There is a particular moment in every small business acquisition that experienced buyers recognize immediately. The seller has been charming, the financials look tidy, and the handshake energy is good. Then the data room opens — or more likely, a Google Drive folder with seventeen PDFs named things like “tax2021FINAL_v3_revised.pdf” — and the real conversation begins. That moment is where buying a business either becomes a sound investment or a very expensive lesson.
I have watched both outcomes happen. The difference between them almost never comes down to the seller’s intentions or the buyer’s intelligence. It comes down to how seriously the buyer treats the paper trail before signing anything. Acquisition due diligence is not a formality you perform to satisfy a lawyer. It is the only mechanism you have for stress-testing everything you were told during the courtship phase, and it deserves the same energy as the negotiation itself.
Most small business buyers — first-timers especially — approach due diligence backward. They start with excitement and end with paperwork, treating the document review as a box to check rather than a story to read. The better approach inverts that entirely. Start with the records and let them either confirm or challenge the narrative the seller has been building. Think of it as reading a company’s biography, not its brochure.
What the Records Are Actually Telling You
The foundation of any serious business records review is three years of tax returns, ideally five. Not the profit-and-loss statements the seller prepares — anyone can make a P&L look reasonable — but the actual federal filings, the IRS Form 1120 for a corporation or Schedule C for a sole proprietor. The reason you want these is simple: people lie to their buyers far less often than they lie to their accountants, and they lie to their accountants far less often than they lie to the IRS. When a seller’s claimed revenue in a sales pitch differs materially from the revenue reported to the federal government, you have found your first real data point.
Beyond the headline numbers, tax returns reveal patterns. A restaurant that shows declining gross receipts over three consecutive years while the seller insists the drop is pandemic-related and “fully recovered” needs to show you 2023 and 2024 bank statements to back that claim. A service business with unusually low reported wages relative to its stated headcount may be paying workers off the books — which means you’re inheriting an undisclosed payroll tax liability the moment you take ownership. These are not hypotheticals. They are patterns that appear repeatedly in acquisitions of businesses doing between $500,000 and $5 million in annual revenue, which is the range where most independent buyers operate.
Bank statements deserve their own focused review, separate from the tax documents. Ask for twelve to twenty-four months of statements for every business account, including any merchant processing statements if the business accepts credit cards. Cross-reference the deposits against the reported revenue. In cash-heavy businesses — laundromats, nail salons, convenience stores — there is a known phenomenon where owners skim cash before it hits the register. A business that claims $800,000 in annual revenue but shows $620,000 in verifiable deposits has a gap that requires explanation. Sometimes there is a legitimate one. Often there is not.
Customer concentration is another thing the records reveal that sellers rarely volunteer. When you pull accounts receivable aging reports and see that one client represents 38 percent of total billings, that is not just a risk factor — it is potentially a business-ending event waiting to happen. Key customer relationships frequently belong to the founder personally, not to the company. The Small Business Administration’s guidance on business transfers acknowledges this directly, noting that buyer due diligence should include an assessment of whether customer relationships are transferable. In practice, the only way to know is to ask the seller to introduce you to their top five clients before closing — which many sellers resist, for obvious reasons, but which any serious buyer should insist upon.
Legal and regulatory records are where acquisitions most frequently surprise buyers who thought they had done their homework. Search for pending litigation using the business’s legal name and any DBA registrations it operates under. Check the county court’s civil docket, not just whatever the seller discloses. Look at whether the business has any regulatory licenses — contractor licenses, food service permits, liquor licenses — and verify that each one is current and transferable under the terms of the sale. A liquor license in particular can take months to transfer in many states and requires the new owner to pass background checks. If the deal timeline assumes a thirty-day close and the license transfer takes ninety days, you have a structural problem that no amount of goodwill resolves.
Lease agreements deserve more attention than buyers typically give them. The physical location of a retail or service business is often its single most valuable asset, and yet buyers routinely fail to read the full lease before signing a purchase agreement. Look at the remaining term, the renewal options, and — critically — whether the landlord has a right to approve any assignment of the lease to a new owner. Some landlords use an acquisition as an opportunity to renegotiate rent to market rates, which can instantly change the economics of what you’re buying. Get a written estoppel certificate from the landlord confirming the lease terms and the absence of any defaults before the deal closes.
Using Public Business Records as an Independent Check
One underused resource in acquisition due diligence is the public business directory ecosystem — not as a marketing tool, but as an independent verification layer. When a seller tells you the business has been operating since 2008, you can cross-reference that claim against state incorporation records, business listing databases, and review histories on platforms like Google Business Profile or Yelp. Inconsistencies in founding dates, address histories, or ownership names across public records do not automatically signal fraud, but they do signal that you need to ask more specific questions.
State Secretary of State websites are free and searchable. They will show you the registered agent, the incorporation date, any name changes, and whether the entity is currently in good standing. A business that has been involuntarily dissolved and reinstated multiple times is not necessarily a bad acquisition target, but it tells you something about how the owner manages administrative obligations — which may reflect how they manage everything else. Similarly, checking whether the business has filed DBA (doing business as) registrations across multiple counties can reveal operating locations or brand names that were never mentioned during the sales process.
The Federal Trade Commission’s guidance on business transfers, while primarily aimed at franchises, contains useful principles about disclosure obligations that apply to private business sales as well. A seller who is reluctant to provide basic documentation — who asks you to “trust the relationship” rather than produce records — is not being friendly. They are telling you something important about what the records would show.
One final thing that experienced buyers learn, usually after at least one uncomfortable experience: the quality of a seller’s bookkeeping tells you almost everything about the quality of their operations. A business where the books are clean, reconciled monthly, and prepared by a competent outside CPA is a business where someone has been paying attention. A business where the owner says “I kind of do it myself in QuickBooks, it’s a little behind” is a business where the surprises have not yet been counted. That is not a reason to walk away automatically — some of the best acquisitions come from owners who are brilliant operators and terrible administrators — but it does mean you need to budget for a forensic accounting review, not just a standard financial audit, before you finalize your offer.
Buying a business is fundamentally an act of trust, but it should never be an act of blind trust. The due diligence process exists to give that trust a factual foundation. Every hour you spend in the records before signing is an hour that either confirms you are making a sound decision or saves you from making a ruinous one. There is no version of this where skipping the paperwork works out well. The sellers who discourage a thorough review are, almost without exception, the sellers whose businesses need the most thorough review of all.