Operational due diligence is a structured review of how a business actually runs, its processes, systems, people, and infrastructure, to assess whether operations can support the company’s current performance and future growth. Unlike financial due diligence, which focuses on the numbers, operational due diligence looks at what sits behind those numbers. It is typically carried out before an acquisition, merger, investment, or major strategic decision, and it is relevant for any business where operational capability directly affects value and risk.
The sections below unpack the most important questions buyers, investors, and founders ask when operational due diligence comes up, from what it actually examines to who should carry it out.
How does operational due diligence differ from financial due diligence?
Operational due diligence and financial due diligence are complementary, but they ask fundamentally different questions. Financial due diligence examines what a company has earned and owes, revenue, margins, debt, cash flow, and historical financial performance. Operational due diligence asks whether the business is built to sustain and grow that performance, whether the people, processes, systems, and infrastructure are fit for purpose.
Think of it this way: financial due diligence tells you what the scoreboard says. Operational due diligence tells you whether the team can keep playing at that level. A company might show strong revenue growth on paper while relying on a single key person, running on outdated systems, or managing supply chains that are one disruption away from collapse. None of that shows up cleanly in a profit and loss statement.
In practice, the two types of due diligence review and advisory services are conducted in parallel and their findings feed into each other. A financial anomaly, an unexpected dip in margins, for example, often has an operational explanation. And operational weaknesses frequently carry financial consequences that need to be quantified. Together, they give a complete picture of the business.
What does operational due diligence actually examine?
Operational due diligence examines the internal machinery of a business, the processes, systems, people, and structures that determine how well the company delivers on its promises. The scope varies by industry and transaction type, but the core areas of investigation follow a consistent pattern.
- People and organisation: Who are the key people, how dependent is the business on them, and is the organisational structure appropriate for the company’s scale and ambition? This connects closely with HR due diligence, which covers employment contracts, pension schemes, and personnel matters.
- Processes and workflows: Are the core business processes documented, repeatable, and efficient? Or do they rely on informal knowledge and individual improvisation?
- Technology and systems: Does the company’s technology stack support its operations, or is it a source of risk and inefficiency? This overlaps with technical due diligence, which includes software documentation, intellectual property, and patents.
- Supply chain and vendors: How resilient are supplier relationships and purchasing contracts? Are there single points of failure or heavy concentration risk?
- Customer relationships: How stable and diversified is the customer base? Commercial due diligence looks at major customer contracts and supplier agreements to assess revenue quality.
- Compliance and controls: Are internal controls adequate? Are regulatory obligations being met consistently, including tax filings, VAT, payroll tax, and any applicable rulings with tax authorities?
A well-structured operational review will organise findings across these categories clearly, making it straightforward to identify where risk is concentrated and where the business is genuinely strong.
When should operational due diligence be conducted?
Operational due diligence should be conducted before any major transaction or strategic decision where operational capability affects the outcome. The most common trigger is an acquisition or investment, but that is not the only one.
For buyers and investors, the right moment is during the deal process, after initial financials have been reviewed and before final terms are agreed. This is when operational findings still have the power to influence valuation, deal structure, or the decision to proceed at all.
For founders and management teams preparing for a funding round or exit, the smarter approach is to treat operational readiness as an ongoing discipline rather than a last-minute exercise. Keeping documentation current, storing it in a structured virtual data room, in tools like Microsoft SharePoint or Google Drive, and maintaining clear categories for financial, legal, tax, technical, commercial, and HR records significantly shortens the timeline of any future process and strengthens the negotiating position.
Operational due diligence is also valuable outside M&A contexts. Companies undergoing rapid growth, restructuring, or a leadership transition often benefit from an internal operational review to identify bottlenecks before they become crises. In 2026, as regulatory complexity and ESG reporting requirements continue to increase, the bar for operational readiness is rising across sectors.
What are the most common red flags found during operational due diligence?
The most common red flags in operational due diligence are signs that the business is more fragile or less scalable than it appears from the outside. These issues do not always disqualify a deal, but they always affect how it should be structured and priced.
- Key person dependency: When critical knowledge, relationships, or decision-making authority sits with one or two individuals, the business carries significant continuity risk. If those people leave post-transaction, value can evaporate quickly.
- Undocumented processes: Businesses that run on informal knowledge rather than documented workflows are difficult to scale and hard to integrate. This is a particularly common issue in fast-growing companies where process documentation has not kept pace with growth.
- Customer concentration: A large share of revenue from a small number of customers creates vulnerability. Losing one major client can have an outsized impact on performance.
- Outdated or fragmented technology: Systems that cannot communicate with each other, or that require significant manual workarounds, are a signal of operational immaturity and future integration cost.
- Weak financial controls: Gaps in internal controls, inconsistent reporting, or missing documentation, such as unsigned employment contracts, incomplete tax filings, or absent pension scheme records, raise questions about governance and reliability.
- Supply chain fragility: Heavy reliance on a single supplier, or purchasing contracts without adequate protection clauses, creates exposure to disruption that is difficult to hedge after a transaction closes.
Finding red flags does not automatically mean walking away. It means understanding the risk clearly so that the right decisions can be made with full information.
Who should carry out an operational due diligence review?
Operational due diligence should be carried out by experienced professionals who combine operational expertise with financial and commercial judgment. The right team depends on the scope of the review, but the process is almost always led by someone with CFO-level experience, someone who understands how operations translate into financial outcomes and what good looks like across different stages of company growth.
Internal teams can contribute valuable context, but they are rarely well positioned to lead the review objectively. The people closest to the business are often the least able to see its structural weaknesses clearly. An external perspective, from someone with no stake in the outcome other than delivering an honest assessment, is what makes the findings credible and actionable.
For smaller transactions or early-stage funding rounds, a lean review led by an experienced interim CFO and expert services team is often sufficient. For larger or more complex deals, the review team may include specialists across technology, HR, legal, and commercial areas, each contributing to a unified picture of operational health.
The CFO plays a particularly important coordinating role throughout. Whether the review is internal or external, the CFO is responsible for ensuring that the data room is complete, that documentation is current and clearly dated, and that findings are translated into concrete recommendations rather than vague observations.
How Greyt supports your due diligence process
We carry out due diligence from a CFO perspective, combining financial depth with operational judgment to give you a clear, honest picture of what you are dealing with. Whether you are preparing for a funding round, evaluating an acquisition target, or getting your own business ready for a transaction, we structure the process so that nothing important is missed and every finding is actionable.
Our due diligence work covers three core scenarios:
- Finance Maturity Assessment (FMA): A thorough review of your financial organisation, processes, systems, and reporting, to determine whether the finance function is aligned with your strategy and growth ambitions. This serves as the factual baseline before any M&A or funding process begins.
- Refinancing due diligence: An assessment of financial health, operational performance, and long-term sustainability to support refinancing conversations, with a focus on cash flow, debt structure, and forecasts that hold up under scrutiny.
- Acquisition due diligence: A structured review of a target company’s financials, operations, and risks, covering cash flow, profitability, tax and legal compliance, and strategic fit, so you can make a well-informed decision with confidence.
Our team consists of experienced (interim) CFOs who have been through these processes many times, on both sides of the table. You get clear, direct reporting and a team that stays involved through the full process, not just the opening phase.
If you are approaching a transaction or want to understand where your business stands operationally, get in touch with us to discuss what a due diligence review would look like for your situation.
Frequently Asked Questions
How long does an operational due diligence review typically take?
The timeline depends on the size and complexity of the business, but most operational due diligence reviews take between two and six weeks. A focused review of a smaller company with a well-organised data room can be completed at the shorter end of that range, while a larger or more complex business with fragmented documentation may take longer. The single biggest factor that extends timelines is incomplete or disorganised records, which is why founders and management teams benefit from maintaining a structured data room well before any transaction begins.
What documents and information should we prepare before an operational due diligence review starts?
At a minimum, you should have current organisational charts, documented core processes and workflows, technology system inventories, key supplier and customer contracts, employment contracts, pension scheme records, tax filings, and internal financial reports readily accessible. These should be stored in a structured virtual data room, organised by category such as financial, legal, HR, technical, and commercial. The more complete and clearly dated your documentation is at the outset, the faster and smoother the review process will be, and the stronger your negotiating position.
Can operational due diligence uncover issues that would cause a deal to fall through?
Yes, though it is less common than people assume. Most findings do not kill deals outright; they reshape them. Discovering a significant red flag, such as severe key person dependency, undisclosed regulatory non-compliance, or critical supply chain fragility, typically leads to a renegotiation of price, an adjustment to deal structure, or the inclusion of specific warranties and indemnities rather than an outright withdrawal. The real value of operational due diligence is that it ensures any risks are priced and structured correctly, so neither party enters the transaction with an incomplete picture.
How is operational due diligence different from an internal audit or management review?
An internal audit is a recurring, compliance-focused process designed to verify that existing controls are working as intended. A management review is an internal performance assessment conducted by people who are embedded in the business. Operational due diligence is a structured, time-bound, externally led investigation with a specific purpose: to form an independent view of whether the business is operationally sound for a transaction or strategic decision. The external perspective is critical because it removes the blind spots that come from familiarity, and the findings are designed to be credible and defensible to third parties such as investors, acquirers, or lenders.
What happens after operational due diligence is completed? How do findings get used?
Findings are typically compiled into a structured report that categorises risks by severity and area, and links each issue to a concrete recommendation or action. For buyers and investors, findings feed directly into valuation adjustments, deal structuring decisions, and the drafting of warranties and indemnities in the transaction agreement. For sellers and founders, findings highlight operational gaps that should be addressed before or during the transaction process. In both cases, the goal is to move from observation to action, so that every finding has a clear owner and a defined next step.
Is operational due diligence relevant for early-stage or smaller businesses, or is it mainly for large transactions?
It is relevant at any stage where operational capability affects the outcome of a decision, and that includes early-stage businesses. In fact, operational weaknesses tend to be more concentrated and more consequential in smaller companies, where a single undocumented process or one key person dependency can represent a material portion of the business's value. For smaller transactions, the review is typically leaner and more focused, but the core questions remain the same. Investors and acquirers at every level want to understand whether the business can sustain and grow its performance after the transaction closes.
What is the most common mistake businesses make when preparing for operational due diligence?
The most common mistake is treating operational readiness as a last-minute exercise rather than an ongoing discipline. Companies that scramble to compile documentation, locate contracts, or reconstruct process records in the weeks before a review create delays, raise questions about governance, and weaken their negotiating position. The businesses that move through due diligence fastest and with the strongest outcomes are those that maintain a live, well-organised data room as standard practice, with documentation that is current, clearly dated, and categorised consistently across financial, legal, HR, technical, and commercial areas.