M&A Due Diligence: A UK CFO’s Guide

M&A Due Diligence: A UK CFO’s Guide

Due diligence is the structured investigation a buyer conducts on a target business before completing an acquisition — and the structured preparation a seller undertakes to support that investigation. For UK mid-market M&A transactions, due diligence typically spans financial, commercial, tax, legal, operational, IT, HR, and increasingly ESG workstreams over 6-12 weeks, generating thousands of data points, hundreds of Q&A items, and specialist advisor reports that feed directly into deal terms, purchase price adjustments, and post-completion commercial arrangements.

This guide explains the due diligence process from both buy-side and sell-side perspectives, sets out the major workstreams, and addresses how experienced UK CFOs prepare for, manage, and respond to due diligence. For founders preparing for exit, understanding due diligence dynamics shapes the preparation work done 12-24 months before formal process. For CFOs joining PE-backed businesses or acquisitive groups, due diligence leadership is often a core role expectation.

The Due Diligence Framework

M&A due diligence typically encompasses multiple specialist workstreams, each investigating specific aspects of the target business.

Financial Due Diligence (FDD)

The core workstream examining the target’s financial performance, financial position, and quality of earnings. Typically performed by transaction services teams at Big 4 firms (Deloitte, EY, KPMG, PwC) or specialist mid-market TS firms (BDO, Grant Thornton, Mazars, RSM, Saffery, and others).

Key FDD areas: quality of earnings analysis (identifying non-recurring, owner-related, or accounting-adjusted items affecting reported EBITDA); working capital analysis and normalised working capital definition; cash flow quality and conversion; revenue quality and customer concentration; cost base sustainability; balance sheet debt-like items; management accounts reliability vs statutory accounts.

FDD typically produces a 100-200 page report with specific adjustments to reported EBITDA, a recommended normalised working capital target, identification of debt and debt-like items, and specific points for commercial negotiation.

Commercial Due Diligence (CDD)

Examines the target’s market position, competitive dynamics, customer relationships, and commercial prospects. Performed by specialist commercial due diligence firms (OC&C, LEK, AlixPartners, CIL) or in-house PE commercial teams.

Key areas: market size and growth trajectory; competitive positioning; customer interview programme (typically 20-50 customer interviews for mid-market deals); supplier dynamics; regulatory environment; management assessment; growth opportunities and plan feasibility.

CDD informs deal pricing, business plan validation, and strategic narrative for financing.

Tax Due Diligence

Examines historical tax compliance, exposure to tax liabilities, tax planning efficiency, and tax structuring for the transaction. Performed by Big 4 tax teams or specialist tax practices.

Key areas: corporation tax compliance and exposures; VAT compliance and exposures; PAYE and employment tax; international tax arrangements (if relevant); R&D tax relief claims validity; SDLT on transaction structure; capital gains implications; tax warranty and indemnity scope.

Legal Due Diligence

Examines contracts, corporate structure, compliance, litigation, and legal risks. Performed by M&A legal firms (Magic Circle, Silver Circle, mid-market specialists, or boutique M&A firms depending on deal size).

Key areas: corporate documentation and cap table; material contracts (customers, suppliers, employment, property); litigation and disputes; regulatory compliance; IP ownership; data protection compliance; competition law issues; W&I insurance scope preparation.

Operational Due Diligence

Less common than FDD/CDD for straightforward transactions but important for complex businesses. Examines operational systems, processes, capacity, and risks.

Key areas: operations and supply chain; systems and data quality; property portfolio; health and safety compliance; capex requirements; operational resilience; critical process dependencies.

IT Due Diligence

Examines technology infrastructure, software assets, cyber security, and technology risks. Increasingly material given business technology dependency and cyber exposure.

Key areas: IT infrastructure and architecture; software licensing and compliance; cyber security maturity and incident history; data privacy compliance (UK GDPR); technology integration complexity; IT capex requirements.

HR Due Diligence

Examines employment arrangements, pension obligations, HR compliance, and people risks.

Key areas: employment contracts and compliance; pension scheme liabilities (particularly defined benefit); share scheme obligations; employment disputes and tribunal claims; key employee arrangements and retention risks; TUPE implications.

ESG Due Diligence

Increasingly standard for mid-market and larger transactions. Examines environmental, social, and governance factors.

Key areas: environmental compliance and historical liabilities; carbon footprint and transition risks; diversity and inclusion metrics; supply chain sustainability; governance effectiveness; stakeholder relationships; TCFD-related disclosures for larger UK businesses.

The Sell-Side Perspective: Preparing for Due Diligence

Sellers preparing for M&A should recognise that due diligence preparation begins long before formal process — typically 12-24 months before anticipated transaction.

Pre-process preparation

12-24 months before process:

• Clean up historical accounting issues — provisions, accruals, one-off items handled consistently
• Ensure management accounts reconcile reliably with statutory accounts
• Document accounting policies clearly
• Structure tax arrangements conservatively — aggressive tax positions create DD issues
• Ensure R&D tax relief claims are well-documented if historical
• Identify potential non-recurring items that would add back to EBITDA
• Document management information reporting to investor-quality standard
• Review contract portfolio for change-of-control issues
• Address any material litigation or dispute situations

Formal preparation phase

3-6 months before process:

• Engage sell-side financial advisor (Corporate Finance Boutique or investment bank)
• Commission vendor due diligence (VDD) if appropriate — a seller-commissioned FDD that buyers can rely on
• Prepare Information Memorandum (IM) setting out the commercial proposition
• Assemble data room with comprehensive supporting documents
• Define management team roles during process (information provider, interview participant, etc.)
• Clear communication strategy with employees, customers, suppliers if confidentiality permits

Vendor Due Diligence considerations

VDD is increasingly common for UK mid-market transactions. Benefits include: consistent starting point for all buyers (levelling playing field); controlled information release timing; early identification and framing of issues; reduced time for buyer DD; stronger seller negotiation position.

Typical VDD cost: £150-400k for mid-market transactions depending on complexity. Economic benefit typically exceeds cost through reduced deal friction and better terms.

Data room construction

The data room is the organised repository of all information provided to buyers during DD. Typical structure includes:

• Corporate and legal documents
• Financial information (historic accounts, management accounts, forecasts)
• Tax documentation
• Customer and supplier contracts
• Employment information
• Property and assets
• IT and systems
• Insurance and risk
• Intellectual property
• Regulatory and compliance

Modern virtual data rooms (Intralinks, DealRoom, Datasite, Firmex) provide access control, activity tracking, Q&A management, and audit trails essential for process management.

The Buy-Side Perspective: Running Due Diligence

Buyers running due diligence face different disciplines — managing multiple advisor workstreams, prioritising investigation depth against time and cost constraints, and distilling findings into commercial decisions.

DD planning and scoping

Before formal DD commences, the buy-side typically defines:

• Critical investigation areas based on initial deal assessment
• Advisor workstreams and scope
• Timeline and milestone structure
• Internal management responsibilities
• Budget parameters
• Integration planning overlay

Good DD scoping prevents scope creep and investigation beyond useful depth. Focused DD on genuine risks typically produces better decisions than comprehensive coverage of every possible issue.

Workstream coordination

Multiple advisor workstreams running simultaneously require coordination. Typical approach: weekly advisor status calls covering cross-workstream issues; central Q&A management; regular internal reviews of emerging findings; deal team working group sessions to translate findings into commercial implications.

Key findings and deal implications

As DD progresses, findings begin to shape deal terms. Typical commercial implications:

• EBITDA adjustments: Quality of earnings findings may reduce headline EBITDA, affecting enterprise value
• Working capital target: Normalised working capital target affects closing adjustments
• Debt-like items: Identified debt-like items typically adjust equity value dollar-for-dollar
• Warranty and indemnity scope: Findings identify specific protection requirements
• Completion conditions: Material issues may become conditions to completion
• Price adjustments: Findings may trigger price chip or purchase price adjustment
• Integration planning: Operational findings inform integration approach

Red flags and deal risks

Specific DD findings sometimes raise serious deal risk:

• Management accounts materially inconsistent with statutory accounts
• Aggressive or unsupported tax positions creating material exposure
• Revenue quality issues (concentration, contract dependencies, accounting timing)
• Undisclosed litigation or regulatory issues
• Systems failures or cyber security weaknesses
• Key customer relationships at risk
• Culture or management quality concerns affecting post-acquisition prospects

Red flags typically escalate to investment committee or deal principal for re-evaluation of proceed/withdraw/re-price decisions.

Quality of Earnings: The Critical FDD Concept

Quality of Earnings (QoE) analysis is typically the central FDD output, identifying the “true” sustainable EBITDA of the business as the basis for pricing.

Typical QoE adjustments

Non-recurring items: One-off costs, gains, or losses that don’t reflect ongoing operations. Examples: restructuring costs, legal settlements, one-off asset disposals, exceptional contract wins or losses.

Owner-related items: Costs benefiting owners rather than business. Examples: above-market director remuneration, personal expenses, owner-related assets (cars, properties used privately).

Accounting adjustments: Items where accounting treatment differs from economic substance. Examples: revenue recognition timing, provision movements, inventory adjustments.

Normalisations: Adjustments to reflect sustainable operating level. Examples: bad debt adjustments, warranty provisions at sustainable levels, maintenance capex at level required to sustain operations.

Pro forma adjustments: Adjustments for full-period impact of in-period changes. Examples: full-year effect of recent acquisitions, annualised impact of product launches, lost customer adjustments.

Typical QoE impact on mid-market deals

QoE adjustments typically modify reported EBITDA by 5-20% in either direction for UK mid-market deals. Where QoE reduces EBITDA, the adjustment flows through to price at the agreed EBITDA multiple. A £1 million QoE reduction at 8x multiple reduces enterprise value by £8 million. Understanding QoE concepts is therefore economically material for both sellers and buyers.

Managing the Q&A Process

Due diligence generates hundreds of Q&A items across workstreams. Effective Q&A management is a core discipline for both sides.

Seller-side Q&A management

• Single point of coordination. Typically the CFO or sell-side advisor acts as Q&A gatekeeper — all questions flow through one person to ensure consistent responses.
• Response quality. Clear, specific, documented responses improve process efficiency. Vague responses generate follow-up questions and erode buyer confidence.
• Sensitive information management. Specific items (customer names, contracts, IP) may require graduated disclosure or clean team arrangements.
• Timing discipline. Prompt responses maintain process momentum. Delays signal either lack of preparation or something to hide.
• Internal team coordination. Response quality requires engagement from multiple internal teams (finance, sales, operations, HR, IT). CFO typically coordinates internal response capability.

Buyer-side Q&A management

• Focused questioning. Good DD asks sharp, specific questions rather than broad information requests. Focused Q&A identifies issues efficiently.
• Workstream coordination. Avoiding duplicate questions across workstreams requires coordination. Most DD processes maintain central Q&A logs.
• Findings integration. Q&A responses should be reviewed for findings implications, not just information gathering. Translation into deal implications is what creates value.

Post-DD Steps and Completion

As DD concludes, findings feed into final deal terms and documentation.

Final deal terms

DD findings inform: final enterprise value and equity value; working capital target and mechanics; specific warranty and indemnity provisions; escrow or retention arrangements; completion conditions and representations; post-completion earn-out terms; management incentive structures.

W&I insurance

Warranty and Indemnity insurance is now standard for UK mid-market transactions. DD findings directly inform W&I underwriting, affecting specific exclusions, warranty scope, and pricing. W&I insurers conduct their own DD review alongside buyer processes.

Closing mechanics

Purchase price adjustments between signing and closing (if applicable) depend on completion accounts mechanisms negotiated during DD. Working capital adjustments, debt and cash position, and specific other items can all affect final completion amounts.

Day 1 readiness

DD findings inform Day 1 operational requirements — integration planning, communication strategy, transition arrangements, interim management needs. Well-conducted DD typically produces Day 1 readiness as a by-product.

The CFO’s Role Throughout M&A Due Diligence

CFO involvement is central from before process commencement through completion and integration.

Pre-process preparation: Leading accounting clean-up, management information upgrade, data room preparation, and advisor engagement.

Information provision: Primary information source for financial, operational, and strategic DD. Quality of provided information directly affects DD efficiency and findings.

Management presentations: Leading or contributing to management presentations to buyers or investors, presenting business performance and forward plans credibly.

Deal negotiation: Technical input into EBITDA adjustments, working capital negotiation, debt-like items, and specific commercial terms with financial implications.

Integration planning: For acquired businesses, planning operational integration, systems migration, reporting alignment, and team integration.

CFOs with significant M&A experience bring specific value to transaction-active businesses. Our CFO recruitment, interim CFO, and specialised PE FD and CFO recruitment practices regularly place candidates with direct M&A experience.

Frequently Asked Questions

How long does M&A due diligence take?

For UK mid-market transactions: typically 6-12 weeks from access to data room through to findings-ready status. Smaller transactions may complete in 4-6 weeks; complex transactions with multiple workstreams may extend to 12-16 weeks. Urgent timelines (e.g., competitive processes) can compress DD to 4-6 weeks.

What does due diligence typically cost?

For UK mid-market transactions (£20-100m enterprise value): total advisor fees typically £500k-2m across buy-side DD workstreams. Larger transactions scale up proportionally. Sell-side VDD: £150-400k typical range. W&I insurance: typically 0.8-1.5% of insured limit.

What’s the difference between buyer and seller due diligence?

Buyer DD is investigation — the buyer examining the target to validate assumptions and identify risks. Seller DD (Vendor Due Diligence) is preparation — the seller commissioning investigation to support the sale process, identify issues before buyers find them, and level the information playing field across multiple bidders.

Should I get Vendor Due Diligence?

For competitive mid-market sale processes, VDD is typically worth the cost. It controls information release, levels treatment across bidders, identifies issues before buyers raise them, and typically strengthens seller negotiation position. For small transactions or bilateral deals, cost may exceed benefit.

What’s Quality of Earnings and why does it matter?

QoE analysis identifies sustainable EBITDA by adjusting for non-recurring, owner-related, and accounting-driven items. It matters because enterprise value is typically determined as sustainable EBITDA times an agreed multiple. QoE adjustments flow directly through to price — a £500k EBITDA adjustment at 8x multiple changes price by £4m.

What are the most common due diligence red flags?

Common red flags include: management accounts inconsistent with statutory accounts; aggressive revenue recognition practices; customer concentration risks not previously disclosed; undisclosed litigation or regulatory issues; tax exposures; material cyber or data protection issues; key person dependencies without succession plans; unsustainable cost bases propped up by one-off savings.

How early should sellers start preparing for due diligence?

12-24 months before anticipated process ideally. Structural issues (accounting policies, tax positions, contract arrangements) often take time to address. Starting late limits preparation options and may force specific issues to be disclosed during process rather than resolved in advance.

What’s W&I insurance and how does it affect DD?

Warranty and Indemnity insurance provides buyer protection against breach of seller warranties without seller escrow or indemnity. It’s now standard for UK mid-market M&A. W&I insurers conduct their own DD review, with specific exclusions where they identify material risk. DD findings directly affect W&I pricing, exclusions, and available coverage.

What’s a clean team arrangement?

Clean team arrangements allow competitively sensitive information to be shared with specific designated reviewers (clean team) without wider buyer access. Used for customer pricing, specific contract terms, or IP where broader access could create competitive concerns if deal doesn’t complete. Increasingly common in specific sectors.

How do I prepare financial information for DD?

Core requirements: audited statutory accounts (3 years); monthly management accounts (36+ months with comments); trial balances with account mapping; budget and forecast with supporting assumptions; trading KPIs (sector-specific); working capital analysis (monthly over period); customer and supplier analysis; detailed general ledger or trial balance detail. Management information that reconciles cleanly with statutory accounts is fundamental.

What do commercial DD interviewers ask customers?

Typical customer interview coverage: relationship history and scope; satisfaction with the target’s service; pricing and value perception; competitive alternatives considered; relationship criticality and switching costs; growth or reduction trajectory in relationship; any specific issues or concerns. Interviews are usually anonymous and non-attributable to maintain candid responses.

How does DD affect deal structure?

DD findings commonly affect: purchase price (up or down based on findings); working capital target; debt and debt-like items definition; specific warranty scope; escrow or retention arrangements; completion conditions; earn-out structures. DD is therefore commercially critical alongside simply being an information exercise.

What’s TCFD and how does it affect DD?

TCFD (Task Force on Climate-related Financial Disclosures) is the climate disclosure framework adopted by UK regulation for larger businesses. DD increasingly covers TCFD preparedness, climate transition risks, and carbon footprint. For businesses approaching TCFD-mandatory scale, TCFD-ready disclosures affect buyer valuations.

Should the CFO lead the DD response?

Typically yes for financial, tax, and operational DD workstreams — the CFO has the relevant information and understanding. Legal DD is typically led by legal advisors with CFO input on specific areas. Commercial DD involves CEO, CFO, and commercial leadership. The CFO is usually the DD process coordinator on sell-side.

Related Finance Guides

Readers interested in M&A due diligence may also find these guides useful: Business Exit Preparation | Business Asset Disposal Relief (BADR) | EBITDA and Exit Valuation | How to Prepare for Private Equity | Management Accounts | Financial Ratios Analysis | Financial Metrics & KPIs | CFO Recruitment | Interim CFO | PE FD and CFO Recruitment