SaaS Due Diligence Checklist

Why You Need a SaaS-Specific Due Diligence Checklist

Due diligence for SaaS companies is fundamentally different from traditional businesses. Investors and acquirers are not just checking your books — they are evaluating your recurring revenue quality, customer retention, unit economics, and the scalability of your business model. A generic checklist will leave gaps that sophisticated investors will find.

This checklist covers every area that institutional investors, PE firms, and strategic acquirers examine during financial due diligence on a SaaS company. Use it to prepare before the process starts — not to scramble once it is underway.

Financial Statements and Reporting

Investors expect clean, consistent financial data. At minimum, prepare the following:

Three years of management accounts (P&L, balance sheet, cash flow statement) plus the current year to date. Statutory accounts filed with Companies House for the last three years. Monthly P&L broken down by revenue stream, cost of sales, and operating expenses for at least the last 24 months. Balance sheet with clear breakdown of deferred revenue, prepayments, and accruals. Cash flow statement showing operating, investing, and financing activities separately.

Your management accounts must reconcile to your statutory accounts. Any differences need a clear bridge document explaining the adjustments. If your accounts have been audited, include the audit reports and any management letters.

Revenue and SaaS Metrics

This is where SaaS due diligence differs most from traditional businesses. Prepare:

Monthly MRR and ARR for the last 24 months minimum, broken down by new business, expansion, contraction, and churn. An MRR schedule that reconciles to your recognised revenue. Net Revenue Retention (NRR) and Gross Revenue Retention (GRR) by cohort. Unit economics: LTV, CAC, LTV:CAC ratio, and payback period by acquisition channel. Gross margin calculation with a clear definition of what is included in cost of sales. Average contract value (ACV) and how it has trended over time. Revenue concentration — what percentage of revenue comes from your top 5, 10, and 20 customers.

Revenue recognition policy documentation is essential. Investors will check that your recognised revenue, deferred revenue, and MRR all tell a consistent story. Discrepancies here are one of the most common deal-breakers.

Cash Flow and Working Capital

Prepare a detailed view of your cash position and working capital dynamics:

A 13-week cash flow forecast and an 18-month rolling forecast. Monthly cash burn rate for the last 12 months. Current runway calculation with assumptions clearly stated. Working capital analysis showing debtor days, creditor days, and the cash conversion cycle. Bank statements for all accounts for the last 12 months. Details of any debt facilities, overdrafts, or credit lines including covenants and repayment schedules.

Customer and Commercial Data

Investors want to understand the quality and durability of your customer base:

Complete customer list with contract start dates, end dates, ACV, and renewal dates. Customer churn analysis by cohort, segment, and reason for churn. Pipeline report showing current opportunities by stage, value, and expected close date. Pricing history — how your pricing has changed and how existing customers have been migrated. Top 20 customer contracts for review. Any customer concentration risks (single customer representing more than 10% of revenue). Sales team structure, quota attainment, and sales cycle length.

Legal and Corporate

The legal checklist covers your corporate structure and compliance:

Certificate of incorporation and current articles of association. Cap table showing all shareholders, option holders, and convertible instruments. All investment agreements, shareholder agreements, and side letters. Board minutes for the last three years. All material contracts (customers, suppliers, partners) including any change-of-control clauses. Employment contracts for all employees, particularly senior management. Details of any outstanding or threatened litigation. IP assignment agreements confirming the company owns all intellectual property. GDPR compliance documentation including data processing agreements and privacy impact assessments.

If you are a UK company that has done or is considering a Delaware flip for US investors, include all restructuring documentation.

Tax and Compliance

HMRC compliance is non-negotiable:

Corporation Tax returns and computations for the last three years. VAT returns for the last three years. PAYE/NIC compliance records. R&D tax credit claims and supporting documentation. Any tax enquiries or disputes, open or resolved. Transfer pricing documentation if you have international entities. EIS/SEIS advance assurance or compliance certificates if applicable — investors need to know their tax relief is secure.

Technology and Product

Technical due diligence has become increasingly important:

System architecture documentation. Technology stack overview. Security policies and any penetration test results. SOC 2 compliance status or roadmap. Uptime and SLA performance data. Development process and release cycle documentation. Technical debt assessment. Data infrastructure and backup procedures.

Team and Organisation

People are a key part of the diligence process:

Organisation chart with reporting lines. Employee list with start dates, roles, salaries, and notice periods. Details of any key-person dependencies. Employee option scheme details (EMI, CSOP, or unapproved) including vesting schedules. Contractor agreements and IR35 assessments. Staff turnover rates for the last two years.

Financial Model

Your financial model will be scrutinised in detail:

Three-year forward model with monthly granularity for year one and quarterly for years two and three. Clear assumptions document explaining every driver in the model. Scenario analysis showing base, upside, and downside cases. Historical accuracy — how your previous forecasts compared to actual results. The model should be built in a way that an external analyst can follow the logic without a walkthrough. If you are raising from US investors, ensure the model includes USD conversion and addresses US expansion economics if applicable.

Board Pack and Reporting

Investors will review your reporting history to assess management quality:

Last 12 months of board packs or investor updates. Management accounts with commentary. KPI dashboard showing the metrics you track and how they have trended. Evidence that you use financial data to make decisions, not just to report history.

Common Due Diligence Failures

The most frequent issues that stall or kill SaaS deals are: MRR that does not reconcile to recognised revenue. Revenue recognition policies that do not comply with IFRS 15 or FRS 102. Missing or incomplete IP assignment agreements. Customer contracts with unfavourable change-of-control clauses. Cap table errors or missing option documentation. Tax compliance gaps, particularly around R&D claims or international structures. No documented SaaS metrics — investors should not have to calculate your NRR from raw data.

How to Use This Checklist

Start preparing at least three months before you expect to enter a fundraise or exit process. Assign an owner to each section and set deadlines. Build a data room (we recommend Notion, Google Drive, or a dedicated tool like Ansarada or Datasite) and organise it to mirror this checklist structure.

A fractional CFO or fractional finance director can manage the entire preparation process, ensuring nothing is missed and everything is investor-grade before the first meeting. At Scale With CFO, due diligence preparation is one of the highest-value activities we do for our SaaS clients.

Frequently Asked Questions

What should be in a SaaS due diligence checklist?

A SaaS due diligence checklist should cover financial statements, SaaS metrics and revenue, cash flow, customer data, legal and corporate structure, tax compliance, technology infrastructure, team composition, financial models, and board reporting. Each section requires specific supporting documentation that investors and acquirers will scrutinise, from three years of management accounts to customer contracts and IP assignments.

How long does SaaS due diligence take?

SaaS due diligence typically takes 6 to 12 weeks from information request to completion, depending on how prepared your documentation is beforehand. Starting preparation at least three months before you expect to enter a fundraise or exit process gives you time to identify gaps and compile materials without rushing.

What are the most common due diligence red flags for SaaS companies?

The most common red flags are MRR that does not reconcile to recognised revenue, revenue recognition policies that breach IFRS 15 or FRS 102, missing or incomplete IP assignment agreements, customer contracts with unfavourable change-of-control clauses, cap table errors, tax compliance gaps, and undocumented SaaS metrics that investors have to calculate manually.

When should a SaaS company start preparing for due diligence?

You should start preparing at least three months before entering a fundraise or exit process, though best practice is to maintain investor-grade documentation continuously as part of your regular financial discipline. Scale With CFO recommends treating due diligence preparation as an ongoing activity, not something you scramble to do when a conversation with investors becomes serious.

What is a SaaS data room?

A SaaS data room is a secure, organised digital repository where you store all due diligence documents for investors and acquirers to review. Popular tools include Notion, Google Drive, Ansarada, and Datasite, organised to mirror your due diligence checklist structure so investors can navigate easily and find what they need without bothering your team for every document.

Book a free discovery call to discuss your due diligence preparation.