MSP Acquisition Due Diligence: What to Check Before Buying an MSP
The Australian MSP market is consolidating rapidly. Private equity firms, larger MSPs, and ambitious entrepreneurs are all acquiring smaller providers. But buying an MSP without proper due diligence is one of the fastest ways to lose money in the IT services industry.
Here is a comprehensive due diligence framework for evaluating an MSP acquisition target.
Why Due Diligence Matters
MSP acquisitions look simple on the surface: you buy the contracts, inherit the clients, and collect the monthly fees. But the reality is far more complex. MSP businesses are built on relationships, technology, and people — all of which can deteriorate rapidly if the acquisition is not managed carefully.
The most common causes of failed MSP acquisitions:
- Client exodus: Clients leave because the acquiring MSP changes service quality or communication
- Key staff departure: Engineers and account managers take their knowledge and relationships elsewhere
- Technical surprises: Hidden infrastructure problems, unpatched systems, or undocumented configurations
- Contract traps: Short-term contracts, unfavourable terms, or auto-renewal clauses that benefit the wrong party
- Cultural mismatch: Different service philosophies create friction with clients and staff
Proper due diligence identifies these risks before you sign the deal.
Financial Due Diligence
Revenue Analysis
- Recurring vs non-recurring revenue: What percentage is monthly recurring (MRR) vs project/one-off work? Target: 70%+ recurring revenue.
- Revenue concentration: What percentage of revenue comes from the top 5 clients? If one client represents more than 15% of revenue, that is a concentration risk.
- Revenue growth trend: Is revenue growing, flat, or declining? A declining MSP is a red flag.
- Client churn rate: What percentage of clients leave annually? Industry average is 5–10%. Above 15% is concerning.
- Pricing trends: Are fees increasing or are clients getting discounts at renewal?
Profitability Analysis
- EBITDA margin: Healthy MSPs have EBITDA margins of 10–20%. Below 10% suggests operational inefficiency.
- Gross margin by service: Which services are profitable and which are loss leaders?
- Labour utilisation: What percentage of technician time is billable/utilised? Target: 70–80%.
- Owner compensation: Is the owner extracting excessive salary or distributions that inflate the reported profit?
Balance Sheet Review
- Accounts receivable: How many days overdue are client payments? Aging receivables indicate collection problems.
- Deferred revenue: Are there prepaid contracts that create future obligations?
- Vendor payables: Are there unpaid vendor bills (software licences, hardware, tools)?
- Assets and liabilities: What physical and intangible assets exist? What liabilities are outstanding?
See the MSP Financial Breakdown for detailed valuation methodology.
Client Due Diligence
Client Portfolio Analysis
- Number of clients: Total active clients and their size distribution
- Contract terms: Average contract length, renewal dates, and notice periods
- Contract value: Average monthly revenue per client
- Client satisfaction: Net Promoter Scores (NPS) or client feedback if available
- Client tenure: How long have clients been with the MSP?
Client Concentration Risk
- Top client dependency: If your largest client represents more than 15% of revenue, you are at risk.
- Industry concentration: If most clients are in one industry, a sector downturn could hit hard.
- Geographic concentration: Clients clustered in one area create local economic risk.
Client Retention Strategy
Before closing the deal, plan how you will communicate with clients:
- Pre-announcement preparation: Draft client communication before the deal closes
- Day-one messaging: Clear, confident communication about service continuity
- 90-day integration plan: How you will merge operations without disruption
- Retention incentives: Consider offering contract extensions or loyalty incentives to key clients
Technical Due Diligence
Infrastructure Assessment
- Server environment: Age, condition, and documentation of all servers
- Network infrastructure: Firewall models, switch configurations, wireless coverage
- Cloud services: Microsoft 365 tenant configuration, Azure subscriptions, other cloud services
- RMM/PSA platform: What tools do they use? How well-configured are they?
- Backup and DR: Solution, configuration, and last test date
- Security posture: Essential 8 maturity, MFA coverage, EDR deployment, patch compliance
Documentation Quality
Request and review:
- Network diagrams (do they exist? are they accurate?)
- Asset inventory (is it complete and current?)
- Runbooks and SOPs (are they documented?)
- Password management (how are credentials stored and managed?)
- Vendor contracts (what commitments exist?)
Poor documentation is one of the most common and costly findings in MSP due diligence. See the MSP Technical Documentation guide for what good documentation looks like.
Technical Debt Assessment
- Age of infrastructure: How old are the servers, switches, and firewalls?
- End-of-life equipment: What is running on unsupported hardware or software?
- Patch compliance: What percentage of systems are patched?
- Security gaps: What Essential 8 controls are missing?
- Migration backlog: Are there pending migrations (on-prem to cloud, legacy app upgrades)?
Technical debt is the hidden cost of an MSP acquisition. Budget for remediation.
People Due Diligence
Team Assessment
- Staff count and roles: How many technicians, account managers, and support staff?
- Key person dependency: Is the business dependent on one or two key individuals?
- Employment contracts: Review terms, non-compete clauses, and notice periods
- Salary benchmarking: Are staff paid at market rates? (See the Salary Guide 2026)
- Cultural assessment: How does the team's work culture compare to yours?
Retention Risk
- Flight risk analysis: Which key staff are most likely to leave?
- Retention incentives: Budget for retention bonuses for critical team members
- Transition plan: Plan for knowledge transfer before key staff depart
- Non-compete clauses: Do existing contracts prevent staff from competing?
The MSP Employee Retention article covers retention strategies in detail.
Legal and Contractual Due Diligence
Contract Review
- Master Service Agreements: Review all active MSAs for terms, liabilities, and exit clauses
- Client contracts: Identify any unfavourable terms or unusual commitments
- Vendor contracts: Review agreements with tool vendors, cloud providers, and subcontractors
- Employment contracts: Review all staff contracts for terms, non-competes, and IP provisions
Compliance and Regulatory
- Essential 8 compliance: Is the MSP meeting baseline cybersecurity requirements?
- Privacy Act obligations: Are they handling client data in compliance with Australian Privacy Principles?
- Insurance coverage: Verify all insurance policies (cyber, professional indemnity, public liability)
- ABN/ACN status: Verify the business is in good standing with the ATO
- Outstanding disputes: Check for any pending legal actions or complaints
Intellectual Property
- Proprietary tools or scripts: Does the MSP have any custom-developed tools?
- Client data ownership: Ensure all client data is clearly owned by the client
- Branding and marketing materials: What intellectual property comes with the acquisition?
The Due Diligence Checklist
| Category | Key Items | Status |
|---|---|---|
| Financial | Revenue analysis, profitability, balance sheet | ☐ |
| Clients | Portfolio analysis, concentration risk, retention plan | ☐ |
| Technical | Infrastructure assessment, documentation, tech debt | ☐ |
| People | Team assessment, retention risk, cultural fit | ☐ |
| Legal | Contract review, compliance, IP | ☐ |
| Integration | 100-day plan, communication strategy, system merging | ☐ |
After the Deal: Integration Planning
Due diligence does not end at closing. Plan your first 100 days:
- Days 1–30: Announce acquisition to clients and staff. Stabilise operations. No major changes.
- Days 31–60: Begin integrating systems and processes. Address critical technical debt.
- Days 61–100: Optimise operations. Cross-train staff. Evaluate client portfolio.
The MSP Client Onboarding Process guide provides a framework for integrating new clients.
Related Guides
- MSP Financial Breakdown — Understanding MSP valuations
- Private Equity Playbook — PE's role in MSP acquisitions
- MSP Due Diligence Checklist — Detailed checklist
- Salary Guide 2026 — Staff cost benchmarking
- MSP Employee Retention — Retaining acquired staff
Was this helpful?