Roughly one in three signed letters of intent never reach closing — and financial due diligence findings are the leading cause. Quality-of-earnings and financial diligence findings together account for nearly half of all failed transactions, the single largest category of deal failure.
That's not a reason to be afraid of due diligence. It's a reason to run your own financial due diligence checklist before a buyer runs theirs — so the surprises, if there are any, are found and fixed by you, not discovered by someone trying to renegotiate your price.
This guide covers what actually gets scrutinized, the specific red flags that scare buyers most, and a realistic 30-day plan to get deal-ready.
In short: nearly half of all failed M&A transactions trace back to quality-of-earnings and financial due diligence findings, and roughly one in three signed letters of intent never reach closing because of what diligence uncovers. German small and mid-sized businesses face this now more than ever — a succession-driven exit wave is expected to push deal volumes up by as much as 50%. A financial due diligence checklist run properly over 30 days — normalized EBITDA, a clean data room, and an honest look at customer concentration and key-person risk — is what separates a deal that survives diligence from one that doesn't.
Why financial due diligence findings kill deals
Buyers don't walk away from deals because a business is small or imperfect. They walk away — or cut the price hard — when the numbers they're shown don't hold up under scrutiny, or when a risk surfaces that nobody flagged upfront. Roughly one in three signed LOIs fail to close, and diligence findings are the most common reason. The businesses that get through cleanly aren't the ones with perfect numbers; they're the ones that already know where their weak points are before a buyer finds them.
What a financial due diligence checklist actually covers
A full financial due diligence review typically covers three to five years of financial statements and tax returns, reconciled against each other; normalized earnings with every owner add-back documented and justified; working-capital requirements; and AR/AP aging. It is narrower than a full M&A due diligence process — which can run to a dozen workstreams covering legal, HR, technology, tax and more — but it's the workstream that most often decides whether a deal survives.
Quality of earnings: the single most important document
A quality of earnings report — usually prepared by an independent advisor, not the seller — is widely considered the single most important financial document in any acquisition of meaningful size. It answers the question every buyer actually cares about: is the reported profit real, repeatable, and free of one-off noise? A business that can produce a clean, credible quality-of-earnings picture on request signals exactly the kind of financial control that shortens diligence rather than triggering more of it.
EBITDA normalization: why your reported number isn't the real number
Many owners are genuinely surprised to learn how much their reported EBITDA differs from what a buyer considers the normalized number. EBITDA normalization strips out owner-specific costs, one-off items, and non-arm's-length arrangements to show what the business would actually earn under new ownership. An inflated, non-normalized EBITDA doesn't just get corrected during diligence — it gets corrected downward, in front of the buyer, at the worst possible moment to be renegotiating.
The red flags that scare buyers most: customer concentration and key-person dependency
Two risks come up disproportionately often in financial due diligence:
- Customer concentration above roughly 20–25% of revenue in a single customer is treated as a structural deal risk, not just a note in the appendix — because that customer leaving post-closing could leave the business unable to service the debt used to acquire it.
- Key-person dependency — where the business runs on the owner's personal relationships and knowledge rather than documented process — is one of the most common and most underweighted risks in smaller acquisitions. It rarely shows up as a single number, which is exactly why it gets missed until diligence forces the question.
Building the data room: what "deal-ready" actually means
A data room should be roughly 70–80% complete before a business goes to market — financial documents, corporate records, organisational charts and key contracts organised and ready, with the remaining share populated as confirmatory diligence advances. "Deal-ready" doesn't mean every question is pre-answered. It means nothing takes more than a day to produce when asked.
The 30-day financial due diligence checklist
| Days | Focus |
|---|---|
| 1–7 | Reconcile 3–5 years of financials against tax returns; clean up the chart of accounts; prepare AR/AP aging |
| 8–15 | Quality-of-earnings prep: document and justify every owner add-back; normalize EBITDA |
| 16–23 | Build the data room to roughly 70–80% complete: corporate records, contracts, financial documents |
| 24–30 | Honest self-review of red flags: customer concentration, key-person dependency, legal or compliance exposure |
Why German SMEs face this now: the succession-driven exit wave
The German market has a specific reason this matters right now: a wave of German SMEs are approaching ownership succession with no resolved plan, and analysts expect this to push Mittelstand-segment deal volumes up by as much as 50%. Private equity investors are increasingly active in this space — current market data shows the majority of PE-backed deals in Germany stay below the billion-euro mark, squarely in the range where a well-prepared small or mid-sized business is a realistic acquisition target, not just a small player watching from the sidelines.
Where an interim controller fits in
Preparing three to five years of clean financials, building a credible quality-of-earnings picture, and assembling a data room is exactly the kind of scoped, time-boxed project an interim controller is built for — distinct from the ongoing monthly work of running the finance function. It typically runs alongside, not instead of, the existing month-end close process, and it draws directly on the same discipline covered in investor-grade reporting: numbers a third party can pick up and trust without a lengthy explanation. Interestingly, over half of private equity investors now use AI tools directly in due diligence and valuation work — another reason the underlying data needs to be clean before anyone, human or AI-assisted, starts reviewing it.
Conclusion
Financial due diligence findings are the single biggest reason signed deals don't close. None of the fixes are exotic — reconciled financials, a normalized EBITDA number, an honest look at customer concentration and key-person risk, and a data room that's actually ready before anyone asks. Thirty days of disciplined preparation is usually enough to turn "we'll deal with it if it comes up" into "here it is, already documented."
Heading into a sale, funding round, or investor conversation in the next few months?
Let's find your red flags before a buyer does.
Book a call → or get in touch directly.
Frequently asked questions (FAQ)
What is a financial due diligence checklist?
A structured review of a business's financial position before a sale, investment or funding round — typically covering three to five years of reconciled financials, a quality-of-earnings assessment, normalized EBITDA, working capital, and AR/AP aging.
How long does financial due diligence take?
For a small or mid-sized business, financial due diligence typically takes 30–60 days once initiated by a buyer. Preparing in advance over a 30-day window before going to market significantly shortens that process and reduces the risk of last-minute findings.
What is a quality of earnings report and why does it matter?
An independent assessment of whether reported profit is real, repeatable and free of one-off distortions. It's widely considered the single most important financial document in an acquisition, because it directly answers the question every buyer cares about most.
What red flags most commonly kill M&A deals?
Customer concentration above roughly 20–25% in a single customer, key-person dependency where the business runs on the owner's relationships rather than documented process, and non-normalized EBITDA that overstates real earning power.
Do I need an interim controller to prepare for due diligence?
Not always, but it helps — preparing clean multi-year financials, a credible quality-of-earnings picture and a complete data room is a scoped, time-boxed project that's difficult to run well alongside a full-time role already managing the monthly close.