Small business data rooms often say little about technology. Buyers receive financial statements, customer lists and leases, but rarely a record of the systems that run the business, who controls them and what it will cost to keep them working. IT due diligence for acquisitions fills that gap before close, when findings can still shape price, terms and the first months of ownership.
This article gives you the request list to send the seller and the interviews to schedule. For a ready-made version, download Inzo's IT due diligence discovery questionnaire, built for searchers and other business buyers.
A technology problem found before close can still shape price and terms; found afterward, it becomes the buyer's cost. A server past its end of support, a seller who personally owns the domain name, a former employee who still holds administrator access or backups that have never been tested can each create unplanned cost and disruption in the first weeks of ownership. Diligence does not need to be exhaustive to be useful. It needs to surface the issues that affect value, continuity and risk.
Documents tell only part of the story. Schedule short conversations with the seller, whoever handles IT day to day and, where possible, the outside IT provider. Ask what breaks most often, which systems people work around, what the seller has been meaning to replace and what would happen if a key person left. Ask the person who handles IT to walk through a recent outage from start to finish; gaps in the story usually mirror gaps in the environment. Ask the outside provider what it has recommended that the seller chose not to fund, which surfaces deferred maintenance quickly. Department leads who depend on a particular system, and whoever handles insurance renewals, round out the picture.
Many small business sellers will not have all of this assembled, and that is normal. Send the request list early and expect to gather part of it through conversation and discovery.
Sort findings into three groups: items to fix before close because they block day-one operation, items to fund in the first year, and items to monitor. For each material finding, record the evidence, the business impact, a rough cost range labeled as an estimate and the timing. Share the results with your deal advisers, who can decide whether a finding belongs in price, in transition services, in seller obligations before close or simply in the post-close plan. Missing records warrant further review but do not automatically mean a system must be replaced. Our post-close IT support page shows how findings carry into the first 30 days and the first 90 days after close.
Inzo's CEO is a former searcher who bought the company through Entrepreneurship Through Acquisition in 2023, so we approach diligence from the buyer's side of the table. Start with the ETA hub or download the IT due diligence questionnaire.
Ownership and access, infrastructure and devices, software and licensing, security controls, backup and recovery, vendor contracts and the people and documentation behind IT. Add interviews with the seller and whoever runs IT today.
Start once you have access to the data room and before terms are final, so material findings can still influence price, terms and transition planning.
It depends on the size of the environment and how quickly the seller responds. A focused review of a small business can often be completed alongside financial diligence when the request list goes out early.
That is common and not automatically a reason to walk away. It shifts the work from document review to discovery through system inventories, network scans and interviews, so allow more time.
Yes. Small businesses often have informal ownership of accounts, untested backups and knowledge concentrated in one person, which are exactly the issues diligence uncovers.