Private equity · Commercial due diligence · SaaS

GTM Commercial Due Diligence Checklist for SaaS, with Red-Flag Thresholds

Updated October 2026By Joe LaGrutta, Founder, JayOh15 min read
Short answer

GTM commercial due diligence tests whether a SaaS company’s revenue claims survive the systems underneath them. Check four areas: data integrity (does CRM ARR tie to billing), pipeline quality (coverage, aging, stage conversion), attribution (can sourced pipeline be proven) and retention (cohort GRR and NRR). Flag any number that can’t be rebuilt from raw records.

Target · GTM diligence read-out Week 2
CRM ARR vs. billing ARR6.8% gapRed flag
Pipeline coverage (next Q)3.1xWatch
Open opps past close date31%Red flag
Won deals with usable source44%Red flag
Gross revenue retention91%Healthy
NRR, rebuilt by cohort104% (claimed 112%)Watch
3red flags. None kill the deal; all of them belong in the price or the value-creation plan.

Illustrative read-out, not a client

01 · What GTM diligence covers

How is GTM diligence different from financial and commercial due diligence?

Quality of earnings checks the financials. Commercial diligence checks the market. GTM systems diligence checks whether the funnel, pipeline and retention numbers in the CIM come out of the systems the way management says they do.

WorkstreamCore questionMain sourcesTypical outputWhat it misses
Financial QoEAre revenue and EBITDA real and recurring?GL, billing, contracts, bank dataAdjusted EBITDA, revenue qualityWhether the pipeline that produces future revenue is real
Commercial due diligenceIs the market attractive and is the company winning in it?Customer interviews, market data, win/lossMarket sizing, competitive positionWhether the internal funnel data supports the growth plan
GTM systems diligenceCan the funnel, pipeline and retention numbers be rebuilt from raw records?CRM, marketing automation, billing, CS platform exportsRebuilt KPIs, red flags, cost to fixMarket dynamics; it complements the other two
GTM systems diligence also prices the post-close work: if the target needs a CRM rebuild or a billing integration before the value-creation plan can start, that is time and money the deal model should carry.
02 · The checklist

What should a SaaS sales and marketing due diligence checklist include?Thirty-two checks across four areas. Each one has a test you can run on a data export and a red-flag threshold.

Area 1: Data integrity

CheckHow to test itHealthyRed flag
CRM ARR ties to billingJoin CRM accounts to billing customers; compare ARR per customer and in totalWithin 1%Gap over 5%, or no shared customer ID
ARR definition is consistentCompare the CIM’s ARR definition to how the dashboard calculates it (one-time fees, usage, multi-year)Written definition, applied in systemDefinition differs between CIM and dashboard
Duplicate accountsFuzzy-match account names and domainsUnder 5%Over 15%
Required fields populatedShare of open opps with amount, close date, stage, product and owner95%+Under 80%
Field history retainedCheck field history tracking on stage, amount and close dateTracked for 24+ monthsNo history; stages can’t be reconstructed
Customer status matches realityAccounts marked “customer” vs. active subscriptions in billingWithin 2%Over 10% mismatch
Integrations documentedList of connected apps, API users and sync rulesDocumented with ownersUnknown API users writing to core objects
Reporting is system-generatedAsk how the board deck is builtDashboards, no manual editsSpreadsheet assembly with manual overrides

Area 2: Pipeline quality

CheckHow to test itHealthyRed flag
Pipeline coverageQualified pipeline closing next quarter ÷ next-quarter plan3x or moreUnder 2x
Past-due close datesShare of open opps with a close date in the pastUnder 10%Over 25%
Pipeline agingOpen opps older than 2x the median won cycleUnder 15% of valueOver 35% of value
Stage conversion is stableStage-to-stage conversion by quarter, last 8 quartersSwings under 5 ptsSwings over 15 pts or stages redefined
Win rateWon ÷ (won + lost) on qualified opps, trailing 4 quarters20%+Under 12%, or lost deals never closed out
End-of-quarter pull-inShare of quarter’s bookings closed in the final two weeks, plus discount depth on those dealsUnder 40%Over 60% with deeper discounts
Forecast accuracyWeek-6 commit vs. actual bookings, last 4 quartersWithin 10%Missed by 20%+ in 2 of 4 quarters
ConcentrationTop 10 opps as a share of next-quarter pipelineUnder 30%Over 50%

Area 3: Attribution and demand

CheckHow to test itHealthyRed flag
Source captured on won dealsShare of closed-won with an original source that isn’t blank, Direct or Other80%+Under 50%
Source can’t be overwrittenCheck whether original source is locked or overwritten by later touchesLocked at createOverwritten by sync or imports
Lifecycle timestampsLead, MQL, SQL and opp dates stamped on the recordStamped and completeNo timestamps; conversion can’t be rebuilt
Channel mix is realRebuild pipeline by channel from records; compare with the CIMWithin 10% of claimClaimed channel mix can’t be reproduced
CAC by channelSpend by channel ÷ new customers by channel, same periodComputable and stableOnly blended CAC available
Speed to leadMedian time from demo request to first human touchUnder 1 hourOver 24 hours, or not measurable
Database healthEmail bounce rate and share of contacts with no activity in 12 monthsBounce under 2%Bounce over 5%; mostly dormant
DeliverabilitySPF, DKIM and DMARC records; spam complaint rateAll three set; complaints under 0.1%DMARC missing; complaints over 0.3%

Area 4: Retention and expansion

CheckHow to test itHealthyRed flag
Gross revenue retentionRebuild by annual cohort from billing, not from the CS dashboard90%+Under 85%
Net revenue retentionSame cohorts, including expansion110%+Under 100%, or rebuilt NRR 5+ pts below claim
Logo churnCustomers lost ÷ starting customers, trailing 12 monthsUnder 10%Over 20%
Churn reasons capturedShare of churned accounts with a reason code from a fixed list90%+Under 50%, or free text only
Renewal visibilityRenewals in the next 180 days with an owner and a renewal opp95%+Renewals tracked only in billing
Expansion is repeatableExpansion ARR by type (seats, upsell, price) and by rep or CSMBroad-basedOver 50% from 5 accounts or one price increase
Revenue concentrationTop 10 customers as a share of ARRUnder 25%Over 40%
Health signals in CRMUsage, support and engagement data available on the accountHealth score in useNo usage data visible to sales or CS
Thresholds are JayOh guidance for B2B SaaS between $10M and $75M ARR, used as diligence triggers, not survey statistics. Adjust for enterprise (longer cycles, higher concentration) and SMB (higher logo churn) motions.
03 · Red flags

Which GTM red flags should change the price or the plan?

Not every red flag is a deal issue. Sort each one into a bucket: price it, structure it, or fix it in the first 100 days.

Price itThe number in the model is wrong. Rebuilt NRR or ARR comes in below the claim, or the pipeline needed for year-one growth doesn’t exist.Examples: ARR gap over 5%, rebuilt NRR 5+ pts below claim, coverage under 2x
Structure itThe number may be right, but it depends on a few customers, deals or people. Protect it with an earn-out, escrow or retention terms.Examples: top 10 customers over 40% of ARR, over 60% of bookings in the last two weeks
Fix it in 100 daysThe business is fine, the system isn’t. Put the fix and its cost in the value-creation plan.Examples: source missing on won deals, no lifecycle timestamps, manual board deck

Fixes in the third bucket map straight onto the GTM 100-day plan. To trace any single number end to end, use the KPI Walkback Framework.

04 · Interactive scored diligence checklist

Score the target’s GTM systemMark the 20 highest-signal checks as Pass, Watch or Fail. The score is weighted by area and lists every red flag with its threshold. Answers stay in this browser.

–/100 GTM diligence scoreNot scored

Red flags

    What it means for the deal

    Mark at least five checks to see a read-out.

    Weights: data integrity 30%, pipeline 25%, attribution 15%, retention 30%. Pass = full credit, Watch = half, Fail or unmarked = none. Unmarked checks are listed as unverified. JayOh guidance, not an audit opinion.

    05 · Data request list

    What should you request from the data room for GTM diligence?

    Ask for raw exports, not dashboards. Every KPI on this page can be rebuilt from these twelve files.

    01Opportunity exportAll opps, 36 months, with stage history, amount history, close date history, source, owner and loss reason.
    02Account and contact exportWith lifecycle stage timestamps, original source and customer status.
    03Billing subscription exportCustomer ID, product, MRR/ARR, start, end, renewal date, changes by month.
    04Customer ID crosswalkThe mapping between CRM account IDs and billing customer IDs. If it doesn’t exist, that is a finding.
    05Metric definitionsHow ARR, pipeline, MQL, churn and NRR are calculated today, in writing.
    06Board decks and forecastsLast 8 quarters of board packs and the weekly forecast submissions behind them.
    07Marketing spend by channelMonthly, 24 months, matched to the channel names used in the CRM.
    08Churn and contraction logWith reason codes, dates and ARR impact.
    09Tech stack inventoryEvery GTM tool, contract value, renewal date and owner.
    10Integration mapConnected apps, API users and sync rules for CRM and marketing automation.
    11Comp plans and quotasTwo years of plans, quota attainment by rep, and how bookings are credited.
    12Read-only system accessA read-only CRM user for a few days saves weeks of export back-and-forth.
    06 · Two-week plan

    How long does GTM due diligence take?

    With exports in hand, a focused GTM systems review takes about two weeks: one week to rebuild the numbers, one to test them and write the read-out.

    DaysWorkOutput
    1–2Data request, read-only access, interviews with RevOps, sales and marketing leads on how numbers are producedData inventory and definition gaps
    3–5Rebuild ARR and the customer crosswalk; rebuild cohorts for GRR and NRR from billingReconciled ARR and retention
    6–8Pipeline tests: coverage, aging, past-due, stage conversion, forecast accuracy, pull-inPipeline quality scorecard
    9–10Attribution and demand tests: source capture, lifecycle timestamps, channel mix, CAC, deliverabilityDemand engine findings
    11–12Systems review: CRM, MAP, CPQ/billing, integrations and stack costStack risk and cost-to-fix estimate
    13–14Red-flag triage (price it / structure it / fix it) and read-out to the deal teamDiligence memo and draft 100-day GTM plan
    Buy-side and sell-side

    JayOh runs both sides of GTM diligence.

    Buy-side, we rebuild the numbers and price the fixes. Sell-side, our diligence-readiness package cleans ARR reporting, reconciles cohorts and documents the systems so they hold up in the data room.

    Buy-sideTwo-week GTM systems reviewRebuilt ARR, pipeline and retention, a red-flag memo sorted into price / structure / fix, and a draft 100-day GTM plan.
    Sell-sideDiligence-readiness in 60 daysClean ARR reporting, defensible funnel metrics, reconciled cohort data and documented systems before the data room opens.
    PortfolioOne audit framework for every dealA repeatable RevOps audit framework that firms can use in diligence and again for operational improvement after close.
    Scope a GTM diligence reviewTell us the deal timeline. We’ll scope against it.
    07 · FAQ

    GTM due diligence: common questions

    What is GTM commercial due diligence?
    It is the part of diligence that tests whether a company's sales, marketing and customer success numbers can be rebuilt from the systems that produce them. It covers data integrity, pipeline quality, attribution and retention, and complements financial quality of earnings and market-focused commercial due diligence.
    What are the biggest GTM red flags in SaaS due diligence?
    A gap of more than 5% between CRM ARR and billing ARR, net revenue retention that comes in 5 or more points below the claim when rebuilt by cohort, pipeline coverage under 2x for the next quarter, more than 25% of open opportunities with past-due close dates, and fewer than half of closed-won deals with a usable original source.
    How long does GTM due diligence take?
    With raw exports and read-only CRM access, a focused GTM systems review takes about two weeks: roughly one week to rebuild ARR, cohorts and pipeline metrics, and one week to test attribution, review the stack and write the red-flag memo.
    What data should we request for sales and marketing diligence?
    Request raw exports rather than dashboards: 36 months of opportunities with stage, amount and close-date history; accounts and contacts with lifecycle timestamps; the billing subscription export; the CRM-to-billing customer ID crosswalk; written metric definitions; board decks and forecasts; marketing spend by channel; a churn log with reason codes; the tech stack inventory; and read-only CRM access.
    Should a GTM red flag change the purchase price?
    Only if it changes a number in the model. Sort each finding into price it (the model's ARR, NRR or pipeline is wrong), structure it (the number depends on a few customers, deals or people) or fix it in the first 100 days (the business is fine but the system is not). Most system findings belong in the value-creation plan.
    How do I rebuild net revenue retention during diligence?
    Use the billing system, not the CS dashboard. Group customers into annual cohorts by start date, take starting ARR for each cohort, then measure the same customers 12 months later including expansion, contraction and churn. Compare the result with the claimed NRR and explain any gap.
    Does JayOh do sell-side diligence preparation?
    Yes. The diligence-readiness package cleans ARR reporting, makes funnel metrics defensible, reconciles cohort data and documents the systems in about 60 days, so the numbers hold up when the data room opens. Buy-side, we run a two-week GTM systems review.
    Before the data room closes

    Know which numbers will hold up, and what the rest will cost to fix.

    Book a call with JayOhFounded 2016 · HubSpot Platinum Partner · Salesforce, Clay and Anthropic partner
    100+GTM engagements since 2016
    75+CRM migrations delivered
    180portfolio companies supported in one venture portfolio
    2,060GTM plays in our playbook database