High revenue means nothing if your margins are bleeding. Here is the exact framework Sophal Lanh uses to strip down SaaS financials, uncover hidden costs, and ensure you are buying a business, not a liability.
Deal Alert AI is reader-supported. We earn commissions from affiliate links at no cost to you.
This post is based on a video from our Deal Alert AI YouTube channel. Watch the original or read the full breakdown below.
In the world of digital business acquisition, revenue is the most common vanity metric. It is the number that looks good on a pitch deck, the figure that gets brokers excited, and the statistic that often tempts inexperienced buyers into overpaying. However, if you have ever looked past the surface-level income statement of a software company, you know that revenue is a lie if the costs to serve that revenue are equally high. For SaaS businesses, the single most important health indicator before revenue is actually the gross margin. It is the one metric that tells you whether the business model is fundamentally scalable or if it is a customer acquisition machine that burns cash on every single dollar it brings in.
When I speak to buyers who have recently closed deals on platforms like Flippa or other marketplaces, a recurring theme emerges: they focused too much on EBITDA or SDE (Seller Discretionary Earnings) and not enough on the underlying unit economics. A SaaS company with $50,000 in Monthly Recurring Revenue (MRR) and a 90% gross margin is a fundamentally different asset than a company with $50,000 in MRR and a 40% gross margin, even if they both show the same bottom-line profit after operational expenses are stripped out. The former has room to scale, hire, and grow. The latter is a ticking time bomb where any increase in infrastructure costs or a slight dip in retention will wipe out profitability completely.
At Deal Alert AI, we have analyzed hundreds of business listings to build models that predict long-term viability. The data is clear: acquisitions that fail in the first twelve months post-closing are almost always due to cost structures that were hidden, understated, or misunderstood by the seller. This guide is designed to change how you look at the income statement. We are going to move beyond simple subtractive analysis and dive into the specific cost centers that distort SaaS gross margins. By the end of this article, you will have a rigorous methodology to verify the financial health of any SaaS target, ensuring that you are buying a profitable asset and not a series of recurring bills that eat your equity.
We scan Empire Flippers, Flippa, Acquire.com and Quiet Light daily — scoring every listing. Start free.
The first mistake buyers make is assuming that SaaS Cost of Goods Sold (COGS) only includes hosting and server infrastructure. While AWS, Azure, or Heroku bills are indeed part of COGS, they are rarely the largest component in a mature SaaS business. In many cases, the true COGS is dominated by payment processing fees, third-party API costs, and data usage charges. If you are only looking at the hosting bill, you are missing 60% to 80% of the actual variable costs that grow with your user base. A comprehensive COGS analysis must include every single cost that is directly tied to serving an active customer.
Consider a subscription-based platform that uses a CRM system as its backend. The CRM subscription might be a flat monthly fee, but if the cost per user inside that CRM increases as you scale, or if you are paying overage fees for API calls, that is a variable cost. Similarly, if your SaaS relies on a point-of-sale integration or a bulk email service, the pricing tiers for those services are likely stepped. At 100 users, the cost per unit is low. At 1,000 users, the cost per unit might spike due to tiered pricing. If the seller is operating at the lower tier, their reported gross margin is artificially inflated relative to where you want to take the business in two years.
Furthermore, we must account for support costs that are directly related to service delivery. In the SaaS world, "technical support" is often codified as a COGS item, while "customer success" might be Operating Expense (OpEx). This line is blurry, and it matters. If the seller is paying contractors to handle critical ticket resolution that prevents churn, those labor costs are effectively part of the cost of keeping the revenue alive. If you exclude labor from COGS, you are assuming that you can maintain the same retention rates without the same level of service investment. This is rarely true. For a rigorous analysis, you must include direct support labor, payment gateway fees (typically 2.9% plus 30 cents per transaction for credit cards), and any telephony or SMS integration costs charged per message or minute.
One of the most dangerous aspects of SaaS unit economics is the non-linear nature of technology costs. We call these "step-function" costs. Cloud providers like AWS do not charge a linear price per gigabyte of storage or per vCPU unit in a way that remains constant as you scale from a small business to an enterprise scale. There are architectural changes required at certain thresholds. For example, moving from a shared database environment to a dedicated cluster, or shifting from a standard compute instance to a high-performance grid, incurs a sudden jump in fixed costs that is amortized over the revenue generated. If a seller is currently on the lower end of a step, their marginal cost looks low. The moment you scale past the threshold, your gross margin will collapse until you reach the next efficiency plateau.
An example of this is video processing. If your SaaS allows users to upload videos, the cost to store and stream those videos using a CDN like CloudFront or Akamai is significant. A small business with 1,000 users might have negligible video storage costs. A scaled version of the same business with 100,000 users will face exponential storage and bandwidth costs. If the seller’s historical data does not reflect this scaling, or if they have not optimized their architecture for the volume you intend to achieve, you are buying a margin trap. This is why we recommend running the financials through a "scale-up" simulation. You must ask: "If I double the customer base, how does the COGS line change?" If the answer is "it doubles," your margin remains flat. If the answer is "it triples," your margin shrinks by half. The latter is a red flag that requires massive technical investment before growth can be profitable.
In any software acquisition, the codebase is an asset, but it is also a debt. "Technical debt" is the accumulated cost of shortcuts taken in the past to ship features faster. For gross margin analysis, we need to quantify the "maintenance cost" of the code. How many hours per week does the development team spend fixing bugs, refactoring to ensure stability, and preventing server crashes? If the seller is bootstrapped and the founder is doing all the coding, they may not have allocated a specific budget for this. However, if you are acquiring a company with two developers, you need to know what percentage of their time is spent on "business as usual" maintenance versus new feature development. This ratio directly impacts your operational efficiency and, by extension, how much revenue you need to cover their salaries.
While developer salaries are typically classified as Operating Expenses (OpEx) rather than COGS, the line is often blurred in small to mid-market SaaS companies. If you are buying a product that requires constant uptime and low-latency response, the infrastructure costs to maintain that level of performance are part of the cost of goods sold. But there is also a hidden cost: the cost of downtime. If the system goes down, you lose revenue. To prevent this, you buy redundant servers, better monitoring tools, and backup solutions. These are all COGS items. If the seller has been running a "lean" stack with single points of failure, their current gross margin is high, but it is fragile. Adding the redundancy you need for enterprise-grade reliability will lower your gross margin by 5-15 percentage points. You must price this into your valuation model.
Additionally, consider the cost of compliance and security. SaaS companies that handle personal or financial data are subject to regulations like GDPR, HIPAA, or PCI-DSS. Implementing and maintaining these security standards requires specialized tooling and potentially external audits. These costs are often overlooked in initial financial models. If you are buying a SaaS company in a regulated industry, assume that 2-5% of your revenue will be allocated to maintaining compliance certifications and security infrastructure. This is not optional; it is the cost of doing business. Failing to account for this can result in a situation where you are profitable on paper but losing money in reality due to regulatory fines or security breaches that stem from under-invested infrastructure.
Once you have a hypothesis for what the true gross margin should be, you need to verify it against the data in the data room. Most sellers will provide a Profit and Loss (P&L) statement, but a P&L is a summary, not a source of truth. You need to go to the source documents. Start with the vendor logs. Request the last 12 months of invoices from your major technology vendors: the cloud provider, the email service, the payment processor, and any major API integrations. Do not accept spreadsheets exported from their dashboards; ask for the PDF invoices or the raw transaction exports. This allows you to reconcile the exact amount charged versus the amount recorded in the seller's accounting software.
Look for discrepancies in timing. A common trick in SaaS financials is to capitalize certain costs or to defer recognition of expenses. For example, a large annual prepayment for software licenses might be expensed in one quarter, causing a spike in COGS for that month, while the following months show artificially high margins. When analyzing gross margin, you must smooth out these one-time payments. Calculate the run-rate cost by dividing the annual cost by 12, rather than looking at the month-by-month variance. This gives you a clearer picture of the steady-state operational cost. If the seller is showing high volatility in their COGS, ask for an explanation. It is often a sign of poor financial management or hidden cost structures that will surprise you post-close.
To ensure you are not missing any critical details, use this structured checklist during your due diligence phase. This checklist is designed to be iterative. You will likely need to revisit certain items multiple times as you uncover new information in the data room. The goal is to triangulate the true cost of serving a customer and to identify any variables that could change that cost as you scale.
Once you have completed your analysis and have a clearer picture of the true gross margin, you are in a much stronger position to negotiate. Many buyers walk into negotiations with a number in their head based on the seller’s claimed EBITDA. However, if you can present a detailed analysis showing that the true gross margin is lower than advertised due to hidden variable costs, you have leverage. You can argue that the valuation multiple should be based on "Adjusted Earnings" that reflects the realistic cost structure. For example, if you find that $2,000 per month in API costs were accidentally booked as OpEx in the past year, you have identified $24,000 in annual savings that were not part of the "discretionary" earnings. You can deduct this from the purchase price or ask for a seller note to cover this discrepancy.
Furthermore, your understanding of marginal costs allows you to negotiate performance conditions. If you believe the gross margin is low because of inefficient architecture, you can put a performance clause in the contract that requires the seller’s technical team to remain on board for a three-month transition period, specifically tasked with optimizing the codebase to reduce COGS by a certain percentage. This shifts the risk from you, the buyer, to the seller, who knows their codebase best. It is a practical, human approach to risk mitigation that protects your investment.
Finally, use this data to build your post-acquisition roadmap. Knowing the true gross margin tells you how much headroom you have for marketing spend. If your gross margin is 85%, you can afford aggressive growth spending. If it is 60%, you need to focus on efficiency and existing customer retention before you spend capital on new user acquisition. This clarity prevents the "growth-at-all-costs" trap that destroys many acquired SaaS businesses. It aligns your operational strategy with your financial reality.
For serious buyers, looking at just gross profit is not enough. You need to understand "Gross Margin per Cohort." SaaS companies often have different margin profiles for customers acquired in different time periods. A customer acquired in 2019 might have a lower cost basis than a customer acquired in 2023, especially if the platform migrated to a more expensive cloud tier. By segmenting your gross margin analysis by cohort, you can see if the recent growth has been high-quality or if it has been driven by "cheap" early adopters who are now leaving, replaced by more expensive enterprise clients. This trend line is more predictive of future performance than the current aggregate number.
Another advanced metric is "Infrastructure Spend as a Percentage of Revenue" (ISPR). This is a proxy for gross margin. In a healthy, scalable SaaS, this number should decrease over time. If the ISPR remains flat or increases as revenue grows, it indicates negative economies of scale. This is a critical signal in due diligence. If you are buying a business with diminishing returns on scale, you are buying a business that will become harder to run as it gets bigger. The goal is to ensure that every new dollar of revenue requires less than marginal dollar of infrastructure. If that is not the case, the business is structurally unscalable, regardless of how much revenue it is currently generating.
The acquisition of a SaaS business is not a one-time event; it is the beginning of a new operational phase where your margin determines your survival. The most expensive mistake you can make is believing the seller’s narrative without verifying the unit economics from scratch. Gross margin is the lifeblood of SaaS. It is the metric that dictates your ability to compete on price, your ability to invest in R&D, and your ability to pay dividends to yourself. By applying the rigorous analysis framework outlined in this guide, you move from being a passive buyer to an active, informed operator. You uncover the hidden costs, you verify the data, and you price the business based on reality, not aspiration.
As you continue your search for the right opportunity, keep these principles in mind. Whether you are browsing listings on Empire Flippers to find a higher-tier asset or sifting through smaller opportunities on other platforms, the fundamentals do not change. The code is the asset, the cloud is the cost, and the user is the revenue source. But it is the margin in between that makes the deal. Do not skip the COGS analysis. Do not ignore the variable costs. And never close a deal without a clear understanding of what it costs to serve a single customer. That knowledge is your most powerful negotiation tool and your best protection against post-acquisition failure.
At Deal Alert AI, we believe that informed buyers win. We build our tools and content to help you dig deeper, ask better questions, and find the deals that are truly profitable. If you are ready to take the next step in your acquisition journey, start with the data. Verify the margin. Protect your equity. The best deals are often the ones where you did the homework that everyone else skipped.
We scan Empire Flippers, Acquire, Flippa, and Quiet Light daily. The best sub-$500K businesses are gone within 48 hours.