M&A due diligence
Covers: the buyer’s review of a target: commercial, financial, legal, tax, operational, people and ESG, in the M&A Due Diligence Checklist.
Ends: with the buyer’s decision on the deal and its integration plan.
Last reviewed: November 2026
No Credit Card Required
Printed from checkflow.io/templates/due-diligence/sell-side-due-diligence-checklist
This free sell-side due diligence checklist is for owners, founders and finance leads preparing a company or business for sale, and the advisers and lawyers who work with them. One run covers one sale, with every due date counted from the date the data room opens to bidders. It sets the objectives, advisers and timetable, cleans up the accounts, the forecast, tax and the corporate records, reviews contracts, IP, people, IT and property, and puts every red flag on one log to fix, disclose or price. It builds the data room and the management presentation, and ends with the sale approver’s launch decision, the bidders’ questions, the disclosure letter or schedules and a dated copy of the data room. Where the business is and how it is likely to be sold add the UK or US notes and, for a UK asset sale, the TUPE task; a vendor due diligence report adds its own tasks.
Sell-side due diligence is the seller’s review of its own business before a sale process starts: the questions a buyer’s due diligence will ask, answered early, with the problems fixed, disclosed or priced before bidders find them. It ends in a data room, a management presentation and, once a buyer is chosen, the disclosures against the warranties in the purchase agreement.
The M&A Due Diligence Checklist is the buyer’s review of a target, and its card for sellers describes this preparation from the outside; this checklist is the seller’s own run of it. The Financial Due Diligence Checklist is the buyer’s review of the numbers, and the Legal Due Diligence Checklist the buyer’s review of the contracts and records. The Investor Data Room Checklist sets up a data room for raising investment rather than for selling the company. A buyer’s whole acquisition is in the Purchase of a Business Checklist, and closing a company down rather than selling it is in the Business Closure Checklist. A UK sale of a business and its assets runs its staff transfer in the TUPE Transfer Checklist.
Covers: the buyer’s review of a target: commercial, financial, legal, tax, operational, people and ESG, in the M&A Due Diligence Checklist.
Ends: with the buyer’s decision on the deal and its integration plan.
Covers: the seller’s own clean-up of finance, tax, records, contracts, IP, people, IT and property, the red flags, the data room and presentation, the bidders’ questions and the disclosures, with UK and US terms.
Ends: with the launch decision, the disclosure letter or schedules and a dated copy of the data room.
Covers: a company’s data room for investors in a funding round, in the Investor Data Room Checklist.
Ends: with the round closed and the data room archived.
Nine phases take one sale from scope and advisers, about 16 weeks before the data room opens, to the disclosures and signing. The checklist halts at the sale approver’s launch decision in Phase 7. The first task’s answer adds the UK or US notes and, for a UK asset sale, the TUPE task; a vendor due diligence report adds three tasks; and the launch decision decides whether the bidder phases follow.
Start about 16 weeks before the target date the data room opens to bidders. The first task names the company, that date and the five people, and asks where the business is and how it is likely to be sold. Every due date counts from the data room date, in working days.
Buyers start with the numbers. Get the accounts, the management accounts and the forecast to agree with each other, and explain every adjustment before a bidder has to ask.
A buyer’s lawyers will read the company’s own records first. Make sure the company owns what it says it owns, has filed what it should, and knows which approvals and consents the sale may need.
These are areas where a buyer’s review can find issues that change the price: a customer that can walk away on a sale, IP the company does not own, people the business depends on, and systems or data that are not secure.
Every issue the clean-up found goes on one log and gets one decision: fix it before launch, disclose it, or explain it in the price or the terms. Raising an issue first lets the seller explain it on its own terms.
Build the data room around the questions buyers will ask, decide who sees what and when, and make sure the presentation, the data room and any vendor report tell the same story with the same numbers.
Rehearse the presentation, sum up what is ready and what is not, and let the sale approver decide whether to open the data room. The checklist halts at that decision.
Applies only when the launch decision is Go, or has not been made yet. Open the data room to bidders who have signed, give the management presentations, and answer every question once, in writing, through one channel.
Applies only when the launch decision is Go, or has not been made yet. Check the warranties, disclose against them, settle the insurance position, keep a dated copy of the data room, and hand the open items to the completion plan.
Most of the preparation is the same in any country. These are the terms and rules that differ, as the official sources put them on 10 November 2026. The first task’s answer adds the matching notes and tasks.
| Area | UK | US | Phase |
|---|---|---|---|
| Disclosures against the warranties | A disclosure letter from the seller to the buyer | Disclosure schedules attached to the agreement, numbered to match the representations and warranties (some agreements call them a disclosure letter) | 5, 9 |
| Warranty insurance | Warranty and indemnity (W&I) insurance | Representations and warranties (R&W) insurance | 9 |
| Company records | Companies House identity verification for directors and people with significant control, a legal requirement since 18 November 2025 | State filings and evidence of good standing, which differ by state | 3 |
| Government approvals | National Security and Investment Act 2021: a notifiable acquisition of an entity in one of 17 sensitive areas needs approval before completion and is void if completed without it; asset acquisitions can be called in | Hart-Scott-Rodino Act: above the size thresholds, both sides (the acquiring and the acquired person) file and wait for the waiting period to end | 3 |
| Employees on an asset sale | TUPE: the seller gives the employee liability information at least 28 days before the transfer (14 days in Northern Ireland) and informs employee representatives long enough before it to consult; run it in the TUPE Transfer Checklist | WARN Act (employers of 100 or more employees, as the Act counts them): the seller gives any notice of a plant closing or mass layoff up to the date of the sale, and the buyer after it | 4 |
| Personal data in the data room | UK GDPR and the ICO’s guidance: anonymise wherever possible, and hand over named worker data only on assurances of use, confidentiality and return or destruction | State privacy laws and the company’s own contracts; share the minimum | 6 |
The government has published its response to a consultation on changing the National Security and Investment Act’s sensitive areas, so check the current list on GOV.UK, and the HSR thresholds in force, on the day. None of this replaces advice from your own lawyers.
The sale approver named on the first task is the only person who can complete the launch decision, and the checklist halts there: nothing after it can be completed until they decide Go, Not yet or Do not go ahead. Not yet and Do not go ahead hide the bidder phases and add the task that follows from each. See how approvals that halt a checklist work.
A vendor due diligence report adds the tasks to brief the provider, check the draft and agree how bidders rely on it. A UK sale adds notes on Companies House identity checks, the National Security and Investment Act and the disclosure letter, and a UK asset sale the TUPE task; a US sale adds state records, the HSR Act and disclosure schedules. Conditional logic keeps the rest out of the way.
Enter the date the data room opens and every task falls due a set number of working days before or after it. Tasks go to the sale lead, finance lead, legal lead, operations lead and sale approver named on the first task, and each sees their work in the Tasks Grid. Every sale preparation sits in the Reports Grid with its progress.
CheckFlow runs the preparation: who does what and by when, the red flag log, the data room checks and the launch decision. It does not give legal, tax or financial advice, host the data room or value the business. Your advisers, lawyers and accountants do that, and the checklist records what they found and decided.
For due diligence in general, see the glossary. To track the non-disclosure agreements bidders sign, use the NDA Processing Workflow Checklist.
Describe the process in a sentence and the AI checklist generator drafts the phases and tasks for you.
It is the seller’s own review of its business before a sale, done to find what a buyer’s due diligence would find while there is still time to fix it or explain it. It covers the accounts and forecast, tax, corporate records, contracts, IP, people, IT and property, and ends in a data room, a management presentation and, once bidders are in, the disclosures against the warranties. This template runs it as one checklist with named owners and dates.
This template has nine stages: scope, advisers and the timetable; the financial clean-up; tax, legal and corporate records; contracts, IP, people and IT; red flags and fixes; the data room and buyer materials; a readiness review and the launch decision; bidder due diligence and questions; and the disclosures and signing. Optional tasks cover a vendor due diligence report and, for a UK asset sale, the TUPE steps.
A vendor due diligence report is commissioned and paid for by the seller from an independent firm, then given to bidders so they start from the same analysis. It can be financial, tax, legal or commercial. No rule requires one. In this template the answer on the vendor due diligence task decides whether the tasks to brief the provider, check the draft and agree how bidders may rely on the report appear.
There is no set period. This template starts about 16 weeks (80 working days) before the data room opens and puts the launch decision three working days before it, which is its own choice. A business with clean records may need less; one with missing IP assignments, gaps in its company records or management accounts that do not reconcile may need more. Enter the data room date and every due date moves with it.
Both are how the seller qualifies the warranties in the purchase agreement, by telling the buyer about matters the warranties would otherwise cover. UK deals use a disclosure letter from the seller to the buyer. US agreements attach disclosure schedules numbered to match the representations and warranties, though some call them a disclosure letter. The agreement says what counts as fairly disclosed and what effect a disclosure has.
The documents a buyer’s review needs, in folders that follow its areas: corporate records and the cap table, accounts, management accounts and the forecast, tax, contracts, IP, people (anonymised), IT and data protection, property and insurance, and disputes. This template builds it from one numbered index, stages access so sensitive documents reach only the preferred bidder, and keeps a dated copy at signing as the record of what was disclosed.
In the UK, the ICO’s guidance on employment records says worker information shared for a prospective acquisition should be anonymised wherever possible, and that before a final decision the seller should only hand over workers’ personal information once assured it will be used solely to evaluate the deal, kept confidential and destroyed or returned after use. The ICO says the guidance is under review. In the US, state privacy laws and the company’s contracts set the limits.
The ones a buyer will find anyway: management accounts that do not reconcile to the statutory accounts, adjustments to profit without evidence, gaps in the share records or filings, IP created by people who never assigned it, key contracts a customer can end on a change of control, and open disputes. This template logs each one and records a decision: fix it before launch, disclose it, or explain it in the price or the terms.
14-day free trial, no card required. The Business plan is $10 per user per month after the trial. Full details at checkflow.io/pricing.
14-day free trial, no credit cardFull refund in your first 30 daysUS hosting, EU on request