When an investor says “send us your due diligence package,” most business owners freeze. They scramble through folders, realize half their documents don’t exist, and lose the deal before it starts. A solid due diligence checklist isn’t just a formality — it’s the difference between closing a round and watching it slip away. If you’re preparing to raise capital, sell your business, or bring in a strategic partner, this guide will walk you through exactly what you need to have ready.
What Is Due Diligence and Why It Matters
Due diligence is the formal process by which investors, acquirers, or partners verify the claims a business makes about itself. Think of it as a structured audit — financial, legal, operational, and commercial — that happens before any transaction closes.
For investors, due diligence is risk management. For you as the business owner, it’s an opportunity to demonstrate credibility and command a stronger valuation. Businesses that walk into this process unprepared typically face one of three outcomes: the deal falls through, the valuation gets cut, or the timeline drags out so long that the investor loses interest.
The good news: most of what investors want to see is information you should already be tracking. The problem is that most SMB owners aren’t tracking it in investor-ready format.
Key Takeaways
| Area | What Investors Look For | Common Gap |
|---|---|---|
| Financials | 3 years of audited or reviewed statements | Cash-basis books, no management accounts |
| Legal | Clean cap table, no pending disputes | Informal agreements, missing contracts |
| Operations | Documented processes, key-person independence | Founder does everything, nothing written down |
| Commercial | Recurring revenue, customer concentration <20% | One customer = 60% of revenue |
| Team | Org chart, employment agreements, equity grants | Verbal agreements, undocumented equity |
Financial Documents Investors Require
The financial section is the most scrutinized part of any due diligence checklist. Investors will stress-test your numbers, model downside scenarios, and look for inconsistencies between what you’ve told them verbally and what the books actually show.
Historical Financial Statements
You’ll need at minimum three years of financial statements: income statement (P&L), balance sheet, and cash flow statement. Ideally, these are reviewed or audited by an independent CPA. If you’ve been running on cash-basis bookkeeping, you’ll need to convert to accrual-basis before presenting to institutional investors.
If your financials aren’t audit-ready, consider having a fractional CFO clean them up. The cost of this prep work is a fraction of what a valuation haircut would cost you. Learn more about how a fractional CFO can prepare your financials for investors.
Management Accounts and KPIs
Beyond statutory accounts, sophisticated investors want monthly management reports. These include: gross margin by product line, customer acquisition cost (CAC), lifetime value (LTV), churn rate (for subscription businesses), and revenue by channel. Tracking these before a raise — not after — demonstrates operational maturity.
If you’re not sure which metrics matter most, start with the 10 financial KPIs every business owner should track as a foundation.
Financial Projections
Investors expect a 3-year financial model with clearly documented assumptions. The model should include three scenarios (base, upside, downside) and show how the investment amount maps to specific milestones. Assumptions should be defensible — tied to actual historical conversion rates, contract values, and market data — not wishful thinking.
Your projections should also include a detailed cash flow forecast showing runway, burn rate (if pre-profitable), and break-even timeline.
Tax Returns and Compliance
Provide the last 3 years of corporate tax returns. Investors will cross-reference these with your financial statements to verify consistency. Any significant differences between book income and taxable income should be explained with supporting documentation.
Legal and Corporate Records
The legal section of a due diligence checklist often reveals surprises that derail deals — not because businesses are doing anything wrong, but because informal arrangements that “worked fine” for years suddenly become liabilities under investor scrutiny.
Corporate Structure and Ownership
You need a clean, up-to-date capitalization table (cap table) showing every shareholder, the number of shares they hold, the price paid, and the date acquired. Include any outstanding options, warrants, convertible notes, or SAFEs. Investors will also want to see your articles of incorporation, shareholder agreements, and any board resolutions authorizing previous equity issuances.
Contracts and Agreements
Compile all material contracts: customer agreements (especially those with minimum commitments or termination clauses), supplier contracts, lease agreements, partnership agreements, and any exclusivity arrangements. Investors pay particular attention to change-of-control clauses — provisions that allow the other party to exit the contract if ownership changes hands.
Intellectual Property
Document all IP: patents (granted and pending), trademarks, copyrights, trade secrets, and software. Confirm that the company — not individual employees or contractors — owns all IP. This is a common problem for tech companies: if a contractor built your core software without a proper IP assignment agreement, you don’t own what you think you own.
Litigation and Disputes
Disclose all current, pending, or threatened legal actions. Investors will find these in public records anyway, so transparency here builds trust. Also include any regulatory actions, government investigations, or compliance issues.
Operations and Team Documentation
Investors aren’t just buying past performance — they’re betting on future execution. That means they want to understand how your business actually runs, and whether it can run without you personally involved in every decision.
Organizational Structure
Provide a current org chart with names, titles, and reporting lines. Include headcount by department, whether employees are full-time or part-time, and where key roles are located (especially relevant for remote teams or international operations).
Employment Agreements and Compensation
Every senior employee and key contractor should have a written agreement covering: compensation, role and responsibilities, non-compete and non-solicitation clauses, IP assignment, and termination terms. Investors get nervous when they discover critical team members are working on handshakes.
Standard Operating Procedures
Documented processes signal a mature, scalable business. You don’t need to have every process documented on day one, but you should have written SOPs for: customer onboarding, service delivery, financial reporting, and any other revenue-critical workflows.
Commercial and Market Position
This section answers the question: “Is this business actually winning in its market?” Investors will want to validate your commercial claims with data.
Customer Analysis
Provide a customer list showing revenue by account for the last 12-24 months. Investors will immediately check for customer concentration risk — if one customer represents more than 20% of revenue, expect hard questions. Also include customer tenure, churn data, and Net Promoter Score if you track it.
Sales Pipeline and Pipeline Velocity
Share your CRM data: total pipeline value, average deal size, average sales cycle length, and win rate. This helps investors validate your revenue projections. If you’re projecting 40% growth but your win rate has been declining for three quarters, there’s a credibility gap to address.
Competitive Landscape
Show that you understand your market. Provide a competitive analysis comparing your offering against the top 3-5 competitors on dimensions that matter to customers: price, features, service quality, and market positioning. Be honest about where competitors have advantages — investors respect self-awareness and distrust founders who claim to have no real competition.
Common Red Flags That Kill Deals
Knowing what investors are looking for also means knowing what makes them walk away. Here are the most common issues that derail deals during due diligence:
| Red Flag | Why It Matters | How to Address It |
|---|---|---|
| Revenue recognition inconsistencies | Suggests inflated metrics | Restate revenue under proper accrual accounting |
| Undisclosed related-party transactions | Signals potential self-dealing | Document and disclose all founder/company transactions |
| Missing IP assignments | You may not own your product | Get retroactive IP assignments signed immediately |
| Key-person dependency | Business can’t operate without founder | Document processes, build second-tier management |
| Customer concentration >30% | Loss of one customer = existential crisis | Diversify revenue before raising, or explain mitigation plan |
| Unresolved litigation | Unknown liability exposure | Resolve or quantify — investors price in uncertainty |
Your Complete Due Diligence Checklist
Use this checklist to audit your readiness before approaching investors. Check off each item as you gather and organize the documents.
Financial Documents
- ☐ 3 years of P&L, balance sheet, and cash flow statements (accrual basis)
- ☐ Monthly management accounts for the last 24 months
- ☐ 3-year financial model with three scenarios and documented assumptions
- ☐ 12-month cash flow forecast with monthly detail
- ☐ 3 years of corporate tax returns
- ☐ Accounts receivable aging report
- ☐ Revenue by customer, by channel, and by product (last 24 months)
- ☐ Gross margin analysis by product or service line
- ☐ Key financial KPIs tracked monthly (CAC, LTV, churn, NRR)
Legal and Corporate
- ☐ Certificate of incorporation and articles
- ☐ Current, up-to-date cap table
- ☐ All shareholder agreements and board resolutions
- ☐ Employee and contractor agreements with IP assignment clauses
- ☐ All material customer contracts (especially MSAs and SOWs)
- ☐ Supplier and vendor contracts
- ☐ Lease agreements (office, equipment)
- ☐ IP registrations: patents, trademarks, copyrights
- ☐ Insurance policies (general liability, E&O, D&O)
- ☐ Any pending or threatened litigation disclosure
Operations and Team
- ☐ Current org chart with names and roles
- ☐ Compensation structure (base, bonus, equity) by role
- ☐ Key employee retention agreements or vesting schedules
- ☐ Standard operating procedures for core processes
- ☐ Technology stack documentation
- ☐ Data security and privacy compliance documentation (GDPR, SOC2, etc.)
Commercial and Market
- ☐ Customer list with revenue by account (last 24 months)
- ☐ Churn analysis and cohort data
- ☐ CRM pipeline report with pipeline velocity metrics
- ☐ Competitive landscape analysis
- ☐ Market size and growth data (TAM/SAM/SOM)
- ☐ Key customer references (3-5 customers willing to speak with investors)
Don’t Go Into Due Diligence Unprepared
Preparing a due diligence package is a 60-90 day process for most businesses — longer if there are gaps to fix. Starting this work after you’ve already received investor interest is too late. The best time to build investor-ready financials is before you need them.
At John Galt Finance, we help business owners build the financial infrastructure that makes them credible to investors. From cleaning up historical financials to building defensible 3-year models, we’ve prepared dozens of businesses for successful fundraises and exits.
Book a free consultation to find out where your due diligence gaps are and how to close them before the next investor conversation.
FAQ
How long does due diligence typically take?
For SMB deals ($1M–$20M), due diligence typically takes 4–10 weeks once a term sheet is signed. The timeline depends heavily on how organized your documentation is. Businesses that have a data room prepared in advance can compress this to 2–3 weeks. Businesses scrambling to gather documents often see timelines stretch to 3–4 months — during which investors may lose confidence or interest.
What is a data room and how do I set one up?
A data room is a secure digital repository (typically a shared folder or dedicated platform like Dropbox, Google Drive, or Datasite) where you organize all due diligence documents. Structure it with clear folders: Financials, Legal/Corporate, Operations, Commercial/Sales, and Team. Use consistent naming conventions and an index document that maps to your due diligence checklist. Keep all documents current and remove outdated versions.
Do I need audited financial statements?
It depends on the deal size and investor type. Institutional investors (PE firms, venture capital) typically require audited statements for businesses with revenue above $5M. Angel investors and strategic buyers often accept reviewed statements (a lighter-touch verification) or even compiled statements with a strong CPA relationship. For fundraises below $1M, well-organized QuickBooks exports can sometimes suffice — but always present accrual-basis financials.
What if my financials aren’t in great shape?
Messy financials are common, especially in businesses that grew fast without strong back-office infrastructure. The key is to address them proactively rather than hoping investors won’t notice. Investors almost always find issues during due diligence — the question is whether you disclosed them first (which builds trust) or they discovered them (which kills trust). Work with a CFO or financial advisor to restate and clean up your books before entering any investor process.
How is due diligence different for a fundraise vs. an acquisition?
The documents required are largely the same, but the focus differs. In a fundraise, investors focus more heavily on growth metrics, market opportunity, and the financial model — they’re buying future potential. In an acquisition, buyers focus more on historical cash flows, customer retention, and operational risks — they’re buying a proven asset. For acquisitions, legal due diligence (especially around IP, contracts, and liabilities) is typically more intensive than in early-stage fundraises.