More DTC deals fail during due diligence than at any other stage. Not because the business was not worth buying, but because the seller was not prepared for the level of scrutiny that every serious buyer applies once the LOI is signed. Understanding exactly what buyers look for, why they look for it, and how to have the right documentation ready before they ask is the difference between a clean close and a renegotiated price at the worst possible moment.
This guide covers all six categories of DTC due diligence, the specific documents buyers request in each category, and the most common issues that surface during the process and how to prevent them.
If you are still at the stage of deciding whether to sell, start with When Is the Right Time to Sell Your Ecommerce Business? before continuing here.
What Due Diligence Is and How Long It Takes
Due diligence is the formal verification process a buyer conducts after signing a Letter of Intent. Its purpose is to confirm that everything the seller represented in the Confidential Information Memorandum is accurate and that there are no material issues that would change the buyer’s valuation or willingness to close.
For DTC businesses in the $1M to $10M SDE range, a typical due diligence process runs 30 to 60 days. Larger deals with more complex operations can run 60 to 90 days. Deals where the seller is unprepared routinely stretch to 90 to 120 days, and every extra month creates additional risk that the buyer walks, gets cold feet, or uses the delay to justify a price reduction.
The most important thing to understand about due diligence is that it is not adversarial. A well-prepared seller with clean documentation should experience due diligence as a confirmation process, not a discovery process. The sellers who dread it are almost always the ones who know there are things they have not prepared for.
| The best way to pass due diligence is to build your data room before you go to market. Every document a buyer will request should already be organized, verified, and ready. This alone reduces typical diligence time by 30 to 45 days and prevents last-minute surprises from compressing your final price. |
The 6 Categories of DTC Due Diligence
Category 1: Financial Due Diligence
This is the heaviest and most scrutinized category. Buyers want to verify that your stated SDE is real, that your revenue figures reconcile against platform data, and that there are no hidden liabilities or pending obligations that reduce the value of what they are buying.
What buyers examine:
- 24 months of bookkeeper-prepared, accrual-basis P&Ls
- Business bank statements for the full 24-month period
- Business tax returns for the last 2 to 3 years
- Revenue reconciliation between Shopify or WooCommerce, payment processor reports, and bank deposits
- COGS documentation including supplier invoices and inventory records
- Payroll records and any contractor payment history
- Outstanding loans, lines of credit, or business debts
- SDE bridge document with each addback itemized and documented
The most common financial diligence issue: revenue figures that do not reconcile. If your Shopify gross revenue does not match your net revenue after returns, and your net revenue does not match what hits your bank account after fees, buyers will stop and ask why. Have a documented reconciliation ready before diligence starts.
Category 2: Revenue Quality and Customer Data
Beyond the raw financial numbers, buyers want to understand the quality and durability of the revenue. Strong financial figures mean less if the revenue is fragile, concentrated, or unlikely to persist after the transition.
What buyers examine:
- Month-by-month revenue for the trailing 24 months (not just annual totals)
- Repeat purchase rate over 12 months
- Customer cohort analysis: do cohorts retain or churn after month three?
- LTV:CAC ratio calculated at 12 and 24 months
- Email revenue as a percentage of total revenue (Klaviyo flow attribution)
- Revenue concentration: is any single customer, SKU, or channel above 30% of revenue?
- Subscription or replenishment percentage if applicable
- Refund and return rate by product and channel
Klaviyo and Triple Whale data are increasingly standard requests in DTC diligence. Buyers who use these tools themselves know exactly what to look for and will spot gaps in attribution or anomalies in cohort data quickly. Having clean, exported reports ready from both platforms is a meaningful trust signal. For more on how your tech stack affects valuation, see Ecommerce Multiples in 2026: Real Deal Data from EcomSwap.
Category 3: Operations and Supplier Verification
Operational due diligence answers the question buyers care about most after the financials: will this business keep running after I own it? A business that depends on the founder’s personal relationships, institutional knowledge, or daily involvement is a riskier acquisition than one with documented systems and transferable relationships.
What buyers examine:
- Supplier contracts, MOQs, lead times, and payment terms in writing
- 3PL or fulfillment center agreements and SLAs
- Standard Operating Procedures for all key business functions
- Org chart showing who does what and how dependent the business is on the owner
- Customer service protocols and average response times
- Inventory management system and current inventory levels
- Any pending supplier issues, price increases, or supply chain risks
- Returns and exchange process documentation
The single most common operational issue: supplier relationships that exist only in the founder’s personal contacts. If your primary manufacturer only communicates with you via a personal WhatsApp number, that is an operational risk buyers will flag. Formal introductions, written agreements, and documented terms are what make supplier relationships transferable.
Category 4: Technology Stack and Platform Verification
Buyers need to understand what technology the business runs on, what those contracts look like, and whether anything in the tech stack creates risk or dependency after the acquisition.
What buyers examine:
- Shopify plan, apps, and any custom development dependencies
- Access and ownership of all digital accounts (Shopify admin, domain, email, ad accounts)
- Klaviyo account structure, subscriber count, and list health metrics
- Paid advertising accounts: Meta Business Manager, Google Ads account history
- Any subscriptions or SaaS tools critical to operations and their contract terms
- Amazon Seller Central account health, performance metrics, and any policy history
- Website hosting, SSL, and any technical infrastructure the buyer needs to understand
Account access and ownership is a frequent diligence issue. If your Shopify store is on a personal account, your domain is registered to a personal email, or your ad accounts are tied to a personal Facebook profile, these all need to be transitioned to business accounts before close. Buyers will not accept a deal that leaves critical assets in personal accounts.
Category 5: Legal and IP Due Diligence
Legal diligence covers intellectual property, any outstanding legal matters, and the contracts the business has with third parties. For DTC brands, IP ownership is increasingly important to buyer valuations, particularly for strategic acquirers.
What buyers examine:
- USPTO trademark registration certificates for the brand name and logo
- Domain registration and all related domains owned by the business
- Any patents, design patents, or trade secrets
- Pending or threatened litigation (including supplier disputes, customer complaints, or IP claims)
- Terms of service, privacy policy, and GDPR or CCPA compliance documentation
- Any exclusivity agreements with manufacturers or distributors
- Social media account ownership documentation
- Email list ownership and any consent or data compliance history
If you have any outstanding legal matters, disclose them early. Buyers who discover undisclosed litigation during diligence almost always walk or demand a significant price reduction as protection. An issue disclosed upfront, with context, is manageable. An issue discovered in diligence is a deal killer.
Category 6: Marketing and Channel Due Diligence
Buyers want to understand how the business acquires customers and whether those channels are durable, scalable, and not overly dependent on any single platform or tactic.
What buyers examine:
- Channel breakdown of customer acquisition by source (Meta, Google, organic, email, referral)
- 12-month paid advertising spend and ROAS by channel
- Organic search traffic data from Google Search Console
- Email list size, growth rate, and engagement metrics
- Social media following and platform-level analytics
- Influencer or affiliate relationships and any contractual dependencies
- CAC by channel and how it has trended over 12 to 24 months
- Any SEO penalties, manual actions, or algorithm changes that affected traffic
A business with 70%+ of customer acquisition from a single paid channel will face concentrated risk questions in every buyer conversation. Buyers model what happens if that channel degrades or gets more expensive, and they price in the risk. If your channel mix is heavily paid-social-dependent, the 12 months before going to market is the time to actively build organic and email acquisition.
The Data Room: Documents to Prepare Before You Go to Market
A data room is a secure, organized folder that contains all the documentation buyers will need during their review. Building it before you go to market rather than scrambling to assemble it during the review period is one of the highest-leverage things you can do to protect your multiple and accelerate your close.
Here is the core document list organized by category:
Financial Documents
- 24 months of bookkeeper-prepared P&Ls (monthly and annual)
- 24 months of business bank statements
- Last 2 years of business tax returns
- SDE bridge document with all addbacks itemized and documented
- Revenue reconciliation spreadsheet (platform vs processor vs bank)
- COGS breakdown with supporting supplier invoices
- Inventory valuation at cost as of the most recent month
Revenue and Customer Documents
- Month-by-month revenue report for trailing 24 months
- Klaviyo analytics export: flow revenue, list size, open rates, unsubscribe rates
- Cohort analysis showing repeat purchase behavior by acquisition month
- LTV report at 6, 12, and 24 months
- Refund and return rate data by SKU and channel
Operations Documents
- All supplier contracts with payment terms and MOQs
- 3PL or fulfillment agreement
- SOPs for all key business functions
- Current inventory levels and reorder schedule
- Org chart and any employment or contractor agreements
Legal and IP Documents
- Trademark registration certificates
- Domain registration records
- Any patent filings or pending applications
- List of any outstanding legal matters or disputes
- Privacy policy and terms of service
Technology and Platform Documents
- Shopify analytics export: sessions, conversion rate, AOV by month
- Amazon Seller Central performance metrics and account health
- Google Search Console traffic data (12 months)
- Ad account performance exports (Meta and Google, 12 months)
- Full list of tools and software with contract terms and monthly costs
The 5 Issues That Most Commonly Reprice Deals
1. Financial statements that do not reconcile. If your P&L revenue does not match your Shopify revenue, which does not match your bank deposits, buyers will stop and investigate every number. Resolve all reconciliation issues before going to market.
2. Undisclosed or undocumented addbacks. Addbacks that cannot be verified with a receipt, payroll record, or bank statement will be removed from the SDE calculation. On a $1.5M SDE business at 4x, $100K in rejected addbacks is $400K off the deal price.
3. Supplier relationships with no written agreements. Verbal arrangements with manufacturers, month-to-month pricing with no contract, and sole-founder supplier contacts all create transition risk that buyers price in. Written agreements with documented terms are a direct multiple protector.
4. Accounts owned by personal profiles. Shopify admin, ad accounts, domains, and email platforms tied to personal accounts require transition work that creates risk and delay. Moving these to business accounts is a 30 to 60 day project best completed before diligence starts, not during.
5. Revenue spikes or troughs with no explanation. Any month that is significantly above or below trend will draw scrutiny. If there is a good explanation (a viral moment, a seasonal spike, a supply chain disruption), document it proactively. Buyers who discover anomalies they cannot explain will use them to justify conservatism.
How EcomSwap Helps Sellers Prepare
EcomSwap works with DTC sellers at every stage of exit preparation, not just when they are ready to go to market. For founders who are 6 to 18 months from a sale, our pre-market preparation work covers financial documentation review, data room buildout, operational SOP documentation, and a seller-side quality-of-earnings preparation.
The founders who go through this process close faster, face fewer surprises in review, and consistently receive higher final offers than those who go to market without preparation. A clean, organized data room is not just a logistical convenience. It is a trust signal that tells buyers they are dealing with a serious, professional seller whose numbers can be relied on.
For the full picture on what buyers pay for in a DTC acquisition, read DTC Brand Valuation: The 7 Factors That Move Your Multiple Up or Down. And for a complete walkthrough of the sale process from start to finish, see How to Sell an Amazon FBA Business in 2026 for the FBA equivalent.
