The Seven Diligence Gates for M&A

Buyers underwrite the cap table as much as the product. They're deciding whether the deal can close cleanly. Overcapitalization, aggressive preference stacks, significant founder liquidity, or anchoring to last-round valuation create friction that has nothing to do with operating quality.

How Buyers Test It

They run the waterfall math at multiple exit values to see who gets paid and whether management still has meaningful upside. They look for valuation anchoring — founders who price against their last round while buyers price against ARR, EBITDA, integration cost, and risk-adjusted returns. They assess whether VCs can be made whole without killing deal economics. And they watch for secondary transaction optics, because founder liquidity changes negotiation dynamics even when nothing operational is wrong.

Common Failure Mode

Multiple buyers told us they prefer bootstrapped companies over VC-backed ones because governance is cleaner and waterfalls are cheaper. Founders are often still anchored to 2021 pricing, which turns a sellable company into an unsellable negotiating stance.

“VC-backed deals are expensive because you have to make VCs whole and give management upside.” — PE firm

What to Have Ready

• —Current cap table with fully diluted ownership, including SAFEs and convertible notes
• —Preference stack summary by series and liquidation waterfall model
• —Board approvals and consent requirements map: who has to say yes
• —Option pool summary and management incentive plan

Growth without economics is a story. Buyers want both, and they use a consistent metric stack to test whether your numbers hold up or fall apart under scrutiny.

How Buyers Test It

They look at unit economics trendlines, not snapshots. They want to see where margin expansion comes from and whether it's repeatable. They test whether margin is driven by pricing, mix, or cost structure. They assess efficiency through burn rate, runway, revenue per employee, and sales productivity. And they pressure-test whether the business works standalone or only makes sense as a strategic asset acquisition thesis.

Common Failure Mode

Founders optimize for topline growth without demonstrable unit economics. That creates Quality of Earnings risk and makes diligence adversarial instead of confirmatory. If buyers have to dig to find your economics, they'll assume the economics don't exist.

“First 20% EBITDA margin is where most of the value is. After that, focus shifts to revenue growth rate and sustainability.” — Investment banker

What to Have Ready

• —Cohort retention and net revenue retention analysis
• —Gross margin bridge showing drivers of change over time
• —CAC payback and sales and marketing efficiency view, even if directional
• —A quality-of-revenue narrative: what's repeatable versus what's one-off

Technology is no longer assumed to be a moat. Integration cost is what buyers actually underwrite. The question isn't whether your technology is good. It's whether acquiring it creates more work than building it.

How Buyers Test It

They start with architecture — not whether it's elegant, but how much work it takes to connect to their systems. APIs, dependencies, configurability, everything that determines time-to-integrate. They audit security posture separately: SOC2, HIPAA, and penetration test results. They ask how long deployment takes for new customers, because implementation effort is a proxy for what post-acquisition integration will cost. And they estimate time-to-synergy, which is always downstream of time-to-integrate.

Common Failure Mode

High integration cost routinely kills otherwise attractive deals. This was one of the most consistent patterns in our research. Buyers will build it themselves before they'll buy something that takes 18 months to integrate.

“Integration cost matters more than IP quality. If it's too hard to integrate, we'll just build it ourselves or partner deeper.” — Corporate acquirer

What to Have Ready

• —Architecture overview with key dependencies and integration points
• —Integration requirements: what you connect to, how, and how long it takes
• —Security packet with SOC2 and HIPAA posture, penetration test summary, and incident history
• —Implementation playbook with time-to-live benchmarks by customer type

Data is a silent deal-killer. Not the data itself, but who owns it, who can use it, and whether those rights survive a change of control. In healthtech, ambiguity in data rights doesn't get flagged early. It surfaces late in diligence, when it's expensive to fix and easy for a buyer to walk.

How Buyers Test It

They map what data you collect, where it flows, and who holds rights at each stage. They review consent and contractual posture, particularly around regulated patient data. They test whether your data model survives an ownership change by pulling assignment clauses, portability provisions, and audit rights. They look at change-of-control language in customer agreements. And in the current regulatory climate, they're asking whether your data architecture can withstand scrutiny under AI-specific legislation that didn't exist when you signed most of your contracts.

Common Failure Mode

Founders treat data rights as a legal line item. Buyers treat them as a structural risk. The gap shows up when a buyer's legal team discovers your customer contracts don't include assignment language, or that your consent framework was built for a product that looked different three years ago. The fix isn't a week of redlines. It's a renegotiation with your customer base, and most buyers won't wait for you to do it.

“Data controller versus processor isn't a legal technicality. It's a years-long compliance process, and it's one of the reasons acquisition timelines stretch past six months before the deal even gets to diligence.” — Corporate acquirer

What to Have Ready

• —Data map showing sources, storage, processing, and outputs
• —Standard customer terms and data processing agreements
• —Consent language and patient or member disclosures where relevant
• —Security and privacy compliance summary covering state privacy posture and HIPAA posture

Not all revenue is equal. One banker described a founder with $13M ARR who got passed by four PE shops because of revenue concentration. The topline looked strong. The customer mix didn't.

Buyers underwrite revenue as a package: who's paying, how sticky they are, whether those logos survive post-close, and whether the mix creates risk or leverage in a deal.

How Buyers Test It

They look at revenue concentration — what percentage comes from your top five and top ten customers. They evaluate whether the logos are ones they can retain post-close. They model cross-sell opportunity by looking at logo overlap and expansion motion. They examine net dollar retention and cohort behavior. They assess product embeddedness through switching cost and workflow integration depth. And they test referenceability: whether your customers will speak positively after the acquisition.

Common Failure Mode

Revenue concentration is the quiet killer. Founders celebrate landing a large enterprise customer without recognizing that 40% revenue from a single account turns a strength into a structural risk. If that customer churns post-acquisition, the deal thesis collapses.

What to Have Ready

• —Customer revenue concentration table
• —Retention and net revenue retention by cohort, with a churn narrative explaining why and when you lose customers
• —Reference list of customers who will speak positively
• —Pipeline quality snapshot showing diversification trajectory

The strongest exits happen when multiple credible acquirer paths are already in motion before a formal process begins. Most founders overestimate how much strategic interest they actually have. A warm conversation with Corp Dev isn't pull. Embedded partnerships that have compounded over years — that's pull.

“We view most capabilities as a partner opportunity, not an own. Acquisition only makes sense when the partnership has already proven the value.” — Corporate acquirer

How Buyers Test It

They look at whether your strategic relationships are actually progressing or just existing. A partnership that started as a pilot two years ago and is still a pilot isn't evidence of buyer pull. One that moved from pilot to expanded scope to workflow integration to co-development is. They want to see at least two or three credible acquirer paths showing that kind of progression. A single logical buyer with no competition isn't leverage. It's dependency.

Common Failure Mode

A warm email from a VP of Corp Dev is not buyer pull. An 18-month integration where your product is embedded in their workflow and their customers are asking for it — that's buyer pull. If you can't point to compounding partnership evidence with at least two credible acquirers, this gate is open.

What to Have Ready

• —Partnership inventory documenting partners, scope, maturity, and expansion history
• —Integration evidence showing technical and commercial proof of embeddedness — usage depth, workflow reliance, shared outcomes
• —Buyer map with three to five credible acquirer paths, each with a specific rationale for why acquisition makes sense now versus continued partnership

The highest-leverage sellers aren't “for sale.” They're companies that can credibly raise capital and credibly sell. Once your positioning tilts toward needing to sell, buyers wait. They don't argue. They slow-walk, reprice, or let the clock run out.

How Buyers Test It

They assess runway status — less than six months reads as time pressure regardless of what you say in the room. They evaluate founder posture: whether leadership presents as calm, crisp, and decisive or reactive and vague. They look at business trajectory through the lens of predictability, not just growth. Stable retention, consistent bookings, improving efficiency. They test operating continuity by asking whether the business can run while leadership runs a process. And they evaluate financing plausibility: can you raise on reasonable milestones without fantasy growth assumptions?

Common Failure Mode

Founders starting M&A conversations at six months of runway have already lost dual-path credibility. A normal process takes six to nine months. If you're starting the conversation when your runway matches the minimum process timeline, every buyer knows you can't walk away.

“Engage us 12 to 36 months before you want to transact. If you call us at six months runway, you're asking us to perform a miracle.” — Investment banker

What to Have Ready

• —Runway and burn narrative that holds up under scrutiny, showing what you've already done to extend runway — not what you plan to do
• —Board-ready dual-path plan covering the raise path with milestones and use of funds, the sell path with buyer map and rationale, and the keep-operating plan
• —Execution continuity plan documenting who runs the business during diligence, weekly operating cadence, and owners for renewals, pipeline, and delivery
• —Trailing twelve-month metrics showing stability in retention, bookings, margin, efficiency, and pipeline health