Operational due diligence
Operational due diligence: how the target runs, seen from outside.
Operational due diligence in an acquisition examines how the target delivers its services and whether its processes and systems support the operating plan. Meo Advisors begins with public customer journeys and visible dependencies, then requests authorized records for internal questions. This company review differs from fund-manager diligence and does not establish every operating metric.
In short
- This is company-level operational diligence for a PE deal, rather than fund-manager diligence for an investor.
- Review observable customer journeys alongside the systems and dependencies supporting them.
- Use target records to resolve internal performance questions; missing evidence stays an open question.
What is operational due diligence in a PE deal?
Operational due diligence reviews how a target runs and whether its processes and systems can support the acquisition plan. In this PE context, the subject is the operating company; fund-manager operational diligence for investors is a separate review.
Operational due diligence is the review of the operating processes, systems and dependencies supporting a target’s business plan.
This outside-in view complements the wider private equity due diligence review. It starts with what a customer can encounter and records which conclusions still need company evidence.
What are types of due diligence?
Deal teams use financial, commercial, operational, technology, cybersecurity, marketing and legal reviews to answer different acquisition questions. These reviews overlap, so the scope should identify which team owns each question and which evidence it needs.
| Review | Main question | Evidence needed |
|---|---|---|
| Financial | Do the earnings and cash flows support the case? | Financial records and transaction evidence |
| Commercial | Can demand and positioning support the growth plan? | Market evidence, customer research and company records |
| Operational | Can processes and systems deliver the plan? | Observed journeys, process records and operating data |
| Technology and IT | What systems and dependencies support delivery? | Public stack plus authorized internal and vendor records |
| Cybersecurity | What is exposed, and which controls need review? | Passive public evidence plus separately authorized checks |
| Marketing | Can customers find and choose the target? | Search, listings, ads, reviews and measurement records |
| Legal | Which obligations and liabilities affect the transaction? | Contracts and legal evidence reviewed by counsel |
What are the three types of diligence?
There is no universal set of three types for every deal. Financial, commercial and operational diligence are a useful way to organize the core questions, with technology, cybersecurity, marketing and legal work scoped around the target and transaction.
Financial work examines the economic record, commercial work tests the market case, and operational work tests how the company delivers. The scope and ownership matter more than forcing every question into a fixed label.
- 01Marketing & Digital VisibilityCan customers find the target in search, maps and AI answers?
- 02CompetitionWhich peers win the target’s customers, and how?
- 03CX & Call CentersWhat happens when a customer calls, texts or fills in a form?
- 04CybersecurityWhat can an attacker see from the internet?
- 05Technology & InfrastructureWhat does it run on, and where is the technical debt?
- 06Compliance & RiskWhere do consent, privacy or accessibility rules create exposure?
What is a due diligence checklist?
A due diligence checklist turns the acquisition questions into review tasks with evidence sources, owners and access requirements. An operational checklist should connect the observed customer journey to the internal records needed to assess repeatability, capacity and performance.
- Agree the customer journeys, locations and operating questions in scope.
- Record observed contact, routing, response and booking behavior with its source and limits.
- Map visible systems and the dependencies requiring internal evidence.
- Request the operating data, process records and vendor documents needed to resolve open questions.
- Assign findings an action, an owner and a way to verify the change.
Use the private equity due diligence checklist as the wider review structure.
What can the customer path show about operations?
A sampled customer path shows what happened during the observed journey: discovery, contact, routing, response, follow-up and booking. It can identify a supported process question, but a sample does not establish the company’s performance across all calls or inquiries.
| Step | What we test | TCPA check |
|---|---|---|
| 1. Find | The right number in listings, ads and AI answers | |
| 2. Inquire | Forms, numbers and chat | |
| 3. Connect | Answer and routing, including after hours | |
| 4. Respond | First-reply speed | TCPA check |
| 5. Follow up | Cadence, consent and opt-outs | TCPA check |
| 6. Book | Confirmed booking or sale |
Mystery shops use real or simulated customers, agreed with the sponsor and run within the deal’s NDA.
Discovery questions can move into a digital marketing audit. Healthcare system dependencies need the separate scope described in healthcare technology due diligence.
Which systems support the operating journey?
The public journey can reveal front-end behavior, tags, customer-facing apps and domain or hosting dependencies. Internal system capacity, integrations and control effectiveness need records or authorized access before they can become supported findings.
| Layer | What we check |
|---|---|
| Marketing & Digital Visibility | AI answers and search ranking; Listings and reviews; Paid media; Pricing |
| Technology & Infrastructure | Technical debt; Vendors and SaaS subscriptions; Tags and measurement; Page speed |
| Cybersecurity | External exposure review; Internet-facing endpoints; Certificates and security headers; Penetration testing on request, with authorization |
Before authorization we use passive public sources only: DNS, certificate transparency, third-party internet-scan datasets, and the target’s public pages at normal browsing rates. No port scans, vulnerability scans or login attempts without written authorization.
What we can’t see from outside
- Conversion rate and acquisition cost
- Revenue by channel
- Answer rate across all calls
Each is listed with the record that would answer it. Missing evidence is never scored as a failure.
How is operational due diligence different from commercial due diligence?
Commercial due diligence asks whether the market, demand and positioning support the deal case. Operational due diligence asks whether the company’s processes and systems can deliver it. A growth opportunity may need both reviews before it becomes an executable plan.
| Review | Focus | Example question |
|---|---|---|
| Commercial | Demand, competition and market positioning | Is there evidence of demand for the proposed growth? |
| Operational | Delivery processes, systems and dependencies | Can the company respond, route and deliver consistently? |
What does operational diligence deliver?
Operational diligence delivers supported findings, the evidence and limits behind them, and a prioritized action list. Unresolved questions identify the internal record needed to answer them, while agreed fixes receive owners and verification steps.
See the sample diligence deliverables for the readout format. Before an exit, a sell-side readiness assessment uses the same evidence discipline to prepare for buyer questions.
Run a free instant audit on a target.
A free, automated snapshot from public information: marketing, search and CX. Deep dives from $15K.
Meo Advisors Editorial writes and maintains this page. Its numbers are Meo Advisors’ own statements or cited external benchmarks, and every mock is labelled Illustrative. See the editorial policy and corrections process.