A buyer's due-diligence checklist for online businesses

Due diligence is where a listing stops being a story and becomes something you can check. On Online Asset it is stage 4 of the ten-stage process, and it is the moment you move from what the seller says the business earns to what you can actually verify. Before this point you have expressed interest (Inquiry), signed a deal-specific non-disclosure agreement (NDA), and been granted access to the confidential dossier. Now you get to open the data room and start testing every claim that matters to you.

This guide walks through what to verify, the concrete questions worth asking, and how to use the two tools you have during diligence: the per-deal data room, where documents are shared, and Messages, where you ask questions and request anything that is missing. Your named advisor is with you the whole time and can work alongside you to keep the review organized. What follows is a checklist you can adapt to any SaaS, e-commerce, or content business you are considering.

How you get here: access unlocks in layers

The public marketplace only ever shows a teaser: the category, a headline, and a price band. It never shows the exact asking price, real revenue or profit, the domain, or any customer data. That is by design. The full picture unlocks in layers, on a per-deal basis, and only once three things are true.

1. 1You are verified as a buyer. Identity verification (KYC) is the baseline for engaging on a real deal, so you are not a fully anonymous account.
2. 2You have signed the NDA that is specific to this deal, which protects the seller's confidential information.
3. 3You have received a deal-scoped access grant, which unlocks the dossier for this one listing and nothing else.

Financials: verify what the business actually earns

Start with the numbers, because everything else is downstream of them. In the data room you are looking for the records that let you reconstruct revenue and profit yourself rather than taking a summary at face value. The point is to trace the money from top-line revenue down to what the owner actually keeps.

• Revenue and profit records over a meaningful period, so you can see the trend rather than a single flattering month.
• A breakdown of costs, so you understand what it genuinely takes to run the business and what the real margin is.
• How revenue is earned: subscriptions, one-time sales, ad income, affiliate income, or a mix, and how stable each stream is.
• Any owner expenses mixed into the accounts that a new owner would not carry, and any costs the current owner covers personally that you would inherit.
• For SaaS specifically, recurring revenue and churn signals; for e-commerce, the cost of goods and returns; for content, how income maps to traffic.

Good questions to raise in Messages: Can you share the underlying records behind these figures, not just a summary? Which revenue streams are recurring versus one-off? Are there any months that are unusually high or low, and why? What expenses in these accounts are personal to you rather than part of running the business?

Traffic and analytics: confirm where demand comes from

For online businesses, traffic is often the engine behind the revenue, so verify it directly rather than trusting a screenshot. Ask to see analytics you can inspect, and pay attention to where visitors come from and how dependent the business is on any single channel.

• Analytics access or exports showing traffic over time, so you can see trend and seasonality.
• The channel mix: how much traffic is organic search, paid, direct, social, email, or referral.
• Whether the business leans heavily on one source, such as a single search term or one social platform, which is a risk if that source changes.
• For paid traffic, what it costs to acquire a customer and whether the economics still work if ad costs rise.

Legal standing: check the business is clean and really theirs

You want confidence that the business is what it appears to be, that it is genuinely the seller's to sell, and that you are not inheriting a dispute. Sellers on Online Asset complete both identity verification and business verification, which confirms the business is really theirs, but you should still review the specifics for this deal.

• Ownership of the core assets, including the domain, trademarks or brand names, and any content or code.
• Any contracts the business depends on, such as supplier, affiliate, or platform agreements, and whether they transfer to a new owner.
• Any past or pending disputes, complaints, or claims that could follow the business.
• Whether the business relies on licenses, third-party tools, or accounts that have their own terms about transfer.

Tech and operations: understand how it runs day to day

You are not just buying revenue; you are buying a machine you will have to operate. Diligence should tell you how much work it takes to keep the business running and how much of that work is tied up in the current owner.

• The tech stack: what the site or product is built on, what tools and subscriptions it depends on, and where it is hosted.
• How much time the owner spends and on what tasks, so you can judge whether it is truly passive or hands-on.
• Whether staff, contractors, or freelancers are involved, and whether they stay after a sale.
• Standard operating procedures or documentation, which make a handover far smoother.
• Any single point of failure that only the current owner knows how to handle.

Customer concentration and transferability

Two risks deserve their own attention because they can quietly undermine an otherwise attractive business. The first is concentration: revenue or traffic that leans on a single customer, supplier, platform, or channel. The second is transferability: whether the assets can actually move to you cleanly once the deal closes.

• Concentration: does one customer, one supplier, or one platform account for an outsized share of the business? If that relationship broke, what would remain?
• Transferability: can the domain, hosting, key accounts, code, and contracts move from seller to buyer, and are there any accounts tied to the owner's personal identity that complicate the handover?
• Dependencies on the owner's personal brand, personal relationships, or personal accounts that may not come with the business.
• Anything that requires a third party's approval to transfer, which you want to know about now rather than at handover.

Transferability is not just a diligence question; it becomes concrete later at stage 9 (Transfer), when assets move seller to buyer and are confirmed item by item. The work you do now is what makes that later step smooth.

Using the data room and Messages together

Diligence works best as a loop. Read what is in the data room, note what is missing or unclear, then ask precise questions in Messages and request the specific documents you still need. Documents are shared per deal, and a document can sit as pending before staff approve it to visible, so if something you expect is not there yet, ask about it rather than assuming it does not exist.

1. 1

   Review the dossier

   Open the data room and read everything already shared. Make a list of what you can verify and what you still need to see.

2. 2

   Ask precise questions

   In Messages, ask specific, answerable questions rather than broad ones. Instead of asking whether the business is healthy, ask for the underlying records behind a specific figure.

3. 3

   Request missing documents

   Name the documents you need so the seller can add them to the data room. If something is marked pending, it may still be awaiting staff approval to become visible.

4. 4

   Reconcile the answers

   Cross-check what you are told against what the documents show. Where they disagree, ask about the gap before you move toward an offer.

How your advisor supports the review

You are not doing this alone. Every buyer on Online Asset is assigned a named advisor, a real person who stays with you from your first inquiry through to a closed transfer. During diligence your advisor can work in assist mode: helping you complete your information, organize the review, and frame the right questions for the seller. On some deals two advisors work together, a specialist alongside a senior colleague, and both are simply your advisors.

When you have verified enough to be confident, or decided the business is not for you, diligence has done its job. If you are ready to proceed, the next step is stage 5, where an offer goes on the table and the two sides work toward an agreed price.