Online Business Due Diligence Checklist

Due diligence asks whether material claims can be independently supported and what could damage the business after ownership changes.

Financial Diligence

Reconcile revenue, review expenses and adjustments, inspect trends and seasonality, and understand working-capital requirements.

Traffic And Customer Diligence

Check acquisition channels, concentration, retention and abrupt changes. Use source access where practical.

Operational Diligence

Map owner workload, contractors, suppliers, software, recurring tasks and key-person dependencies.

Technical Diligence

For software and websites, review hosting, code ownership, security, third-party dependencies, analytics and account access.

Legal And Ownership Diligence

Confirm the seller controls the assets being sold and identify contracts, intellectual property, domains and accounts included in the transaction.

Transfer Diligence

Verify which accounts can legally and practically be transferred and define an inspection and handover process.

Create A Request List And Evidence Standard

Before reviewing documents, decide what counts as evidence. Prefer read-only access, exports from source systems, processor records, bank statements, contracts and repository access over isolated screenshots. Keep a request list with the claim being tested, the evidence received, the period covered, unresolved questions and who is responsible for the follow-up. This makes it harder for a persuasive narrative to outrun the underlying facts.

Reconcile Claims Across Systems

Strong diligence looks for agreement between independent records. Revenue shown in a storefront should broadly reconcile with payment processing and cash received after timing differences, fees, refunds and taxes. Traffic claims should match analytics and, where relevant, search or advertising platforms. Staffing and software costs should make sense relative to the operating process the seller describes. Mismatches are not automatically fraud, but they require an explanation before you price the deal.

Separate Fixable Problems From Thesis-Breaking Risks

Not every issue deserves the same response. Messy documentation may be fixable; unclear intellectual-property ownership, non-transferable core accounts, extreme customer concentration or a product that cannot be maintained without the founder can change the acquisition thesis. Classify findings as informational, price-adjusting, deal-structure issues, closing conditions or reasons to walk away. That classification turns diligence into a decision process instead of an endless checklist.

Document The Closing Conditions

Important diligence findings should not disappear when negotiations move to closing. Translate them into the transaction process: assets that must be delivered, consents that must be obtained, data that must remain true at closing, transition support, inspection periods and any holdback or contingent consideration. Deal-specific legal and tax terms should be reviewed by qualified professionals.

Practical Review Record

Why Digital Diligence Has Become Broader

Traditional checks on revenue, profit and traffic still matter, but buyers now also need to ask how defensible customer acquisition is when products, content and software can be replicated more quickly. Distribution, brand, customer relationships, direct audiences, retention and proprietary assets can therefore matter alongside the asset itself. The objective is to understand future reliability, not merely confirm last year's numbers.

How To Organize The Review

Create folders for financials, customers or traffic, operations, technology, legal and transfer. Keep a question log beside the documents so every unresolved item has an owner and status. Record where each important number came from. This is especially useful when several versions of a P&L, analytics export or customer report circulate during negotiations.

When To Escalate To Specialists

Bring in specialist help when the risk exceeds your ability to verify it. Examples include complex codebases, security or privacy exposure, regulated products, significant tax questions, intellectual-property uncertainty, unusual contracts or financial statements that require quality-of-earnings work. The cost of specialist review should be weighed against deal size and the consequence of getting the issue wrong.

What A Good Diligence Conclusion Looks Like

The output should not be a pile of documents. It should state which claims were verified, which remain uncertain, the material risks, the financial adjustments, the required closing conditions and whether the original investment case still holds. That conclusion gives the buyer a basis for proceeding, repricing, restructuring or stopping the deal.

Related Guides

• Financial Due Diligence For Online Businesses
• Website Traffic Due Diligence
• Technical Due Diligence For Digital Businesses
• Red Flags When Buying An Online Business
• Online Business Asset Transfer Checklist