The 20-item dependency audit a buyer's diligence team actually runs

A founder alone at a desk in a quiet study working through a numbered handwritten checklist in a notebook, pen in hand
TL;DR

Buyer diligence on founder-dependent businesses operates through a systematic 20-item dependency audit covering revenue generation, decision authority, documented systems, financial reporting, people retention, and external validation. Each item has a buyer's question and a benchmark answer. Most founder-dependent businesses score below threshold on 14 or more of the 20. The audit is knowable, self-administrable, and produces the prioritisation list for the founder's own remediation work.

Key takeaways

- Buyer diligence is not improvising. They work a defined map of dependencies through interviews, document requests, and customer reference calls. The 20 questions on that map are knowable in advance. - Each item has a buyer's question and a benchmark answer. "What percentage of new business in the past 12 months came from founder-driven business development?" Benchmark for low risk: under 30 percent. Most founder-dependent businesses score 60 to 80 percent. - "Of your top ten customers, how many would likely remain if you personally departed?" Benchmark for low risk: at least eight. Most founder-dependent businesses are confident of fewer than five. - "What percentage of your business processes are documented in accessible SOPs?" Benchmark for low risk: 70 to 80 percent. Most founder-dependent businesses have less than 20 percent documented. - The pattern is reliable. Most founder-dependent businesses score below threshold on 14 or more of the 20 items. That is not a moral failure, it is a structural reading of how the firm has grown. It is also the prioritisation list, in order.

A founder has paid a broker for a valuation report and received a number that surprised her. The aggregate “founder dependency” framing in the report sits inert. There is no map of which dependencies the broker was actually concerned about, no scoring of which items moved the multiple most, and no prioritisation of where to start. She knows the size of the problem. She does not know the shape.

The buyer’s diligence team will know both. Their map is knowable in advance, and the founder can self-administer it tonight at the kitchen table.

Why is the audit knowable in advance?

Buyer diligence on founder-dependent businesses is not improvising. It works a structured 20-item dependency map through interviews, document requests, and customer reference calls. The 20 questions are stable across firms and across buyer types. The benchmarks for each are observable across thousands of lower middle market transactions. Self-administering the same audit produces the same scoring the buyer will eventually produce.

The audit covers ten dimensions, two items per dimension. Revenue generation. Service delivery. Strategic decision-making. Customer relationships. Supplier relationships. Intellectual property. Management team. Financial reporting. Employee retention. Market position. Each dimension generates two specific items in the self-audit.

Most founder-dependent businesses score below threshold on 14 or more of the 20. That is not a moral failure, it is a structural reading of how a firm grows when a founder stays at the centre of it. It is also the prioritisation list, in order. The items the founder fails most heavily are typically the items that move the buyer’s multiple most. Working them in sequence is the route through.

Revenue, customers, and where new business comes from

Revenue generation is what the buyer is acquiring, so the first cluster of audit questions sits at the top of their report. Five items map where new business comes from, who the customers belong to, and how exposed the revenue base is if the founder departs. The benchmarks are tight, and the typical founder-dependent firm scores poorly on most of them.

Item 1: what percentage of total revenue in the past 12 months was generated through founder-driven business development versus team-generated or systems-generated leads. Benchmark for low risk: under 30 percent. Typical founder-dependent: 60 to 80 percent. Item 2: of the top ten customers, how many would likely remain if the founder personally departed. Benchmark for low risk: at least 8. Typical founder-dependent: fewer than 5.

Item 3: are there documented customer relationship ownership assignments such that each major customer is explicitly assigned to a named team member with documented accountability. Most founder-dependent businesses do not have this explicit assignment. Item 4: does the founder personally approve every customer contract, every price quotation, and every major customer decision. Centralised approval flags founder dependency directly.

Item 5: what percentage of revenue is recurring (contractually committed customer payments on recurring schedule) versus project-based. The industry benchmark varies by sector, but recurring revenue above 60 percent significantly reduces founder-dependency risk and lifts valuation multiples independent of dependency considerations.

Decisions, authority, and management depth

The second cluster examines the decision-making spine of the firm. If decisions concentrate in one person, the firm cannot be run by anyone else, and the buyer prices the consequence directly. Four items map who has authority, whether the management layer has independent capability, and whether the firm produces decisions in the founder’s absence.

Item 6: are there written job descriptions, defined roles, reporting relationships, and decision authority matrices for the management team. Most founder-dependent businesses operate with informal role definitions. Item 13: is there a formal performance management process with documented targets and review cycles, or is performance management founder-subjective and informal.

Item 17: has the founder hired a CFO, controller, or accounting manager who operates independent of founder direction. Item 18: is there a formal management team meeting cadence with documented agendas, decisions, and action items, or do operational communications remain ad hoc and founder-centric.

The buyer’s diligence team verifies these items by interviewing each member of the leadership team and asking whether they can articulate strategy and decision authority without the founder in the room. The interview produces an internal score the buyer’s adviser uses to size the dependency.

Documented systems, processes, and IP

The third cluster covers what survives if the founder leaves the room. If the firm runs on undocumented institutional memory, that memory walks out the door with the founder. Four items map how much of the firm’s operating capability sits in writing, accessible systems, and team-held expertise, versus how much sits in the founder’s head.

Item 8: what percentage of business processes (sales, customer onboarding, delivery, billing, reporting) are documented in accessible SOPs, process documents, or workflow diagrams. Benchmark target: 70 to 80 percent. Typical founder-dependent: under 20 percent. Item 9: is there a customer relationship management system or project management system holding all customer data, communication history, and project status accessible to the team independent of founder access, or does this information live in email inboxes and founder memory.

Item 11: are there written supplier agreements for critical outsourced services (contractors, freelancers, vendors), or do these relationships sit on personal and verbal basis. Item 12: what technical knowledge, industry expertise, or specialised skills reside primarily in the founder’s head rather than documented in team capability or training programmes. This is often the most painful honest assessment.

Financials, billing, and key-person

The fourth cluster covers the founder’s involvement in the financial and operational machinery of the firm. Where the founder personally produces the books, runs the billing, and stands in for every operational continuity gap, the buyer is buying a structure that does not yet exist independently. Four items map the financial reporting side and the formal continuity question.

Item 7: does the firm produce monthly financial statements within 15 days of month-end. Most founder-dependent businesses produce financial statements irregularly, often ad hoc. Item 14: does the founder personally handle billing and customer invoicing, or is this systematised through accounting systems with team members responsible for accuracy.

Item 15: does the founder personally handle customer complaint escalation and resolution, or are there documented escalation procedures and empowered team members. Item 16: does the firm carry key person insurance that would cover business continuity if the founder were unexpectedly unavailable for several months. Most founder-dependent businesses do not. Carrying key person insurance formalises recognition of founder dependency and provides financial buffer if the founder becomes unavailable.

People, retention, and external validation

The fifth cluster covers the strength of the team and the firm’s standing in the wider market. The first two items test whether the team can articulate value independently and whether key employees are likely to remain through ownership transition. The third tests whether the firm has been externally validated, providing the founder with an objective benchmark against which to plan.

Item 10: do the key team members understand the business strategy, competitive positioning, and basis for customer value independently, or do they rely on founder explanation and founder framing. Buyers test this directly during management interviews. Item 19: are there restrictive covenants or non-compete agreements in place for key employees, and has the founder explicitly communicated to key employees that their retention through a potential acquisition is important to business continuity. Most founder-dependent businesses have not explicitly communicated this.

Item 20: has the firm received external validation of its competitive advantage, market positioning, and business value through third-party assessment, business broker valuation, strategic buyer interest, or investor interest. External validation provides objective confirmation that value exists independent of founder involvement, and provides the founder with a benchmark against which to plan.

Closing

The audit is a private exercise. The founder runs it without telling anyone, scores honestly, and uses the result to work the items in sequence. The two-year valuation programme sequences the remediation. This audit produces the personal scorecard that drives the sequencing.

If you would like to walk through your own scoring on the 20-item audit, the conversation is short and specific. Book a conversation.

Sources

  • Section 6 of the foundation research. The 20-item structure is drawn from advisory-firm dependency audit methodology and reflects the questions buyers' diligence teams actually run during transactions in the lower middle market.
  • Exit Planning Institute. "Why Founder Dependency Is the Silent Killer of Enterprise Value." Source for the structural framing of dependency as a transferability and delegation problem. Source.
  • Generational Equity. "Five Ways to Reduce Owner Dependence and Build a Buyer-Ready Business." Source for the management team building, delegation, documentation, and exit-focused building items. Source.
  • Strategic Exit Advisors (2025). Founder Dependency, The Hidden Valuation Killer. Practitioner research on founder-dependent businesses receiving 30 to 50 per cent valuation discount versus systematised peers. Source.
  • Reichheld, F. and Markey, R. (2021). Net Promoter 3.0, Harvard Business Review. The updated framework for advocacy-driven growth and the earned-growth metric for measuring whether the post-delivery experience produces referrals. Source.
  • William Buck (2025). Assessing the Impact of Key Person Risk on Business Valuation. Structured framework for the 10 to 25 per cent key-person discount range applied to SME valuation. Source.
  • Goldratt, E. M. (1984). The Goal, A Process of Ongoing Improvement. The foundational Theory of Constraints text behind diagnosing the real bottleneck before scaling. Source.
  • Robb, A., Fairlie, R. and Robinson, D. (2020). Black and White, Access to Capital among Minority-Owned Startups, NBER Working Paper 28154. SBA-data research on founder financing patterns and succession outcomes. Source.

Frequently asked questions

What does a buyer's dependency audit actually examine?

Ten dimensions, two items each, totalling 20 questions. Revenue generation. Service delivery. Strategic decision-making. Customer relationships. Supplier relationships. Intellectual property. Management team. Financial reporting. Employee retention. Market position. Each item has a defined question and a benchmark answer. Most founder-dependent businesses score below benchmark on the majority of items.

Why bother self-auditing if the buyer is going to run the audit anyway?

Because the buyer's audit happens during diligence, after the indicative offer is on the table. By then the multiple is set and the deal structure is partly drafted. A self-audit done 18 to 24 months earlier produces the prioritisation list for the founder's remediation work and removes the surprises before they appear in the buyer's report.

What is the most common single failure point in the audit?

Founder-driven business development as a percentage of revenue. Most founder-dependent businesses generate 60 to 80 percent of new business through founder direct outreach or founder reputation. The buyer's benchmark for low risk is under 30 percent. This is also one of the longest items to remedy, requiring 18 to 24 months of business development restructuring.

Should founders complete the audit privately or with a broker?

Privately first. The honest internal scoring is the diagnostic. Brokers and M&A advisers are useful for benchmarking against industry norms and for understanding how each item shows up in their specific transaction context, but the founder's own honest scoring is the work that drives the remediation timeline.

This post is general information and education only, not legal, regulatory, financial, or other professional advice. Regulations evolve, fee benchmarks shift, and every situation is different, so please take qualified professional advice before acting on anything you read here. See the Terms of Use for the full position.

Ready to talk it through?

Book a free 30 minute conversation. No pitch, no pressure, just a useful chat about where AI fits in your business.

Book a conversation

Related reading

If any of this sounds familiar, let's talk.

The next step is a conversation. No pitch, no pressure. Just an honest discussion about where you are and whether I can help.

Book a conversation