Most buyers spend 80% of their due diligence time verifying revenue and 20% on everything else. That ratio is backwards. Clean books mean nothing if the business runs entirely out of the seller's head — and you find that out on day 31, after the escrow closes.
Deal Alert AI is reader-supported. We earn commissions from affiliate links at no cost to you.
This post is based on a video from our Deal Alert AI YouTube channel. Watch the original or read the full breakdown below.
I have watched buyers spend three weeks reconciling Stripe payouts to Profit & Loss statements down to the dollar, then take over a business and discover the seller's virtual assistant quit the week after closing, the email service provider account was tied to a personal credit card, and the "documented process" for publishing content was a series of voice memos in a WhatsApp thread.
The financials were accurate. Every number checked out. And the business still fell apart in the first 90 days.
Financial due diligence answers one question: did this business actually make the money it claims? That is important, but it is a backward-looking question. Operations due diligence answers a forward-looking question that matters far more to your outcome: can this business keep making that money after the seller walks away?
This guide is the operations DD framework I run on every deal, broken into seven areas, with the specific questions to ask and the red flags that should make you renegotiate or walk. Whether you are browsing listings on Empire Flippers or digging through auctions on Flippa, this is the work that separates buyers who acquire a business from buyers who acquire a second job.
Operations due diligence is the systematic investigation of how a business runs day to day — the people, the processes, the software, the suppliers, and the institutional knowledge that keeps revenue flowing. It is the difference between buying a machine and buying a pile of parts that happened to produce output while one specific person was standing next to it.
Financial DD is largely a verification exercise. You pull bank statements, merchant processor reports, ad platform spend, and you tie them to the seller's P&L. It is tedious but it is objective. Either the numbers reconcile or they do not. Most brokers with real vetting standards have already done a version of this before the listing goes live, which is why financial surprises are relatively rare on curated marketplaces.
Operations DD is different because there is no ledger to reconcile against. You are assessing transferability — a qualitative judgment about whether the systems producing those financials will survive a change in ownership. Nobody audits this for you. The broker will not do it. The seller has no incentive to volunteer weaknesses. If you do not run this investigation yourself, it does not get run.
We scan Empire Flippers, Flippa, Acquire.com and Quiet Light daily — scoring every listing. Start free.
Start with people, because people are the single largest source of post-acquisition failure. Ask the seller for a complete roster of everyone who touches the business: full name or handle, role, average weekly hours, hourly rate or monthly retainer, how long they have worked on the business, and what happens if they disappear tomorrow.
Then ask the question most buyers skip: have you told them the business is for sale? The answer is usually no, and that is understandable — sellers do not want to spook their team mid-transaction. But you need a plan for that conversation, and ideally you want it to happen before closing, not after. I push for direct introductions during the exclusivity period, framed as "the owner is bringing on a partner." A 20-minute call with each contractor tells you more about operational reality than any document the seller will hand you.
What you are listening for on those calls: does the contractor know what they are doing, or are they executing instructions they do not understand? Do they have a working relationship with the business or with the seller personally? A writer who says "Mike sends me topics every Sunday and I turn them around by Thursday" is describing a process. A writer who says "Mike and I have been friends since college, I mostly just help him out" is describing a favor that ends the day Mike does.
Get compensation history too. If the seller is paying a VA $6/hour and that VA has been with the business for four years, you have concentration risk and a likely wage adjustment coming. Model the real cost of replacing every single person on that roster at market rates. If replacing the team at market rates cuts your SDE by 25%, you did not buy the business you thought you bought.
Standard operating procedures are the most reliable proxy for transferability I have found. Ask for every SOP the business has — written docs, Loom videos, checklists, Notion pages, anything. Then evaluate them on two dimensions: coverage and quality.
Coverage means: does documentation exist for every recurring task that generates or protects revenue? For a content site that means keyword research, content briefing, writing, editing, publishing, internal linking, affiliate link management, and outreach. For an ecommerce business it means inventory forecasting, purchase orders, supplier communication, listing optimization, ad management, and customer service escalation. Map the tasks first, then check which ones have documentation. The gaps are where the seller's tribal knowledge lives.
Quality means: could a competent stranger execute this document without asking follow-up questions? Test it. Take one SOP, hand it to someone who has never seen the business, and ask them to walk you through what they would do. If they get stuck in the first three steps, the SOP is decoration, not documentation. I have seen 40-page "operations manuals" that were essentially screenshots with no context.
The tech stack audit is the least glamorous part of operations DD and the one that causes the most avoidable pain. Build a spreadsheet with every software tool the business uses: name, monthly or annual cost, what it does, whose email address the account is registered to, whose credit card is on file, and whether the account can be transferred or must be recreated.
That last column is where deals go sideways. Some platforms transfer cleanly with an email change. Others — certain payment processors, some ad accounts, most Apple and Google developer accounts, a lot of legacy plan grandfathering — do not transfer at all. If the seller is on a $29/month legacy plan for a tool that now costs $199/month for new accounts, your operating expenses just went up $2,000 a year and nobody mentioned it.
Also audit for shadow costs. I regularly find businesses paying for three overlapping tools because the seller tried something, never canceled, and stopped noticing the charge. Sometimes that is found money — cancel the duplicates and add $100/month to net profit. Sometimes it reveals that the seller is not paying close attention, which raises questions about everything else you have been told.
Finally, check for custom code. Custom themes, custom plugins, custom scripts, a bespoke internal dashboard. Ask who built it, whether that developer is still available, whether the code is documented, and whether it is in a repository you will receive access to. A custom-built system with no maintainer is a time bomb with an unknown fuse length.
For any business with physical products — Amazon FBA, DTC ecommerce, private label — supplier relationships are frequently the highest-value and least-documented asset in the deal. Your entire cost structure depends on people you have never spoken to continuing to treat you the way they treated someone else.
Insist on interviewing the top suppliers before closing. Not an email introduction after the wire clears — an actual conversation during due diligence. What you need to confirm: they will continue supplying under new ownership, current pricing and payment terms carry over, minimum order quantities stay the same, and lead times are what the seller claims. Get it in writing where you can.
Look hard at whether the relationship is contractual or personal. A signed supply agreement with defined terms transfers. A seven-year friendship with a factory owner in Shenzhen who gives net-60 terms and priority production slots because he likes the seller does not transfer, no matter what anyone tells you at closing. That is not the seller lying — it is a genuinely non-transferable asset that both parties may not have consciously identified.
The same logic applies to non-physical vendors: affiliate program managers, ad network reps, media partners, exclusive content licenses. If revenue depends on a relationship, verify the relationship survives the transaction.
Ask for six months of support ticket history. Most sellers will export it from Helpscout, Zendesk, Gorgias, or just hand you a Gmail folder. Then read it. Actually read it — not a summary, not a metrics dashboard, the raw tickets. This is the single most information-dense hour you will spend in due diligence.
Three things to extract. First, ticket volume relative to order volume or traffic, which tells you the real labor cost of running the business. A store doing 400 orders a month with 60 support tickets has a product or fulfillment problem. Second, the recurring complaint categories. Five people complaining about the same shipping delay is a logistics issue. Five people complaining the product broke is a margin-destroying quality issue you are about to inherit.
Third, resolution time and refund rate. If average resolution is four days and refunds run 8% of revenue, your actual net margin is lower than the P&L suggests and your customer acquisition economics are worse than modeled. Cross-reference refund totals in the tickets against what appears in the financials — this is one of the few places operations DD directly validates financial DD.
You need to understand exactly how customers arrive, and more importantly, whether that process is a system or a skill. This is the distinction that determines whether the traffic survives you.
A system is repeatable by a competent operator following documented steps: a keyword research process that produces a content calendar, a paid acquisition setup with defined creative testing cadence and target CPA, an email flow that runs automatically. A skill is something the seller does well and cannot articulate: an instinct for what will go viral on TikTok, a personal network that lands guest posts, a media buying touch built on eight years of pattern recognition.
Ask the seller to walk you through, step by step, how they acquired the last 100 customers. Then ask what would happen if they were unavailable for 60 days. The honest answer to that second question is the most valuable data point in the entire due diligence process. Sellers are often surprisingly candid here, because it feels like a hypothetical rather than an accusation.
Pay special attention to link building, outreach, and partnerships. If organic traffic depends on relationships the seller built personally with editors and site owners, that pipeline dries up. Ask for the outreach process documentation and the response rate. A documented cold outreach system with a 4% reply rate is transferable. "I DM people I know from a private Slack group" is not.
For content sites, newsletters, and media properties, the editorial pipeline is the product. Map the entire workflow from idea to promoted post: who selects topics, who writes the brief, who writes the draft, who edits, who adds images and internal links, who publishes, who handles on-page optimization, who promotes.
For each step, identify the person, the cost, the turnaround time, and whether the step is documented. Then find the bottleneck — there is always one, and it is usually the seller. In most content businesses I evaluate, the owner has outsourced writing but kept editing, topic selection, or final publishing approval. That is the exact task you will inherit, and it is often 10 to 15 hours a week that appears nowhere in the "owner works 5 hours per week" listing claim.
Also review the content pipeline inventory. How many articles are drafted but unpublished? How many are commissioned but not delivered? A business with 30 finished articles in the queue is worth meaningfully more than one with an empty pipeline, and neither shows up on the balance sheet. Conversely, if the seller stopped publishing four months ago, you are buying a declining asset and the trailing twelve month revenue overstates current run rate.
Here is the sequence I run, in order. Most of it happens during the exclusivity window, and the whole thing takes 10 to 20 hours for a typical six-figure deal. That is a real time investment, which is exactly why you should qualify deals hard before you commit to it.
Some findings are negotiation levers. Others are exits. Knowing the difference saves you from both overpaying and walking away from good deals for fixable reasons.
Negotiate on these: No SOPs but a seller who can clearly explain their processes. Legacy software pricing that will not transfer. A support burden higher than represented. A pipeline that has gone stale. Contractors underpaid relative to market. All of these have a dollar value — quantify them, subtract from your offer, and move forward with an accurate picture.
Seriously reconsider on these: A team composed entirely of the seller's personal friends and family who have no contractual relationship with the business and no clear reason to stay. Critical accounts that legally cannot be transferred. Supplier terms that exist purely because of the seller's personal reputation. A seller who cannot articulate how their own marketing works. And the one that ends deals fastest — a seller who resists any contact between you and their team or vendors before closing, without a defensible reason.
That last one is worth expanding on. Sellers have legitimate confidentiality concerns and you should respect the sequencing. But if you have signed an LOI, put down a deposit, and are in exclusivity, and the seller still will not let you speak to a single contractor or supplier, they are protecting information from you. There is a reason for that, and you will not like it.
Here is the practical problem with everything above: full operations due diligence is expensive in the currency that matters most to individual buyers, which is time. Twenty hours per deal, at a realistic close rate of one in eight or one in ten serious evaluations, means 160 to 200 hours of diligence per acquisition. That is a month of full-time work for a single deal.
The only way to make that math work is aggressive pre-qualification. Before you enter exclusivity, you should already know the business model, the traffic composition, the owner involvement claim, the team structure, and the obvious transfer risks. Most of that is visible in listing materials if you know what to read for — but reading hundreds of listings across multiple marketplaces manually is its own full-time job.
That is the problem Deal Alert AI was built to solve. We aggregate listings across the major marketplaces and score them on the signals that actually predict transfer difficulty: stated owner hours versus business model reality, team structure disclosures, traffic and revenue concentration, tech stack complexity, and documentation claims. Instead of opening 200 listings, you open the 12 that survive filtering.
It does not replace the seven-area investigation in this guide — nothing does. What it does is make sure the 20 hours you spend on operations DD go into a deal that has a real chance of closing at terms you would accept. You still verify the suppliers on Empire Flippers listings and you still read the ticket history on Flippa deals. You just do it on fewer, better-qualified opportunities.
Financials tell you what happened. Operations tell you what happens next. Spend your diligence time accordingly.
We scan Empire Flippers, Acquire, Flippa, and Quiet Light daily. The best sub-$500K businesses are gone within 48 hours.