How Long Does M&A Due Diligence Take?
Timelines range from three weeks for a small acquisition to nine months for a regulated target, and the difference is driven far more by data room quality and deal complexity than by a fixed calendar. This guide breaks down realistic ranges by deal size and by workstream, what actually shortens the process, what reliably extends it, and what it costs.
Typical timelines by deal size
The honest answer is a range, because timeline is driven far more by deal complexity and seller readiness than by a fixed calendar. These are the ranges that hold across most transactions once a signed letter of intent starts the clock.
| Deal profile | Typical period | Primary driver of the range |
|---|---|---|
| Small business (under $10m) | 3–6 weeks | Seller record quality; single-owner availability for management sessions |
| Lower mid-market ($10m–$50m) | 5–8 weeks | Depth of QoE work; number of material contracts to review |
| Core mid-market ($50m–$250m) | 6–12 weeks | Multi-jurisdiction tax and employment; commercial diligence depth |
| Large or complex | 10–16 weeks | Carve-out complexity; multiple specialist workstreams running in parallel |
| Regulated (banking, insurance, healthcare, defence) | 3–9 months | Regulatory approval timeline, which usually exceeds the commercial diligence period |
Two things distort these ranges in practice. A rushed, competitive auction process can compress even a mid-market deal into three or four weeks by running workstreams in parallel with less iteration — at the cost of depth. And a poorly organised data room can extend any of these ranges by fifty percent or more without the underlying business being any more complex.
How long each workstream actually takes
For a typical mid-market deal, workstreams run largely in parallel rather than in sequence, but each has its own critical path.
| Workstream | Typical duration | What extends it |
|---|---|---|
| Financial (QoE) | 3–5 weeks | Poor-quality management accounts; unresolved questions requiring follow-up data |
| Legal | 3–6 weeks | Contract volume; litigation complexity; multi-entity corporate structure |
| Tax | 2–4 weeks | Multi-jurisdiction exposure; open audits or unresolved assessments |
| Commercial | 2–4 weeks | Customer reference calls requiring seller coordination and scheduling |
| Technology / IT | 2–4 weeks | Undocumented architecture; a systems inventory that has to be reconstructed |
| Environmental (where applicable) | 4–8 weeks | Phase I assessment lead time; site access scheduling |
| Regulatory approval | 4 weeks to 6+ months | The nature of the regulator and whether the deal triggers a substantive review |
What actually shortens the timeline
- A well-organised data room from day one. The single largest controllable variable. A complete, indexed room with native file formats routinely saves two to four weeks against a room built in tranches.
- Sell-side (vendor) diligence. A seller-commissioned QoE and legal review, shared with the buyer up front, compresses the buyer's own confirmatory work meaningfully — though it does not replace it.
- A complete information request list issued once. Sending requests in waves as the buyer thinks of them, rather than as a single comprehensive list, is one of the most common self-inflicted delays.
- Screening large document sets before assigning human review. Where the data room is large, scoring documents for risk signals before analysts read them lets the team start with a ranked queue rather than reading sequentially — see how AI due diligence works.
- Parallel rather than sequential workstreams. Running legal, tax, commercial and technical diligence concurrently rather than one after another is standard practice and the biggest structural lever available.
What reliably extends it
- A material finding requiring a follow-up workstream. A financial irregularity found in week two can trigger a forensic accounting scope that was not in the original plan.
- Regulatory approval, where required. Merger control clearance or a prudential regulator's review routinely becomes the binding constraint on closing, independent of how quickly commercial diligence finishes.
- Management availability. In owner-managed businesses, diligence competes directly with the target's daily operations for the same small group of people.
- Multi-jurisdiction complexity. Each additional jurisdiction adds its own tax, employment and regulatory review, and these rarely run at the same pace.
- Renegotiation after a finding. A material issue found late in the process often triggers a second round of price or structure negotiation, effectively restarting part of the clock.
What it costs
Cost scales with scope rather than with deal value, and third-party advisory fees dominate: accountants for QoE, counsel for legal, and specialists for tax, environmental or technology work as required. As a rough guide, diligence costs for a mid-market transaction typically run from the low hundreds of thousands of dollars into the low millions for the largest, most complex deals, driven primarily by advisor hours rather than by any fixed fee schedule.
The most common false economy is compressing the QoE or legal scope to save fees on a deal where a missed finding would cost many multiples of what was saved. The workstreams most safely compressed under time or budget pressure are the ones addressing quantifiable, priceable risk; the ones least safely compressed are title, sanctions and regulatory exposure, where a missed finding is not a pricing error but a transaction risk. See the full due diligence checklist for what each workstream actually covers.
Frequently asked questions
How long does M&A due diligence typically take?
For a small business under $10m, three to six weeks. For a lower mid-market deal ($10m-$50m), five to eight weeks. For core mid-market deals ($50m-$250m), six to twelve weeks. For large or complex transactions, ten to sixteen weeks. Regulated targets such as banks or insurers typically add three to nine months on top for regulatory approval, which usually exceeds the commercial diligence period entirely.
What is the single biggest factor in due diligence timeline?
The organisation and completeness of the seller's data room. A well-indexed room with native file formats and a complete information request list answered in one pass routinely saves two to four weeks against a room populated in tranches with scanned documents and incomplete responses.
Does due diligence run in parallel or in sequence?
In parallel wherever possible. Financial, legal, tax, commercial and technical diligence typically run concurrently rather than sequentially, coordinated by the deal lead. Running them in sequence rather than parallel is one of the most common avoidable causes of a longer-than-necessary process.
Why does regulatory approval take longer than commercial diligence?
Regulatory review, whether merger control or a prudential regulator's approval of a bank or insurance acquisition, follows the regulator's own statutory or administrative timeline rather than the deal team's. It frequently becomes the binding constraint on closing even after commercial diligence itself is complete, which is why regulated-sector transactions carry the widest timeline ranges.
Sources
Primary sources for the statutory figures cited on this page. Thresholds and timelines change — verify current requirements with the relevant agency before relying on them.
- Hart-Scott-Rodino Antitrust Improvements Act, 15 U.S.C. § 18a — premerger notification to the Federal Trade Commission and the Antitrust Division of the Department of Justice, the statutory waiting period, and the effect of a request for additional information (a “second request”) on that period.
- Bank Merger Act, 12 U.S.C. § 1828(c) — the responsible agency for each charter type, the statutory factors the agency must consider (including competition, financial and managerial resources, convenience and needs, financial stability, and effectiveness in combatting money laundering), and the post-approval waiting period before consummation.