognition;
deferred maintenance;
missing contract amendments;
unresolved tax audits;
poor cybersecurity controls;
core IP owned by founders or contractors rather than the target;
unrecorded guarantees;
supplier dependence with no alternative source;
high employee turnover;
key-person concentration;
regulatory permissions that do not clearly survive change of control;
data-room delays or inconsistent answers to the same question.

The strongest red flag is often not the underlying problem but the mismatch between what management said and what the evidence shows. That can change the buyer’s confidence in every other representation.

How Due Diligence Changes the Deal

Diligence creates value only if findings change action. A report that identifies risk but does not alter price, structure, protection or integration is merely descriptive.

Diligence finding	Possible transaction response
Sustainable EBITDA lower than expected	Lower valuation
Customer renewal uncertain	Earn-out or contingent consideration
Tax exposure	Specific indemnity, escrow or price reduction
Working capital below normal	Closing working-capital adjustment
Debt-like obligation discovered	Equity-value bridge adjustment
Key employee likely to leave	Retention package or closing condition
Cyber weakness	Pre-close remediation, capex reserve or price adjustment
Regulatory approval uncertain	Conditional closing or transaction restructuring
IP ownership unclear	Assignment required before close

This is where due diligence reconnects to Financial Contracts. The agreement becomes the mechanism for allocating risks identified before closing.

When Diligence Should Stop the Transaction

Not every risk can be priced. Some risks destroy the reason for doing the acquisition at all.

The target does not own the core asset or IP.
The licence necessary to operate cannot survive the transaction.
The largest customer intends to leave.
Key talent will not remain and cannot be replaced.
Management credibility collapses because material facts were concealed.
Financial statements materially misrepresent the business.
Required regulatory approval is highly unlikely.
A safety, legal or environmental exposure is too uncertain to bound.
The synergy case depends on integration actions that are not operationally feasible.
The price cannot be reduced enough to restore a positive risk-adjusted acquisition NPV.

A buyer should not keep a broken transaction alive merely because substantial diligence fees have already been spent. Those are sunk costs. The forward decision is whether proceeding from today creates value.

Due Diligence Should Prepare Integration, Not End at Signing

The best diligence findings become the first integration priorities.

Customer concentration becomes a retention plan.
Key-person dependency becomes a retention and knowledge-transfer plan.
Cyber weakness becomes a remediation plan.
Working-capital weakness becomes a Day-1 cash-control plan.
Supplier concentration becomes a sourcing-resilience plan.
Deferred maintenance becomes a post-close capex plan.
Licence risk becomes a regulatory action plan.
System incompatibility becomes an integration roadmap.

This matters because the acquisition price is paid at closing, while most of the value is realised afterward. Diligence should therefore hand the buyer an operating map, not merely a transaction archive.

Worked Due-Diligence Example

Assume BuyerCo is considering TargetCo at an enterprise value of S$240 million, based on 10× adjusted EBITDA of S$24 million.

Initial investment case:

reported EBITDA: S$21 million;
management adjustments: +S$3 million;
adjusted EBITDA: S$24 million;
enterprise value: S$240 million;
expected synergy NPV: S$35 million;
premium already embedded in negotiated price: S$20 million.

Diligence finds:

S$1.5 million of the adjustment recurs annually and should not be added back;
one customer representing 22% of revenue has given notice that it will retender;
S$6 million of maintenance capex has been deferred;
normal working capital is S$4 million higher than the seller’s proposed target;
a software migration required for synergy will cost S$3 million more than budgeted;
the target has an unresolved S$2 million tax exposure.

Normalised EBITDA falls from S$24 million to S$22.5 million. At the same 10× multiple, standalone enterprise value falls by S$15 million. Deferred maintenance reduces economic value further. The working-capital shortfall changes the closing adjustment. The tax exposure may require specific protection. The higher integration cost reduces synergy NPV.

The buyer might still proceed—but not on the original economics. Due diligence has changed the object being priced.

The target did not become worse during diligence. The buyer became more accurate about what the target already was.

A Practical M&A Due-Diligence Workflow

Start with the investment thesis and identify the assumptions that justify the price.
Define materiality by value, operability, legal exposure and strategic importance.
Build a diligence request list tied to those assumptions.
Create a controlled evidence trail through the data room and Q&A process.
Reconcile financial data to source records and statements.
Normalise sustainable earnings.
Test working capital, debt and debt-like obligations.
Test customer concentration, churn, pipeline and competitive position.
Review material contracts, litigation, IP, licences and change-of-control rights.
Review tax exposures and transaction-structure implications.
Test operations, maintenance, suppliers, safety and capex requirements.
Test technology architecture, cyber controls, data and software ownership.
Identify key employees, retention risk and incentive conflicts.
Map regulatory approvals and closing conditions.
Convert every material finding into a valuation, structure, contract or integration consequence.
Recalculate acquisition NPV and synergy NPV.
Run sensitivity on the newly discovered load-bearing risks.
Decide whether to proceed, reprice, restructure, require remediation or walk away.
Transfer material diligence findings into the post-close integration plan.
Audit the acquired business after closing against the assumptions validated during diligence.

The World Return: Did the Evidence Improve the Decision?

Due diligence is not successful because thousands of documents were reviewed. It is successful when evidence changes the buyer’s understanding before irreversible capital is committed.

The World Return asks whether the process prevented overpayment, exposed a hidden liability, preserved a critical customer, identified a key employee, changed the integration plan, strengthened contract protection—or stopped a transaction that should never have closed.

After closing, the same logic continues. Did the risks identified during diligence actually appear? Were the mitigations effective? Did the normalised earnings prove accurate? Did the customer base behave as expected? Did the technology migration cost what was forecast?

Due diligence is valuable when better evidence produces a better capital-allocation decision before the future becomes expensive to reverse.

Observable Mastery Test

You understand M&A due diligence if you can trace:

investment thesis → valuation assumption → evidence request → source record → diligence finding → materiality → financial / legal / operational implication → price or structure response → closing protection → integration action → realised World Return.