Most owners treat the due diligence process as a formality - the box-checking stage that happens after the real deal is done. That assumption quietly costs sellers money. Due diligence is the phase where a buyer verifies every claim behind your asking price, and their findings routinely move the final number by 5 to 15%. It is also the longest paid stage of a sale: BizBuySell recorded a median time to close of 170 days for small businesses in 2025, and diligence eats a large share of that clock. Knowing what actually happens, and preparing for it, is often the difference between a full-price close and a renegotiation.
What the Due Diligence Process Really Is
Due diligence is the structured investigation a buyer runs to confirm that a target company is worth the agreed price - and to find the problems the seller did not mention. Whether the deal is a merger or acquisition, in any business transaction of this size the buyer's one real chance to test the story is before the money moves. Buyers conduct due diligence to evaluate potential risks the way an underwriter does, so it is fundamentally a risk management exercise aimed at surfacing anything that could reduce future cash flow or create liability after close.
The role of due diligence in business sales is simple to state and hard to survive: prove it or lose price. Skipping or rushing it is costly on both sides. Research cited in Harvard Business Review and echoed across decades of academic study finds that 70 to 90% of mergers and acquisitions fail to create the value buyers expected, with inadequate due diligence ranked among the top three causes - roughly 31% of failures, behind overpaying at 42% - according to a synthesis by Acquisition Stars. Every merger or acquisition rests on assumptions, and diligence is where those assumptions get tested against reality.
That is why the importance of due diligence runs in both directions. The process formally begins once both sides sign a letter of intent; if you are unclear on the loi meaning in m&a, that document opens the exclusivity window a buyer uses to investigate and gives them the negotiating position that comes with being your only active buyer during that window.
The Four Types of Due Diligence
Practitioners split the work into four workstreams, and each type of due diligence is led by a different specialist advisor (IB Interview Questions). The financial workstream usually sets the pace for the whole timeline, because the buyer's accountants need verified numbers before anyone finalizes a valuation.
| Type of due diligence | Typically led by | What it examines | Typical cost |
|---|---|---|---|
| Financial | Accounting firm or investment bank | Quality of earnings, working capital, financial statements | $25K to $1M+ (0.5-1.5% of deal value) |
| Legal | M&A attorneys | Contracts, litigation, intellectual property, change-of-control terms, liability | $100K to $500K+ |
| Operational | Buyer's operations team or consultants | Management depth, systems, supply chain, cybersecurity | Scales with complexity |
| Tax | Tax specialists or CPAs | Compliance, net operating losses, deal structure, exposure | $50K to $200K |
Source: IB Interview Questions, "The M&A Due Diligence Process"
Financial diligence centers on a Quality of Earnings analysis and the working-capital peg - the buyer wants a clear picture of the target's financial health, not just what the tax return shows. Legal diligence reviews contracts, litigation, corporate records, and intellectual property, along with change-of-control clauses and any hidden liability. Operational due diligence tests management depth, systems, supply-chain resilience, and operational inefficiency, while tax diligence confirms compliance, checks the usability of net operating losses, and pressure-tests deal structure. Larger or regulated buyers add commercial due diligence (market and customer validation), and increasingly separate ESG and cybersecurity reviews, on top of the core four.
Iconic, which has guided more than 200 businesses through a sale, typically sees the same pattern hold: clean, audit-ready financial statements are what let the other three workstreams move quickly, and gaps there slow everything else down.
How Long Does Due Diligence Take?
There is no single answer, but the benchmarks are reliable. For a clean middle-market deal, the due diligence process typically unfolds in five stages over about six weeks, or 30 to 45 business days, according to DealRoom: data room launch, first-pass functional review, management sessions and site visits, synthesis of findings, and final negotiations. The specialists who perform due diligence work in parallel, not in sequence, and much of the middle stretch is spent stress-testing the business model against the seller's projections.
That six-week figure describes an idealized, software-assisted case. In practice, timelines scale sharply with deal size. IB Interview Questions puts diligence at roughly 30 to 45 days for deals under $50 million, 45 to 90 days for deals between $50 and $500 million, and 90 to 180 days above $500 million; confirmatory diligence in a competitive auction can compress to two to four weeks.
The wider market has run slow. Diligence in the $5 million to $10 million segment averaged about 5.5 months in 2025 - a record high - per IBBA and M&A Source data cited by Calder Capital, and BizBuySell's 170-day median time to close in 2025 shows how much of a sale is spent in verification rather than negotiation.
Frequently Asked Questions
What is the due diligence process in M&A?
The due diligence process in M&A is the structured investigation a buyer runs after signing an LOI to verify a target company's financials, contracts, and operations before completing an acquisition. It usually covers four workstreams - financial, legal, operational, and tax - and ends with a decision to close, renegotiate, or walk away. Think of it as the buyer's underwriting: everything the seller claimed now has to be proven.
What documents are needed for due diligence?
Buyers work from a due diligence checklist that commonly runs 88 to 98 items across corporate records, financials, contracts, and intellectual property, with real-estate-owning targets adding roughly ten more (DealRoom, 2026). A mid-market acquisition today generates 5,000 to 12,000 data room documents answered against 200 to 400 structured questions (V7 Labs, 2026). The cleaner and more complete your data room, the faster the review moves.
How much does due diligence cost?
Costs scale with deal size and complexity. Financial due diligence typically runs 0.5 to 1.5% of deal value (about $25,000 for small deals to more than $1 million for complex ones), legal due diligence $100,000 to $500,000-plus, and tax diligence $50,000 to $200,000 (IB Interview Questions, 2026). For lower-middle-market deals, a standalone Quality of Earnings report usually costs $10,000 to $35,000 (ProjectionHub; Acquisition Stars).
What is a Quality of Earnings report and why does it matter?
A Quality of Earnings (QoE) report is the core deliverable of financial diligence: it normalizes reported EBITDA by stripping out one-time expenses and non-recurring revenue, then adding back owner-specific costs. It matters because price is usually a multiple of that normalized number, and QoE adjustments can move "true" EBITDA by 15 to 30% (IB Interview Questions, 2026). A weak QoE finding is one of the most common reasons a buyer reprices a deal.
Red Flags That Send Buyers Running
Certain findings surface again and again, and experienced buyers know exactly where to look. The biggest due diligence considerations for a seller cluster around three themes: customer concentration, unreliable numbers, and undisclosed liability.
Customer concentration is the fastest deal-killer. A single customer representing more than 20% of revenue is treated as a red flag, and one accounting for 40% or more can jeopardize the whole transaction (IB Interview Questions, 2026). Buyers also test the working-capital peg, scrutinizing the change in net working capital to confirm the business is not running on fumes at close. On the numbers themselves, quality-of-earnings adjustments - aggressive revenue recognition, capitalized expenses, one-time gains treated as recurring - can cut "true" EBITDA by 15 to 30%, and material findings across all workstreams routinely reduce the final purchase price by 5 to 15%.
Third-party contracts are a quieter risk. As Keith Crawford, Global Head of Corporate Development at State Street, framed it:
"In our preliminary non-binding bid, we have a long list of assumptions. One of the assumptions is that all third party contracts are at or near their historical costs and fee levels. That's gonna impact your underlying valuation if you come in and you're paying 25% more on a large third party contract."
Keith Crawford, Global Head of Corporate Development, State Street Corporation
For regulated, cross-border, or data-heavy targets, buyers add enhanced due diligence - deeper reviews of regulatory compliance, cybersecurity posture, and ESG exposure - which is where a six-week schedule stretches to 10 to 12 weeks or more (DealRoom). In Iconic's experience preparing sellers, the owners who clean up concentration, contracts, and recordkeeping months before going to market face far fewer of these surprises and spend less time flagging potential issues under pressure.
Buyer vs. Seller Due Diligence
Most people picture due diligence as something buyers do to sellers. Increasingly, sellers go first. Buyer-side (investigative) due diligence aims to verify and discover after the LOI is signed. Seller-side, or reverse, due diligence is preparatory: the seller commissions a Quality of Earnings and legal review before going to market, so they control what gets found and when. Formalized, that is vendor due diligence (VDD).
Vendor due diligence typically costs $100,000 to $500,000, but it can shorten the buyer's review and increase deal certainty (IB Interview Questions). SRS Acquiom's 2025 Deal Terms Study, covering more than 2,200 private-target acquisitions, found that longer deal timelines and well-populated data rooms have shifted the balance between buyers and sellers - a prepared seller simply holds more ground. Buy-side representations and warranties insurance, priced at roughly 2.5 to 4% of the policy limit, has also become a common tool for allocating the risk that diligence cannot fully eliminate (Lowenstein Sandler).
| Dimension | Buyer due diligence | Seller (reverse) due diligence |
|---|---|---|
| Purpose | Verify claims and uncover risk | Control what gets found and when |
| Timing | After the LOI is signed | Before going to market |
| Who pays | The buyer | The seller |
| Typical cost | Bundled into deal costs | $100K to $500K for vendor due diligence |
| Main benefit | Reduces the buyer's risk | Fewer surprises, faster review, more deal certainty |
Source: IB Interview Questions and Acquisition Stars
The findings from both sides ultimately shape the asset purchase agreement: purchase-price adjustments, escrow, indemnification, and the reps and warranties the seller stands behind long after the acquisition closes.
What to Do Before Buyers Arrive
The single best thing a seller can do is treat the due diligence process as something to prepare for, not something that happens to you. Owners who assemble clean financial statements, resolve legal issues early, and run a mock due diligence review months ahead consistently hold price better than those who scramble after the LOI. Iconic has guided more than 200 businesses through this stage, and the pattern holds: preparation is what keeps a buyer's findings from turning into a discount. If you want to see how a structured sale handles diligence from day one, start with Iconic's process.
