Operational Due Diligence for SME Acquisitions

Operational due diligence (ODD) answers the question financial statements cannot: will this business keep running, and grow, once the current owner walks away? A McKinsey analysis found that 42% of pre-deal due diligence failed to produce an adequate roadmap for capturing synergies and creating value. The gap almost always sits in operations: undocumented processes, hidden vendor dependencies, key-person bottlenecks, and aging technology that no balance sheet reveals. This guide provides a structured framework for evaluating every operational layer of a small or mid-sized business before you sign.

What Operational DD Covers That Financial and Legal DD Cannot

Financial due diligence is backward-looking: it validates reported earnings, adjusts EBITDA, and stress-tests the income statement. Legal DD flags pending litigation, regulatory exposure, and contract liabilities. Operational DD is forward-looking. It examines whether the machinery behind those earnings, people, processes, systems, vendors, and physical assets, can sustain and scale performance under new ownership.

According to Alpha FMC, ODD serves four purposes during a deal: it provides confidence on the cost base (feeding Quality of Earnings adjustments), validates the business’s ability to scale, identifies value-creation opportunities, and assesses the extent of operational risk. When financial DD tells you what a business earns, operational DD tells you howit earns it, and whether that “how” is fragile or strong.

A practical way to think about the three workstreams:

• Financial DD:“Are the numbers accurate?”
• Legal DD:“What liabilities are hidden?”
• Operational DD:“Can the business deliver these numbers next year without the current owner?”

For the full picture across all three pillars, our due diligence checklist consolidates every request item into a single working document.

Process and Systems Assessment: The Engine Room

Undocumented processes are one of the highest-risk findings in SME acquisitions. If key workflows live exclusively in the owner’s head, you are buying a job, not a business. The goal of this workstream is to determine whether operations are documented, repeatable, and transferable.

Core process documentation audit

Request written standard operating procedures (SOPs) for the five to ten most important workflows, order fulfillment, customer onboarding, invoicing, quality control, and escalation handling. Rate each on a simple maturity scale:

1. Undocumented: Process exists only as tribal knowledge.
2. Informally documented: Notes or checklists exist but are incomplete or outdated.
3. Formally documented: SOPs are current, used by staff, and reviewed periodically.
4. Measured and improved: KPIs are tracked and the process is subject to continuous process improvement.

Most SMEs sit at levels 1-2. That is not necessarily a dealbreaker, but it directly affects your post-close workload and integration budget.

Scalability and bottleneck mapping

Ask the seller: “If revenue increased 30% in six months, what would break first?” The answer reveals the binding constraint, production capacity, scheduling software, warehouse space, or a single overworked manager. Map these bottlenecks against your growth thesis. If your plan calls for 20-50% top-line growth, every bottleneck becomes a capital expenditure line item in your post-close budget.

Quality control metrics

Collect at least three years of defect rates, warranty claims, service-failure logs, and customer return percentages. A rising defect trend may signal that the business has been cutting corners to preserve margins, a red flag that financial DD alone would not catch.

Technology and IT Infrastructure Review

A Beyond M&A study reported that 76% of technology acquisitions fail to meet financial objectives, yet companies that perform technology due diligence are 2.8 times more likely to achieve a successful outcome. Even if you are buying a plumbing company, the technology stack matters: scheduling software, CRM, invoicing, fleet GPS, and customer-facing portals all affect operating margins.

System inventory checklist

• Core platforms: ERP, CRM, accounting (QuickBooks, Xero, Sage), and any industry-specific software.
• Age and support status: Is the software vendor still issuing updates? End-of-life systems carry security and compatibility risk.
• Integration: Do systems talk to each other, or does data move via manual re-entry and spreadsheets?
• Data ownership:Confirm that customer data, historical records, and intellectual property reside on company-owned infrastructure, not locked inside a vendor’s proprietary platform.
• Cybersecurity posture: Backup frequency and testing, password policies, multi-factor authentication, and incident history. A single ransomware event can halt operations for weeks.

Budget for a third-party IT audit if annual revenue exceeds €2-3M or if the business handles sensitive customer data (healthcare, financial services). For guidance on modernization opportunities, see our article on digital transformation after acquisition.

Supply Chain and Vendor Dependency Analysis

A Moody’s report found that 72% of organizations have experienced at least one significant disruption as the result of a third-party relationship. For SMEs, where backup suppliers are rare and negotiating power is low, a single vendor failure can be existential.

Vendor risk tiering

Classify every vendor relationship into three tiers based on operational criticality and spend concentration:

• Tier 1: Critical:Single-source suppliers, vendors providing >15% of inputs, or technology platforms the business cannot operate without. These require deep diligence.
• Tier 2: Important: Suppliers with ready alternatives but meaningful switching costs or lead times. Review contract terms and pricing agreements.
• Tier 3: Commodity: Easily replaceable suppliers. A quick terms review is sufficient.

Critical contract review

For every Tier 1 vendor, extract the following from existing contracts:

• Change-of-control clauses: Can the vendor terminate or renegotiate upon ownership transfer?
• Pricing lock-ins and escalation terms: Are current input costs protected, or subject to annual increases?
• Exclusivity provisions: Does the contract prevent the business from sourcing from competitors?
• Lead times and minimums: Document current lead times and minimum order quantities to gauge flexibility.

If a single supplier accounts for more than 40% of cost of goods sold, treat it as a material deal risk. Build alternative-sourcing scenarios into your financial model.

Workforce and Organizational Assessment

People risk is the most underpriced factor in SME acquisitions. Research compiled by M&A Community shows that nearly 50% of key employees leave within the first year after a deal closes, climbing to 75% within three years. Replacing a skilled employee costs 50-200% of their annual salary when you factor in recruiting, training, and lost productivity.

Owner dependency and key-person risk

Start by mapping the owner-dependent business profile. Shadow the current owner for a full working day: who do they speak with, what decisions do they make, and what would happen if they stopped showing up tomorrow? Then identify the 3-5 non-owner employees the business cannot function without, the classic key-person risk scenario. For each key person, assess:

• Whether their compensation is at, above, or below market rate.
• What institutional knowledge they hold that is not documented.
• Their likely reaction to an ownership change (interview them directly if the seller permits).
• Whether a retention bonus or stay agreement is warranted as a deal condition.

Workforce data collection

Request the following data points for the last three years at minimum:

• Headcount by department, with full-time, part-time, and contractor breakdown.
• Annual turnover rate. The SME benchmark is typically 15-25%; anything above 30% warrants investigation.
• Average tenure by role. Short average tenure in revenue-generating roles (sales, project managers) suggests a retention problem.
• Employee certifications, licenses, and specialized training that are legally required to operate.
• Open positions and recruiting pipeline status, chronic vacancies signal either labor-market difficulty or cultural issues.

According to a Mercer-Marsh report, roughly 30% of M&A retention failures stem from cultural mismatches rather than compensation gaps. Schedule informal conversations with frontline staff, not just management, to gauge morale, communication quality, and attitudes toward the ownership transition.

Facilities, Equipment, and Physical Asset Inspection

Walk every facility yourself, photographs and reports are not substitutes for direct observation. Allocate at least two site visits during the DD window: an initial tour and a deep-dive inspection.

Facility evaluation framework

• Lease terms: Remaining term, renewal options, rent escalation clauses, and any change-of-control provisions. A lease expiring within 12 months of close is a material risk if renewal is uncertain.
• Capacity utilization: Estimate current utilization as a percentage. A facility at 90%+ utilization means growth requires either capital expansion or a second location.
• Deferred maintenance: Look for peeling paint, aging HVAC, leaking roofs, and outdated electrical systems. These become immediate post-close capital expenses.
• Environmental compliance: For manufacturing, automotive, or chemical-adjacent businesses, request Phase I environmental site assessments.

Equipment and asset register

Build a complete asset register covering every piece of equipment valued above €5,000:

• Purchase date, expected useful life, and current condition (rated 1-5).
• Maintenance history and outstanding repair needs.
• Replacement cost estimate at current market prices.
• Whether the asset is owned, leased, or financed, and transferability of any lease or loan.

Sum the deferred capex into a single number and subtract it from your enterprise-value calculation. Sellers often defer maintenance in the years before a sale to inflate reported cash flow.

Customer Operations and Revenue Durability

Revenue that disappears when the owner leaves is not revenue you are buying, it is goodwill you are overpaying for. Validate the durability of the income stream through three lenses: concentration, retention, and satisfaction.

Concentration thresholds

As Security Bank’s acquisition guide frames it: any single customer representing more than 20% of revenue is high risk, and if the top three customers account for more than 50%, the risk is extreme. Build a revenue waterfall showing each customer’s contribution over the past three years. Flag any customer whose revenue share is trending upward while total revenue is flat, that signals growing dependence, not growth.

Retention and satisfaction audit

• Gross and net revenue retention: Calculate by cohort and by year. Net retention above 100% means existing customers are spending more over time.
• Churn analysis: Identify the top five customer losses in each of the last three years and the reasons behind each departure.
• NPS or satisfaction proxies: If no formal NPS exists, use online review scores, complaint logs, and return/refund rates.
• Direct customer interviews: Speak with 5-10 customers (with seller permission). Ask three questions: Why do you buy from this company? Have you considered switching? What would make you leave?

Building a Post-Acquisition Operations Plan

Operational DD is not a pass/fail exercise. Every finding should feed directly into your first 100 days integration plan. Structure the plan around three time horizons:

1. Days 1-30 (Stabilize): Secure retention agreements for key employees, confirm all vendor contracts transfer cleanly, establish your presence without disrupting day-to-day operations, and complete any deferred-maintenance items that pose safety or compliance risk.
2. Days 31-90 (Assess and Quick Wins): Document the top five undocumented processes, implement basic KPI dashboards (daily revenue, weekly cash, monthly customer metrics), resolve the most obvious bottleneck identified during DD, and conduct a full technology-stack review with upgrade recommendations.
3. Days 91-180 (Build): Begin process improvement initiatives informed by DD findings, launch any technology migration or digital transformation projects, start reducing owner dependency by transferring relationships and decision authority, and add backup suppliers for all Tier 1 vendor relationships.

The best operational DD produces a prioritized punch list with estimated costs attached. That list becomes both your integration roadmap and a negotiating tool: quantified operational risks can justify purchase-price adjustments or escrow holdbacks in the purchase agreement.

Frequently Asked Questions

How long does operational due diligence take for an SME?

Most SME operational DD processes run 4-8 weeks in parallel with financial and legal workstreams. Plan for at least two site visits (initial tour plus a deep-dive inspection), 5-10 customer conversations, and meetings with key managers and frontline employees. Businesses with multiple locations, complex supply chains, or compliance-heavy industries (healthcare, food production) may require 8-12 weeks and third-party specialist audits.

What is the single biggest operational red flag in a small business acquisition?

Extreme owner dependency. If the owner personally manages every major customer relationship, makes all pricing decisions, and has no documented processes, earnings are likely to decline the moment they leave. Shadow the owner for a full day and count how many decisions only they can make, if the answer is more than a handful, build a 12-18 month owner-transition period into the deal structure or walk away.

Should I hire a consultant for operational DD, or can I do it myself?

First-time acquirers benefit from hiring an operations-focused advisor for at least the IT audit and facility inspection portions. A DueDilio analysis recommends that a typical DD team include a financial professional, an attorney, a tax specialist, and an operations or HR expert. For deals under €1M, a generalist M&A advisor may cover operations adequately. Above €3M, dedicated IT and operational specialists typically pay for themselves through the risks they uncover.

How does operational DD affect the purchase price?

Quantified operational findings translate directly into negotiating use. Deferred maintenance estimates, technology-replacement budgets, and key-employee retention costs can all justify reductions to the headline price or structured holdbacks. If DD reveals €150,000 in deferred capital expenditures and €50,000 in necessary retention bonuses, that €200,000 becomes a concrete basis for price adjustment rather than an abstract request for a discount.

What happens if I skip operational DD entirely?

You risk joining the majority. According to M&A Community research, 62% of acquisitions fail to meet their financial objectives, with poor due diligence cited as a primary cause. Skipping ODD means discovering process gaps, staffing risks, and infrastructure decay only after you have wired the funds. At that point, every operational fix comes out of your pocket rather than being priced into the deal.