A first diligence request list is a control document as much as an information request. A founder who answers everything in the buyer’s order and at the buyer’s pace is running diligence exactly as the buyer designed it. Windsor Drake treats the request list as a negotiation, and the offer-received hub covers the situations that usually surround it.

What is a first diligence request list?

A first diligence request list is a spreadsheet of 100 to 200 or more items covering financials, contracts, customers, employees, technology, and legal history. Part of the list is real need. The rest splits between fishing, where the buyer asks broadly to see what surfaces, and load-testing, where the buyer measures how the founder performs under administrative pressure.

Serial acquirers send substantially the same list on every deal. The list is a template, which is the first reason to stop reading it as a set of orders.

Why is answering the full list immediately a mistake?

Answering the list raw surrenders disclosure sequencing. Deal information has a correct release order because 1 in 3 signed LOIs fails to close on the original terms, and sensitive material handed over before deal certainty stays with the buyer whether or not the deal survives.

Answering raw also hands over the calendar. The party that controls the pace controls the deal, and a founder buried in item 140 is not negotiating structure or price. Uncontrolled bilateral diligence is one of the mechanisms behind The Proprietary Discount, the 15 to 25 percent gap between unbanked bilateral outcomes and competitive outcomes that The Windsor Drake Proprietary Discount Index exists to measure.

How should a founder triage the request list?

Triage every item into four buckets before answering any item. Bucket one is standard and safe now: formation documents, the cap table, historical financial statements, and form customer contracts. Bucket two is post-LOI only: masked customer concentration, detailed margin data, supplier terms, and pipeline detail.

Bucket three is exclusivity only: key employee terms and unredacted material contracts. Bucket four is never without closing certainty: customer names and introductions, source code, and anything a buyer could use competitively if the deal dies. The staging logic behind the buckets is mapped at due diligence.

Request type When to answer Why
Corporate records and cap table Immediately Standard, low sensitivity, needed for any real bid
Historical financial statements Immediately, summaries before raw exports Establishes credibility while keeping detail staged
Customer concentration, names masked After a signed LOI Prices the deal without exposing relationships
Key employee terms and references Under exclusivity only Early release invites retrading on retention
Customer names and introductions Only with closing certainty A dead deal turns the list into a competitor’s call sheet
Source code access Only with closing certainty, via escrow or supervised review Code a buyer has seen survives a dead deal

Can a founder negotiate the diligence request list?

Yes, and almost nobody does. Scope is negotiable, so duplicative and irrelevant items come off the list. Sequence is negotiable, so sensitive categories move behind milestones such as a signed LOI or entered exclusivity. Format is negotiable, so summaries and anonymized schedules stand in for raw exports until later stages. Deadlines are negotiable, so response windows the founder can actually meet replace the buyer’s default cadence.

An advisor cuts request lists routinely, and diligence management is a large share of what the fee buys. The cost side is laid out at what an M&A advisor costs.

What does the request list reveal about the buyer?

The request list reveals the buyer’s thesis and the buyer’s fears, and both are negotiating information. Concentrated questioning on one topic marks either what the buyer is paying for or what the buyer is afraid of. A list dense with churn and renewal questions signals a buyer preparing to retrade on retention risk before closing. A list dense with integration and technology items signals a buyer pricing the company for absorption.

How much founder time does unmanaged diligence consume?

Unmanaged diligence consumes 20 or more founder hours per week while the business still needs running. The drain is not a side effect. A distracted founder misses a quarter, a missed quarter gets repriced, and pace pressure produces concessions that argument alone never would. Treating the workload as a deliberate buyer tactic is the accurate frame.

The workload is also the practical core of the banker question, covered at do I need a banker. Absorbing the buyer’s process so the founder can keep running the company is the least visible and most valuable part of the job.

What should a founder send back first?

Send back a response plan, not documents. The plan states which categories arrive now, which arrive after the LOI, which wait for exclusivity, and what stays closed until closing certainty, together with a realistic response calendar. Buyers accept staged disclosure from sellers who present it as process, because organized sellers read as lower risk. A data room built in stages enforces the plan mechanically, with access expanding as certainty does.

A founder holding a live offer and a fresh request list can engage Windsor Drake through Approach Response, the engagement for founders already inside a buyer’s process who need to take control of it.

Questions founders ask

How many items are on a typical diligence request list?

100 to 200 or more on the first pass. Serial acquirers send template lists, so a large share is boilerplate rather than deal-specific need, and a meaningful share exists to test the seller’s stamina and organization.

What should never go in the data room before closing certainty?

Customer names and introductions, source code, and anything a buyer could use competitively if the deal dies. 1 in 3 signed LOIs fails to close on its original terms, and disclosed material does not come back.

Can I really push back on a buyer’s diligence requests?

Yes. Scope, sequence, format, and deadlines are all negotiable, and sophisticated buyers expect pushback. A seller who stages disclosure behind milestones reads as organized rather than evasive.

What does it mean when the buyer asks heavily about churn?

Concentrated churn and renewal questions usually signal a planned retrade on retention risk, arriving late in exclusivity as a price cut or a larger earnout. Preparing retention evidence early blunts the move.

How much time does due diligence take a founder?

Unmanaged, 20 or more hours per week for the duration of the process, alongside running the company. Managed diligence moves document assembly and buyer correspondence onto an advisor so the business does not sag during the deal.

Key Facts

  • A first diligence request list runs 100 to 200 or more items, and only part of the list reflects real need.
  • Do not answer the list raw.
  • Triage every item into four buckets: standard items now, commercially sensitive items after the LOI, high-risk items only under exclusivity, and customer names or code never before closing certainty.
  • The list itself is negotiable, and what the buyer asks reveals the buyer’s thesis and fears.

The Proprietary Discount

The Proprietary Discount is the gap between what a serial acquirer pays in an unbanked bilateral negotiation and what the same business clears in a competitive process. Windsor Drake publishes the measurement as The Windsor Drake Proprietary Discount Index.

Holding an Offer?

Windsor Drake is a boutique sell-side M&A advisory firm representing founder-led companies in the lower middle market, with offices in Toronto and New York.

Every conversation is confidential and without obligation. Approach Response ›