Operational Due Diligence: The Hidden Liabilities That Sink Acquisitions Before They Close

There is a number Damon Boswell and Ashley Boswell put in front of every founder considering an acquisition, and it is the number that determines whether the deal is worth doing at all. Across the published research — McKinsey, Harvard Business Review, and the BCG meta-studies — between seventy and ninety percent of mergers and acquisitions fail to create shareholder value. Global M&A reached roughly four point eight trillion dollars in 2025, up thirty-six percent from 2024 and the second-highest total on record, and that momentum has carried into 2026. More deals are being done, and the same proportion of them are quietly destroying the value they were meant to create. The question Damon and Ashley ask founders is simple: what makes you believe your acquisition will land in the ten percent rather than the ninety? The answer, almost every time, is that the founder has run the financial diligence and concluded the numbers work. The financial diligence tells you the price. It does not tell you the risk. The risk lives in the operations, and operational due diligence is the discipline that surfaces it before the check clears.

The distinction matters because the two diligences answer different questions. Financial due diligence asks whether the numbers are accurate — whether the revenue is real, the margins are sustainable, the working capital is what it claims to be. Operational due diligence asks whether the business can actually execute — whether the systems scale, whether the management layer below the founders has depth, whether the vendor relationships survive a change of ownership, whether the operational infrastructure can support the growth plan the price was built on. A target can pass financial diligence with flying colors and fail operational diligence catastrophically, because a business with clean books and brittle operations is a business that looks healthy on paper and collapses the moment the acquisition pressure is applied. Damon and Ashley treat operational diligence as the load-bearing investigation of any acquisition, because the financials describe the past and the operations describe the future the buyer is paying for.

The Integration Failure Triple

Ashley Boswell distills the operational risk into what the research calls the integration failure triple — three conditions that, when present together, predict deal failure with uncomfortable reliability. The first is key-person dependency: the revenue and the relationships are tied to the founder or a handful of account managers, and none of it is transferable to a new owner. The second is process fragility: the operations run on tribal knowledge and undocumented workflows that exist only in the heads of the people who built them, and those people leave after the acquisition. The third is customer concentration shift: the top five customers represent more than half of revenue, and their loyalty is tied to the founders or specific managers rather than to the brand or the product. Each condition is dangerous in isolation. Together they are the architecture of a deal that looks accretive on the model and turns dilutive the day after close.

Damon is precise about why founders miss the triple. The financial diligence produces a clean set of statements and a confident valuation, and the founder concludes the deal is sound. The operational diligence — if it is run at all — is run as a checklist exercise rather than an investigation, because the founder has already decided to buy and is now looking for confirmation rather than risk. The discipline Damon and Ashley install inverts that sequence: the operational investigation precedes the decision, and its findings can kill the deal. A diligence that cannot kill the deal is not a diligence. It is a rationalization, and rationalizations are how the ninety percent is built.

• Key-person dependency: revenue and relationships tied to founders or a few managers, none of it transferable to a new owner
• Process fragility: operations run on undocumented tribal knowledge that walks out the door with the people who built it
• Customer concentration shift: top customers exceed half of revenue and their loyalty is tied to people, not to the brand or product
• The triple is predictive: each condition is dangerous alone, together they are the architecture of a deal that turns dilutive after close

The Diligence Timeline and What It Reveals

Damon Boswell frames the timeline as a diagnostic in itself, because a diligence that is rushed is a diligence that is incomplete. The 2026 data is clear: the typical due diligence period runs four weeks to six months depending on deal size and complexity. For deals under fifty million dollars, the range is four to six weeks across roughly five hundred to two thousand documents and three to five workstreams. For middle-market deals between fifty million and five hundred million, it extends to six to twelve weeks across two thousand to ten thousand documents and five to eight workstreams. The ION Analytics Best Practices in M&A Due Diligence 2026 report found that one in five respondents said their diligence timelines had extended over the past two years, and among that group, fifty-seven percent said the process had added one to three months. The timelines are lengthening because the deals are getting more complex and the risks are getting more expensive to miss.

Ashley reads the timeline extension as a signal rather than an inconvenience. The firms extending their diligence are the firms that have been burned by the deals that passed a four-week diligence and failed in the first year of integration. The cost of the additional weeks is trivial against the cost of acquiring a business whose operations cannot support the price. External due diligence costs typically run zero point two to four percent of deal value — twenty-five to seventy-five thousand dollars for small deals, fifty to two hundred thousand for mid-sized, and one hundred fifty to five hundred thousand or more for large transactions. A founder who shortens the diligence to save fifty thousand dollars on a fifteen million dollar acquisition is trading a known, bounded cost for an unknown, unbounded one, and that trade is the one Damon and Ashley see at the root of nearly every failed integration they are brought in to salvage.

Financial diligence tells you the price. Operational diligence tells you whether you can afford it. A deal that skips the second will tell you the answer the hard way. — Damon Boswell

The Five Workstreams That Actually Surface Risk

Ashley Boswell structures the operational investigation around five workstreams, because each one targets a category of hidden liability that the financial statements cannot see. The first is the management and organizational assessment — mapping the depth of the layer below the founders, identifying the people whose departure would cripple a function, and testing whether the operating authority is distributed or concentrated in a single pair of hands. The second is the process and systems audit — documenting the critical workflows, identifying the ones that exist only as tribal knowledge, and assessing whether the technology stack can scale to the growth plan the price assumes. The third is the vendor and supply-chain review — mapping concentration risk, testing the transferability of key supplier relationships, and surfacing the contracts that terminate on a change of control.

The fourth is the customer concentration and retention analysis — quantifying the revenue tied to the top accounts, testing whether the loyalty is to the brand or to the people, and identifying the contracts that carry change-of-control clauses the buyer must assume. The fifth is the cultural and integration-readiness assessment — the soft diligence that the research flags as the most consistently neglected and the most consistently predictive of failure. Damon and Ashley treat the five workstreams as a connected investigation rather than five independent checklists, because the risks compound across them. A key-person dependency in the management layer combined with a customer concentration tied to those same people is a single risk expressed in two workstreams, and the integration plan has to address it as one problem or it will fail twice.

The Change-of-Control Trap

Damon Boswell draws particular attention to the liability the financial diligence almost never surfaces and the operational diligence must: the change-of-control provisions buried in the target's contracts. A customer contract that terminates on a change of ownership, a vendor agreement that allows the supplier to renegotiate or exit on acquisition, a lease that requires landlord consent on transfer, a key-employee agreement that vests on a change of control — each one is a liability that does not appear on the balance sheet and that can convert a healthy acquisition into a distressed one in the first quarter after close. The discipline is to map every contract with a change-of-control clause before the deal closes, because the cost of curing those provisions pre-close is a negotiation, and the cost of discovering them post-close is a crisis.

Ashley pairs the contract mapping with the retention risk analysis, because the two liabilities travel together. The key employees whose departure would cripple the business are often the same employees whose contracts vest on a change of control, which means the acquisition can trigger the very exits it cannot afford. The remedy is a retention structure negotiated before close — stay bonuses, equity rollover, vesting acceleration tied to integration milestones — that aligns the people who hold the operational knowledge with the buyer who is acquiring it. The founders who build the retention structure into the deal terms are the ones who keep the knowledge. The founders who discover the retention problem after close are the ones who acquire a business and lose the people who make it work in the same transaction.

The Integration Plan Begins in Diligence

Ashley Boswell is firm on a principle that separates the ten percent from the ninety: the integration plan begins in diligence, not after close. The operational investigation is not merely a risk screen. It is the data collection that builds the integration plan — the org chart that determines who stays, the process map that determines what gets standardized, the system assessment that determines what gets migrated, the customer analysis that determines the retention strategy. The firms that treat diligence and integration as separate phases run diligence to close the deal and then start integration from zero, and the gap between the two is where the value leaks out. The firms that treat them as one continuous process close the deal with an integration plan already built on the diligence findings, and the execution begins on day one rather than week six.

Damon frames the integration-readiness standard concretely. By the time the deal closes, the buyer should be able to answer four questions without hesitation: which critical employees are retained and on what terms, which processes are standardized in the first ninety days and which are left alone, which systems are migrated and on what timeline, and which customer relationships require a personal transition plan and who owns it. A buyer who cannot answer those four questions has not completed the diligence, regardless of what the financial statements say, and the acquisition is being closed on hope rather than on investigation. Hope is not an integration strategy, and the ninety percent of deals that fail are the ones that relied on it.

From Diligence to Decision Quality

Damon Boswell returns to the number that opened the conversation, because the seventy-to-ninety percent failure rate is not a law of nature. It is a consequence of decision quality, and decision quality is a discipline that can be installed. The acquisitions that create value are not the ones with the cleanest financials or the most attractive strategic narrative. They are the ones where the operational diligence surfaced the real risks, the deal terms were structured to address them, and the integration plan was built on the diligence findings before the check cleared. The difference between the ten percent and the ninety is not luck and it is not market timing. It is the depth of the investigation and the willingness to let the investigation change the decision.

The discipline compounds the way every discipline at Empowerment Blueprint LLC compounds. A rigorous operational diligence produces an integration plan, and a pre-built integration plan produces a clean first hundred days, and a clean first hundred days produces the value the price was built on. The founders who install the discipline acquire companies that get stronger under new ownership. The founders who skip it acquire companies that get weaker, and the difference is measured in the millions of dollars of value the acquisition was supposed to create and instead consumed.

The Founder's First Question

Damon Boswell reduces the entire discipline to a question he asks any founder approaching an acquisition: if the deal closed tomorrow, could you name the five people whose departure would cripple the business, the three processes that exist only in tribal knowledge, and the customer relationships that require a personal transition plan? The founders who can answer are already operating with the discipline. The founders who cannot are operating on a financial model that assumes the operations will take care of themselves, and that assumption is the one the seventy-to-ninety percent failure rate is built on. Operational due diligence is not a cost of doing the deal. It is the investigation that determines whether the deal should be done at all, and it is the one that separates the acquisitions that create value from the ones that quietly destroy it.

If you are approaching an acquisition and your diligence has confirmed the price but not the operational risk, the cost of the gap is measured in the value the deal was meant to create. Damon Boswell and Ashley Boswell can help you run the operational investigation that surfaces the hidden liabilities before they become post-close crises — starting with a confidential assessment of the target's key-person dependencies, process fragility, customer concentration, and integration readiness, and the deal-terms and retention structures that would address them before the check clears.