You are three weeks from signing a Letter of Intent on a B2B software company. The seller’s management presentation shows 40% year-over-year growth, strong retention, and a healthy pipeline. Your investment thesis depends on those numbers holding up under a new ownership structure. But the CRM export you received last night tells a different story: inconsistent deal stages, a single account responsible for 31% of ARR, and a discount field that appears in only 12% of closed-won records.
This is where a commercial due diligence checklist earns its keep. Not as a compliance exercise, but as the structured evidence base that lets you underwrite revenue assumptions, price risk correctly, and build a credible value creation plan before you wire capital.
I have seen deal teams lose months of post-close momentum because they skipped granular commercial diligence and inherited a sales organization that could not replicate its own wins. The checklist below reflects what we actually run when advising on private equity commercial due diligence engagements. It is designed for deal teams in confirmatory diligence, operating partners preparing integration plans, and portfolio executives evaluating add-on targets.
1. Scope and Outputs of a Commercial Due Diligence Framework
Before you assign workstreams, define what a commercial due diligence report should deliver. The output is not a PowerPoint deck summarizing the market. It is an evidence package that answers three questions your investment committee will ask:
- Is the revenue real, recurring, and replicable under new ownership?
- Does the market support the growth assumptions in the model?
- What commercial risks require pricing adjustment or post-close remediation?
A complete commercial due diligence framework typically produces four deliverables: a market and competitive assessment, a revenue quality analysis with cohort-level retention data, a GTM capability evaluation, and a red-flag register with severity ratings. These feed directly into your value creation plan and inform Day 1 priorities.
Defining Decision Rights Early
Assign an owner for each workstream before the data room opens. In my experience, the fastest way to miss a material issue is to assume “someone else is looking at churn.” Clarify who has decision rights on data requests, who synthesizes findings, and who escalates blockers to the deal lead.
For a deeper treatment of how commercial diligence connects to post-close execution, see the guide on building a private equity value creation plan.
2. Market and Segment Attractiveness
Your thesis likely assumes the target operates in a growing market. Commercial diligence should validate that assumption with segment-level specificity, not just top-down TAM slides.
What to Verify
- Segment growth rates: Break the market into the segments the target actually serves. A company selling to mid-market healthcare IT may have different tailwinds than one selling to enterprise retail, even if both fall under “B2B SaaS.”
- Competitive intensity: Identify the two or three competitors the target loses deals to most often. Request win/loss data and validate it against CRM disposition codes.
- Regulatory or structural shifts: Note any pending regulations, platform changes, or consolidation trends that could accelerate or compress growth.
According to Bain’s 2023 Global Private Equity Report, deals with rigorous market diligence outperformed on realized returns, partly because they avoided overpaying for markets already at saturation. The point is not to find a perfect market, but to size the headroom accurately.
3. Ideal Customer Profile and Demand Validation
Management will tell you their ICP. Your job is to test whether the actual customer base matches that description and whether demand signals support the growth plan.
ICP Evidence Checklist
- Pull a distribution of customers by industry, company size, and geography. Compare it to the stated ICP.
- Identify the top 10 customers by ARR. How many fit the ICP? How many are exceptions the sales team closed opportunistically?
- Request inbound lead source data. What percentage of qualified pipeline originates from the ICP segments?
Demand Signals
Look for evidence of organic demand: search volume trends, inbound-to-outbound pipeline ratio, and customer referral rates. If 80% of new business comes from founder relationships, that is a concentration risk, not a demand signal.
A detailed breakdown of how to structure these questions is available in the GTM due diligence framework for B2B acquisitions.
4. Revenue Quality, Retention, and Cohort Evidence
This is the core of private equity commercial due diligence. Revenue quality determines whether the multiple you pay is defensible.
What “Quality” Means in Practice
- Recurring vs. non-recurring: Separate ARR from professional services, one-time fees, and pass-through revenue. A company reporting $10M in revenue may have $6M in true recurring ARR.
- Cohort retention: Request logo retention and net revenue retention by annual cohort. A 95% gross retention rate means little if the 2021 cohort retained at 85% and the 2023 cohort at 98%. You need to understand the trend and the drivers.
- Churn concentration: Identify whether churn is spread evenly or concentrated in specific segments, contract sizes, or customer types.
According to McKinsey research on recurring revenue businesses, a 5-percentage-point improvement in net retention can be worth more than a 20% increase in new logo acquisition over a five-year hold. That ratio should inform how much diligence time you spend on retention mechanics.
Cohort Analysis Minimum Standard
Request monthly or quarterly revenue by cohort for at least 24 months. Plot the curves. If the company cannot produce this data, that is itself a red flag about data infrastructure and financial controls.
5. Pricing and Discounting Practices
Pricing is where margin lives or dies. Yet most diligence processes treat it as a single line item: “average ACV is $48K.” That number hides critical variance.
What to Request
- Distribution of deal sizes (not just average). Look for bimodal patterns that suggest two different products or buyer segments.
- Discount frequency and depth. What percentage of deals close at list price? What is the average discount for deals that do get discounted?
- Approval authority. Who can approve discounts above 10%? Above 20%? If the answer is “any rep can,” expect margin compression.
Pricing Power Indicators
Ask for evidence of price increases. Have they raised prices in the last 24 months? What was the retention impact? Companies with real pricing power can demonstrate it with data. Companies without it will offer explanations.
Understanding how pricing and discounting affect profitability connects directly to preventing EBITDA erosion through RevOps discipline.
6. Pipeline and Sales Productivity
The seller’s growth forecast assumes the sales organization can execute. Your checklist should stress-test that assumption with productivity data, not assertions.
Pipeline Health Metrics
- Coverage ratio: What is the ratio of qualified pipeline to the next quarter’s target? Industry benchmarks for B2B software suggest 3x coverage is healthy, but this varies by sales cycle length.
- Stage conversion rates: What percentage of deals move from discovery to proposal? From proposal to negotiation? Inconsistent definitions or missing data here indicate CRM hygiene problems.
- Pipeline aging: What is the average age of deals currently in late-stage? Deals sitting in “negotiation” for 120+ days are often dead but unclosed.
Rep-Level Productivity
- Quota attainment distribution. If 80% of bookings come from two reps, the organization has a talent concentration problem, not a scalable sales motion.
- Ramp time for new hires. How long until a new rep hits quota? If no one hired in the last 18 months has ramped, the playbook may not transfer.
- Win rate by rep and by segment. Variance here reveals whether success is systematic or personality-driven.
7. Channels, Partnerships, and Concentration Risk
Channel strategy can accelerate growth or create dependency. The commercial due diligence checklist should distinguish between the two.
Concentration Thresholds
- No single customer should represent more than 10-15% of ARR without explicit risk acknowledgment in your model.
- No single channel partner should control more than 20% of new bookings unless you have contractual protections and a diversification plan.
- If the company relies on a single platform (AWS Marketplace, Salesforce AppExchange) for distribution, assess the terms and renewal risk.
Partnership Durability
Request partnership agreements and review termination clauses. A “strategic partnership” that either party can exit on 30 days’ notice is not strategic. For a fuller treatment of partnership structures and diligence, see the channel partnership guide.
8. CRM and Data Integrity Assessment
Every metric in this checklist depends on data quality. If the CRM is a graveyard of stale records and inconsistent fields, your revenue analysis is built on sand.
Data Integrity Checks
- Field completion rates: What percentage of closed-won deals have populated values for discount, lead source, close date, and contract term?
- Stage consistency: Are deal stages defined and enforced? Pull a sample of 20 deals and verify that stage transitions match the stated sales process.
- Activity logging: Is there evidence of rep activity (calls, emails, meetings) in the CRM, or is it used only as a forecast tool?
System Architecture
Understand what systems feed the CRM and how data flows to finance. If billing lives in one system, renewals in a spreadsheet, and pipeline in a third tool, reconciliation errors are almost certain.
According to BCG’s 2022 research on post-merger integration, data architecture gaps were among the top three causes of delayed synergy realization. Address this in diligence, not in month six of the hold.
9. Red Flags That Should Trigger Deeper Investigation
Not every issue is a deal-breaker. But certain patterns should escalate to the deal lead and may require pricing adjustment or specific post-close remediation commitments.
High-Severity Flags
- Cohort retention declining for three consecutive periods
- Top customer representing more than 25% of ARR with no contract protection
- CRM data too incomplete to verify pipeline or retention claims
- Sales productivity dependent on founders or a single rep
- Pricing never increased despite stated “pricing power”
Medium-Severity Flags
- Discount approval authority unclear or unenforced
- Channel partner contracts expiring within 12 months of close
- ICP mismatch: customer base does not align with stated positioning
- Pipeline coverage below 2x for next quarter
Context Matters
A red flag in isolation may be explainable. Multiple flags in the same workstream suggest systemic issues. Document everything in your red-flag register with severity ratings and remediation owners.
10. Commercial Diligence Scorecard and Red-Flag Register
Below is the B2B commercial diligence scorecard we use in live engagements. Each workstream receives a score from 1-5, with defined criteria. The red-flag register captures specific issues, their severity, and assigned remediation owners. You can adapt this for your own buy-side due diligence process.
Commercial Diligence Scorecard
| Workstream | Score (1-5) | Criteria for Score 5 | Criteria for Score 1 | Evidence Required |
|---|---|---|---|---|
| Market Attractiveness | Target segments growing >10% annually, limited competitive intensity, structural tailwinds | Market flat or declining, high competitive intensity, regulatory headwinds | Third-party research, win/loss data, management interviews | |
| ICP and Demand | Customer base matches ICP, >50% inbound pipeline, strong referral rates | Customer base misaligned with ICP, <10% inbound, founder-dependent pipeline | Customer distribution analysis, lead source data, referral metrics | |
| Revenue Quality | >90% true recurring, NRR >110%, improving cohort curves | <50% recurring, NRR <90%, declining cohort curves | ARR reconciliation, 24-month cohort data, churn analysis | |
| Retention Evidence | Cohort data available, retention consistent across segments, churn drivers understood | No cohort data, retention volatile, churn causes unclear | Cohort exports, segment-level retention, churn reason codes | |
| Pricing Discipline | >70% deals at list price, clear approval authority, evidence of price increases | Widespread discounting, no approval controls, no price increases | Discount distribution, approval policy, price change history | |
| Pipeline Health | >3x coverage, consistent stage definitions, <60 day average age in late-stage | <1.5x coverage, undefined stages, >120 day average age | Pipeline report, stage conversion rates, aging analysis | |
| Sales Productivity | >60% of reps at quota, new hires ramping in <6 months, win rates consistent | <20% of reps at quota, new hires not ramping, win rates vary >3x by rep | Quota attainment by rep, ramp analysis, win rate distribution | |
| Channel and Concentration | No customer >10% ARR, diversified channels, durable partnership contracts | Single customer >25% ARR, single channel >30% bookings, weak contracts | Revenue by customer, bookings by channel, partnership agreements | |
| CRM and Data Integrity | >90% field completion, enforced stage definitions, activity logging active | <50% field completion, inconsistent stages, no activity logging | Field completion audit, stage sample review, activity report |
Red-Flag Register Template
| Issue | Workstream | Severity (H/M/L) | Evidence | Remediation Required | Owner | Timeline |
|---|---|---|---|---|---|---|
| Example: Top customer = 28% of ARR | Concentration | H | ARR by customer report | Contract extension, diversification plan | Deal lead | Pre-close / Day 30 |
Use this register as a living document through diligence. Every high-severity flag should have a named owner and a remediation commitment before you close.
From Checklist to Execution
A commercial due diligence checklist is only as good as the rigor behind it. The scorecard and red-flag register above give you a structure. The harder work is insisting on evidence, asking follow-up questions when data is missing, and connecting diligence findings to integration priorities.
The best commercial diligence I have seen does not just validate a thesis. It identifies the two or three levers that will drive value creation in the first 100 days and the risks that need contractual protection or immediate remediation. That output, not the slide deck, is what separates diligence that earns its cost from diligence that checks a box.
If you need structured support running commercial diligence on a live transaction, DevriX offers buy-side commercial due diligence services for private equity deal teams, operating partners, and portfolio executives evaluating B2B software and digital-services targets.
