Due diligence checklist for buying a business | Xero

Published Wednesday 4 March 2026

Table of contents

• What is due diligence when buying a business?
• Why is due diligence important?
• Essential due diligence checklists before buying a business
• Key documents to review during due diligence
• How to conduct due diligence step-by-step
• Do your due diligence right
• Complete your due diligence with confidence
• FAQs on buying a business

Key takeaways

• Conduct thorough financial due diligence by examining three to five years of tax returns, financial statements, and cash flow records to verify the business's true earning potential and identify hidden debts or liabilities.
• Engage professional advisors including an accountant and lawyer early in the process, as their expertise helps catch critical issues you might miss and the cost of professional advice is far less than the cost of overlooking serious problems.
• Take adequate time for the due diligence process, typically 30 to 90 days depending on business complexity, as rushing through this investigation is the most common mistake buyers make.
• Watch for red flags such as inconsistent financial records, reluctance from sellers to share information, heavy reliance on one or two key customers, or pending legal issues that warrant deeper investigation or deal reconsideration.

What is due diligence when buying a business?

Due diligence is your practical research and analysis to verify that a business is what it claims to be before you buy it. This investigation confirms the business has measurable commercial potential and aligns with your goals.

It's your pre-purchase checklist. Thorough due diligence gives you the confidence to proceed, renegotiate, or walk away. Whether you're buying an online business, a small business, or a larger company, don't skip this step.

Why is due diligence important?

Due diligence protects you from costly surprises after you sign the deal. While sellers must accurately represent their business, verifying those details is your responsibility.

Skipping due diligence puts you at risk of missing:

• Financial risks: hidden liabilities, overstated earnings, or unreported debts
• Tax issues: undisclosed tax implications or unreliable revenue sources
• Legal problems: regulatory non-compliance that could result in fines or business closure, with one survey revealing that 26% of companies abandon half or more of deals due to compliance issues.
• Operational weaknesses: outdated systems, inefficient processes, or fragile supplier relationships
• Reputation concerns: hidden market weaknesses or damaged brand perception

Get expert advice from a lawyer and accountant, especially for legal and financial matters.

Essential due diligence checklists before buying a business

These checklists cover the five core areas you need to investigate before buying a business: financial health, legal standing, operations, market position, and regulatory compliance.

Financial due diligence

Financial due diligence verifies the business's true financial health and earning potential. This is often the most critical part of your investigation.

• Review historical records: Examine three to five years of tax returns, financial statements, cash flow records, and profit and loss statements
• Confirm tax compliance: Verify the business meets all tax obligations and identify any outstanding liabilities
• Check for debts: Identify outstanding loans, accounts payable, and other financial obligations
• Analyse cash flow: Assess current cash position and growth potential
• Investigate revenue trends: Compare performance against industry projections and benchmarks

Legal due diligence

Legal due diligence examines the company's legal standing, contractual obligations, and any current or past litigation.

• Review all contracts: Examine supply, customer, employee, and operational agreements, plus leases and licences
• Verify intellectual property: Confirm ownership of patents, trademarks, copyrights, business name registration, and domain names, as these intangible assets can comprise over 80% of enterprise value in large companies.
• Investigate litigation history: Identify past, pending, or threatened lawsuits and legal disputes

Operational due diligence

Operational due diligence assesses whether the business can continue running smoothly after you take over.

• Review strategy documents: Examine business plans and growth strategies
• Evaluate management and staff: Assess organisational structure, key personnel, and HR processes
• Assess key relationships: Review customer retention rates and supplier contract terms
• Inspect assets and equipment: Check age, condition, maintenance schedules, and repair needs
• Examine technology systems: Verify that infrastructure, software, and data security are current and scalable, as a single data breach can cost a company an average of $4.45 million.

Market position and competitive analysis

Market position analysis helps you understand the business's true value so you don't overpay. This category examines how the business reaches customers, where it stands against competitors, and its opportunities for growth.

• Review market strategy: Examine marketing plans and performance reports
• Assess online presence: Check search rankings, advertising campaigns, and social media engagement
• Analyse competitors: Identify the business's strengths, weaknesses, and market position
• Evaluate customer acquisition: Understand how the business attracts and retains customers
• Review customer feedback: Examine records, reviews, and satisfaction data

Regulatory and compliance

Regulatory and compliance due diligence confirms the business meets all legal obligations and statutory requirements. Laws vary by industry, country, and region, so this step is essential.

• Review industry regulations: Identify specific compliance obligations for the business's sector
• Verify licences and permits: Confirm all required approvals are current and transferable
• Check tax compliance: Examine tax records, liabilities, and adherence to local and international tax laws
• Assess workplace compliance: Review employment agreements, conditions, and employee entitlements
• Investigate environmental obligations: Check for liabilities related to waste management, pollution, or hazardous materials

Key documents to review during due diligence

Completing due diligence requires collecting and reviewing financial records, contracts, legal documentation, sales reports, and customer records. The specific documents you need may vary by industry and location.

Work with an accountant, lawyer, or broker to make sure you've covered everything.

Financial and tax

• Tax returns (three–five years)
• Profit and loss statements (three–five years)
• Balance sheets (three–five years)
• Audit reports
• Business credit reports
• Bank loans or other finance
• Leases
• Sales records
• Business valuation(s)

Equipment, assets, and stock

• Plant, equipment, or vehicle leases
• Maintenance records
• Other assets owned or leased
• Outstanding debts to suppliers
• Stock
• Software licences

Legal

• Insurance contracts
• Regulations or compliance issues
• Legal proceedings
• Mandatory codes of practice
• Business standards and procedures
• Legal agreements for directors, partners, or shareholders
• Privacy requirements
• Data management processes

Operations

• Business plans and other strategy documents
• Staff contracts, awards, entitlements, and insurances
• Staff induction and training records
• Licences and permits required to run the business
• Policies and procedures
• Supplier contracts
• Voluntary codes of conduct
• Minutes of management meetings
• Marketing campaign strategy documents
• Branding strategy and guidelines

Intellectual property

• Trademarks
• Patents
• Copyright
• Branding
• Registered designs
• Business registration
• Domain registration

How to conduct due diligence step-by-step

Having a checklist is only the first step. Here's how to actually execute the due diligence process.

1. Organise your process: Set up a system to track documents, findings, and questions. Create folders for each due diligence category.
2. Request documents from the seller: Provide a clear list of everything you need. Set reasonable deadlines and follow up promptly.
3. Review financial records systematically: Start with the most recent years and work backwards. Flag any inconsistencies or concerns.
4. Investigate legal and compliance issues: Verify contracts are transferable and check for any pending disputes or regulatory problems.
5. Assess operations and visit the business: Observe daily operations, meet key staff, and inspect equipment and premises in person.
6. Engage professional advisors: Have your accountant review financials and your lawyer examine contracts. Their expertise catches what you might miss.
7. Compile your findings and decide: Document everything you've learned, weigh the risks against the opportunity, and decide whether to proceed, renegotiate, or walk away.

Do your due diligence right

Proper business due diligence takes patience, care, and an expert eye. Here's how to get it right.

• Take your time: Due diligence typically takes weeks or months, depending on the business's size and complexity. Rushing is the most common mistake buyers make.
• Get expert advice: Work with an accountant, lawyer, and broker. The cost of missing something important far outweighs professional fees.
• Engage specialists for the purchase: Financial experts can draft the purchase agreement and guide you through legal technicalities. Find advisors in the advisor directory.
• Consider culture and operations: Make sure the business's existing culture aligns with your values, goals, and management style.

Complete your due diligence with confidence

Once your due diligence is complete, you can move forward with confidence. Managing your new business's finances from day one is key to its success. Xero gives you the tools to track expenses, monitor cash flow, and keep your books organised. Let Xero make running your new business easy. Get one month free.

FAQs on buying a business

Here are answers to common questions about due diligence when buying a business.

What are the advantages of buying a business?

Buying an existing business lets you skip much of the work required to build from scratch.

• Established foundations: You inherit a customer base, brand reputation, revenue streams, and supplier relationships
• Lower startup costs: You avoid expenses for premises, initial stock, and building a team from zero
• Proven concept: The business model already works, and you may gain valuable intellectual property
• Easier financing: Lenders often prefer established businesses with track records

What documents are needed for due diligence?

Request financial statements, tax returns, and profit and loss reports for the past three to five years. You'll also need contracts, licences, employee records, asset lists, and any legal documentation. The specific documents vary by industry, so work with your accountant and lawyer to create a complete list.

How long does due diligence typically take?

Due diligence typically takes 30 to 90 days, though the timeline depends on the business's size and complexity. For example, while smaller transactions may take 45 to 60 days, larger deals can take 60 to 180 days or more. Smaller businesses with straightforward operations may take a few weeks. Larger or more complex acquisitions can take several months. Don't rush the process to meet an arbitrary deadline.

Do I need to hire professionals for due diligence?

Yes, you should engage an accountant and lawyer at minimum. An accountant verifies financial records and identifies tax issues. A lawyer reviews contracts and flags legal risks. The cost of professional advice is far less than the cost of missing a serious problem. You may also benefit from a business broker or industry specialist for complex acquisitions.

What are common red flags during due diligence?

Watch for these warning signs:

• Inconsistent financial records: numbers that don't match across documents or unexplained fluctuations
• Reluctance to share information: sellers who delay, avoid questions, or provide incomplete documents
• Key customer concentration: heavy reliance on one or two customers for most revenue, which is why legal due diligence checklists recommend reviewing agreements with customers making up the top 10% of revenues.
• Pending legal issues: undisclosed lawsuits, regulatory problems, or contract disputes
• High staff turnover: frequent departures may signal management problems or poor workplace culture

Any of these issues warrant deeper investigation or reconsideration of the deal.