Digital Due Diligence: What Investors Miss Before Acquisition
Acquirers scrutinise financials, legal, and operations. They almost never audit digital infrastructure — and it costs them millions post-close.
Graeme is the founder and principal consultant at Strathmark Consulting. With over a decade of experience across agency, contracting, and in-house roles for major international brands, he advises leadership teams on digital strategy, agency oversight, and marketing infrastructure across the UK, US, UAE, and Europe.
The Blind Spot in M&A
When a private equity firm or strategic acquirer evaluates a target company, the due diligence process is exhaustive. Financial models are stress-tested. Legal liabilities are catalogued. Operational capacity is evaluated. Management teams are interviewed. Supplier contracts are reviewed.
But digital infrastructure — the websites, marketing systems, analytics platforms, and search visibility that drive a meaningful share of revenue for most modern businesses — is almost never audited with the same rigour. It might get a cursory glance from a junior associate. It might be mentioned in a slide as "strong online presence." It is almost never subjected to the kind of forensic, technical evaluation that could reveal six- or seven-figure liabilities.
This is a material oversight. And it costs acquirers real money.
Why Digital Assets Deserve Scrutiny
Consider what a typical mid-market company's digital footprint actually represents:
- Customer acquisition engine: For many businesses, 30–60% of new customers originate from digital channels — organic search, paid search, social media, email. If these channels are underperforming or structurally fragile, revenue projections built on current trajectory are unreliable.
- Brand perception: The website is often the first and most frequent touchpoint for customers, partners, and talent. A site that is technically broken, visually dated, or functionally hostile to users signals organisational decline in ways that spreadsheets do not capture.
- Technical debt: Marketing technology stacks accumulate debt just like codebases. Misconfigured analytics, orphaned tracking scripts, broken integrations, and redundant tool subscriptions create ongoing costs and operational friction that new owners inherit.
The Seven Areas to Audit
1. Organic Search Dependency and Fragility
Pull the target's Google Search Console data (or estimate from third-party tools like Ahrefs). Determine what percentage of total revenue is attributable to organic search. Then ask: how concentrated is that traffic?
If 40% of organic traffic comes from 5 keywords, the business has a concentration risk. A single Google algorithm update could erode that traffic overnight. If organic traffic has been declining for 6+ months, there is a structural problem that will require investment to fix post-acquisition.
This is not theoretical. I have seen acquisitions where organic traffic dropped 40% within 6 months of close due to pre-existing technical issues that were never identified during due diligence.
2. Paid Media Efficiency
Request access to the target's Google Ads and Meta Ads accounts. Audit the true cost per acquisition — not the CPA reported by the agency, but the CPA calculated from actual revenue data. Many companies report CPAs based on inflated conversion definitions that include newsletter signups, page views, or micro-conversions.
If the true CPA is significantly higher than reported, the marketing budget has been underperforming. The revenue model may be built on assumptions about customer acquisition costs that are materially wrong.
3. Analytics Integrity
Audit the analytics implementation. Is GA4 configured correctly? Are conversions tracking real commercial actions or vanity events? Is there a clean integration between analytics, CRM, and revenue data?
If the analytics data is unreliable, every marketing decision the business has made — and every projection you build on historical data — is built on a flawed foundation. This is more common than you might expect. In my experience, roughly 60% of enterprise analytics implementations have material configuration errors.
4. Website Technical Health
Run a full technical crawl of the website. Check for:
- Rendering dependencies that affect search engine indexing
- Site speed and Core Web Vitals compliance
- Mobile usability issues
- Broken internal links and orphaned pages
- Security vulnerabilities (SSL configuration, mixed content, outdated dependencies)
Each of these represents a cost that will need to be addressed post-acquisition. Quantify that cost and factor it into your valuation.
5. Content Asset Valuation
Content is often listed as an asset in marketing due diligence, but rarely valued correctly. A blog with 500 posts sounds impressive. But if 480 of those posts receive zero organic traffic, they are not assets — they are liabilities. They consume crawl budget, dilute topical authority, and create maintenance overhead.
Evaluate content by performance: traffic, conversions, and revenue attribution. The 20 pieces that drive 80% of value are genuine assets. The rest may need to be pruned, consolidated, or rewritten.
6. Marketing Technology Stack
Audit every marketing technology tool the business pays for. Common findings: redundant tools performing the same function, enterprise-tier subscriptions for tools used at a fraction of capacity, integrations that are broken or abandoned, and contracts with unfavourable renewal terms.
The martech stack for a mid-market company typically costs £50,000–£200,000 annually. In my experience, 20–40% of that spend is waste — tools that nobody uses, duplicates that nobody audited, and integrations that nobody maintains.
7. Contractual and IP Risks
Review all third-party contracts related to digital: agency agreements, freelancer arrangements, software licences, domain registrations, hosting contracts. Key questions:
- Who owns the ad account data and creative assets?
- Are there non-compete or exclusivity clauses in agency contracts?
- Who controls the domain registrations and DNS?
- Are there pending SEO penalties or manual actions in Search Console?
- Does the company own its marketing automation workflows and email lists, or are they locked in a vendor platform?
Quantifying the Risk
The purpose of digital due diligence is not to kill deals. It is to price them correctly. Every finding can be quantified as either a cost (remediation required post-close) or a risk (probability-weighted impact on future revenue).
A site with declining organic traffic and no clear cause represents a risk to revenue projections. An ad account with inflated CPAs represents a cost to bring performance to sustainable levels. A broken analytics implementation represents a cost to rebuild, plus a risk that historical data used in valuation is unreliable.
In aggregate, digital issues in an acquisition target typically represent 3–8% of the enterprise value in hidden costs and risks. On a £20 million deal, that is £600K–£1.6M. More than enough to justify a proper audit — and more than enough to negotiate a better price if issues are found.
The acquirers who consistently get better returns on digital-dependent businesses are the ones who audit digital infrastructure with the same rigour they apply to financial statements. The rest discover the problems after they have already paid for them.
Need a second opinion?
We review infrastructure and spend for select clients.