Private Equity Due Diligence Checklist: The 100+ Questions Every Investment Team Should Ask

Every private equity firm has a due diligence checklist.

The questions change depending on the sector, geography, deal size and investment strategy. A software buyout doesn't get diligenced the same way as a manufacturing one, and a growth investment isn't underwritten like an acquisition in distress.

The objective, however, is always the same to reduce uncertainty before capital becomes irreversible.

That's why good due diligence isn't about completing a checklist. It's about finding the one answer that changes the deal. The EBITDA add-back that isn't really one-off. The customer contract that's about to expire. The key engineer who owns half the product roadmap. The board minutes that quietly reveal a dispute no one mentioned in management presentations.

The checklist doesn't make the investment decision.

It tells you where to look next.

This guide is designed as a working document rather than an essay.

And if you're a founder preparing for diligence, these are the questions buyers are likely to ask before they write a cheque.

One principle before we begin.

The questions are only the starting point.

Every "yes" should trigger "show me." Every number should reconcile to a document. Every management claim should be tested against evidence.

1. Financial due diligence

This is the work stream where the biggest surprises usually appear, and where many deals are repriced.

Revenue is usually the first place buyers start, because almost every other part of the investment case depends on it.

• Is revenue recurring, repeatable or one-off? What percentage falls into each category?
• Does reported revenue reconcile to signed contracts and cash receipts?
• How is revenue recognised, and is the accounting policy appropriate for the business model?
• Are there large manual journal entries affecting reported revenue?
• How dependent is growth on a small number of customers or contracts?
• Has revenue growth come from existing customers, new customers or acquisitions?
• Are there unusual quarter-end sales patterns?
• Are any significant contracts due for renewal shortly after closing?
• Are there side letters, rebates or commercial terms not reflected in reported revenue?
• Is there evidence of revenue acceleration before year-end?

Profitability & Margins

Headline margins rarely tell the whole story.

The more useful question is whether you understand why margins moved.

Ask:

• What is the gross margin trend over the last three to five years?
• Can every significant movement in gross margin be explained?
• What sits inside EBITDA add-backs?
• Is every add-back genuinely non-recurring?
• Are operating expenses allocated consistently across reporting periods?
• Have any costs been capitalised that should have been expensed?
• Which products, customers or business units generate the highest margins?
• Are margins improving because of operational efficiency or accounting treatment?
• How does profitability compare with comparable businesses?

2. Commercial and market due diligence

Does the business actually win, and will it keep winning?

• What is the Total Addressable Market (TAM), and how was it calculated?
• Is the market genuinely growing, or is growth concentrated in one segment?
• Which independent sources support the market size estimates?
• What macro trends are driving demand?
• Are there regulatory or technological changes that could reshape the market?
• Is the market fragmented or already consolidating?
• How cyclical is demand?
• How vulnerable is the business to broader economic conditions?

Competitive Position

Competitive advantage should survive more than a good sales quarter.

Ask:

• What is the company's genuine competitive advantage?
• Could a well-funded competitor replicate it within two years?
• Who are the closest competitors, and where do they outperform the company?
• What does the company consistently lose deals on?
• Are customers choosing the product because it's better, cheaper or simply familiar?
• What barriers exist for new entrants?
• Does the company benefit from network effects, switching costs or proprietary data?
• How concentrated is market share?
• How predictable is the sales pipeline?
• What is the average sales cycle?
• How accurate have pipeline forecasts been historically?
• Which channels generate the highest-quality customers?
• What percentage of revenue comes from founder-led sales?
• How dependent is growth on outbound versus inbound acquisition?
• Has customer acquisition become more expensive over time?
• What is Customer Acquisition Cost (CAC), and how has it changed?
• How quickly is CAC recovered?

3. Customers and revenue quality

• What percentage of revenue comes from the top 5 customers?
• What percentage comes from the top 10?
• Would losing the largest customer materially change the investment case?
• How diversified is revenue across industries and geographies?
• Are there customers whose contracts represent outsized operational risk?
• What is Gross Revenue Retention (GRR)?
• What is Net Revenue Retention (NRR)?
• How has retention changed by customer cohort?
• Which cohorts perform best?
• Is expansion revenue concentrated among a handful of accounts?
• How much growth comes from existing customers versus new logo acquisition?

Churn & Customer Health

Churn is often hidden in plain sight.

• Is customer churn increasing?
• Is churn masked by strong new customer acquisition?
• Which customer segments churn most frequently?
• Why do customers leave?
• Are there recurring implementation or onboarding issues?
• How many customers are on month-to-month contracts?
• Which contracts renew within the next twelve months?

Customer Satisfaction

Customer references are useful. Customer behaviour is even more useful.

• What is Net Promoter Score (NPS), if measured?
• What do customer interviews consistently reveal?
• Are renewal rates improving?
• How often do customers expand their contracts?
• Are support tickets increasing?
• Which features drive the highest customer engagement?
• What complaints appear repeatedly across customer feedback?

What experienced buyers are really looking for

One unhappy customer rarely matters.

Ten customers leaving for the same reason usually does.

Patterns matter more than anecdotes. That's why customer interviews should confirm, or challenge, the numbers already visible in retention, churn and revenue data.

4. Legal and corporate due diligence

The boring workstream that quietly kills deals.

Corporate Structure

• Is the corporate structure complete and accurately documented?
• Are all subsidiaries accounted for?
• Have all board resolutions and shareholder approvals been properly recorded?
• Are historical corporate filings complete?
• Have previous acquisitions been fully integrated legally?

Material Contracts

• Which contracts contain change-of-control provisions?
• Are there exclusivity obligations?
• Are there Most Favoured Nation (MFN) clauses?
• Which customer contracts terminate automatically after an acquisition?
• Are there supplier agreements with restrictive terms?
• Are all material contracts fully executed?

Legal Risk

• Is there any ongoing or threatened litigation?
• Have previous disputes been fully disclosed?
• Are there outstanding regulatory investigations?
• Are there unresolved intellectual property claims?
• Are employment disputes likely to arise after closing?

Ownership & Governance

• Is the cap table fully reconciled?
• Are SAFEs, convertible notes and employee options correctly reflected?
• Are intellectual property assignments complete?
• Who legally owns the company's core IP?
• Are there related-party transactions?
• Are governance practices consistent with the company's stage?

What experienced buyers are really looking for:

Legal diligence rarely uncovers dramatic fraud. More often, it reveals small obligations that become expensive after closing.

An unsigned IP assignment. A customer contract that terminates automatically after a change of control.

An old shareholder agreement nobody remembered.

Individually they look manageable.

Together they can change both valuation and negotiating leverage.

5. Tax due diligence

• Are all tax returns filed across every operating jurisdiction?
• Are there outstanding audits or disputes with tax authorities?
• Has sales tax, VAT or GST been correctly collected and remitted?
• Have R&D credits or tax incentives been claimed appropriately?
• Are transfer pricing arrangements defensible?
• Are contractors correctly classified?
• Are there payroll tax liabilities?
• Are deferred tax assets likely to be realised?
• Have acquisition-related tax exposures been identified?
• Are there historical liabilities that could transfer to the buyer?

What experienced buyers are really looking for

Tax issues rarely appear as headline risks in a CIM.

They emerge when finance, legal and operational diligence begin overlapping.

That's another reminder that diligence isn't eight independent checklists. It's one investigation viewed through eight different lenses.

Technology & Security Due Diligence

Ten years ago, technology diligence was a specialist workstream.

Today, it's one of the first places buyers look.

Whether the target is a SaaS company, manufacturer or healthcare provider, technology increasingly determines scalability, operational resilience and enterprise value. Buyers aren't simply asking whether the software works. They're asking whether the business can keep growing without rebuilding its foundation.

6. Technology & Security Due Diligence

Product & Architecture

Technology should accelerate growth, not become the bottleneck.

• How is the platform architected?
• Can the current infrastructure support 10x growth?
• Which parts of the platform create the most operational risk?
• What proportion of the product relies on legacy systems?
• Are there known scalability constraints?
• How frequently is the product deployed?
• What is the average recovery time after incidents?
• How well documented is the architecture?

Engineering & Technical Debt

Technical debt isn't necessarily bad.

Undocumented technical debt usually is.

• How much engineering time is spent maintaining existing systems versus building new features?
• Which areas of the platform require significant refactoring?
• What is the estimated cost of addressing technical debt?
• How dependent is the roadmap on a handful of senior engineers?
• How mature are testing and quality assurance processes?
• What percentage of deployments are automated?
• How frequently do production incidents occur?

Cybersecurity & Compliance

Security isn't a feature.

It's part of the investment case.

• Has the company achieved SOC 2 Type II or ISO 27001 certification?
• Have there been any security incidents or data breaches?
• How were previous incidents handled?
• Are penetration tests performed regularly?
• Is multi-factor authentication enforced internally?
• How are privileged accounts managed?
• What is the disaster recovery plan?
• How frequently are backups tested?
• Is customer data encrypted both in transit and at rest?

Data Privacy & Intellectual Property

• Does the company comply with GDPR, CCPA and other applicable regulations?
• Who owns customer data?
• Are all intellectual property assignments signed?
• Are there open-source licensing risks?
• Are third-party software dependencies actively monitored?
• Is there any risk of IP disputes?

What experienced buyers are really looking for

Technology diligence isn't about finding perfect systems.

Very few businesses have them.

The question is whether today's architecture supports tomorrow's growth, or whether the next stage of scaling begins with a complete rebuild.

7. Operations Due Diligence

Every company has a strategy.

Operations determine whether it can actually execute it.

Operational diligence looks beyond financial performance to understand how the business delivers its products or services. A company can have exceptional demand and still struggle because of supplier concentration, manual processes or operational bottlenecks that don't appear in financial statements.

• Can current operations support projected growth?
• What are the biggest operational bottlenecks?
• Where are the single points of failure?
• Which suppliers are business-critical?
• How concentrated is supplier spend?
• What contingency plans exist if a key supplier fails?
• How resilient is the supply chain?
• Which operational processes remain heavily manual?
• What is the average fulfilment or delivery time?
• Which KPIs does management monitor operationally?
• How do unit economics change as the business scales?
• Are service levels improving or deteriorating?

What experienced buyers are really looking for

Businesses rarely fail because demand arrives too slowly.

More often, they fail because operations can't keep up when demand finally shows up.

8. Management & Team Due Diligence

Financial models don't build businesses.

People do.

One of the hardest parts of due diligence is evaluating management objectively. Leadership quality doesn't appear neatly in a spreadsheet, yet it often determines whether an investment outperforms or underperforms over the next five years.

The goal isn't to judge personalities.

It's to understand whether the team is capable of executing the next chapter of the business.

Leadership

• Where are the key-person dependencies?
• Which decisions still require founder approval?
• Does the current leadership team match the company's next stage of growth?
• Which critical leadership roles remain unfilled?
• Is succession planning documented?

Execution

• Do management's claims align with operational and financial evidence?
• How accurately has management forecast performance historically?
• How has the team responded to previous setbacks?
• Which strategic initiatives have consistently been delivered?
• Which initiatives failed, and why?

Incentives

• Are management incentives aligned with investor objectives?
• Is equity ownership concentrated appropriately?
• What retention mechanisms exist for key employees?
• Are compensation structures competitive?

Culture

• What does employee turnover look like?
• Which teams experience the highest attrition?
• What themes appear in employee feedback?
• Are hiring standards improving or weakening?
• How dependent is company culture on one individual?

9. ESG & Reputational Due Diligence

ESG isn't a separate investment decision.

Increasingly, it's part of risk management.

For many institutional investors, lenders and Limited Partners (LPs), governance failures, environmental liabilities or reputational issues can materially affect valuation, financing and exit opportunities.

• Are there any material environmental liabilities?
• Does the company operate in industries with heightened environmental exposure?
• Are governance structures appropriate for the company's size?
• Are there unresolved whistleblower complaints?
• Have there been regulatory investigations?
• Are there supply-chain ethics concerns?
• Is there exposure to forced labour or modern slavery regulations?
• Are diversity, governance and compliance policies documented?
• Have there been significant public controversies involving the company or founders?

10. AI & Data Due Diligence (For Software & AI Companies)

For AI-native businesses, traditional technology diligence isn't enough.

The most valuable assets often aren't servers or source code. They're proprietary data, model performance and the systems that make those models reliable in production.

As AI companies become a larger part of private market investing, buyers are beginning to ask an entirely new set of diligence questions.

• What proprietary data creates the company's advantage?
• Who owns the training data?
• Were all datasets obtained with appropriate rights and permissions?
• Which foundation models does the product depend on?
• How exposed is the business to changes in third-party AI providers?
• How are models evaluated before deployment?
• What safeguards exist against hallucinations or inaccurate outputs?
• Is model performance monitored continuously?
• How frequently are models retrained?
• Which AI components are proprietary versus outsourced?
• How explainable are model outputs?
• What regulatory requirements apply to the company's AI systems?
• How does the company protect customer data used by AI features?

What experienced buyers are really looking for

Every AI company claims to have proprietary technology.

Far fewer have proprietary advantages.

The real diligence question isn't whether a company uses AI.

It's whether its competitive advantage survives if every competitor gets access to the same foundation models tomorrow.

What ties all of these workstreams together

Financial diligence, legal diligence, technology review and management assessment often look like independent exercises.

They're not.

The strongest diligence teams constantly compare findings across workstreams.

A technology review might explain slowing margins uncovered in financial diligence.

Customer interviews might contradict the growth story presented in the CIM.

Leadership interviews might reveal execution risks that don't yet appear in operational metrics.

The most valuable diligence questions usually aren't found within one checklist.

They're found where two checklists start disagreeing.

A 100-question checklist is only useful if you can work it consistently across every deal and every analyst, and that is exactly where most firms struggle. The checklist lives in one person's head, gets applied unevenly, and the follow-ups depend on who happened to review the file.

This is the problem askRIA was built for. It holds your diligence framework, including these questions plus whatever sector-specific ones you add, and scores every deal against it automatically. Its Due Diligence agent extracts answers from the data room, flags the gaps and inconsistencies, and surfaces the contradictions across workstreams, so the same rigour applies to deal one and deal one hundred. The checklist stops being a document someone forgets to open and becomes how your fund actually decides.

How long should PE due diligence take?

Full diligence usually runs four to twelve weeks depending on size and complexity. It almost always takes longer than planned, because a finding in one workstream triggers follow-ups in another, which is the system working as intended. The way to compress it is not to skip questions; it is to answer the mechanical ones faster so human judgement has more time for the hard ones.

Keep reading

• sell-side due diligence checklist
• private equity due diligence software
• AI investment memo generator
• VC due diligence checklist

*Want this checklist applied to every deal automatically, scored against your own thesis? Run your first deal free in askRIA and get an IC memo in minutes.*

FAQs

1. What is a private equity due diligence checklist?

A private equity due diligence checklist is a structured set of questions used to evaluate a target company before an investment or acquisition. It helps buyers assess financial performance, commercial viability, legal risks, technology, operations, management and other factors that could affect valuation, deal terms or the decision to proceed.

2. What are the main areas of private equity due diligence?

Private equity due diligence typically covers nine core workstreams: financial, commercial and market, customer and revenue quality, legal and corporate, tax, technology and cybersecurity, operations, management and team, and ESG. Together, these workstreams provide a comprehensive view of a company's risks, opportunities and long-term growth potential.

3. What questions do private equity firms ask during due diligence?

Private equity firms ask questions that test every part of the investment case. They examine revenue quality, customer concentration, profitability, competitive positioning, legal obligations, tax exposure, cybersecurity, operational scalability and leadership capability. The objective is not simply to verify information, but to identify issues that could change the valuation or the investment decision.

4. How long does private equity due diligence take?

Private equity due diligence typically takes four to twelve weeks, depending on the size and complexity of the transaction. Smaller add-on acquisitions may move faster, while cross-border or highly regulated businesses often require longer. The process usually expands as findings in one workstream trigger additional questions in another.

5.What documents should a company prepare for private equity due diligence?

Companies should prepare a well-organised data room containing financial statements, management accounts, tax filings, customer and supplier contracts, board minutes, cap table, legal agreements, HR documentation, technology architecture, cybersecurity policies and operational reports. The more complete and organised the documentation, the faster and more efficient the diligence process becomes.

6. What are the biggest red flags in private equity due diligence?

Common red flags include declining cash conversion, aggressive revenue recognition, excessive EBITDA add-backs, high customer concentration, unresolved litigation, incomplete intellectual property ownership, cybersecurity weaknesses, key-person dependency and inconsistent information across diligence workstreams. While a single issue rarely kills a deal, multiple red flags often lead to repricing or additional diligence.

7. Can AI help with private equity due diligence?

Yes. AI can accelerate document review, extract information from data rooms, identify inconsistencies across workstreams and generate first-pass diligence summaries. However, investment decisions still rely on human judgement. The most effective firms use AI to automate repetitive analysis so their teams can spend more time investigating risks and evaluating the investment case.

8. How does askRIA support private equity due diligence?

askRIA helps investment teams run more consistent due diligence by applying a fund's diligence framework across every deal. Its AI agents analyse data room documents, extract evidence, identify gaps and contradictions across financial, commercial, legal and operational workstreams, and generate structured outputs such as investment committee memos all from a shared evidence base.