19 critical checks before you buy a SaaS business. Organized by risk domain — churn, concentration, revenue quality, unit economics, technical debt, and legal.
Last reviewed . The methodology itself is evergreen; benchmark references are updated with current market context.
TL;DR: This 19-point checklist covers every risk domain in buyer-side SaaS due diligence: churn & retention, concentration, revenue quality, unit economics, technical debt, and legal/compliance. Every point is detectable from raw subscription CSV data — and any single flag warrants investigation before you sign.
Every SaaS acquisition looks good in the CIM. The deal memo hides the landmines. This checklist forces you to look at each one — before you sign.
What percentage of customers cancel each month? Benchmark against sector medians. Anything above 5% monthly churn for B2B SaaS requires a structural reason (clear intent, seasonal business). Ask for the raw data, not a calculated metric.
NRR = (Starting MRR + Expansion – Churn) / Starting MRR. An NRR >100% means expansion offsets churn — the asset grows itself. Below 85% means the company is slowly dying. Demand the calculation method.
A single churn number hides cohort decay. Newer cohorts that churn faster than old ones indicate product-market fit erosion, competitive pressure, or a degrading onboarding experience. Request cohort tables by quarter of acquisition.
Involuntary churn (failed payments, expired cards) is fixable. Voluntary churn (cancelled because the product wasn't valuable enough) is structural. If voluntary churn exceeds 60% of total, the value prop needs work — and you'll inherit that work.
If the top 5 customers represent more than 30% of MRR, you're buying a services business with a SaaS wrapper — not a product company. Losing one customer permanently changes the valuation basis. Calculate it yourself from raw CSV data.
If 70% of MRR comes from "Enterprise" tier customers, the revenue base is fragile during an acquisition transition. Enterprise customers churn less but churn harder when they do (more revenue per lost logo).
Is revenue concentrated in one vertical or geography? A single GDPR regulatory shift, currency fluctuation, or sector downturn can wipe 40%+ of MRR overnight.
Flat or declining MRR over 12 months is the #1 deal-killer signal we see in ChurnLens analyses. Ask for month-by-month MRR for the last 24 months and look for inflection points (price changes, product launches, churn waves).
Expansion revenue sounds good until you realize it's masking customers downgrading plans. Contraction (downgrades + plan reductions) tells you if the core value prop is eroding. Request downgrade events separately from churn.
The average time between signup and first payment tells you whether the product delivers quick value. Long payment velocity combined with high churn is a double signal: the product doesn't hook users fast enough.
A 3:1 LTV/CAC is the SaaS baseline. Below 3:1 means the company loses money on each customer over its lifetime. Above 5:1 means they may be under-investing in growth. Calculate from raw data — don't accept the seller's blended number.
How many months of gross margin does it take to recover customer acquisition costs? Over 18 months is risky for a bootstrapped acquisition. Under 6 months and the pricing may be too low.
A declining gross margin trend signals infrastructure bloat, rising cloud costs, or increasing support load per customer. Stable or improving margins are a green flag.
Check the dependency tree age, upgrade cadence, and whether there's automated testing. A stovepiped codebase with no CI/CD and a single developer key-man risk can add 6–12 months to your post-acquisition integration plan.
Is the product running because one person knows the infrastructure? A founder-run micro-SaaS that's never been documented will crater within 90 days of the founder leaving. Look at commit authorship distribution.
A serverless app tightly coupled to a single cloud provider's services is hard to migrate. Factor migration costs into your valuation model.
GDPR, CCPA, and sector-specific regulations change ownership obligations if you acquire. Check whether the current ToS allows assignment, and whether data processing agreements are in place with every customer.
Contractors without signed IP assignments, open-source license violations in the codebase, or trademark gaps in key markets can all surface post-close. Verify all contributor agreements.
Every SaaS the business relies on (Stripe, AWS, SendGrid, OpenAI) is a risk if the plan is unsignable. Check change-of-control clauses in vendor contracts.
Send the target's subscription CSV to ChurnLens and get churn rates, concentration dashboards, and revenue decay curves computed automatically. No spreadsheets, no manual calculations.
Run Due Diligence Now →Sellers hide churn in 7 ways. Most buyers catch 0. Get the full checklist + a sample report on a synthetic $48K MRR case study.
Get the free checklist →TL;DR: What to verify before signing a Letter of Intent for a SaaS acquisition.
TL;DR: Step-by-step checklist for auditing SaaS revenue quality from raw data.
TL;DR: Questions to ask and data to request for a thorough churn investigation.
TL;DR: Revenue monitoring checklist for the first 90 days after SaaS acquisition.
Already hold the ledger? Run it yourself, free and instantly, in the SaaS Churn & Revenue-Quality Analyzer — the same six lenses computed in your browser, so the CSV never leaves your machine. See all free buyer-side tools.
Hidden churn is revenue decay that headline metrics conceal: customers on annual plans who have already stopped using the product, paid accounts sitting inactive, or revenue concentrated in a few logos about to leave. A SaaS business can show flat MRR while its real retention is collapsing. ChurnLens surfaces these signals before you buy, so you price the deal on true revenue quality.
ChurnLens analyzes five dimensions: revenue concentration, logo retention, annual-plan churn risk, inactive paid accounts, and MRR decline patterns. Each is weighted into a single 0-100 revenue-quality score benchmarked against comparable SaaS businesses. The score tells an acquirer whether reported MRR is durable or propped up by customers who are one renewal away from leaving, all before the deal closes.
Purchase price is usually a multiple of recurring revenue, so overstated retention directly inflates what you pay. A business with 20% hidden annual-plan churn is worth far less than its MRR implies. Buyers who skip churn diligence discover the decay only after closing, when it is too late to renegotiate. ChurnLens gives that visibility during the evaluation window instead.
Watch for revenue concentrated in a handful of accounts, a widening gap between signups and active users, annual contracts that never renew, and MRR that grows only through discounting. Each pattern signals fragile revenue. ChurnLens automatically flags these red flags from uploaded revenue data and ranks them by how much they threaten the durability of the recurring revenue base.
| Risk dimensions scored | 5 |
|---|---|
| Revenue-quality score range | 0-100 |
| Built for | Acquirers, PE, founders |
📥 Free SaaS Due Diligence Checklist
The exact 23-point checklist PE analysts use before acquiring SaaS businesses. 5-minute read.
Download Free Checklist →No spam. Unsubscribe anytime.