Acquisition Due Diligence Explained: Checklist For Business Buyers In The UK

Buying a business can be an exciting shortcut to growth. Instead of building everything from scratch, you’re buying customers, revenue, staff, systems, IP, and momentum.

But here’s the catch: you’re also buying the risks.

That’s why acquisition due diligence matters. It’s the process of properly checking what you’re buying (and what could go wrong) before you sign and pay. Done well, it helps you avoid nasty surprises, negotiate a better deal, and set up the acquisition so you’re protected from day one.

Below, we’ll break down what acquisition due diligence is, what it typically covers for UK small business buyers, and a practical checklist you can use to organise your process.

What Is Acquisition Due Diligence (And Why Do Small Businesses Need It)?

Acquisition due diligence is the investigation you carry out before buying a business (or buying shares/assets from a business). The goal is to verify that what the seller has told you is accurate and to identify legal, financial, operational, and commercial risks.

If you’re wondering what is due diligence in business in plain English, it’s basically:

• Checking the business is what it says it is;
• Confirming the assets you think you’re buying are actually owned by the seller;
• Identifying problems that could cost you money later; and
• Using those findings to shape the contract (or even decide to walk away).

Due diligence isn’t only for huge corporate deals. It’s often even more important for small business buyers, because:

• You may have less margin for error if something goes wrong post-completion.
• You’re more likely to be buying a “founder-run” business where important things live in people’s heads (or emails).
• Key contracts might be informal, outdated, or missing.
• One issue (like a landlord refusing consent to assign a lease) can derail the whole deal.

What Exactly Are You Trying To Achieve With Due Diligence In Business?

Good due diligence in business isn’t just a box-ticking exercise. You’re trying to get clear answers to a few practical questions.

1) Are You Buying Shares Or Assets (And Does It Match Your Risk Appetite)?

Many first-time acquirers don’t realise how different the deal can be depending on structure:

• Share purchase: you buy the company (including its history, liabilities, contracts, and obligations).
• Asset purchase: you buy selected assets (often safer, but can be more admin-heavy because you may need to transfer/replace contracts, staff arrangements, licences, IP, and leases).

Due diligence helps you choose the structure and negotiate safeguards. It also informs what protections you need in the purchase document (for example, warranties, indemnities, retention, or earn-out mechanics), which are typically documented in a Business Sale Agreement.

2) Can The Business Actually Operate The Same Way After Completion?

This is a big one for small business acquisitions. You’re not just buying “revenue”; you’re buying the ability to keep delivering the product or service. Due diligence should test whether the business can keep running when:

• The owner steps away;
• A key supplier relationship changes;
• The lease is up for renewal;
• Staff leave or need to transfer across; or
• The business needs certain licences, consents, or systems to operate legally.

3) Are There Any Deal-Breakers Or Negotiation Points?

Sometimes due diligence uncovers something that makes the deal unviable (for example, the seller doesn’t own the IP, or there’s a major dispute underway). Other times, it uncovers issues that aren’t fatal but should affect:

• The purchase price;
• The payment structure (earn-out/retention);
• The scope of what you’re buying; and/or
• What the seller must fix before completion.

What Does Acquisition Due Diligence Cover? (The Core Areas)

Acquisition due diligence can be tailored to the business and industry, but for most UK SMEs, it usually covers the areas below.

Corporate And Ownership Checks

• Who owns the company (or assets) you’re buying?
• Are there any shareholders, option holders, or third-party rights that could block the sale?
• Are the company’s filings and internal governance in order (for example, director appointments, share issues, and key resolutions)?

If you’re buying a company (rather than just assets), it’s common to review its constitutional documents and how decisions are made. Where relevant, a tailored Shareholders Agreement can be important post-acquisition if there will be more than one owner going forward.

Financial And Tax (Usually With Your Accountant)

• Revenue quality (recurring vs one-off, customer concentration).
• Debts, liabilities, and cash flow issues.
• Tax compliance (PAYE, VAT, Corporation Tax) and any known HMRC disputes or arrears.
• Are there any unusual adjustments, related-party transactions, or personal expenses running through the business?

Even though this article focuses on the legal side, financial diligence is closely connected: legal problems often become financial problems very quickly.

Note: This article is general information only and isn’t tax, accounting or financial advice. You should speak to a qualified accountant/tax adviser for financial and tax due diligence (including VAT, PAYE and Corporation Tax position), and to confirm the right structure for your purchase.

Key Contracts (Customers, Suppliers, Finance, Leases)

One of the most valuable parts of acquisition due diligence is working out whether key contracts will continue after the purchase.

Things to look for include:

• Change of control clauses (common in customer/supplier agreements) that allow termination if the business changes hands.
• Assignment restrictions (particularly important in asset purchases).
• Exclusivity clauses that could block your plans to expand or diversify.
• Personal guarantees given by the seller (you may need replacements).

If contracts need to move from the seller to you (or from one entity to another), you may need a Deed of Novation so the rights and obligations transfer cleanly.

Employment And TUPE

If the business has staff, you’ll want to understand exactly what obligations come with them.

• Who is employed vs self-employed (and is that classification defensible)?
• Are there written contracts, and do they reflect what happens in practice?
• Any ongoing disputes, grievances, disciplinaries, or tribunal risks?
• Holiday pay, sick pay, pensions auto-enrolment compliance, and working time compliance.

In many asset purchases, the TUPE regulations (Transfer of Undertakings (Protection of Employment) Regulations 2006) can apply, meaning employees may automatically transfer to you with their existing rights.

If you’ll be issuing new documents post-completion (or hiring additional team members as you grow), having an appropriate Employment Contract in place helps set expectations and reduce disputes.

Intellectual Property (Brand, Content, Software, Know-How)

For many small businesses, the “real value” is the brand, website, domain, customer database, or proprietary processes.

Your due diligence should confirm:

• What IP exists (trade marks, logos, domain names, copyrighted material, software, designs, manuals, content).
• Who owns it (the company, the founder personally, or a contractor?).
• Whether any third-party licences apply (and whether they can transfer).
• Whether the business has been using others’ IP without permission (a hidden dispute risk).

If IP has been created by founders or contractors personally (which is very common), you may need an IP Assignment to ensure the business (or you as the buyer) actually owns what you think you’re paying for.

Data Protection And Privacy (Often Overlooked)

If the business holds customer data, mailing lists, employee records, or uses online tracking/marketing tools, data protection due diligence matters.

In the UK, the key framework is the UK GDPR and the Data Protection Act 2018. Practically, you should check:

• What personal data is collected and why.
• How it’s stored and protected.
• Whether marketing consents are valid (especially if you’re buying a database).
• Whether there have been any data breaches or ICO issues.

A well-drafted Privacy Policy is often a quick indicator that the business has at least thought about compliance (although it’s not proof everything is perfect).

Regulatory, Licences, And Sector-Specific Compliance

Depending on the industry, this can include:

• Local authority licences and permits (for example, food, health, beauty, events, or certain retail activities).
• Advertising and consumer law compliance (especially if selling to consumers under the Consumer Rights Act 2015).
• Health and safety compliance and policies.
• Industry rules (professional standards, FCA-related restrictions, etc.).

Don’t worry if this feels like a lot - the point is to scope what’s relevant to your acquisition, then go deep where it matters.

Acquisition Due Diligence Checklist For UK Buyers (Practical And Actionable)

Here’s a checklist you can use to run your acquisition due diligence in a structured way. You might not need every item, but this is a solid starting point for most small business purchases.

Step 1: Get Clear On The Deal Terms Early

• Are you buying shares or assets (or both)?
• What exactly is included: stock, equipment, IP, customer lists, websites, social accounts, goodwill?
• Is any part of the price deferred (earn-out/retention)?
• Is the seller staying on for a handover period, consultancy, or employment?

Step 2: Request A Due Diligence Pack

A seller will often provide a data room or document pack. If you want a clear structure for what to request and how to review it, a Legal Due Diligence Package can help keep the process focused and consistent.

Typical documents to request include:

• Corporate documents (Companies House filings, registers, cap table, resolutions).
• Financial statements and management accounts.
• Customer and supplier agreements.
• Lease(s), licences, insurance policies.
• Employment records and contracts.
• IP documentation (trade marks, licences, contractor agreements).
• Privacy/data protection documents and policies.

Step 3: Verify Ownership And Authority

• Does the seller have authority to sell (and is anyone else’s consent required)?
• If it’s a company sale, are all shares accounted for and owned as stated?
• If it’s an asset sale, does the seller own the assets personally or through the company?

Step 4: Review Key Contracts For Transfer And Risk

• Identify the top 5–10 most important revenue contracts.
• Identify the critical suppliers and whether pricing/terms are locked in.
• Check for change of control, termination, and assignment clauses.
• Check contract duration, renewal terms, and any auto-renew obligations.
• Check whether there are any disputes, service credits, or performance issues.

Step 5: Assess Employment Exposure

• List all employees and contractors (role, start date, salary/rate, benefits, notice).
• Check if TUPE is likely to apply (especially in asset purchases).
• Ask about grievances, disciplinaries, settlement discussions, or tribunal threats.
• Confirm right to work checks, pension compliance, and any bonus/commission schemes.

Step 6: Check IP And Digital Assets

• Confirm who owns the domain names and website accounts (and how access will be transferred).
• Confirm ownership of brand assets, logos, content, photos, and software.
• Check contractor agreements for IP ownership clauses.
• Identify any third-party software licences or subscriptions that are business-critical.

Step 7: Confirm Data Protection And Cyber Basics

• Map what personal data the business holds (customers, staff, suppliers).
• Check how marketing lists were collected and whether consent is valid.
• Ask about any data breaches and incident response steps.
• Check who has admin access to key systems and how credentials will be handed over.

Step 8: Turn Findings Into Deal Protections

Your due diligence findings should feed directly into the purchase contract and completion steps. Common legal protections include:

• Warranties (promises from the seller about the business, giving you a claim if they’re untrue).
• Indemnities (seller covers specific known risks, like an ongoing dispute).
• Conditions precedent (things that must happen before completion, like landlord consent).
• Retention/escrow (holding back part of the price for a period).
• Specific completion deliverables (handover of passwords, original documents, IP assignments, novations).

Common Acquisition Due Diligence Red Flags (That Should Make You Pause)

Some issues are manageable with the right drafting and planning. Others are signs you should slow down, renegotiate, or even walk away.

Here are red flags we often see in SME acquisitions:

• No written contracts with major customers or suppliers (or everything is “by email/handshake”).
• Revenue concentration where one customer represents a large percentage of turnover and can leave easily.
• Unclear IP ownership (for example, the founder owns the trade mark personally, or a contractor built the website with no IP assignment).
• Change of control clauses that allow key customers to terminate on a share sale.
• Lease problems (short remaining term, rent arrears, missing landlord consent, or restrictions that block your intended use).
• Employment risk (misclassified contractors, undocumented commission schemes, unresolved grievances).
• Tax arrears or inconsistent payroll/VAT practices.
• Data issues (purchased email lists, unclear consent, or poor security practices).

If you spot one of these, don’t panic - but do treat it as a prompt to get advice and build proper safeguards into the deal documents.

Key Takeaways

• Acquisition due diligence is the process of checking the legal, financial, and operational reality of a business before you buy it, so you know what you’re paying for and what risks come with it.
• If you’re asking what is due diligence in business, think of it as verification plus risk management: you confirm the facts, then use those findings to shape the deal terms.
• For most UK SME buyers, due diligence should cover corporate ownership, key contracts, employment and TUPE, IP, data protection, finance/tax, and any industry-specific compliance.
• A practical checklist (document request, review, verification, and then contract protections) helps you avoid missed issues and keeps the transaction moving.
• Red flags like missing contracts, unclear IP ownership, change of control clauses, lease issues, and employment disputes should be investigated early and reflected in the purchase agreement.
• While you can start the process yourself, due diligence and the purchase documents should be tailored - generic templates often don’t protect you properly in a real-world acquisition.

If you’d like help with acquisition due diligence or drafting and negotiating the purchase documents, you can reach us at 08081347754 or team@sprintlaw.co.uk for a free, no-obligations chat.