Accounting practice due diligence checklist: clients, fees, staff, systems, compliance

What should the checklist prove before you buy?

A diligence checklist should test whether the purchased business can produce the expected cash flow under the buyer’s operating model. Collecting a folder of documents is only the beginning. Each record needs a question, an owner, a conclusion, and an unresolved exception where the evidence does not support the acquisition assumption.

Create a tracker with the original request, response date, reviewer, finding, financial effect, and proposed resolution. Distinguish missing evidence from adverse evidence. A report that has not been provided calls for follow-up; a report showing repeated write-offs calls for analysis. Neither should disappear into a status marked documents received.

The buyer hub connects diligence with selection and financing. Establish materiality for your transaction before starting, including risks that matter even when their dollar amount is small. A compromised filing credential or missing access to essential records can be operationally significant without appearing as a large balance-sheet item.

Which financial records should be reconciled?

Request historical financial statements, tax returns, general-ledger detail, bank collection evidence, billing reports, aged receivables, work in process, and credit or write-off reports. Compare the same periods and accounting bases. Explain differences due to timing, classifications, entity boundaries, and unusual events before using the totals in your model.

Trace selected engagements from agreement and work record through invoice, receipt, and any subsequent adjustment. Include ordinary clients, unusually large relationships, slow payers, and engagements with high reported margins. This sample should test the reporting system and important risks. It is not a statistically representative sample unless designed and described as one.

The historical Journal of Accountancy valuation framework discusses factors beyond a simple revenue measure. Use the framework to identify evidence needed for sustainable economics. It does not supply current transaction multiples. The financial-reading guide explains how owner compensation and accounting differences affect interpretation.

What belongs in the client and engagement review?

Build an anonymized client schedule showing service type, annual fees and collections, tenure, payment pattern, contact owner, scope, deadlines, and known upcoming changes. Define related clients as groups where decisions or ownership overlap. A nominally diversified list can still depend heavily on one referral source or controlling individual.

Review engagement terms for scope, termination, fee changes, assignment, and special commitments. Identify unresolved disputes, refunds, promises of future work, and unusual service expectations. Ask who owns each relationship and which employee can serve it after closing. The schedule should show the operational story behind the revenue.

Use the client-retention underwriting guide to convert this evidence into scenarios. Do not label a relationship safe simply because it has existed for many years. Tenure may reflect confidence in the departing owner, while short tenure may reflect a client already accustomed to staff-led delivery.

Which people and capacity questions need answers?

Obtain an appropriate employee schedule covering roles, compensation, tenure, work arrangement, qualifications, benefits, accrued obligations, and client responsibilities. Review agreements and classification issues with counsel. Map recurring tasks to the actual person performing them, including work done by owners, family members, contractors, and offshore service providers.

Test capacity across the busiest periods. Headcount without available hours and reviewer authority can be misleading. Ask who covers absences, which work waits for the owner, and how work is reassigned when deadlines conflict. Review turnover and recruiting evidence without assuming every departing employee represents an acquisition-related problem.

An exception is not automatically a reason to walk away. It is a finding requiring a reasoned disposition. Record whether the solution is additional evidence, a pre-close correction, revised economics, a specific contractual protection, or rejection of the target. Assign a deadline and avoid treating unresolved assumptions as completed review.

What systems and cybersecurity evidence should you request?

Inventory software, hosted environments, integrations, vendor agreements, user access, administrative control, backup procedures, and incident history. Determine where client records reside and whether the buyer can receive them in a usable format. Vendor assurances should be supported by agreement terms and tested processes when those matters are essential to continuity.

The IRS written information security plan publication offers a practical framework for security responsibilities in a tax and accounting practice. Request the target’s plan and evidence that it reflects current operations. Review how employees are trained, access is revoked, service providers are evaluated, and incident responsibilities are assigned.

Plan the transfer as a separate project. Specify permitted data, approved storage, access, validation, and eventual removal of duplicate records. A successful export is not proof of a complete migration. Test a limited authorized sample for completeness and usability, and resolve differences before relying on the new environment for deadlines.

How should professional and tax-filing compliance be checked?

Identify every service requiring professional authority, including attest engagements and specialist work. Verify the relevant individuals and entities, existing permits, peer-review obligations, and the proposed buyer structure with appropriate advisers. The correct answer may differ by state and engagement, especially when services are performed for clients in multiple jurisdictions.

The IRS electronic-filing identification FAQ says an EFIN is not transferable. Include buyer filing readiness in the closing checklist rather than assuming it is an asset the seller can assign. Verify PTIN and other individual requirements as applicable. Federal tax-filing arrangements and state CPA-firm rules answer different questions.

Review insurance policies, prior claims, known circumstances, carrier notices, and open tax or regulatory issues. Ask counsel and insurance advisers how historical work will be covered after closing. An absence of paid claims does not establish that no reportable circumstance exists. Obtain explanations for notices and follow their disposition through supporting records.

What information can the seller lawfully provide?

Use staged disclosure and an agreed access protocol. The IRS Section 7216 resources address tax-return-information rules and transaction contexts. Counsel should assess proposed disclosures, authority, consent where required, and whether less identifying evidence can answer the question. A comprehensive diligence wish list does not override those obligations.

Maintain access logs and restrict downloads to the permitted purpose. Separate sensitive records from general financial summaries. When the buyer needs a client or employee conversation, obtain agreement on timing and participants. Document limitations in the diligence conclusion instead of presenting restricted review as full verification.

How do findings become a closing decision?

1. Reconcile each material acquisition assumption to evidence.
2. List adverse findings and evidence still unavailable.
3. Model financial and operating consequences under the buyer’s delivery plan.
4. Assign corrections, revised terms, or explicit acceptance to every material exception.
5. Verify completion of required actions before authorizing closing.

Keep the purchase-structure guide beside the findings tracker. Economic adjustments should reflect the problem they address. A retention holdback may suit uncertain client transfer, while a missing software license needs an access solution. One generic indemnity cannot make every operating issue manageable.

What should the final diligence memo contain?

Summarize what was reviewed, the relevant periods, sampling choices, limitations, key findings, and decisions. Attach the financial bridge, transition requirements, and unresolved conditions. Explain whether the acquisition remains supportable under the revised assumptions. This memo lets the buyer, lender, and advisers evaluate the same factual picture.

Retain evidence in a controlled archive under the agreed retention and confidentiality rules. After closing, transfer the actionable findings into the integration plan. Diligence creates value only when the purchaser uses what it learned to fund delivery, manage risks, and preserve the relationships supporting the acquisition.