You are two weeks into confirmatory diligence on a B2B software target. The seller’s QofE looks clean, EBITDA margins check out, and the management presentation told a growth story that made your investment committee lean forward. Then your commercial due diligence report lands. Forty percent of ARR sits with three customers. The pipeline the CEO touted is mostly recycled opportunities from 18 months ago. And the CRM data contradicts the bookings numbers in the data room by a material margin.
This is not a hypothetical. I have seen versions of this scenario unfold repeatedly across mid-market B2B deals. The financial statements pass. The commercial engine does not. And distinguishing between a fixable growth problem and a structural revenue defect is the difference between a value creation opportunity and a write-down waiting to happen.
What follows is the commercial due diligence red flags framework I use when advising deal teams and operating partners on B2B targets. These are the signals that matter before you sign, not the ones you discover six months into ownership when the forecast misses. Commercial work is one lane. The full diligence guide covers how it lines up with financial, technology and legal review, and where the handoffs between those teams usually break.
Revenue Quality Problems That Undermine the Entire Thesis
Revenue quality is the foundation. Without it, every multiple you paid and every growth assumption you modeled becomes suspect.
The first red flag is revenue recognition timing that does not match cash collection or delivery. In B2B software and services, look for large year-end deals that recognized in Q4 but delivered or collected in Q1. This pattern often indicates pull-forward behavior, especially in years preceding a sale process.
The second is revenue composition shifts. If the mix between recurring, services, and one-time revenue changed materially in the last 24 months, understand why. A target that moved from 70% recurring to 55% recurring while growing topline may have a demand problem it masked with project work.
Third, examine the quality of new versus expansion revenue. Bain’s 2023 research on recurring revenue businesses found that companies with more than 30% of net new ARR coming from expansion outperformed peers by a significant margin on long-term retention. If expansion revenue is flat or declining while new logo acquisition carries the growth, you are looking at a leaky bucket with a marketing engine temporarily compensating.
What to Validate
Request a revenue bridge by customer cohort for the last three years. Map recognized revenue to invoicing and cash. Flag any customer where the three numbers diverge by more than 10%.
For a complete checklist structure on this validation process, see the commercial due diligence checklist for B2B acquisitions.
Retention and Churn Tell You What the Sales Deck Will Not
Sellers present gross retention. Buyers need net retention by cohort, segment, and contract vintage.
A 90% gross retention number sounds acceptable until you discover it excludes customers who churned within the first 12 months, or that the calculation uses a denominator that conveniently omits downgrades. McKinsey’s 2022 analysis of SaaS valuations found that a 5-percentage-point difference in net revenue retention can translate to a 20% difference in enterprise value for growth-stage companies.
Red flags in retention include:
- Retention rates that improved dramatically in the 12 months before the sale process
- Cohort curves that show consistent decay rather than stabilization
- No segmentation of retention by customer size, vertical, or product
- Churn reasons that cluster around “price” or “not using the product”
When churn reasons cluster around price, you have a value perception problem. When they cluster around non-usage, you have an onboarding or product-market fit problem. Both are fixable, but the fix timelines and investment requirements differ by an order of magnitude.
Customer Concentration Creates Binary Outcomes
Customer concentration is the red flag that boards understand intuitively but often underweight in practice.
If your top customer represents more than 15% of revenue, or your top five represent more than 40%, you are not buying a business. You are buying a set of relationships that may or may not transfer with the transaction. The risk compounds when those relationships depend on a founder or a single account manager who may not stay post-close.
The deeper question is concentration trajectory. Is concentration increasing or decreasing? A business with 35% concentration that was at 50% three years ago is in a healthier position than one that moved from 25% to 35% in the same period.
Contract terms matter here as well. Concentrated revenue with multi-year contracts and high switching costs differs from concentrated revenue with annual renewals and low barriers to switching. Get the actual contracts, not summaries.
Channel Dependency and the Ownership Question
How does this business acquire customers, and does it own those channels?
A B2B target that generates 60% of pipeline through a single reseller partner, a dominant paid channel, or a platform integration has channel dependency risk. If that partner changes terms, the platform adjusts its algorithm, or the paid channel economics shift, the growth model breaks.
I have seen targets where 70% of qualified leads came through a single integration partner’s marketplace. The seller presented this as a go-to-market strength. It was actually a concentration risk dressed in growth clothing. When that partner launched a competing feature six months post-close, qualified lead volume dropped by half.
Ask for channel attribution data at the opportunity level, not the lead level. Understand which channels produce closed revenue, not just top-of-funnel activity. Integration dependency is a technology question as much as a commercial one. Tech due diligence establishes what the target built itself and what it rents from a partner, and that distinction decides whether a channel can be replaced in 6 months or not at all.
For deeper examination of go-to-market mechanics, the GTM due diligence framework provides the question set.
Pricing Risk Hides in Plain Sight
Pricing risk manifests in several forms. The most common is price erosion, where effective prices have declined over time due to discounting, promotional activity, or competitive pressure. Request a time series of average contract value and average revenue per user. If ACV is flat while the product has added features and the market has experienced inflation, real prices declined.
The second form is pricing power uncertainty. Has the business raised prices in the last three years? What was the customer response? Businesses that have not tested pricing power often discover they have less than assumed when a new owner attempts to implement increases.
Third is structural pricing risk. If the pricing model depends on a metric that customers are actively trying to reduce, such as per-seat pricing when customers are consolidating users, or usage-based pricing on a shrinking use case, the revenue model has a headwind built in.
Pipeline Quality Versus Pipeline Quantity
A full pipeline can be a red flag if the composition is wrong.
Pull the pipeline aging report. What percentage of current opportunities have been in the pipeline for more than two sales cycles? Anything above 25% suggests the team is carrying dead weight to inflate coverage ratios.
Examine stage conversion rates by time in stage. Healthy pipelines show consistent velocity. Unhealthy pipelines show opportunities that stall at specific stages, often at pricing or procurement, which signals deal qualification problems or competitive weakness.
Sales productivity metrics matter here. Revenue per quota-carrying rep, quota attainment distribution, and ramp time for new hires all inform whether the pipeline is supported by a repeatable sales motion or dependent on a few high performers.
A Gartner study on B2B sales effectiveness found that organizations with formalized sales processes and clear stage definitions achieved 18% higher revenue growth than those without. If the target cannot produce clean stage definitions and historical conversion data, the pipeline numbers are unreliable.
ICP Drift Signals a Positioning Problem
Ideal customer profile drift occurs when a business begins selling to customers outside its original sweet spot, typically because the core market is saturated or the sales team is chasing any revenue to hit numbers.
Red flags include:
- Win rates declining while sales activity increases
- Customer success complaints about “bad fit” customers
- Implementation timelines extending without product complexity increasing
- Churn concentrated in recently acquired cohorts
ICP drift often precedes margin compression, as serving customers outside the sweet spot typically requires more sales effort, longer implementations, and higher support costs. If the target’s gross margin declined while revenue grew, ICP drift is a likely contributor.
For additional guidance on diagnosing ICP alignment, the portfolio company commercial diagnostic framework outlines the interview and data protocols.
CRM Reliability Determines Whether You Can Trust Any of This
Every analysis above depends on data quality. If the CRM is unreliable, every conclusion is suspect.
Test CRM reliability by triangulating. Pull closed-won opportunities from the CRM for a sample period. Match them to invoices. Match invoices to cash receipts. If the three sources do not reconcile within a reasonable tolerance, the CRM is not a system of record. It is a system of aspiration.
Check data hygiene basics. What percentage of opportunities have a close date in the future versus the past? What percentage have been modified in the last 90 days? What percentage have required fields populated? CRMs with poor hygiene produce pipeline reports that mislead.
Ask when the CRM was implemented and whether it has been the consistent system through the analysis period. A CRM migration in the last 18 months often means historical data is incomplete or inaccurate. The CRM is one system among several a buyer has to trust. IT due diligence for private equity covers the rest of the stack, including hosting, security posture, integration debt and the cost of keeping it running, which is where post-close budget surprises come from.
Market Saturation and the Growth Headroom Question
The final commercial due diligence red flag is market saturation. Your growth thesis assumes the business can continue growing. But can it?
Request the total addressable market analysis from the seller. Then pressure-test it. What percentage of the addressable market does the target already serve? If market penetration exceeds 20% in core segments, growth requires either market expansion, use case expansion, or taking share from entrenched competitors. Each has different risk profiles and investment requirements.
BCG’s 2023 analysis of mid-market acquisitions found that deal teams systematically overestimate addressable market size by an average of 40%. The most common errors are including segments the target cannot credibly serve and assuming penetration rates that exceed historical evidence.
If the market is saturating, your value creation plan needs to account for that constraint. Growth assumptions that ignore saturation produce forecasts that miss.
For structuring the operational response to these findings, the private equity value creation plan framework provides the playbook.
Red Flag Scoring Matrix
Use this matrix during commercial diligence to score risk across each dimension. A score of 3 in any category warrants deeper investigation. A score of 3 in multiple categories suggests structural commercial risk that should influence deal terms or the investment decision itself. This matrix scores one workstream. The M&A due diligence checklist puts the commercial score next to the tax, technology and value creation reads, so the investment committee sees one page instead of 4 separate reports arguing with each other.
| Red Flag Category | Score 1 (Low Risk) | Score 2 (Moderate Risk) | Score 3 (High Risk) |
|---|---|---|---|
| Revenue Quality | Recognition, invoicing, and cash align; recurring mix stable or improving | Minor timing differences; mix shifted but explainable | Material recognition issues; mix deteriorating without clear cause |
| Retention / Churn | Net retention >100%; cohort curves stabilize; segmented data available | Gross retention >85% but net retention declining; limited segmentation | Net retention <90%; cohort decay consistent; churn reasons cluster on value or usage |
| Customer Concentration | Top 5 customers <25% of revenue; concentration declining | Top 5 customers 25-40%; concentration stable | Top 5 customers >40%; concentration increasing; key contracts short-term |
| Channel Dependency | Diversified acquisition; owned channels dominant | Moderate reliance on 1-2 paid channels | >50% of pipeline from single partner, platform, or channel |
| Pricing Risk | Recent price increases absorbed; ACV growing | No price increases tested; ACV flat | Price erosion evident; structural pricing headwinds |
| Pipeline Quality | <15% aged opportunities; clear stage definitions; consistent velocity | 15-25% aged opportunities; velocity inconsistent | >25% aged opportunities; stage definitions unclear; conversion rates unavailable |
| ICP Drift | Win rates stable; churn consistent across cohorts; gross margin stable | Minor win rate decline; some implementation variability | Declining win rates with rising activity; churn concentrated in new cohorts; margin erosion |
| CRM Reliability | CRM reconciles to invoicing and cash; data hygiene strong | Minor reconciliation issues; some hygiene gaps | Material reconciliation gaps; recent migration; unreliable historical data |
| Market Saturation | Penetration <10% in core segments; clear expansion vectors | Penetration 10-20%; expansion requires investment | Penetration >20%; TAM analysis suspect; growth requires share capture |
Conclusion
Commercial due diligence red flags do not necessarily kill deals. But they should change deals. They should inform price, structure, reps and warranties, and the first 100-day plan. The point of identifying these signals early is not to walk away from every imperfect business. It is to enter ownership with accurate expectations and a realistic plan for the work ahead. Red flags are the exceptions you look for. The commercial questions that decide a deal are the ones you ask of every target regardless of what the report surfaces, covering revenue quality, retention, concentration and channel ownership in a fixed order so nothing gets skipped under time pressure.
The targets that produce the best outcomes are often the ones with fixable commercial problems that the seller could not or would not address. But distinguishing fixable from structural requires evidence, not optimism.
Where a deal is live, DevriX can validate these red flags with primary work. Sellers run the same matrix in reverse. Sell-side commercial due diligence puts these 9 categories in front of your own team 6 to 12 months before a process, which turns findings that would have cost you price into work you have already finished.
