Due diligence can make or break a tech company sale. Here's exactly how to prepare your financials, data room, and operations to get a deal closed.
Most founders spend years building a business worth selling, then lose weeks or months in due diligence because they weren't ready for the questions a buyer would ask. Some deals fall apart entirely. Others close at a lower price than the letter of intent promised, because the buyer found things in diligence they hadn't priced in.
The good news: due diligence is almost entirely predictable. Buyers ask largely the same questions every time. The financial, legal, operational, and commercial workstreams follow a pattern. If you know what's coming and prepare for it in advance, you compress the timeline, protect your valuation, and signal to the buyer that you run a tight organization worth paying for.
This guide walks through every major workstream in a technology or SaaS company due diligence process, what buyers actually care about at each stage, and how to organize yourself so nothing falls through the cracks.
What Is Due Diligence and Why Does It Matter So Much in Tech M&A?
Due diligence is the formal investigative process a buyer conducts after signing a letter of intent. Before they wire money, they want to verify that what you told them in the sales process is actually true. They'll look at three to five years of financials, every material contract, your cap table, your code, your customer relationships, and your team.
In technology deals, diligence typically runs 60 to 90 days for a private equity buyer and 45 to 75 days for a strategic acquirer. During that window, you are still running your business. Your CFO is pulling reports for the buyer's accounting firm. Your CTO is answering questions from a technical diligence team. You are negotiating working-capital pegs, escrow amounts, and rep-and-warranty insurance simultaneously.
Deals that close fast and clean almost always start with a seller who treated diligence preparation as a project, not an afterthought. Deals that drag or reprice usually have one thing in common: the seller was surprised by questions they should have anticipated.
How Should You Organize Your Data Room?
A data room is a secure, access-controlled digital repository where all deal documents live. Most transactions today use platforms like Datasite, Intralinks, or even a well-structured Dropbox or SharePoint. The platform matters less than the organization.
Structure the Folder Hierarchy Around Workstreams
Buyers run parallel workstreams, typically financial, legal, tax, technical, commercial, and HR. Your data room should mirror that structure. When the buyer's accounting firm logs in, they should find a Financial folder with clearly labeled subfolders. When the legal team arrives, the Legal folder should contain organized subfolders for corporate documents, contracts, IP, and litigation.
A messy data room signals a messy business. Buyers and their advisors spend hundreds of hours in the data room. If they can't find what they need, they submit more information requests, the process drags, and their confidence in your organization erodes.
What to Load Before the Process Even Starts
- Three to five years of audited or reviewed financial statements, plus the most recent trailing twelve months
- Monthly P&L, balance sheet, and cash flow statements for the last 24-36 months
- Customer-level revenue data showing ARR, MRR, contract start and end dates, and renewal history
- All material contracts with customers, vendors, and partners, fully executed with amendments
- Corporate documents: certificate of incorporation, bylaws, board minutes, cap table (fully diluted), and any shareholder agreements
- Intellectual property registrations, patent filings, trademark certificates, and software ownership documentation
- Employee roster with titles, compensation, start dates, and any outstanding equity grants
- Tax returns for the last three to five years, plus any open audit correspondence
- Any pending or threatened litigation, regulatory correspondence, or compliance issues
Getting 80% of this loaded before you send the first information request back to a buyer saves weeks. It also tells the buyer they are dealing with a professional operator.
What Do Buyers Actually Scrutinize in Financial Due Diligence?
Financial diligence is the most intensive workstream for most deals. A buyer's accounting firm will conduct a quality of earnings analysis, or QofE, which recasts your financials to identify the true, normalized EBITDA or free cash flow of the business. This is where valuation gets defended or eroded.
Quality of Earnings: Where Valuation Gets Made or Broken
A QofE typically adjusts for one-time expenses, owner compensation above market rates, personal expenses run through the business, non-recurring revenue, and any accounting policies that inflate reported earnings. If your LOI was signed at 7x EBITDA based on $3M in adjusted EBITDA, and the QofE comes back showing $2.6M in normalized EBITDA after addbacks are scrutinized, the buyer will almost certainly reprice.
The cleanest thing a founder can do is commission a sell-side QofE before going to market. A credible accounting firm, not your tax accountant, runs through your books and produces the same document a buyer would produce. You find the issues first. You have time to address them or frame them properly. You walk into diligence with a pre-built financial narrative rather than reacting defensively to a buyer's findings.
Revenue Quality and Customer Concentration
For SaaS businesses, buyers pay specific attention to ARR composition, net revenue retention, churn, and customer concentration. If your top customer represents 25% or more of revenue, expect significant scrutiny, possible escrow provisions, and in some cases an earn-out tied to that customer renewing post-close. If you have net revenue retention above 110%, that is a genuinely valuable data point. Quantify it and present it clearly.
Buyers will also test revenue recognition. If you recognize revenue upfront on multi-year contracts that should be spread ratably, that creates both an accounting issue and a cash flow mismatch the buyer needs to understand. Get clean on your revenue recognition policy before diligence starts.
What Legal and Compliance Issues Can Kill a Deal?
Legal diligence surfaces issues that can either kill a deal outright or shift significant value to the buyer through price reductions, indemnity provisions, or escrow holdbacks. The most common problem areas in technology company transactions are not dramatic lawsuits. They are usually mundane oversights that compound into real dollar exposure.
Intellectual Property Ownership
Every line of code your company sells needs to be owned by the company, not by a contractor who never signed an IP assignment agreement, not by a co-founder who left in 2019 without a proper separation and IP transfer, and not by an open-source component that carries a license incompatible with commercial distribution. A technical and legal IP audit before the process starts is one of the highest-ROI things a founder can do. Finding a gap in IP ownership two weeks before closing is a nightmare. Finding it six months before you go to market gives you time to fix it cleanly.
Contracts and Change-of-Control Provisions
Many enterprise contracts contain change-of-control clauses that require customer consent before an acquisition can close. If you have 40 enterprise customers and 15 of them have these provisions, you or your buyer may need to get written consents from those customers before the deal closes. That takes time and sometimes gives customers leverage to renegotiate pricing. Know what's in your contracts before a buyer finds it first.
Employment and Equity Issues
Buyers will review every offer letter, employment agreement, and equity grant. Unvested options, acceleration provisions, and change-of-control bonuses all affect the economics of the deal and the buyer's understanding of post-close retention costs. Make sure your cap table is accurate and reconciles to your option plan documents. Discrepancies between what your cap table says and what your corporate documents say are surprisingly common and take real legal time to resolve.
How Do Buyers Evaluate Operational Strength?
Financial and legal diligence answers whether your numbers are real and clean. Operational diligence answers whether the business can run without you, whether the technology is sustainable, and whether the growth story holds up.
Key Person Risk
Private equity buyers in particular are acutely focused on whether the business can survive and grow without the founding CEO in the seat. If you are the primary sales relationship with your top three customers, the lead architect on the core product, and the person who approves every vendor payment, that is key person risk. It doesn't necessarily kill a deal, but it shapes deal structure. You may be asked to commit to a two-to-three year post-close management role, accept a larger escrow, or take a meaningful portion of proceeds in rollover equity rather than cash at close.
Technology Infrastructure and Scalability
Technical diligence has become a standard workstream in nearly all software M&A transactions above $10M in enterprise value. A buyer's technical team will review code quality, architecture, infrastructure costs, security posture, and technical debt. Be honest with yourself about where the bodies are buried. A monolithic architecture that was fine at $2M ARR but will require a six-month re-platforming effort at $10M ARR is a real cost the buyer will need to account for. Surface it proactively with a mitigation plan rather than letting the buyer discover it and assume the worst.
Go-to-Market Documentation
Buyers want to understand how you acquire customers, what it costs, and whether that motion is repeatable without you personally. Have your customer acquisition cost, lifetime value, payback period, and sales cycle data ready. A clear, documented go-to-market playbook that a new leadership team could run is significantly more attractive to a buyer than a founder who says "I close deals through relationships."
How Does Due Diligence Affect Deal Structure and Final Price?
This is where founders often get caught off guard. The LOI is not the final price. It is an agreed starting point, subject to what diligence finds. Specific findings during diligence translate directly into price adjustments, structural changes, or both.
Common structural consequences of diligence findings include:
- Escrow holdbacks: Typically 10-15% of the purchase price held for 12-18 months post-close to cover indemnification claims. If diligence surfaces specific risks, buyers may push for a larger escrow or a longer holdback period.
- Earn-outs: If the buyer finds revenue concentration, customer churn risk, or a revenue growth rate that's harder to verify than originally represented, they may propose an earn-out tied to post-close performance. Earn-outs are common in deals between $10M and $75M, but they introduce real complexity and often pay out less than sellers expect.
- Working-capital pegs: The purchase price is typically adjusted up or down based on whether the business delivers a normalized level of working capital at close. If you don't understand how your working-capital peg was calculated and negotiate it carefully, you can effectively leave $500K to $2M on the table at a closing you thought was done.
- Representations and warranties insurance: Most deals above $25M now involve rep-and-warranty insurance, which shifts indemnification risk from the seller to an insurer. Underwriting this policy requires its own diligence process, and any issues found in the buyer's diligence that don't get coverage are typically excluded from the policy and remain the seller's problem.
The cleanest, best-prepared sellers almost always close at or near their LOI price. Sellers who go into diligence unprepared tend to see price chips, structural changes, or both.
How to Manage the Process Without Losing Your Business
Due diligence is a second full-time job layered on top of running your company. The typical seller is answering 50-100 information requests while simultaneously closing Q3, managing their team, and negotiating final purchase agreement language. People burn out. Businesses slip. And a business that shows softer financials in the months between LOI and close gives a buyer real ammunition to push for a price reduction.
The practical solution is to designate a deal captain inside your organization, typically your CFO or a trusted senior operator, who owns the data room, tracks open information requests, and manages the day-to-day flow of diligence. The CEO should stay focused on the business and handle only the highest-priority buyer interactions.
Working with an experienced M&A advisor also changes the dynamic significantly. FIH, for example, runs confidential processes for technology founders and maintains a 15,000+ buyer network, which means the right buyers are already at the table before diligence starts. Having an advisor manage information flow, push back on unreasonable requests, and keep the process on schedule is one of the few things that genuinely compresses timeline and reduces founder burnout.
Set expectations with your team early. They will feel the distraction. Key employees will start to wonder what's happening. Work with your advisor on a communication plan so you're not scrambling when someone asks a direct question.
Frequently Asked Questions
How long does due diligence take when selling a software company?
Most software company transactions run 60 to 90 days of active diligence after an LOI is signed, though well-prepared sellers with clean financials and organized data rooms sometimes close in 45 to 60 days. Strategic buyers often move faster than private equity firms, which typically require a formal quality-of-earnings process. Diligence can extend beyond 90 days when there are IP ownership issues, complex corporate structures, or regulatory complications to work through.
What is a quality of earnings report and do I need one before selling?
A quality of earnings report is a detailed financial analysis that recasts your reported earnings to show normalized, recurring EBITDA or free cash flow. Buyers commission one as part of their diligence, but sellers who commission a sell-side QofE before going to market enter the process with a defensible financial narrative already built. For any deal above $10M in enterprise value, a sell-side QofE is almost always worth the $25,000 to $60,000 cost in terms of time saved, credibility gained, and valuation protected.
What happens if a buyer finds problems during due diligence?
It depends on the severity. Minor issues, like missing contract signatures or small accounting adjustments, are usually resolved with updated documents or modest price tweaks. Significant issues, like undisclosed litigation, IP ownership gaps, or material customer churn discovered mid-process, can result in larger price reductions, bigger escrow holdbacks, added earn-out provisions, or in rare cases, a buyer walking away entirely. The best protection is finding issues yourself before the process starts so you can address or disclose them proactively.
How much of the purchase price is typically held in escrow?
Standard escrow holdbacks run 10-15% of the total purchase price and are held for 12-18 months post-close to cover indemnification claims under the purchase agreement. In deals with rep-and-warranty insurance, the seller-funded escrow is often reduced to 0.5-1% of deal value, since the insurance policy absorbs most of the indemnity exposure. Higher-risk deals, those with customer concentration, open litigation, or unresolved IP questions, tend to see larger escrows and longer holdback periods.
What is a working-capital peg and how does it affect what I take home?
A working-capital peg is a mechanism in most purchase agreements that adjusts the final purchase price up or down based on whether the business delivers a target level of working capital at close. The target is usually set based on your historical average working capital. If you deliver more than the target, you get a dollar-for-dollar price increase; if you deliver less, the price is reduced. Founders who don't pay close attention to how this peg is calculated and negotiated regularly discover a gap of $500K to $2M between their expected proceeds and actual closing proceeds.
Do I need to tell my employees about the sale during due diligence?
Generally, no, and most M&A advisors recommend keeping the circle of knowledge very small during diligence. Premature disclosure creates distraction, anxiety, and retention risk. That said, you will almost certainly need to loop in your CFO and possibly your CTO or general counsel to manage the diligence workload. Work with your advisor to develop a communication plan for the moment disclosure becomes necessary, typically just before or at closing.
Getting to the Finish Line
Due diligence is not the enemy of a good deal. Lack of preparation is. The founders who get the best outcomes treat diligence as a process they can prepare for, manage, and largely control, not something that happens to them. Clean financials, a well-organized data room, honest disclosure of known issues, and a designated internal point person who owns the process are the difference between a 60-day close at LOI price and a 120-day grind that ends with a repriced deal and an exhausted management team.
If you are a technology or software founder thinking about a sale in the next one to three years, the best time to start preparing for diligence is now, well before you are under LOI with a specific buyer. FIH works with founders on a confidential basis at any stage of that process, from early exit-readiness conversations to full sale execution. If you want an honest assessment of where your business stands and what a buyer would find, we're happy to have that conversation.