Commercial Due Diligence: Market, Customer and Revenue

Commercial due diligence is the work of testing whether a target company's revenue is real, durable and defensible before money changes hands. Financial diligence asks whether the numbers add up. Commercial diligence asks whether the numbers will keep adding up next year, and the year after that, once the deal closes and the market moves on. It looks outward at the market, the customers and the competitive position, where most other diligence streams look inward at the books, the contracts and the code.

I've sat on both sides of this. I've run commercial diligence on companies I was thinking about acquiring, and I've prepared the room when we were the target being picked apart. The pattern that holds up is simple: deals that look great on a spreadsheet often fall apart the moment you call ten of the company's customers and ask why they bought, whether they'd buy again, and what they'd switch to. This guide walks through what commercial due diligence covers, who runs it and when, the process, a working checklist, the red flags that should slow a deal down, and how a well-organised data room makes the whole thing faster.

Commercial due diligence is one workstream inside a wider due diligence process. If you want the full map of how the streams fit together, start with the pillar guide and come back here for the commercial detail.

What commercial due diligence actually covers

Commercial due diligence (often shortened to CDD) is an assessment of a target's market and its position within that market. The core question is whether the business plan the seller is selling is achievable in the real world, not just on the model.

A thorough CDD covers four areas:

Market. How big is the addressable market, how fast is it growing, and what structural forces (regulation, technology shifts, buyer behaviour) are reshaping it? A company growing 40% a year in a market that is itself growing 40% a year is a very different bet than one growing 40% in a flat market.
Customers. Who actually buys, why, and how loyal are they? This is where customer interviews, retention cohorts, net revenue retention and concentration analysis live. It overlaps with, but is not the same as, regulatory customer due diligence, which is about verifying identity and screening for risk rather than testing demand.
Competition. Who else serves these buyers, how does the target win and lose, and what stops a better-funded rival from copying the model? Pricing power is the tell. If the company cannot raise prices without losing customers, its moat is thinner than it looks.
Revenue durability. Pulling the first three together, will the forecast hold? This means stress-testing the growth assumptions, sales pipeline, renewal rates and unit economics against what the market and customers will actually support.

The deliverable is usually a commercial due diligence report that either supports the investment thesis, qualifies it with conditions, or kills it. Good CDD does not just confirm what the seller told you. It tells you what the seller did not.

Who runs it, and when

On the buy side, commercial diligence is commissioned by the acquirer: a private equity firm, a strategic acquirer, or a corporate development team. They often bring in a specialist strategy consultancy or a boutique CDD provider to run customer interviews and market analysis at arm's length, because a third party gets more candid answers from customers than the acquirer would.

On the sell side, a seller or their advisor may run vendor commercial due diligence ahead of a process, producing a report that buyers can rely on. This shortens the timeline and reduces the number of times the management team has to answer the same questions. If you are preparing to sell, doing this work early is one of the highest-leverage things you can do.

Commercial diligence runs during the confirmatory phase, after a letter of intent or term sheet is signed but before the binding agreement. By then the buyer has committed enough to justify the spend, and the seller enough to open the room. It runs in parallel with financial due diligence, which validates the historical numbers, and with technical due diligence, which validates the product and engineering. The streams talk to each other constantly. A revenue number that looks clean financially can still be commercially fragile if it depends on three customers all up for renewal next quarter.

For the wider context of where this sits, see how it fits inside m&a due diligence end to end.

The commercial due diligence process, step by step

Here is the sequence I follow. It compresses or stretches with deal size, but the order rarely changes.

Frame the thesis. Write down, in one paragraph, why this deal makes money. Every later step tests a piece of that paragraph. If you cannot write it, you are not ready to diligence yet.
Define and size the market. Build the addressable market from the bottom up where you can (number of buyers times realistic spend) and sanity-check against top-down analyst figures. Top-down numbers alone are how people talk themselves into bad deals.
Map the competitive landscape. List who competes, on what basis, and where the target wins and loses. Watch substitutes and adjacent players who could enter, not just direct rivals.
Analyse the customer base. Pull revenue by customer, cohort and segment. Look at concentration, churn, net revenue retention and the trend in new-logo acquisition, then reconcile it against the financials.
Run customer interviews. Call current customers, lost customers and prospects who chose someone else. Twenty good calls tell you more than any report. Ask why they bought, what would make them leave, and how the product compares to alternatives.
Stress-test the forecast. Take management's plan and rebuild it from the demand side. Are the growth, pricing and retention assumptions consistent with what the market and customers told you? Model a downside case.
Write the report and the conditions. Conclude clearly: proceed, proceed with specific risks priced in, or walk. List the assumptions the thesis rests on so the deal team can monitor them after close.

The single biggest lever on speed is how fast you get answers to data requests. Steps 4 and 6 stall the most, because they depend on the seller producing clean customer and revenue data. A data room that is well structured before diligence starts can take weeks off the timeline.

Commercial due diligence checklist

This is the request list I work from. Adapt it to the deal, but treat anything you cannot get a clear answer on as a flag in itself.

Area	What to request and test	Why it matters
Market	Market sizing, growth rates, regulatory and technology trends, analyst reports	Confirms the pond is big and growing
Customer base	Revenue by customer, segment and geography; top-10 concentration	Reveals dependency risk
Retention	Logo churn, gross and net revenue retention, cohort curves	Tests whether revenue compounds or leaks
Pipeline	Sales pipeline, win/loss rates, sales-cycle length, conversion by stage	Validates the forward forecast
Pricing	Price lists, discounting history, evidence of pricing power	Shows the strength of the moat
Contracts	Contract terms, lengths, renewal dates, termination and change-of-control clauses	Surfaces revenue that could walk
Competition	Competitor map, differentiation, win/loss reasons	Tests defensibility
Customer voice	Reference list, NPS or satisfaction data, support and complaint logs	Grounds the analysis in real sentiment
Forecast	Management plan, assumptions, prior plan-versus-actual	Checks whether they hit their own numbers

For a broader, cross-stream request list that goes beyond the commercial workstream, the due diligence data room checklist covers the financial, legal and technical documents that sit alongside these.

Red flags that should slow a deal down

Some findings are reasons to renegotiate. A few are reasons to walk. These are the ones I watch for:

Customer concentration. When one customer is 25% of revenue, or the top three are more than half, the forecast is hostage to a handful of renewal conversations.
Net revenue retention below 100%. It means the existing base is shrinking and all growth has to come from new logos, which is expensive and fragile.
Pricing taken on faith. If the company has never tested a price increase, you do not actually know whether it has pricing power. Assume it does not until proven otherwise.
A forecast that ignores the market. Plans that show acceleration while the market decelerates need a very specific, evidenced reason. Usually there isn't one.
Lumpy, deal-driven revenue dressed up as recurring. Revenue that depends on landing a few big deals each year is not the annuity the model implies.
Customer interviews that contradict the deck. When customers describe a product as a commodity they could replace in a quarter, no amount of slideware fixes the moat problem.

None of these automatically kills a deal. Each one changes the price, the structure, or the conditions you attach. The job of commercial diligence is to make sure repricing happens before the wire goes out, not after.

How a data room streamlines commercial diligence

Commercial diligence is bottlenecked by information flow. Every interview prep, cohort rebuild and forecast stress-test starts with a document request, and the deal moves at the speed those requests are filled. A disorganised shared drive or an inbox full of attachments is where weeks disappear.

This is the case for running diligence through a proper virtual data room rather than email. A data room gives the seller one structured place to publish customer data, contracts, pipeline reports and market materials, and gives the buyer's team a single source of truth they can navigate without asking management for the same file twice.

The room I set up for our last raise did three things that mattered for the commercial stream. Granular access let a buyer's CDD consultant see customer-contract terms without seeing our internal salary data. The access logs told me exactly which prospective buyer spent forty minutes in the customer-retention folder, a useful signal about where their real concern sat. And watermarking with view-only controls meant I could share a sensitive customer reference list without it ending up forwarded to a competitor.

This is the part of the job Plox is built for: a secure virtual data room for founders, investors and dealmakers, with per-file permissions, view tracking and watermarking, so the side preparing the room controls exactly what each party sees. I use other tools too, and the established enterprise providers are excellent for very large multi-party processes, but for most founder-led and lower-mid-market deals the speed and cost trade-off is what matters. If you are weighing options, the rundown of the best data room for due diligence and a clear-eyed look at virtual data room cost will help you size the decision without overbuying. Pricing models vary widely, from per-page legacy billing to flat per-seat or all-in plans, so match the model to the deal rather than the headline number.

Software does not do the diligence for you. But the analysis is only as fast as the data is accessible, and a good room removes the friction so the team spends its time on judgement instead of chasing files.

Frequently asked questions

What is the difference between commercial and financial due diligence?

Financial due diligence verifies the historical numbers: revenue recognition, margins, working capital and the quality of earnings. Commercial due diligence looks forward and outward, testing whether the market, customers and competitive position will let those numbers continue. They are complementary. Financial confirms what happened, commercial assesses what will happen, and a deal team reads them together.

How long does commercial due diligence take?

On a typical lower-mid-market deal, four to six weeks is common, with the customer-interview phase taking the most calendar time because it depends on scheduling third parties. Large or multi-market transactions run longer. The single biggest variable is how quickly the seller can produce clean customer and revenue data, which is why a well-prepared data room shortens the whole exercise.

Who pays for commercial due diligence?

On the buy side, the acquirer pays, since the work protects their investment decision. On the sell side, a seller can commission vendor commercial due diligence at their own cost to speed up a competitive process and reduce repeated questions. In both cases the cost is small relative to the size of the mistake good diligence prevents.

What is vendor commercial due diligence?

Vendor commercial due diligence is a CDD report commissioned by the seller, before or during a sale process, and made available to prospective buyers. It front-loads the market and customer analysis so buyers can rely on a common fact base, which compresses the timeline and reduces friction. It works best when the provider is credible and the report is honest about risks rather than purely promotional.

How does commercial due diligence connect to the rest of the deal?

Commercial diligence sits alongside the financial, legal and technical streams. Its findings feed directly into valuation and deal structure, since a thinner moat or higher customer concentration should change the price or the conditions. Walking the full set of streams together is what m&a due diligence is about, and the commercial view is often the one that decides whether the thesis survives contact with reality.