Preparing your startup for acquisition due diligence

Acquisition due diligence is the structured review a buyer runs on a company before it signs a merger or purchase agreement. The buyer’s lawyers, accountants, engineers and HR team read your records to confirm value, find liabilities and draft the protections they will ask for in the contract. Preparing for it means doing that same review on yourself first, while you still control the timing.

Founders often treat diligence as paperwork that starts when the buyer sends a request list. In practice the request list is the second step. The first is what the buyer’s team saw before the LOI, and how quickly your answers came back. A room that is complete on day one tells a buyer the company is run well. A room that fills up slowly tells them to look harder.

What does a buyer check in acquisition due diligence?

Each buyer workstream has its own reviewer and its own list. Strategic acquirers lean on their in-house corporate development, legal and engineering teams. Private equity buyers bring outside accountants and lawyers and usually order a quality of earnings report. Either way, the review covers the same ground.

The technical workstream has grown in weight for software companies, so we gave it a separate guide: the technical due diligence checklist for startups walks through code, open source licences, security and the engineering team.

How long does acquisition due diligence take?

Timelines vary with the buyer, the deal size and how ready you are. A banker-run auction for a later-stage company takes longer than a single-buyer acquisition of a seed-stage team. The ranges below are common for venture-backed US companies and are planning figures, not rules.

A simultaneous sign and close is common in smaller startup deals where no regulatory filing is needed. Where an HSR filing or a foreign investment review applies, signing and closing are split and the gap is set by the agency’s timetable.

When should you start preparing, and in what order?

Six months before you speak to buyers is a sensible target. Some fixes depend on people outside the company (a former contractor who must sign an assignment, a customer whose consent you need, an investor who must approve a charter change), and those cannot be rushed. The plan below works backwards from the first buyer conversation.

Our data room readiness score gives a quick number for where you stand on the nine document sets buyers and investors check first. It is a useful check at month 6 and again at month 1.

How should a sell-side data room be organised?

Number the folders and keep the numbering fixed for the whole process. Buyer counsel will refer to documents by folder number in request lists, in Q&A and later in the disclosure schedules. A stable index also makes the final archive easy to read if a claim comes up after closing.

A few habits make the index work in practice:

• One document, one place. If a contract belongs in two folders, file it once and add a cross-reference sheet.
• Name files the way lawyers search. “2024-03 Acme MSA signed.pdf” beats “final_v3.pdf”.
• Mark gaps instead of hiding them. A placeholder that says “Board consent for 2023 option grants: ratification in progress” earns more trust than a missing file found in week four.
• Keep drafts out. Only signed, final versions go in. Drafts invite questions about which version governs.

Our startup data room checklist lists the documents behind each folder and lets you tick them off by stage.

Who should see what, and when?

Not every bidder needs every file, and not at the same time. A buyer that competes with you should never see customer-level pricing until the deal is close to signing, and then only through a clean team: named people, often outside advisers, who are walled off from the buyer’s sales and pricing staff. US antitrust agencies treat premature sharing of competitively sensitive information between competitors as a risk, so ask counsel to set the clean team rules in writing.

The access log matters beyond security. When you prepare disclosure schedules, you need to show what the buyer was given and when. A room that records each view and download per user, with a date, gives your counsel that record.

Which diligence findings lower the price?

Most deals survive diligence. The cost of a finding shows up in the contract instead. The table maps common startup findings to the deal term they usually turn into and the fix that removes them before a buyer looks.

How do reps, disclosure schedules, escrow and R&W insurance fit together?

The merger agreement contains representations and warranties: statements of fact about the company, such as “the company owns its IP” or “there is no pending litigation”. The disclosure schedules list the exceptions. If a representation turns out to be wrong and the matter was not disclosed, the buyer can claim losses under the indemnification provisions, within the caps, baskets and survival periods the parties agreed.

Buyers secure those claims in a few ways, and the mix depends on deal size and the parties’ bargaining power.

RWI underwriters review the buyer’s diligence reports and often the data room itself, and policies generally exclude matters the deal team knew about. That makes a complete, well-indexed room valuable twice: once for the buyer, and again for the underwriter whose questions can delay signing. RWI is more common on mid-size and larger deals; on small acquisitions buyers tend to rely on escrow and indemnity alone. Terms, retentions and pricing move with the insurance market, so ask your banker or counsel for current ranges.

Which approvals and filings can delay closing?

Several approvals sit outside diligence but depend on it. Plan for them early, because they set the earliest closing date.

• Board and stockholder approval. For a Delaware corporation, a merger needs board approval and adoption by the stockholders under section 251 of the Delaware General Corporation Law. Drag-along terms in your voting agreement may require holders to vote in favour, and stockholders who do not consent may have appraisal rights.
• HSR filing. Larger deals must be reported to the FTC and the Department of Justice under the Hart-Scott-Rodino Act before closing, followed by a waiting period, normally 30 days. The size-of-transaction threshold is adjusted every year; check the current figure on the FTC premerger notification page. Many startup acquisitions fall below it, but the test is about the deal value, not the company’s revenue.
• Foreign investment review. A non-US buyer acquiring a US business may fall under CFIUS review, and some filings are mandatory, for example for certain critical technology companies. Export control classifications of your product feed into that analysis.
• Third-party consents. Customer, supplier, landlord and lender consents flagged in your contract index.
• Section 280G. Change of control payments to executives can trigger the golden parachute rules. A private company can usually avoid the excise tax through a stockholder vote of more than 75% of disinterested holders, which needs its own disclosure and lead time.

None of these is unusual, and counsel will handle the filings. What preparation changes is whether the inputs (the cap table, the list of payments to executives, the export classification, the consent list) already exist when they are needed.

Which data rooms suit a sell-side process?

A sell-side room has different needs from a fundraising room. You will have several bidders who must not see each other, a Q&A volume that can run into hundreds of questions, lawyers who download for their own files, and a disclosure record you may need years later.

For a startup sale, look for five things: separate groups per bidder with their own Q&A, view-only and watermarking that you can set by folder, a per-user activity log you can export for the disclosure schedules, bulk upload that keeps your folder numbering, and a clean archive at closing. AI help with sorting uploads and drafting answers to repeat questions saves time when the request list is long; the table shows which rooms list it.

Large auctions with dozens of bidders are where the quote-only M&A platforms built their name; a single-buyer acquisition of a Series A company rarely needs that scale. See our ranking of data rooms for startups for the full scoring, and the use-case pages for a sell-side process and a sale to a strategic acquirer for how the ranking shifts with the deal.

What does a data room for a sale cost?

Cost depends on how long the process runs, how many people on your side manage the room and how much data you share. A banker-led sale often keeps the room open for five to seven months, from the first-round room to closing and the archive, and a sell-side room with contracts, code documents and HR files usually passes 10 GB. Published plans are simple to multiply out; quote-only vendors price per project, and the pricing guide gives our indicative monthly bands for them by data size.

Put the plan you are considering into the calculator and set the months to the length of your process plus one for the archive. Compare that with the other costs of a sale: banker fees, legal fees, a possible quality of earnings report and, where used, an RWI premium. The room is a small line in that budget, but slow answers and missing files cost time under exclusivity, and time under exclusivity is when the buyer holds the stronger hand.

What should be done before the first buyer opens the room?

If you are earlier in the life of the company, the same discipline pays off in every round. The selling your startup use case shows the full index with notes for each folder, and the private equity buyer page covers what changes when the buyer is a fund.