Private equity firms approach due diligence as a structured, multidisciplinary investigation into every material aspect of a target company before committing capital. The process typically spans financial, legal, tax, commercial, technical, and HR dimensions, and is designed to verify the investment thesis, surface hidden risks, and confirm that the asking price reflects the true value of the business. The sections below answer the most common questions founders, CFOs, and finance leaders have about what PE due diligence actually involves and how to prepare for it.
What areas do private equity firms examine during due diligence?
Private equity firms examine six core areas during due diligence: financial performance, legal structure, tax compliance, commercial position, technical assets, and HR matters. Each workstream runs in parallel, and findings in one area often trigger deeper questions in another. The goal is to build a complete, evidence-based picture of the business before any transaction closes.
Here is what each workstream typically covers:
- Financial due diligence: Annual accounts, management reports, cash flow history, working capital trends, and forward-looking forecasts. PE firms want to understand the quality of earnings, not just the headline numbers.
- Legal due diligence: Incorporation documents, the shareholders’ register, existing contracts, litigation history, and any encumbrances on assets.
- Tax due diligence: Corporate income tax filings, VAT and payroll tax records, any approved tax rulings with the authorities, and special incentives such as innovation box (R&D tax credit) approvals.
- Commercial due diligence: Customer concentration, key supplier contracts, competitive positioning, and the sustainability of revenue streams.
- Technical due diligence: Software documentation, patents, intellectual property rights, and the scalability of the technology stack.
- HR due diligence: Employment contracts, pension obligations, key-person dependencies, and any outstanding labour disputes.
A well-prepared company will have documentation for all six areas organised and readily accessible before the process begins. This alone can meaningfully accelerate the timeline and strengthen a seller’s negotiating position.
How long does private equity due diligence typically take?
Private equity due diligence typically takes between four and twelve weeks, depending on the complexity of the target company, the quality of its documentation, and the number of workstreams running simultaneously. Straightforward transactions at growth-stage companies can close the diligence phase in four to six weeks; complex cross-border deals or businesses with messy historical financials can take three months or more.
The single biggest variable is how quickly the target company can respond to information requests. When a company has a well-maintained virtual data room with current, consistently dated documents across all due diligence categories and workstreams, the process moves significantly faster. Delays almost always trace back to missing documents, inconsistent data, or management teams that are pulled away from day-to-day operations to answer basic questions reactively.
For PE firms, time is a real cost. A prolonged process increases execution risk and can cause deal fatigue on both sides. Companies that are prepared signal control and professionalism, which also tends to support a stronger valuation outcome.
What financial metrics do PE firms focus on most?
PE firms focus most intensely on EBITDA quality, revenue predictability, cash conversion, and working capital dynamics. These metrics reveal whether reported profitability is real and sustainable, and whether the business generates the cash its income statement suggests it does.
Beyond the headline numbers, PE investors typically dig into:
- Normalised EBITDA: Adjusting for one-off costs, owner-related expenses, and non-recurring items to arrive at a true run-rate earnings figure.
- Revenue quality: The split between recurring and non-recurring revenue, customer retention rates, and the concentration of revenue across clients.
- Cash conversion cycle: How efficiently the business turns profit into cash, and whether working capital is growing faster than revenue.
- Gross margin trends: Whether margins are expanding, stable, or being eroded by input costs or pricing pressure.
- Zero moment of cash: The point at which the cash position reaches zero if current burn rates continue, which is especially relevant for growth-stage businesses.
- KPI consistency: Whether the KPIs management reports internally align with what the financial statements show.
PE firms are also highly attentive to the forecast methodology. A management team that can explain the assumptions behind its projections with clarity and evidence is far more credible than one presenting ambitious numbers without substantiation.
What are the most common red flags PE firms look for?
The most common red flags in private equity due diligence are revenue concentration risk, unexplained fluctuations in margins, incomplete or inconsistent financial records, and key-person dependency. Any of these can stall a deal, reduce the valuation, or lead to a deal being structured with additional protections for the buyer.
Other warning signs that regularly surface include:
- A single customer representing a disproportionate share of total revenue, creating fragility if that relationship changes.
- Discrepancies between management accounts and statutory accounts that cannot be clearly explained.
- Pending litigation or unresolved tax disputes that have not been disclosed upfront.
- Employment arrangements that are informal or non-compliant, particularly around senior roles.
- Intellectual property that is not clearly owned by the company, such as software developed by contractors without proper IP assignment clauses.
- A finance function that is too thin for the complexity of the business, signalling that the company lacks the internal controls to scale.
Importantly, a red flag does not automatically kill a deal. PE investors are experienced at pricing risk. What damages trust most is discovering a problem that management knew about but did not disclose proactively. Transparency early in the process is almost always the better strategy.
How does due diligence differ for a growth-stage company versus a mature business?
Due diligence for a growth-stage company focuses more heavily on the quality of the business model, the credibility of the growth thesis, and the strength of the founding team, while due diligence for a mature business centres on the sustainability of existing cash flows, margin stability, and operational efficiency. Both require rigorous financial analysis, but the questions being asked are fundamentally different.
For a growth-stage company, PE firms and venture investors typically want to understand:
- Whether the unit economics are sound and improving as the business scales.
- How much capital is required to reach the next value-creation milestone.
- Whether the founding team has built the financial infrastructure to support rapid growth.
- The quality and completeness of financial reporting, since many growth companies are still building their finance function.
For a mature business, the focus shifts towards:
- The defensibility of market position and whether revenue is genuinely recurring.
- Operational leverage and whether margins can be maintained or improved under new ownership.
- Debt capacity and the ability to service leverage introduced as part of a buyout structure.
- Management depth beyond the founding generation.
One constant across both types: the quality of the CFO or finance lead is scrutinised closely. A credible finance function gives investors confidence regardless of the company’s stage.
How should a company prepare for private equity due diligence?
A company should prepare for private equity due diligence by building and maintaining a structured virtual data room long before any investor conversation begins. The principle is straightforward: every document an investor might request should already exist, be up to date, and be organised by category so it can be shared immediately when needed.
Practically, this means setting up a data room in a tool the company already uses, such as Microsoft SharePoint or Google Drive, with clear folders for each due diligence workstream: financial, legal, tax, technical, commercial, and HR. Every document should be consistently dated, and the data room should be treated as a living resource that is updated as the business evolves, not assembled in a rush when a deal is imminent.
Key documents to keep current include:
- Annual accounts and monthly management reports.
- The shareholders’ register and incorporation documents.
- All material commercial contracts, including key customer and supplier agreements.
- Employment contracts and pension documentation for all staff.
- Tax filings and any approved rulings or incentives such as innovation box approval.
- IP ownership documentation, including patents and software licences.
- A current business plan with forecasts and the assumptions behind them.
The CFO plays a central role in maintaining this readiness. When the finance lead ensures the data room is always current, the first wave of investor questions can be answered quickly and confidently. This signals that the company is in control, which directly influences how investors perceive both the quality of the business and the strength of the management team.
How Greyt helps you prepare for due diligence
Getting due diligence-ready is not a one-time task. It requires the right financial infrastructure, a clear-eyed view of your business, and a finance lead who knows exactly what investors will scrutinise. That is where we come in.
We support companies through the full due diligence process, working from a CFO perspective that prioritises insight, risk reduction, and value preservation. Our expert financial advisory services include:
- Finance Maturity Assessment (FMA): A thorough review of your finance function, processes, systems, and reporting to determine whether your financial organisation matches your growth ambitions. You receive a concrete report with actionable recommendations before any transaction starts.
- Refinancing due diligence: We assess your financial health, cash flow structure, and long-term sustainability to help you secure better terms with your bank or lender.
- Acquisition due diligence: We examine a target company’s financials, operations, and risks so you can make well-informed decisions, minimise surprises, and confirm strategic fit before committing capital.
Our team of experienced (interim) CFOs guides you through every step, delivering clear and actionable reporting rather than dense documents that sit unread. Whether you are preparing for a funding round, an exit, or an acquisition, we help you walk into the process in control.
Ready to get due diligence-ready? Get in touch with us to discuss where your company stands and what steps make sense next.
Frequently Asked Questions
What is the difference between a vendor due diligence report and a buy-side due diligence report?
A vendor due diligence (VDD) report is commissioned by the seller before going to market and is shared with prospective buyers to accelerate the process and reduce information asymmetry. A buy-side report is commissioned by the acquirer independently to validate findings and protect their own interests. In competitive auction processes, VDD reports are increasingly common because they allow sellers to control the narrative, surface and address issues proactively, and reduce the disruption of multiple buyer teams conducting parallel investigations.
Can a deal still close if red flags are discovered during due diligence?
Yes, most deals that encounter red flags during due diligence still close — they simply close on adjusted terms. Common outcomes include a reduced purchase price, an escrow arrangement where a portion of proceeds is held back pending resolution of an issue, or specific indemnities added to the sale and purchase agreement. What typically kills a deal is not the discovery of a problem itself, but the perception that management was aware of it and chose not to disclose it, which fundamentally undermines trust in the leadership team.
How do I know if my virtual data room is actually ready for investor scrutiny?
A practical test is to ask yourself whether a senior finance professional who has never seen your business could answer 80% of standard due diligence questions using only the documents in your data room, without needing to contact anyone internally. If the answer is no, your data room is not ready. Common gaps include missing or outdated management accounts, contracts without signed versions, undocumented IP ownership, and forecasts without clearly written assumptions. Running a Finance Maturity Assessment before going to market is one of the most effective ways to identify and close these gaps in advance.
What role does the CFO play during the due diligence process, and what if we don't have one?
The CFO is typically the primary point of contact for the financial, tax, and often commercial workstreams during due diligence, responsible for coordinating information requests, preparing management presentations, and defending the numbers under detailed questioning. Without a dedicated CFO, founders and operational managers are often pulled away from running the business to answer investor queries reactively, which slows the process and can create a negative impression. Companies without an in-house CFO frequently bring in an interim or fractional CFO specifically for the transaction period to fill this gap professionally.
How does customer concentration actually affect my valuation, and is there a threshold PE firms use?
There is no universal threshold, but a common rule of thumb is that a single customer representing more than 20–25% of total revenue will attract meaningful scrutiny, and above 40% it becomes a structural concern that is likely to affect valuation or deal terms. PE firms typically model a scenario in which that customer is lost and assess whether the business remains viable. The best way to mitigate concentration risk before a transaction is to actively diversify the customer base and, where concentration is unavoidable, to ensure those key relationships are protected by long-term contracts with renewal clauses.
What is normalised EBITDA, and how do PE firms decide which adjustments are legitimate?
Normalised EBITDA is the reported EBITDA figure adjusted to remove items that are genuinely one-off, non-recurring, or not reflective of the ongoing economics of the business — such as owner salaries above market rate, one-time restructuring costs, or costs related to the transaction itself. PE firms apply significant scrutiny to management's proposed adjustments because sellers naturally have an incentive to normalise upward. Adjustments are most credible when they are clearly documented, supported by evidence, and limited in number; a long list of adjustments with vague justifications is itself a red flag that will invite pushback and potentially compress the valuation multiple applied.
How far in advance should a company start preparing for due diligence?
Ideally, due diligence preparation should begin at least 12 months before any anticipated transaction, and for companies with complex structures or historical financial messiness, 18–24 months is more realistic. This lead time allows the finance team to clean up inconsistencies in historical records, put proper contracts in place, resolve any outstanding tax or legal matters, and build a track record of clean, consistent management reporting. Companies that start preparing only when a buyer or investor expresses interest are almost always working reactively, which increases stress, extends timelines, and weakens their negotiating position.