A private equity buyer's due diligence checklist covers eight or nine parallel workstreams — financial (quality of earnings), legal, tax, commercial, HR and benefits, IT and cybersecurity, insurance, environmental, and operations — and it has been getting slower: a 2026 survey of dealmakers found one in five reporting that timelines have stretched over the past two years, with most of those adding one to three months. Diligence is not paperwork that follows a signed letter of intent; it is the process that turns the number in the LOI into the number in the purchase agreement, workstream by workstream, document by document. This is the checklist before it lands in the inbox, organized so it can be answered instead of scrambled for.
Every one of these lists starts from the same set of workstreams, whether the buyer is a private equity platform, an independent sponsor, or a strategic acquirer (for how a general buyer approaches the same process, see the buyer due diligence checklist). What is different with a financial buyer is intensity: a PE firm is underwriting a debt-financed return, so its lenders run a parallel diligence process of their own, and both sets of advisors are looking for the same thing — a defensible number and a clean set of facts to indemnify against. The table below is organized the way a PE deal team actually runs it: by workstream, with what gets requested, why, and what a clean answer looks like.
The Workstream-by-Workstream Checklist
| Workstream | What They Ask For | Why They Ask | What a Clean Answer Looks Like |
|---|---|---|---|
| Financial / QoE | Three-plus years of financials, monthly detail, general ledger and trial balance, AR/AP aging, an EBITDA add-back schedule, and revenue by customer and product | To convert reported profit into a defensible adjusted EBITDA — the number the multiple is actually applied to — and to catch one-time items, related-party charges, and revenue that will not repeat. See financial due diligence explained. | Financials that tie out to tax returns and bank statements, add-backs documented one by one with support, no unexplained swings quarter to quarter |
| Legal | Cap table and formation documents, the corporate minute book, all material contracts flagged for assignment and change-of-control clauses, litigation history, IP registrations and the assignment chain, real estate leases | To confirm clean title to the business, its assets, and its contracts, and to know in advance which counterparties can walk or reprice at closing | A complete, indexed minute book; contracts that are freely assignable or already have consent letters drafted; no undisclosed litigation |
| Tax | Three to five years of federal and state income tax returns, sales and use tax filings by state, payroll tax filings, any audit notices or open exams | Unfiled or underpaid tax exposure typically follows the entity into a stock deal, and it shapes how the purchase price gets allocated either way. See tax cleanup before a sale. | Returns filed and reconciled in every state where the company has nexus, no open audits, a documented explanation for any prior-year amendment |
| Commercial / Market | Customer list with revenue, tenure, and contract terms; win/loss data; pipeline; competitive positioning; sometimes direct reference calls with top customers | To underwrite the revenue story independently of what management says — durability, pricing power, and concentration all drive price and structure, including escrow and earnout size | Revenue broken out by customer with no single account funding a disproportionate share of EBITDA, documented retention and churn, contracts that survive a change of control |
| HR & Benefits | Employee census with pay and classification, org chart, employment agreements, benefit plan documents, an independent contractor roster, any pending labor claims | Worker classification and benefit-plan liabilities attach to the business, and management depth determines how much risk the buyer is taking on the owner walking away. See HR issues that kill deals. | Contractor relationships that hold up under the IRS's classification test, benefit plans in good standing, a bench of managers who are not all planning to leave at closing |
| IT & Cybersecurity | System and application inventory, access control policies, incident and breach history, data privacy posture, software license and SaaS contract list | Buyers now treat this as one of the heaviest parts of the review; in the same 2026 survey, 51% of dealmakers called tech and cyber diligence the single most burdensome workstream. See cybersecurity and IT diligence prep. | Documented access controls, no unresolved incidents, licenses that are current, transferable, and not scattered across expired seats |
| Insurance | Full policy schedule (property, general liability, D&O, cyber, workers' comp), loss runs for the past several years, certificates from key vendors | Loss history feeds the buyer's post-close insurance costs and, on larger deals, underwriting for a representations and warranties policy. See reps and warranties insurance. | Organized loss runs with no unexplained gaps, no lapses in coverage, policies that are either transferable or easily replaced |
| Environmental | For any business with a facility, fleet, or owned real estate: a Phase I Environmental Site Assessment, hazardous-materials handling records, permits, any history of spills or violations | Environmental liability can attach to real property regardless of who caused the contamination, so buyers want the record clean before they take title. See environmental diligence basics. | A current Phase I on file, permits up to date, no open notices of violation |
| Operations | Documented processes and SOPs, capacity and utilization data, supplier list and concentration, quality and safety records, capex history and near-term needs | PE buyers, especially those building a platform through add-ons, need to know what breaks if the owner steps back and what capital the business needs in year one | SOPs that exist outside the owner's head, no single supplier that can shut down production, a capex plan the new owner is not left to guess at |
A Realistic Diligence Timeline
Timelines vary by deal size, financing, and how ready the seller's data room is before exclusivity begins, but the phases below are a commonly used illustrative sequence for a lower-middle-market process running from a signed LOI to closing.
| Phase | What Happens | Typical Duration* |
|---|---|---|
| Preliminary review (pre-LOI) | High-level financial and legal review supporting the buyer's indication of interest and LOI price | 2 to 4 weeks |
| Confirmatory diligence (exclusivity) | Full workstream review — QoE, legal, tax, commercial, HR, IT, insurance, environmental, operations | 4 to 8 weeks |
| Purchase agreement & disclosure schedules | Runs in parallel with confirmatory diligence; findings get written into reps, covenants, and schedules | 3 to 6 weeks |
| Final confirmatory items & closing prep | Lender sign-off, final consents, closing checklist, funds flow | 1 to 2 weeks |
| Total, LOI to close | — | Commonly 8 to 14 weeks on a clean deal; longer whenever a workstream turns up a problem |
*This is a commonly used illustrative timeline, not a figure from a single study — actual duration depends on deal complexity, third-party financing, and seller readiness. The phase ranges above are not simply additive: the preliminary review happens before the LOI-to-close clock starts, and the purchase agreement and disclosure schedules phase overlaps with confirmatory diligence rather than stacking after it, which is why the total lands around 8 to 14 weeks rather than the sum of every individual range. The trend, independent of any single deal, is toward longer: in the 2026 dealmaker survey cited above, one in five respondents said diligence timelines have extended over the past two years, and 57% of that group said the added time was one to three months. The same survey reports a separate, related pressure on the process: 84% of respondents expect cybersecurity scrutiny to increase further over the next one to two years, and 73% expect diligence overall to get more complex — the survey does not attribute the timeline extension specifically to cyber and IT review, but the two trends are moving in the same direction.
The Gotchas That Surface Late — and Reprice Deals
Most line items on the checklist above get answered without drama. A short list of issues, though, tends to surface only after the buyer's specialists start pulling threads — usually deep enough into exclusivity that walking away is expensive for the seller too, which is exactly when they get used to renegotiate price, escrow, or structure.
- Worker misclassification. The IRS evaluates whether a worker is really an independent contractor using three tests — behavioral control, financial control, and the nature of the relationship — and no single factor is decisive. A company that has treated long-term, closely directed workers as 1099 contractors without a reasonable basis can face liability for the employer's share of Social Security, Medicare, and withholding taxes on those workers, and that exposure typically turns into a purchase-price holdback or a seller indemnity once HR diligence finds it.
- Multiemployer pension withdrawal liability. If the company contributes to a union multiemployer pension plan, a sale can trigger withdrawal liability — a share of the plan's unfunded vested benefits, assessed against the withdrawing employer and payable over time. Federal rules provide some relief when a buyer in an asset sale assumes the contribution obligation, but if that assumption is not structured correctly, the liability can land back on the seller after closing, and it is rarely sized correctly until late in diligence.
- WARN Act exposure. Employers with 100 or more employees must generally give 60 days' written notice before a plant closing that causes a job loss for 50 or more employees at a single site, or before a mass layoff that causes a job loss for 500 or more employees, or for 50 to 499 employees if that number is at least a third of the site's active workforce. If a PE buyer's post-close plan involves consolidating a location or cutting a department, the diligence team maps headcount against these thresholds early, and who bears the notice obligation and cost becomes a negotiated point in the purchase agreement.
- A stale or narrow Phase I. Federal all-appropriate-inquiries rules require the interviews, records review, site inspection, and environmental lien search behind a Phase I Environmental Site Assessment to have occurred within 180 days of closing, and the full assessment to be no more than a year old at acquisition. A Phase I from two years ago, or one that was scoped narrowly, gets rejected by the buyer's environmental counsel and has to be redone, adding weeks and, if it turns up a new issue, reopening price.
- Uncollected state sales tax. Since the Supreme Court's 2018 decision in South Dakota v. Wayfair, states can require a business to collect sales tax once it crosses that state's own economic nexus threshold, based on sales volume or transaction count into the state, with no physical presence required. Tax diligence checks nexus state by state, and a company that has been shipping or invoicing into new states without registering can be sitting on a real, uninsured liability that was invisible until someone ran the analysis.
- Change-of-control and assignment clauses. A surprising number of customer and vendor contracts let the counterparty terminate, or renegotiate pricing, simply because the entity that signed them changes hands. Legal diligence flags every one of these, and a concentrated customer base sitting behind several such clauses is a direct hit to how a buyer prices retention risk.
- Related-party transactions. A building leased from the owner's own LLC at above- or below-market rent, a vehicle or club membership run through the company, family members on payroll at above-market pay — these get restated as part of the add-back analysis, but if they were not disclosed early, finding them late reads as a credibility problem, not just an accounting one, and buyers price credibility problems conservatively.
- Customer concentration that was not obvious from the top line. Aggregate revenue can look diversified while a handful of end customers, reached indirectly through distributors or a shared parent company, actually drive most of the profit. Commercial diligence traces revenue to the ultimate customer, and concentration discovered this way, after the seller has already represented the business as diversified, is one of the more common triggers for a reduced offer or a larger escrow. See reducing customer concentration for how to get ahead of it.
Getting Ahead of the List
The checklist above is not a surprise once a deal is underway — every item on it is knowable in advance. The advisors and platforms that prepare sellers for a sale build most of their process around exactly this list: organizing a data room built before a buyer asks for one, running a sell-side quality of earnings report so the financial workstream starts from a document the seller controls rather than one the buyer's accountants produce from scratch, and clearing the kind of related-party and classification issues described above while there is still time to fix them rather than merely disclose them.
None of this eliminates diligence. It changes what diligence finds. A seller who answers the financial, legal, tax, HR, IT, insurance, environmental, and operational questions before they are asked walks into exclusivity with a shorter timeline, fewer surprises, and a stronger position when the purchase agreement gets negotiated, because every unanswered question in a data room is a question a buyer's advisor gets paid to keep asking, and every one they can't get comfortable with becomes a discount, a holdback, or a walk.
Bankerly.ai is one option built around this preparation problem specifically for lower-middle-market sellers: it produces the quality of earnings report, projection model, confidential information presentation, teaser, and NDA package a seller needs before a process starts, manages buyer matching and the Q&A that follows, and organizes the virtual data room the checklist above is really asking for.
Nothing here is legal, tax, or accounting advice, and none of the figures above are a valuation of any specific company; any estimate of what a business is worth is an educational approximation, not a formal appraisal, and depends on the diligence findings, the deal structure, and market conditions at the time of sale. Confirm classification, tax, benefits, and environmental questions with the company's own attorney and CPA before relying on any of it.
Sources
- EPA: All Appropriate Inquiries (Phase I Environmental Site Assessments)
- U.S. Department of Labor: Plant Closings and Layoffs (WARN Act)
- PBGC: Multiemployer Plan Withdrawal Liability
- IRS: Independent Contractor (Self-Employed) or Employee?
- SRS Acquiom: 2026 Best Practices in M&A Due Diligence
- SRS Acquiom: Six Key Findings From the 2026 M&A Deal Terms Study
- Cornell Legal Information Institute: South Dakota v. Wayfair, Inc.
Frequently asked questions
- What does a private equity firm ask for in due diligence?
- A PE buyer's due diligence checklist covers financial (a quality of earnings report), legal, tax, commercial, HR and benefits, IT and cybersecurity, insurance, environmental, and operations. Each workstream has its own specialist reviewing documents such as financial statements, contracts, tax filings, employee records, and system access logs, looking for anything that would change the purchase price, the deal structure, or what gets indemnified in the purchase agreement.
- How long does private equity due diligence take?
- A commonly used illustrative timeline runs about 8 to 14 weeks from a signed letter of intent to closing on a straightforward lower-middle-market deal: a few weeks of preliminary review, then 4 to 8 weeks of confirmatory diligence during exclusivity. It is getting longer: a 2026 survey found one in five dealmakers reporting extended timelines, with most of those adding one to three months. The same survey found IT and cybersecurity review widely seen as the most burdensome workstream, which is adding pressure to the process even though the survey does not tie the two findings together directly. This is general information, not legal, tax, or accounting advice.
- What is a quality of earnings report and why does a PE buyer need one?
- A quality of earnings (QoE) report is an independent analysis of a company's financial statements that adjusts reported profit into a defensible EBITDA figure by identifying add-backs, one-time items, and revenue that will not recur. PE buyers rely on it because the purchase price multiple is applied to that adjusted number, and their lenders typically require an independent QoE before financing the deal. This is general information, not accounting advice; a company's own CPA should review any specific add-back or valuation question.
- What are the biggest red flags in private equity due diligence?
- The issues that most often surface late and reprice a deal include worker misclassification, multiemployer pension withdrawal liability, uncollected sales tax in states where the company has nexus, a stale environmental Phase I assessment, contracts that let a customer or vendor exit on a change of control, undisclosed related-party transactions, and customer concentration that was not obvious from top-line revenue alone.
- Is PE due diligence different from a strategic buyer's due diligence?
- The workstreams are largely the same, but a private equity buyer is underwriting a debt-financed return, so its lenders run a parallel diligence process focused heavily on cash flow durability and collateral, adding a layer of scrutiny a cash-strong strategic buyer may skip. PE firms also weigh management depth more heavily, since the business typically needs to run well without the founder soon after closing.
- What happens if due diligence finds a problem?
- A diligence finding rarely kills a deal outright; more often it becomes a purchase-price reduction, a larger escrow or holdback, a specific indemnity written into the purchase agreement, or, for a serious issue like unresolved litigation or unfiled taxes, a delay while the seller fixes it before closing. How it gets handled usually depends on whether the issue was disclosed early or found late by the buyer's team. This is general information, not legal, tax, or accounting advice; confirm how a specific finding should be handled with the company's own attorney and CPA.
- How should a business owner prepare for private equity due diligence?
- Build the data room before a buyer asks for it: three-plus years of clean financials with documented add-backs, an organized contract file flagging change-of-control clauses, current tax filings in every state with nexus, HR records with contractor classifications reviewed, and a current environmental assessment if the business owns or leases industrial property. Preparation does not eliminate diligence, but it shortens the timeline and reduces what gets found late. This is general information, not legal, tax, or accounting advice; a company's own attorney and CPA should review its specific classification, tax, and environmental exposure.
Considering a sale in the next few years? See what a prepared process looks like.
Keep reading