Questions to Ask When Buying a Business: A Practitioner's Due Diligence Checklist

Why the Questions You Ask Before an Acquisition Define the Deal You Close 

Most M&A due diligence failures are not failures of discovery. They are failures of framing. The buyer asked questions, got answers, and still closed on bad assumptions because the questions were too general, too accommodating, or too focused on confirming what they already wanted to believe.

The question list below is built around a different principle: every question should be designed to challenge the thesis, not validate it. If your due diligence team cannot articulate what a bad answer to each question looks like — and what they would do if they got one — the question is not doing its job.

This connects directly to your deal thesis. Before diligence begins, the thesis should define: what would need to be true for this deal to create value? Diligence is the process of finding out whether it is true.

Financial and Commercial Due Diligence Questions

These questions establish whether the business's financial performance is real, repeatable, and attributable to something durable  not to one customer, one salesperson, or one market tailwind that won't persist.

Revenue quality and sustainability

• What percentage of revenue is recurring vs. one-time?
• What is the customer concentration? Does any single customer represent more than 10% of revenue?
• What is the customer churn rate over the past three years?
• How has revenue performed in economic downturns or sector-specific disruptions?
• What is the pipeline, and how is it measured? How reliable has pipeline-to-close conversion been historically?
• Are there any revenue recognition practices that require restatement under your accounting standards?

Margins and cost structure

• What drives gross margin, and how has it trended over three to five years?
• What is the split between fixed and variable costs?
• Are there any one-time items or normalizations in the historical financials that affect comparability?
• What are the fully-loaded unit economics? Are there costs embedded in COGS or SG&A that the seller is presenting differently?

Working capital and cash flow

• What is the normalized working capital, and how was it calculated?
• How does the business manage receivables? What is the days sales outstanding (DSO) trend?
• Are there any off-balance-sheet liabilities, contingent obligations, or earn-out structures from prior acquisitions?
• What capital expenditures are required to maintain current revenue levels, and what would be required to grow?

Legal and Regulatory Due Diligence Questions

Legal diligence surfaces the obligations, exposures, and constraints that don't appear on the income statement — and that can become the buyer's problem at close.

Contracts and commitments

• Are there change-of-control provisions in any material contracts? Which contracts can be terminated by the counterparty upon a sale?
• What customer or supplier contracts require consent to assign?
• Are there any exclusivity agreements, non-competes, or restrictive covenants that limit the business post-acquisition?
• What is the status of all material litigation, regulatory investigations, or threatened claims?

Intellectual property

• Who owns the IP — the company or its founders/employees? Are IP assignment agreements in place for all contributors?
• Are there any third-party licenses embedded in the product or service that have change-of-control provisions?
• Has the company conducted freedom-to-operate analysis in relevant markets?

Regulatory and compliance

• What licenses, permits, or regulatory approvals are required to operate, and are they all current?
• Are there any pending regulatory changes that could affect the business model?
• What is the company's data privacy posture — GDPR, CCPA, or sector-specific compliance — and are there any known violations or open investigations?

Ownership and structure

• What is the fully-diluted cap table? Are there any side letters, anti-dilution provisions, or investor rights that survive a transaction?
• Are there any existing liens, encumbrances, or pledges on the company's assets?

Operational and Technology Questions

Operations and technology diligence answers a question financials cannot: can this business actually function as a standalone entity, and will it function the same way once it's part of your organization?

Operations

• What are the key operational dependencies — suppliers, logistics, facilities — and are any of them single-source or relationship-dependent?
• What does the production or service delivery process look like, and where are the bottlenecks?
• What is the current capacity utilization, and what would be required to scale?
• Are there any known quality issues, product recalls, or customer complaints that have not been disclosed?

Technology and systems

• What core systems does the business run on, and how current are they?
• What is the technical debt situation — undocumented code, end-of-life infrastructure, deferred maintenance?
• Are there any third-party system dependencies that the business cannot easily replace?
• What is the cybersecurity posture? When was the last penetration test, and were any issues found?
• How are customer data, financial data, and IP stored and protected?

People, Culture, and Leadership Questions

People diligence is the most commonly underweighted workstream in M&A — and the most common source of post-close value erosion. The questions below are designed to surface the dependencies, flight risks, and cultural friction that don't appear in an org chart.

Leadership and key person risk

• Which leaders or individual contributors is the business truly dependent on? What happens if they leave?
• What are the terms of founder or key executive employment agreements? Are there retention arrangements in place, and do they survive a transaction?
• Has the management team run a business through integration before? How did they handle it?
• Are there any known interpersonal conflicts, performance issues, or leadership gaps on the team?

Culture and organizational health

• How does the organization make decisions — centralized or distributed? How will that interact with your structure?
• What is the attrition rate, and how has it trended? Are exits concentrated in any function or level?
• What do employees think of leadership? If there have been any engagement surveys, what did they show?
• How does the target organization communicate internally — and how does that compare to yours?

Compensation and equity

• What does the full compensation structure look like, including equity, bonuses, and benefits? How does it compare to your own?
• Are there any retention bonuses, change-of-control payments, or acceleration provisions that trigger at close?

Strategic Fit and Deal Thesis Questions

These questions are often skipped in the rush of diligence. They are the most important ones in the entire list.

• Why is the seller selling now? What is the real motivation, and is it consistent with what they've told you?
• What would the seller do differently if they were running this business for another five years?
• Who else looked at this deal, and why did they pass? What did they see that you might be discounting?
• What does the competitive landscape look like in three to five years — and does this acquisition strengthen or expose your position?
• What is the integration thesis, specifically? What has to be true about the combined entity for this to be worth the price?
• What is the walk-away condition? At what point does the thesis break down, and what would you do if diligence surfaces it?

Integration and Post-Close Questions

Integration questions belong in diligence — not in the first week after close. The answers shape your operating model, your TSA requirements, and your Day One plan.

• What shared services, systems, or infrastructure will need to be separated or replicated?
• What is the plan for the leadership team post-close — retained, restructured, or replaced? Who decides, and by when?
• What customer communications are required at close, and who owns them? What is the risk of customer churn in the first 90 days?
• What does success look like 12 months post-close, and how will it be measured? Who is accountable for delivering it?

This last question — what does success look like and who owns it — is the one most often left unanswered at close. The absence of a clear answer is one of the most reliable predictors of a deal that doesn't deliver on its thesis. M&A integration planning should produce a concrete answer to this before the definitive agreement is signed.

Frequently Asked Questions About Buying a Business

What is due diligence when buying a business? Due diligence is the structured process of investigating a target company before closing an acquisition. It covers financial, legal, operational, people, and strategic dimensions — with the goal of verifying the assumptions behind the deal thesis and surfacing risks that affect price, structure, or the decision to proceed.

How many questions should you ask in M&A due diligence? There is no fixed number. The right questions depend on the deal — its size, structure, industry, and the specific thesis behind it. What matters is that every question is designed to challenge an assumption, not confirm one. A shorter list of sharp questions beats a long list of generic ones.

What are red flags when buying a business? Common red flags include: high customer concentration, declining gross margins without clear explanation, unusual revenue recognition practices, key person dependency with no succession plan, undisclosed litigation or regulatory issues, and a seller who cannot clearly articulate why the business is being sold. The absence of clean documentation is itself a red flag.

What financial questions are most important when buying a business? Revenue quality and repeatability, customer concentration, margin trends, working capital normalization, and off-balance-sheet liabilities are the areas that most frequently produce surprises. The goal is to understand whether the financial performance shown is real, durable, and attributable to something the buyer can maintain or improve.

How do you evaluate culture when buying a business? Attrition rates, engagement data, how decisions are made, and leadership behavior under pressure are the best cultural indicators. Direct conversations with the management team — not just formal presentations — reveal how a culture actually operates. The question to answer is not whether the culture is good, but whether it's compatible with your operating model and integration approach.

What is the difference between confirmatory due diligence and initial diligence? Initial diligence is the high-level review conducted before an LOI, focused on validating the broad thesis. Confirmatory due diligence is the deeper investigation that follows LOI execution, typically under exclusivity — designed to verify every material assumption before the definitive agreement is signed.

What integration questions should be asked during diligence? Day One operational readiness, shared services and system dependencies, leadership retention, customer communication plans, and how success will be measured and owned post-close. Integration questions asked during diligence produce better integration plans — not just better diligence reports.

Go Deeper

If you're mid-diligence and want frameworks built from practitioners who've run hundreds of acquisitions, the Intelligence Hub has the tools. Nathan Rust's Founder Compatibility Gate gives you a structured framework for evaluating founder fit before you go deep. Four Questions That Defined a $1 Billion Deal distills what actually mattered in a high-stakes transaction. And the Integration-Led Diligence framework from Cisco shows how to run diligence with integration outcomes in mind from day one — not as an afterthought.