Financial due diligence for acquisitions: the UK buyer’s guide

Buy-side financial due diligence (FDD) verifies a target’s earnings quality, cash requirements and balance-sheet exposures, then produces the negotiation deliverables a buyer needs to price the deal and draft the sale and purchase agreement (SPA). According to ICAEW guidance, those deliverables are four in number: an adjusted EBITDA bridge, a definitive net working capital (NWC) peg, a debt and cash schedule, and a risk register that itemises every material exposure with a quantified potential impact.

The standard deliverables a buyer should expect from any FDD engagement:

• Adjusted EBITDA bridge — reconciles reported EBITDA to a normalised, sustainable figure by stripping out one-off items, owner remuneration adjustments and non-recurring costs
• Definitive NWC peg — sets the working capital target embedded in the SPA completion mechanics, protecting the buyer from a seller drawing down cash before close
• Debt and cash schedule — maps every debt-like item and cash-like item so the enterprise-to-equity value bridge is accurate
• Risk register — quantifies identified exposures (tax, litigation, customer concentration, off-balance-sheet items) so the buyer can size escrow and draft indemnities

A typical middle-market FDD engagement runs 30–45 business days from letter of intent (LOI) to closing decision, per Dealroom’s due diligence process guidance. That is roughly six weeks. Plan the resource commitment accordingly from day one.

Key takeaways

Effective financial due diligence for acquisitions requires a scoped, deliverable-driven engagement that produces an adjusted EBITDA bridge, a definitive NWC peg, a debt and cash schedule, and a risk register before any SPA is signed.

This article is general information, not a substitute for advice from a qualified financial advisor. Consult a qualified financial professional about your own circumstances before acting on anything here.

Table of Contents

• What is financial due diligence and how does it differ from an audit?
• The seven core FDD workstreams every buyer should cover
• What does a typical buy-side FDD process look like?
• What documents should you request, and how do you run the VDR?
• How FDD tests numbers and what outputs buyers use in negotiation
• What financial red flags should you prioritise?
• How do FDD findings translate into deal terms?
• Where do FDD workstreams need to adapt by sector?
• A research-backed FDD blueprint: effort split, deliverables and a six-week schedule
• How Consult EFC approaches FDD for UK SMEs and SaaS targets
• Consult EFC’s FDD services for UK buyers
• Sources

What is financial due diligence and how does it differ from an audit?

Financial due diligence is a structured, buyer-commissioned investigation into a target company’s historical and forward-looking financial position. Its purpose is not to form an opinion on whether the accounts are true and fair. It is to answer three questions that matter to a buyer: Are the earnings sustainable? How much cash does the business actually need to operate? And what liabilities are hiding below the surface?

ICAEW’s financial due diligence guideline is explicit on this point: FDD assesses the sustainability of future cash flows and quality of earnings rather than providing an audit opinion on prior-period statements. A clean statutory audit does not guarantee an absence of deal-relevant risk. A target can have unqualified accounts and still carry undisclosed contingent liabilities, aggressive revenue recognition policies, or a customer base that is far more concentrated than the headline numbers suggest.

Who commissions and who conducts FDD

On the buy side, the engagement is typically commissioned by the CFO, corporate development lead, or private equity deal team. Execution sits with FDD specialists, often supported by sector experts and tax advisers. For UK SME transactions, a fractional CFO with transaction experience frequently leads the buyer-side work, coordinating with external legal counsel and tax advisers.

Pro Tip: Frame the FDD scope around your deal hypothesis and the specific negotiation levers you expect to use — price, escrow sizing, earn-out structure, or specific SPA warranties. A scope built around “let’s look at everything” wastes time and budget; one built around “we think EBITDA is overstated by owner costs and there is a customer concentration risk” gets you to the right answers faster.

The seven core FDD workstreams every buyer should cover

Dealroom’s research-backed effort split across a standard buy-side engagement shows Quality of Earnings (QoE) taking roughly 30% of total effort, with the remaining six workstreams sharing the balance. Here is what each workstream tests and the checklist items a buyer should expect.

1. Quality of earnings (~30% of effort)

The largest workstream by far, and the one that drives valuation most directly.

• Reconcile reported EBITDA to management accounts and statutory filings for each of the last three years
• Identify and quantify non-recurring income and costs (one-off gains, restructuring charges, COVID support grants)
• Adjust for owner remuneration above or below market rate, personal expenses run through the business, and related-party transactions
• Test revenue recognition policies against the actual billing and delivery cycle
• Validate that cost of sales is consistently classified across periods
• For founder-led businesses, scrutinise discretionary spend and family payroll items that inflate normalised margins

2. Working capital (a moderate portion of the effort)

• Calculate a 12-month trailing average NWC to establish the peg
• Analyse debtor ageing and collectibility; flag receivables older than 90 days
• Review stock valuation method (FIFO, weighted average) and test for obsolescence provisions
• Examine creditor payment terms and whether they are sustainable post-close
• Identify seasonal working capital swings that could distort a single-point peg

3. Cash flow and liquidity (a notable portion of the effort)

• Reconcile reported operating cash flow to EBITDA and explain the conversion gap
• Review capital expenditure history and split maintenance versus growth capex
• Identify cash trapped in subsidiaries or restricted by covenants
• Check debt covenants and change-of-control provisions that could trigger acceleration at close

4. Balance sheet analysis (a notable portion of the effort)

• Verify asset existence and ownership (title searches for property, IP registrations)
• Test provisions for adequacy — warranty reserves, bad debt provisions, deferred tax
• Identify off-balance-sheet items: operating leases pre-IFRS 16, factoring arrangements, contingent liabilities
• Review balance sheet red flags such as unexplained intercompany balances and related-party loans

5. Customer and revenue analysis (a considerable part of the effort)

• Build a customer concentration analysis: revenue by top 10 customers as a percentage of total
• Review contract terms, renewal rates, and notice periods
• For SaaS targets: test Annual Recurring Revenue (ARR) build, cohort retention, Net Revenue Retention (NRR), and Gross Revenue Retention (GRR)
• Validate deferred revenue balances against underlying contract obligations

6. Tax due diligence (an important part of the effort)

HMRC’s corporate finance manual identifies specific tax exposures buyers should check in UK corporate transactions. Key items include:

• Review of PAYE and NIC compliance, particularly for contractors classified as employees
• Corporation tax computations and any open HMRC enquiries
• VAT registration, partial exemption calculations, and historic errors
• R&D tax credit claims — verify that claimed activities meet HMRC’s qualifying criteria
• Transfer pricing arrangements in group structures
• Stamp duty land tax (SDLT) exposure on property within the target

7. Fraud detection and internal controls (~10% of effort)

• Assess segregation of duties in the finance function
• Review journal entry logs for unusual period-end postings
• Test expense claims and approval workflows
• Identify any related-party transactions not disclosed in the statutory accounts
• Review management override of controls, particularly in owner-managed businesses

Sector callout — SaaS targets: Beyond the standard workstreams, SaaS acquisitions require cohort-level ARR analysis, deferred revenue waterfall testing, and a review of capitalised development costs. A buyer acquiring a SaaS business should also check the key SaaS metrics that investors and lenders will scrutinise: ARR growth rate, NRR above 100%, CAC payback period, and Rule of 40 performance.

What does a typical buy-side FDD process look like?

A middle-market FDD engagement follows a seven-step workflow mapped across a six-week LOI-to-close window.

Step 1 — Define the deal hypothesis and scope (Days 1–3). Before requesting a single document, the buyer lead and FDD team agree on the key value drivers, the likely negotiation levers, and the risk areas that could kill the deal. Scope is set here.

Step 2 — Issue the document request list and open the VDR (Days 3–7). The FDD team sends a prioritised document request list. The seller populates the virtual data room (VDR). Early access to audited financials, management accounts, and tax filings is non-negotiable.

Step 3 — Desk-based financial analysis (Days 7–18). The team works through the seven workstreams, reconciling management accounts to statutory filings, building the EBITDA bridge, and identifying initial red flags. Practical verification checks include reconciling management accounts to statutory filings and validating revenue recognition policies.

Step 4 — Management interviews and site visits (Days 14–22). Finance director and CFO interviews are scheduled after desk work is substantially complete. This avoids asking questions that the documents already answer and lets the team probe specific anomalies identified in Step 3.

Step 5 — Stress-test the financial model (Days 18–25). The buyer’s financial model is updated with normalised figures from the EBITDA bridge and NWC analysis. Downside scenarios are run against the debt service capacity and covenant headroom.

Step 6 — Draft the FDD report and risk register (Days 22–30). The team produces the full report, including the adjusted EBITDA bridge, NWC peg, debt and cash schedule, and risk register. Findings are shared with legal counsel for SPA drafting.

Step 7 — Final offer formation and parallel integration planning (Days 28–45). Price adjustments are agreed, SPA protections are negotiated, and integration planning runs concurrently so Day-1 risks are identified before close.

Arriving at an interview with a half-built EBITDA bridge means you will ask generic questions and miss the specific anomalies that only the numbers reveal. The best interviews are the ones where you already know what you are looking for.*

Roles and responsibilities

The buyer project lead owns the timeline and coordinates across workstreams. The FDD lead (typically a chartered accountant or FDD specialist) runs the financial analysis. Tax advisers handle the tax workstream independently and feed findings into the risk register. External legal counsel translates FDD findings into SPA drafting points, as Thomson Reuters Practical Law explains in its guidance on the interplay between legal and financial due diligence. The VDR administrator manages access permissions, tracks document requests, and maintains an evidence log.

Where a seller has prepared a vendor due diligence pack in advance, the schedule can compress. However, independent testing remains necessary to surface off-balance-sheet items or related-party transactions that a seller-prepared pack may not capture.

What documents should you request, and how do you run the VDR?

Prioritise these documents in your first request, before anything else:

• Audited statutory accounts for the last three years
• Monthly management accounts for the last 24 months, including variance commentary
• Board-approved budgets and latest management forecasts
• Debt schedules: all facilities, covenants, repayment terms, and change-of-control clauses
• Corporation tax returns and computations for the last four years
• VAT returns for the last two years
• Top-20 customer contracts, including renewal and termination provisions
• Capitalisation table and shareholder register
• Material supplier contracts and any exclusivity arrangements
• Employment contracts for key management and any settlement agreements

A second-tier request covers items needed for specific workstreams: HR data, IP registrations, property leases, insurance schedules, and pension scheme details.

VDR best practice: Index the data room by workstream from day one. Assign each document request a unique reference number and track fulfilment in a live log. Version-control every document so you can identify when a file was uploaded and whether it supersedes an earlier version. Set permissions carefully — tax advisers should access tax documents; legal counsel should access contracts; the full FDD team should access financials. An evidence log showing what was reviewed, by whom, and when is your audit trail if findings are disputed post-close.

A simple prioritisation approach: review audited accounts and management accounts first (they underpin everything else), then customer contracts and debt schedules (the two highest-risk areas in most SME deals), then tax filings and HR data. Leave property, insurance, and pension details until the final week unless a specific risk has been flagged.

How FDD tests numbers and what outputs buyers use in negotiation

The core testing methods are reconciliation, sample vouching, and cohort analysis. Reconciliation means tying management accounts back to the statutory filings line by line, then explaining every gap. Sample vouching means selecting a sample of revenue transactions and tracing them from contract to invoice to bank receipt, checking that revenue recognition matches the policy stated in the accounts. For SaaS targets, cohort analysis tests whether ARR reported in each period is consistent with the underlying subscription data.

The adjusted EBITDA bridge

The EBITDA bridge starts with reported EBITDA and works through every adjustment: add back non-recurring costs, remove non-recurring income, adjust owner remuneration to a market-rate equivalent, strip out personal expenses, and restate any items that were misclassified between operating and non-operating lines. Each adjustment must be validated against source documents. An adjustment without a document is a negotiating position, not a finding.

The definitive NWC peg

The NWC peg is the working capital level the seller must deliver at close. Build it from a 12-month trailing average of the normalised NWC position, adjusted for any structural changes in the business (a new contract that permanently shifts debtor days, for example). The peg is embedded in the SPA completion accounts mechanism and protects the buyer from a seller drawing down cash or accelerating collections in the weeks before close.

The debt and cash schedule

Every debt-like item reduces the equity value the buyer pays. The schedule covers bank debt, shareholder loans, finance leases, deferred consideration from prior acquisitions, pension deficits, and any other obligation that a buyer will inherit. Cash-like items (surplus cash, tax refunds due, security deposits) increase equity value. Getting this schedule right is often worth more in negotiation than the EBITDA bridge.

The risk register

The risk register quantifies each identified exposure with a low, mid, and high estimate of financial impact. It feeds directly into escrow sizing, indemnity drafting, and warranty negotiations. According to ICAEW’s guidance, FDD findings are used not only by purchasers but also by funders and warranty and indemnity (W&I) insurers to shape financing terms and contractual protections.

What financial red flags should you prioritise?

Not all red flags are equal. Some change the price; some change the structure; a few should stop the deal.

Immediate stop-work or material price-change flags:

• Evidence of earnings manipulation: journal entries reversing at period-end, revenue pulled forward from future periods, or costs deferred without commercial justification
• Customer concentration above 25–30% in a single customer, particularly where the contract is short-term or renewal is uncertain
• Unreconciled intercompany balances with no supporting documentation
• Undisclosed contingent liabilities: ongoing litigation, HMRC enquiries, or personal guarantees given by the company

Negotiation items (price adjustment or specific indemnity):

• Aggressive revenue recognition, particularly deferred revenue that has been released faster than the underlying service delivery
• Inventory overvaluation: stock carried at cost when net realisable value is lower, or slow-moving stock not adequately provisioned
• Off-balance-sheet liabilities: factoring arrangements, operating leases not yet on-balance-sheet, or supplier rebate clawbacks
• Working capital that is structurally higher than the trailing average due to a recent contract win

Integration items (monitor post-close):

• Key-person dependency in the finance function
• Weak internal controls that create fraud risk but do not indicate current fraud
• IT systems that cannot produce reliable management information at the required frequency

The headline ARR number is real; the sustainability is not. The right response is to rebase the valuation on a lower growth assumption and seek a revenue-linked earn-out rather than paying a full ARR multiple upfront.

Inventory red flag scenario: A retail target carries £2.1m of stock at cost. The gap between the stated provision and a realistic write-down is a direct deduction from the purchase price.

How do FDD findings translate into deal terms?

Thomson Reuters Practical Law describes how legal teams use FDD outputs to revise SPA drafts, update disclosure schedules, and negotiate contract protections. The translation from finding to deal term follows a consistent logic.

Escrow sizing typically reflects the aggregate of quantified risk register items, discounted for probability. A risk register showing £800k of mid-case exposure across three items might support a £500k–£600k escrow held for 12–18 months post-close.

Pro Tip: *When findings accumulate across multiple workstreams — say, an overstated EBITDA, a customer concentration issue, and an open HMRC enquiry — resist the temptation to negotiate each item separately. Aggregate the total exposure first.

Where do FDD workstreams need to adapt by sector?

SaaS businesses

The standard workstreams apply, but the weighting shifts heavily towards revenue quality and customer analysis. Key additional checks for a UK SaaS acquisition:

• ARR build: reconcile ARR from the CRM or billing system to the management accounts; test for double-counting of multi-year contracts
• Cohort retention: build a monthly cohort table showing GRR and NRR by vintage; a business with NRR above 110% is fundamentally different from one at 85%
• Deferred revenue: test that deferred revenue on the balance sheet matches the undelivered service obligation; premature release inflates reported revenue
• Capitalised development costs: review the capitalisation policy and test whether costs meet the IAS 38 criteria for capitalisation; aggressive capitalisation flatters EBITDA
• Rule of 40: calculate ARR growth rate plus EBITDA margin; a combined score below 40 in a mature SaaS business warrants scrutiny of the growth investment thesis

ICAEW notes that technology and AI tools are increasingly used in SaaS FDD to automate reconciliation of financial and operational metrics, accelerating the identification of revenue recognition issues.

Retail and inventory-heavy businesses

• Verify the inventory valuation method and test for consistency across periods
• Build a stock ageing analysis and compare the provision to the actual slow-moving balance
• Assess seasonality: a working capital peg calculated at the wrong point in the seasonal cycle can be materially wrong
• Review shrinkage rates and compare to industry benchmarks
• Check supplier rebate structures: rebates earned but not yet received are an asset; clawback provisions are a liability

Multisite operations

• Build a like-for-like revenue analysis stripping out new site openings and closures
• Review central cost allocation methodology: changes in allocation can move profit between sites without any operational change
• Analyse site-level working capital patterns to identify underperforming locations that drag on the consolidated position
• Check lease terms across the estate for break clauses, rent reviews, and dilapidation obligations

A research-backed FDD blueprint: effort split, deliverables and a six-week schedule

The Dealroom effort split gives buyers a practical basis for scoping supplier proposals and internal resource allocation:

• Quality of earnings: ~30%
• Working capital: ~15%
• Cash flow and liquidity: ~12%
• Balance sheet: ~12%
• Customer and revenue analysis: ~11%
• Tax due diligence: ~10%
• Fraud detection and internal controls: ~10%

Deliverables checklist

• Adjusted EBITDA bridge with each adjustment documented and sourced
• Definitive NWC peg with 12-month trailing average calculation and seasonal adjustment notes
• Debt and cash schedule covering all facilities, leases, and debt-like items
• Risk register with low/mid/high impact estimates for each identified exposure
• Tax summary covering open enquiries, R&D claims, PAYE compliance, and VAT position
• Management information quality assessment (frequency, accuracy, board reporting)
• Full audit trail of documents reviewed, interviews conducted, and testing performed

Sample six-week LOI-to-close schedule

A risk-based approach, as Euronext corporate solutions’ due diligence guide recommends, concentrates effort on the areas posing the greatest financial and operational risk to the deal rather than treating every workstream equally.

How Consult EFC approaches FDD for UK SMEs and SaaS targets

FDD for a UK SME or SaaS business is not a scaled-down version of what a Big Four team does for a FTSE 250 acquisition. The issues are different: owner remuneration adjustments, related-party transactions, founder-dependent revenue relationships, and management information that has never been prepared with a buyer in mind. The methodology needs to reflect that.

At Consult EFC, the approach to FDD engagements is deliberately deliverable-driven. The scope is set around the deal hypothesis from day one, not around a standard template. For SaaS targets, that means weighting effort towards ARR quality, cohort retention, and deferred revenue testing. For owner-managed SMEs, it means spending more time on the QoE workstream and less on formal internal controls that simply do not exist at that scale.

What clients can expect from an engagement:

• A scoping call within 48 hours of instruction to agree the deal hypothesis, timeline, and key risk areas
• Coordination with the buyer’s legal and tax advisers so findings feed directly into SPA drafting without duplication
• A draft EBITDA bridge and initial red-flag memo within the first two weeks, so the buyer has early sight of material issues before committing further resource
• A final FDD report structured around the four standard deliverables: EBITDA bridge, NWC peg, debt and cash schedule, and risk register
• Post-report support through SPA negotiations, including quantification of specific indemnity items

The firm operates as an ICAEW-regulated practice under Kishen Patel, which means the work meets the professional standards that lenders, W&I insurers, and legal counsel expect to rely on.

Consult EFC’s FDD services for UK buyers

Buyers who need FDD done properly, without the overhead of a Big Four engagement, have a practical alternative. Consult EFC delivers financial due diligence for UK SMEs through fractional CFO-led teams with direct transaction experience, producing the four standard deliverables that lenders and legal counsel need to close a deal.

The engagement model is project-based, scoped to the deal, and coordinated with your legal and tax advisers from day one. For SaaS acquisitions, the team brings sector-specific depth in ARR quality, deferred revenue testing, and Rule of 40 analysis. For UK SME targets, the focus is on QoE normalisation, owner-managed adjustments, and HMRC compliance checks. Typical engagements run four to six weeks from instruction to final report, aligned to the LOI-to-close window.

If you are preparing to commission FDD or want to understand what a scoped engagement would look like for your target, speak to Consult EFC’s fractional CFO team to discuss scope, timeline, and deliverables.

Sources

• Financial due diligence guideline | ICAEW
• HMRC internal manual — corporate finance manual (HMRC)
• Due diligence — Thomson Reuters Practical Law blog

Recommended

• Financial Due Diligence: A Practical Guide
• Financial Due Diligence for SMEs: The Complete UK Guide
• Due Diligence Preparation Services | Financial Readiness
• SaaS Financial Due Diligence in the UK: The Ultimate Guide

Kish Patel ACA, ICAEW · Founder, Consult EFC

Over 12 years across Big Four audit, Investment Banking, and corporate advisory. Kish works with SaaS founders, tech companies, and ambitious UK SMEs from £1M to £50M in revenue on fundraising, valuations, exit planning, and financial strategy. ICAEW regulated. Big Four trained. Based in London.