Buying a business: due diligence checklist and expert steps
Learn how a due diligence checklist helps you spot risks, value the business, and buy with confidence.

Written by Lena Hanna—Trusted CPA Guidance on Accounting and Tax. Read Lena's full bio
Published Wednesday 22 April 2026
Table of contents
Key takeaways
- Review at least three to five years of financial records, including tax returns, profit and loss statements, and cash flow data, to confirm the business earns what the seller claims and has no hidden debts or liabilities.
- Check legal documents carefully, including contracts, licences, intellectual property rights, and any past or pending lawsuits, to avoid inheriting legal problems that could affect your ability to run the business.
- Hire a qualified accountant, lawyer, and business broker to guide your due diligence process, as the cost of professional advice is far lower than the financial damage of missing a critical issue.
- Never skip due diligence, regardless of the size of the business, because even small purchases can carry hidden debts, compliance failures, or operational problems that put your investment at serious risk.
What is due diligence when buying a business?
Due diligence is the process of investigating and verifying a business before you buy it. It confirms the business is what the seller claims, has real commercial potential, and matches your investment goals. This process helps you feel confident enough to move forward, negotiate better terms, or walk away entirely.
Whether you're buying an online business, small local company, or larger enterprise, due diligence protects your investment.
Why is due diligence important?
Due diligence protects you from costly mistakes and ensures you pay a fair price for a viable business. As the buyer, you're responsible for verifying everything the seller claims.
Thorough due diligence helps you avoid expensive surprises after closing:
- Financial risks such as undisclosed liabilities, overstated earnings, or unreported debts (failing to report all income may result in a 10% penalty on the unreported amount)
- Legal problems such as regulatory non-compliance, pending lawsuits, or tax issues
- Operational issues such as outdated systems, weak supplier relationships, or inefficient processes
- Market challenges such as hidden reputational problems or declining market position
Seek expert advice on your due diligence checklist, especially for legal and financial matters.
How to buy a business: key steps overview
Here's a roadmap of the key steps when buying a business:
- Define your goals and find the right business. Determine what you want from a business, including industry, size, and location. Search for businesses through brokers, online marketplaces, and your professional network.
- Assess the business and make an offer. Evaluate the business's value and potential. Work with your advisors to prepare and submit a letter of intent or initial offer.
- Conduct due diligence. Investigate the business's financials, legal standing, and operations to confirm its value and uncover potential risks.
- Secure financing. Arrange funding through a business loan, investors, or seller financing.
- Finalize the deal. Work with your lawyer to draft and negotiate the purchase agreement, which outlines all terms and conditions of the sale.
- Manage the transition. Transfer licences, communicate with employees and customers, and set up your new systems.
Essential due diligence checklists before buying a business
These checklists cover the five critical areas that help you determine whether a business is worth buying: financial, legal, operational, market position, and regulatory compliance.
Financial due diligence
Financial due diligence verifies how profitable the business truly is, its cash flow, and how financially stable it is. This process confirms the business generates the revenue and profits the seller claims.
- Review three to five years of tax returns and financial statements
- Examine cash flow records and sales figures
- Analyze profit and loss statements
- Assess assets and their value (note: understand relevant tax laws, such as the capital cost allowance Class 14.1, which replaced the eligible capital property system as of January 1, 2017)
- Confirm tax compliance and liabilities
- Check for outstanding debts
- Investigate revenue trends and industry projections
Legal due diligence
Legal due diligence protects you from inheriting legal problems and ensures all contracts and licences transfer properly. This process uncovers legal risks that could affect how you own or operate the business.
- Review all contracts and licences, including supply, customer, employee, and lease agreements
- Verify intellectual property rights, including patents, trademarks, copyrights, and trade secrets
- Confirm business name registration, domain registration, and brand ownership
- Investigate past or pending litigation and legal issues
Operational due diligence
Operational due diligence evaluates whether the business can continue running smoothly after you take over. This process examines the systems, processes, and how the business relates to others to stay profitable.
- Review business plans and strategy documents
- Evaluate management structures, staffing, and human resources
- Assess customer and supplier relationships and contracts
- Inspect business assets and equipment, including age, maintenance schedules, and repair needs
- Examine technology infrastructure, data security, and software systems
Market position and competitive analysis
Market position and competitive analysis help you determine whether the business can compete effectively and grow in its market. Analyzing these factors prevents you from overpaying for a business with limited growth potential or strong competitive threats.
- Review market strategy plans and performance reports
- Assess the business's online presence, including search rankings, ad campaigns, and marketing efforts
- Perform a competitor analysis to understand challenges, opportunities, and market strength
- Evaluate customer acquisition channels and customer loyalty
- Review customer records, feedback, and reviews
Regulatory and compliance
Regulatory and compliance due diligence protects you from fines, penalties, and being forced to close the business. This process verifies the business meets what the industry regulates, what licensing requires, and what the government obligates.
- Review industry-specific regulatory and compliance obligations
- Verify all licences, permits, and premises meet government requirements
- Confirm tax compliance status, including records and liabilities
- Assess compliance with workplace conditions, agreements, and employee entitlements
- Investigate environmental regulations and potential liability for managing waste, polluting, and handling hazardous materials
Note: The Canada Revenue Agency allows buyers acquiring at least 90% of the property needed to run the business to jointly elect for no GST or HST on the sale by filling in Form GST44.
Work with a lawyer and financial advisor to ensure you don't miss important details specific to your industry or location.
Key documents to review during due diligence
Reviewing documents gives you the evidence needed to verify every claim the seller makes about the business. Work with an accountant, lawyer, or business broker to ensure you collect all necessary documents for your industry and location.
Financial and tax
Request these documents to verify the business's financial health:
- tax returns for the past three to five years
- profit and loss statements for the past three to five years
- balance sheets for the past three to five years
- audit reports
- business credit reports
- bank loans or other finance agreements
- leases
- sales records
- business valuation(s)
Equipment, assets, and stock
Collect these documents to assess physical assets and inventory:
- plant, equipment, or vehicle leases
- maintenance records
- other assets owned or leased
- outstanding debts to suppliers
- stock records
- software licences
Legal
Gather these documents to verify legal standing and ownership:
- business registration and incorporation documents
- contracts with suppliers, customers, and employees
- lease agreements
- intellectual property documentation
- litigation records
- compliance certificates
FAQs on due diligence when buying a business
Here are answers to common questions about due diligence when buying a business.
How long does due diligence take?
Due diligence typically takes 30 to 90 days, depending on the business's complexity, size, and how quickly the seller provides documents. Simpler businesses may require less time, while larger enterprises with multiple locations or complex operations need longer.
What happens if due diligence reveals problems?
If due diligence uncovers issues, you have several options. You can negotiate a lower price to account for the risks, ask the seller to fix the problems before closing, restructure the deal terms, or walk away from the purchase entirely. Your purchase agreement should include contingencies that protect you.
Do I need professional help with due diligence?
Yes, working with professionals is essential. An accountant reviews financial records, a lawyer examines legal documents and contracts, and a business broker or consultant can guide you through the overall process. The cost of professional advice is far less than the potential losses from missing critical issues.
Can I skip due diligence for a small business purchase?
No, you should never skip due diligence regardless of business size. Even small businesses can have hidden debts, legal issues, or operational problems that make them poor investments. The smaller your purchase, the more devastating undiscovered problems can be to your financial situation.
Disclaimer
Xero does not provide accounting, tax, business or legal advice. This guide has been provided for information purposes only. You should consult your own professional advisors for advice directly relating to your business or before taking action in relation to any of the content provided.
Start using Xero for free
Access Xero features for 30 days, then decide which plan best suits your business.