What is included in due diligence when buying a business?
Due diligence includes financial statement review, legal document verification, operational assessment, customer concentration analysis, regulatory compliance confirmation, and environmental and employment liability checks — the structured investigation a buyer conducts to verify the seller's claims and identify risks before committing to a purchase.
What Due Diligence Means in a Business Acquisition
Due diligence is the buyer's formal review period between signing a letter of intent and closing the transaction. In most cases, due diligence takes 30–90 days in small business transactions in Canada, depending on deal complexity and information availability. The buyer typically conducts this review under the protection of a non-disclosure agreement signed before receiving sensitive business information, with penalties for unauthorized disclosure.
The findings from due diligence are incorporated into the purchase agreement through representations and warranties, indemnification provisions, purchase price adjustments, and escrow holdbacks typically ranging 10–15% of purchase price for 12–18 months post-closing.
Financial Due Diligence
Financial due diligence reviews three to five years of historical financial statements, including income statements, balance sheets, and cash flow statements. The buyer's accountant reconciles these statements to tax returns and bank records to confirm accuracy.
Quality of earnings adjustments normalize historical EBITDA by removing one-time expenses, owner discretionary expenses, and non-operating items to establish sustainable earnings power. This analysis separates what the business actually earns from what the owner reported for tax purposes or included as personal expenses.
Accounts receivable due diligence includes aging analysis — typically reviewing receivables over 90 days as collection risk — confirmation of customer payment terms, and verification that receivables are not pledged as security. Inventory verification requires physical counts reconciled to book values, aging analysis to identify obsolete or slow-moving stock, and confirmation that inventory is unencumbered by consignment or supplier financing arrangements.
CPA engagement for financial due diligence on small business acquisitions typically costs $5,000–$25,000 depending on business complexity, while quality of earnings reports for middle-market deals range from $25,000–$100,000.
Legal Due Diligence
Legal due diligence in Canada must verify corporate status through provincial corporate registries such as the Ontario Business Registry or BC Corporate Registry to confirm incorporation, good standing, and registered ownership. The buyer's lawyer reviews the minute book, articles of incorporation, shareholder agreements, and any amendments to confirm the seller has authority to sell.
Asset purchases in Canada do not require shareholder approval, while share purchases trigger change of control provisions that may require employee, customer, or supplier consent under existing contracts. The structure of the deal determines what legal issues require resolution before closing.
Material contracts requiring review include leases, supplier agreements, customer contracts, financing agreements, and any contract representing more than 10% of annual revenue or cost structure. The lawyer identifies contracts with change-of-control clauses, automatic termination provisions, or consent requirements that could affect the buyer's ability to operate the business post-closing.
Intellectual property due diligence requires confirming trademark registrations through the Canadian Intellectual Property Office database and verifying patent, copyright, and domain ownership. If the business depends on proprietary software, branding, or customer lists, the buyer must confirm the seller owns these assets outright or has transferable licenses.
Litigation and claims review requires searching court records through provincial superior court databases and obtaining seller representations regarding pending or threatened litigation, warranty claims, or insurance disputes. Undisclosed lawsuits or regulatory investigations can delay or kill a transaction.
Legal due diligence by M&A counsel for small business acquisitions typically costs $10,000–$50,000 including purchase agreement drafting, while larger transactions can exceed $100,000 for comprehensive legal reviews.
Operational Due Diligence
Operational due diligence assesses whether the business can continue to function under new ownership. The buyer reviews customer relationships, supplier dependencies, key employee roles, and operational processes that may be tied to the current owner.
Customer concentration risk is flagged when any single customer accounts for more than 15–20% of revenue, requiring specific retention strategies or purchase price holdbacks in the transaction structure. The buyer contacts major customers — with seller permission — to confirm satisfaction, contract terms, and willingness to continue the relationship post-sale.
Key employee retention risk is assessed by identifying employees critical to operations, reviewing employment contracts and non-compete agreements, and structuring retention bonuses or earn-outs tied to key employee continuity. In small businesses where the owner is the primary relationship holder, the buyer must determine whether customers and employees will follow the seller or stay with the business.
Technology and systems review assesses software licenses — confirming transferability and subscription status — IT infrastructure ownership versus leased equipment, data security practices, and compliance with privacy legislation including PIPEDA. The buyer must determine whether critical systems can be transferred or whether new licenses and infrastructure investments are required.
Commercial Due Diligence
Commercial due diligence evaluates the business's market position, competitive environment, and growth potential. The buyer reviews sales data by product line, customer segment, and geography to understand revenue drivers and identify concentration risks.
Assess whether revenue is recurring, project-based, or one-time transactional, and whether the business has pricing power or competes primarily on cost. The buyer may conduct market research or hire a consultant to validate the seller's claims about market share, competitive positioning, and growth opportunities.
Franchise due diligence requires reviewing the franchise agreement for transfer restrictions, franchisor consent requirements, territory exclusivity, royalty and advertising fee structures, and franchise disclosure document compliance under provincial franchise legislation. Buyers must confirm the franchisor will approve the transfer and that the franchise agreement has adequate remaining term or renewal options.
Environmental and Regulatory Compliance
Environmental site assessments are legally required for properties with current or historical industrial use under Canadian Environmental Protection Act provisions and provincial environmental legislation. Phase I Environmental Site Assessments cost $2,000–$5,000 and review historical site use, regulatory records, and visual inspection. Phase II ESAs involving soil and groundwater testing cost $10,000–$50,000 depending on property size and contamination risk.
Real property due diligence requires title searches through provincial land registries to confirm ownership, identify liens, mortgages, easements, or encumbrances, and verify zoning compliance with municipal planning departments. Commercial lease due diligence must confirm remaining lease term, renewal options, rent escalation clauses, landlord consent requirements for assignment, and any outstanding tenant improvement obligations.
Buyers must verify all required business licenses, permits, and registrations are current and transferable, including municipal business licenses, health permits, liquor licenses, and professional certifications. Missing or non-transferable permits can prevent the buyer from legally operating the business after closing.
Insurance due diligence verifies current coverage levels, claims history — typically five years — upcoming renewals, and transferability of policies including general liability, property, professional liability, and key person life insurance. A history of frequent claims may indicate operational problems or unresolved liabilities.
Workplace safety compliance review requires examining WSIB — or provincial workers' compensation — claims history, health and safety training records, and compliance with Occupational Health and Safety Act requirements. Unresolved safety violations or high workers' compensation premiums signal operational risk.
Timeline and Process
Due diligence typically progresses through document review, site visits, management interviews, and third-party verification. Virtual data rooms are standard for due diligence in transactions above $2 million, providing secure document sharing with access tracking, version control, and audit trails. Smaller deals may use shared file services or physical document review.
The buyer submits a due diligence checklist to the seller at the start of the review period, requesting financial records, contracts, employee files, tax filings, and compliance documentation. The seller populates the data room or provides physical access to records, and the buyer's advisors review the materials and flag issues for resolution.
Buyers conducting due diligence must maintain confidentiality under the terms of a non-disclosure agreement signed before receiving sensitive business information, with penalties for unauthorized disclosure. The seller is not required to disclose customer lists, pricing strategies, or proprietary processes until a binding letter of intent is signed and financing is secured.
When to Bring in Professional Advisors
Employment standards in Canada are provincially regulated, requiring buyers to review compliance with minimum wage, overtime, vacation entitlements, and termination notice requirements specific to the province where employees work. In asset purchases, employees do not automatically transfer to the buyer unless the buyer offers new employment contracts. In share purchases, employment relationships continue unchanged under common law successor employer rules.
Buyers must obtain a GST/HST clearance certificate from the Canada Revenue Agency before closing to avoid personal liability for unpaid taxes up to the purchase price. CRA tax compliance verification requires reviewing the seller's Notice of Assessment for the past three years and confirming no outstanding tax liens or reassessments are pending.
Most buyers engage a CPA for financial due diligence, a lawyer for legal and contract review, and — depending on the business — specialists for environmental assessments, IT systems audits, or franchise compliance. The cost of these advisors is typically 2–5% of the purchase price but prevents buyers from inheriting undisclosed liabilities that could exceed the purchase price itself.
This article is for informational purposes only and does not constitute financial, legal, or business advice. Every business acquisition is different. Before making decisions about due diligence scope, transaction structure, or engaging advisors, consult a qualified professional familiar with your specific situation.
Ready to connect with an M&A advisor? Browse advisors who specialize in buyer representation and due diligence coordination in our directory.