Acquisition Due Diligence 2026: Complete Buy-Side Methodology in France

Acquisition due diligence — or buy-side due diligence — is the exhaustive review of a target company carried out by the acquirer before signing a firm letter of intent (LOI) or completing a transaction closing. It is not an ordinary accounting audit: it is a multidisciplinary investigation conducted under time pressure, within a negotiated scope, with a single purpose — to inform the investment decision and secure the terms of the transaction.

In 2026, in an M&A environment where valuation multiples remain elevated despite rising rates, the quality of due diligence is a differentiating factor for buyers. A well-audited target allows the buyer to renegotiate the price, precisely calibrate the warranty and indemnity agreement (GAP), and identify priority post-closing integration actions. A poorly audited target generates costly surprises in the 12 to 24 months following the closing.

Updated 15 May 2026. Indicative costs and antitrust notification thresholds should be verified with your counsel at the time of the transaction. This page is for information purposes only and does not replace a due diligence engagement tailored to your specific transaction.

Before entering the methodology, clarifying terms avoids frequent confusion in M&A files.

Our view: vendor due diligence accelerates sale processes but does not exempt the acquirer from its own investigations. In the files we handle at Hayot Expertise, the VDD serves as a starting point — a complementary buy-side audit remains essential to test the seller's assumptions and investigate risk areas specific to the acquirer.

The letter of intent (LOI) as the trigger#

Acquisition due diligence is triggered after signing the LOI and gaining access to the data room. The LOI sets the exclusivity period (often 4 to 8 weeks), the authorised due diligence scope, confidentiality conditions, and non-solicitation of staff.

Signing a LOI without having framed investigation rights is a frequent pitfall: the seller can restrict access to sensitive information, slow responses, or refuse certain management interviews.

The virtual data room#

In 2026, data rooms are almost exclusively virtual (platforms such as Intralinks, Datasite, Firmex, or more accessible solutions for SMEs). They structure document access by category: financial, tax, legal, social, commercial, IT. The quality and completeness of the data room are themselves signals: a disorganised or incomplete data room on key points is a warning flag.

The multidisciplinary team#

A comprehensive due diligence mobilises:

• an accountant or financial adviser for accounting, financial and tax due diligence
• an M&A lawyer for legal, contractual and antitrust due diligence
• where appropriate, a specialist consultant for operational, IT, cyber or ESG due diligence depending on the sector

Team coordination is critical: findings from different contributors feed one another — a tax risk may have a social dimension; a client contract may condition the financial valuation.

Scope is tailored to transaction size and the specific risks of the target.

Table: Acquisition Due Diligence Scope 2026#

EBITDA normalisation#

The EBITDA presented by the seller often includes non-recurring items that artificially inflate it. Normalisation involves restating:

• owner-manager remuneration: if below market rate, a market-rate remuneration is reinstated as a cost
• exceptional items: restructuring costs, severance, asset disposal gains, one-off grants
• related-party transactions: rents paid to a family property company, management fees without arm's-length justification
• transaction costs incurred for the deal itself (due diligence, M&A advisory)

Normalised EBITDA is the basis for the valuation multiple. A EUR 500,000 gap between reported and normalised EBITDA on a target valued at 7x EBITDA corresponds to EUR 3.5 million in enterprise value.

Normalised working capital and price adjustment#

The transaction price is typically calculated on a "cash free, debt free" basis with a working capital target. If actual working capital at closing differs from the target, the price is adjusted.

Net debt is calculated as:

Net debt = Financial debt + Bond debt - Cash and cash equivalents

Underestimated working capital in the transaction price generates an immediate post-closing financing need. In the SME files we handle, normalised working capital is systematically one of the two most debated points alongside the warranty and indemnity.

Off-balance-sheet commitments#

Off-balance-sheet commitments — personal guarantees, given warranties, off-balance-sheet leases, unfunded pension obligations, contingent liabilities — do not appear on the balance sheet but represent real potential liabilities. Their exhaustive identification is one of the most significant value additions of financial due diligence.

The tax review examines the last three to five financial years and covers:

• CIT, VAT, local business tax returns and the tax return package: consistency, uncertain tax positions, unusual add-backs
• transfer pricing in the case of international activity or intra-group flows
• stock options (BSPCE), free shares (AGA) and employee ownership schemes: compliance of awards, declarations, potential tax impact
• prior tax audits and their resolution: an ongoing audit is a major red flag
• related-party agreements: management fees, cash pooling, related-party rents — their economic justification and documentation are scrutinised

The underestimated risk: VAT assessments on services rendered between group entities, or questions about the deductibility of financial charges in leveraged structures (thin capitalisation), are often undervalued by buyers without tax expertise.

What the authorities examine#

URSSAF systematically audits reclassifications of contracts (independent contractors as employees, corporate officers without employment contracts), undeclared benefits in kind, and supplementary pension contributions. A company acquired with non-compliant social practices may face an assessment within three years of closing.

Key watchpoints for 2026#

• Applicable collective agreements (IDCC): is the correct agreement applied? Are employees classified at the correct level?
• Employment tribunal proceedings in progress or likely: recent resignations, concentrated settlement agreements
• Company agreements and compulsory annual negotiations: pay increase commitments, profit-sharing, company savings plans
• Key-man risk: dependency on one or two key profiles without retention or non-compete clauses
• DSN social declarations: consistency with payslips, regularity of payments

Legal: change-of-control clauses#

The most critical point in legal due diligence is verification of change-of-control clauses in client, supplier, banking and licensing contracts. If the top three clients have an automatic termination clause upon change of ownership, the value of the target may collapse.

Commercial: customer concentration#

A customer representing more than 30% of revenue is a systematic red flag. Beyond concentration risk, one must examine: contract duration and exclusivity, renewal rate, pricing conditions, and the technical or operational dependency on that customer.

IT and cyber: GDPR and technical debt#

In 2026, IT due diligence systematically includes a GDPR review (processing register, legal basis, sub-processors, breach notification procedures) and a technical debt assessment. Obsolete architecture may require a rebuilding investment not factored into the acquirer's business plan.

ESG and environment#

For industrial targets, environmental liabilities — soil contamination, remediation obligations, disputes with classified installations authorities — can be substantial and difficult to quantify. They are often absent from accounting provisions. ESG due diligence has become standard in private equity transactions.

If the turnover thresholds set by the French Commercial Code (Article L430-2) are exceeded, the transaction must be notified to the French Competition Authority (Autorite de la Concurrence) before closing. Non-compliance exposes the parties to severe penalties.

Key watchpoints: national and European thresholds are distinct. For transactions involving multiple EU countries, jurisdiction may fall to the European Commission. Applicable thresholds must be verified with the M&A lawyer at the start of the due diligence.

Typical deliverables#

1. Full due diligence report (50 to 200 pages depending on scope): findings by workstream, quantified risks, recommendations
2. Executive summary (10 to 20 pages): key points, major red flags, impact on price and warranties
3. Red flags list ranked by criticality and estimated financial impact
4. Recommendations on price adjustment, warranty structuring, and conditions precedent
5. Open items list: information still required before closing

Timeline by transaction size#

Fees vary according to target complexity, number of workstreams covered, and the experience of the firm engaged.

These ranges are indicative and should be verified with your adviser. Bpifrance may co-finance up to 50% of external growth advisory fees for SMEs (to be confirmed based on available schemes at the time of the transaction).

Due diligence and warranty and indemnity (GAP)#

The warranty and indemnity agreement is the contract by which the seller warrants the acquirer against undisclosed liabilities at the closing date. Due diligence findings are the primary input for the warranty scope:

• identified and quantified risks found in DD are excluded from the warranty scope (the acquirer has knowledge of them)
• identified but unquantifiable risks are covered by specific clauses with negotiated thresholds and caps
• unknown liabilities remain covered by the warranty in its general scope

In practice: rigorous due diligence reduces the grey areas of the warranty and allows better calibration of its amount (generally 10 to 30% of the price) and duration (1 to 3 years for tax and social risks).

Due diligence and earn-out#

An earn-out is a contingent price mechanism indexed to the target's future performance. Due diligence directly informs earn-out structuring in two ways:

• it identifies EBITDA normalisation adjustments that will serve as the reference base for earn-out calculations
• it reveals operational risks (customer concentration, key-man risk) that condition the probability of target achievement and must be reflected in the earn-out structure

Case 1: Private equity acquisition, EUR 30m target valuation#

A private equity fund considers acquiring a regional industrial company valued on a EUR 4.5m EBITDA at a 6.5x multiple. Full due diligence (financial, tax, social, legal, operational) mobilises an accounting firm and an M&A law firm over four weeks.

Main findings: normalised EBITDA of EUR 3.8m after restating below-market owner remuneration, an economically unjustified management fee arrangement, and a one-off non-recurring grant. Potential tax liability of EUR 180,000 on a VAT matter. Change-of-control clause in the second client contract (15% of revenue).

Impact: EUR 4m price reduction, warranty covering the tax risk, condition precedent on the second client waiving its clause. DD fees: approximately EUR 80,000 excl. VAT.

Case 2: Paris industrial group acquiring a competitor, EUR 8m revenue#

A Paris-based industrial group considers acquiring a provincial competitor with EUR 8m in revenue. DD scope: accounting, tax and social only.

Main findings: two unprovisioned employment tribunal proceedings (estimated at EUR 70,000), URSSAF contributions in arrears over two quarters, inventory overstated by EUR 120,000 per physical versus accounting reconciliation.

Impact: EUR 250,000 price reduction, specific warranty on social risks. DD fees: approximately EUR 25,000 excl. VAT.

Case 3: SaaS startup build-up acquisition, EUR 3m deal#

A SaaS group completes a build-up acquisition of a competing startup for EUR 3m. DD scope: light financial review, IT/cyber, GDPR, and legal (IP, trademarks, SaaS client contracts).

Main findings: significant backend technical debt (estimated rebuilding cost EUR 150,000), main trademark not registered in classes 35 and 42 in France and Europe, three SaaS client contracts without adequate limitation of liability clauses.

Impact: trademark registration as a condition precedent to closing, EUR 150,000 price credit for technical debt. DD fees: approximately EUR 15,000 excl. VAT.

The ten most frequent red flags#

1. Highly variable results year on year without a clear sectoral explanation
2. Cash flows systematically below accounting profit over three financial years
3. Absent or undersized provisions (inventory, trade receivables, litigation)
4. Customer concentration above 30% on a single account
5. Change-of-control clauses in strategic contracts
6. Recent or ongoing unsettled tax or social assessments
7. Multiple changes of accountant or statutory auditor in the last five years
8. Intra-group arrangements without formalism or documented economic justification
9. Significant off-balance-sheet commitments (guarantees, sureties, off-balance-sheet leases)
10. Verified key-man risk: 80% of value concentrated in one or two individuals

Three most frequent buyer-side pitfalls#

Underestimating scope: on an industrial transaction, foregoing operational and ESG DD can cost several million euros in unidentified environmental liabilities.

Choosing a non-sector-specialist team: DD in healthcare, construction, or software requires knowledge of sector-specific practices and risks. A generalist firm without sector experience misses structural risks.

Signing the LOI without framing investigation rights: a poorly negotiated LOI leaves the seller able to restrict information access and control the DD timeline, unbalancing the negotiation from the investigation phase onwards.

At Cabinet Hayot Expertise in Paris, we support executives and funds in their external growth transactions. Our hands-on experience with SME and mid-market M&A files leads us to emphasise three points that acquirers frequently underestimate.

First point: the real purpose of due diligence is not to kill the transaction but to renegotiate it on sound foundations. Four times out of five, serious due diligence allows a price reduction, improved warranties or protective conditions precedent — not transaction abandonment.

Second point: the quality of normalised EBITDA is the most financially impactful workstream. On deals valued at 5x-8x EBITDA, a EUR 200,000 EBITDA restatement is worth EUR 1 to 1.6 million on the price. This normalisation work requires an independent accountant with M&A transaction expertise.

Third point: the articulation between DD findings and the warranty and indemnity agreement is where many acquirers lose value. Risks identified in DD must be translated into precise contractual clauses — cap, deductible, duration, burden of proof — in coordinated work between the accountant and the M&A lawyer.

Are you considering an acquisition? Our teams are available to frame the due diligence scope suited to your transaction.

Discover our strategic advisory service

This article is for information purposes only. It does not replace a due diligence engagement tailored to the specifics of your transaction, sector, and the legal framework in force at the date of your decision.

Sources: Legifrance Commercial Code Art. L430-2 — BOFiP transfer pricing — Ordre des Experts-Comptables — France Invest — Bpifrance — Entreprendre.Service-Public.