Tech Due Diligence Process

Understanding what happens during a tech DD engagement helps you plan the deal timeline and set expectations with the target company. Here’s how we work.

Our Process: Step by Step

1. Scoping Call (Day 0)

We start with a 30-minute call to understand:

• The deal context (acquisition, investment, pre-fundraise)
• The target company’s technology profile
• Your specific concerns or areas of focus
• Timeline and urgency

Based on this, we propose a scope and timeline tailored to the engagement.

2. Document & Access Collection (Days 1-2)

We request access to:

• Source code repositories (read-only)
• Cloud infrastructure dashboards
• Architecture documentation (if available)
• CI/CD pipelines and deployment logs
• Any existing technical documentation

We work under NDA and can sign the target’s standard confidentiality agreements.

3. Technical Review (Days 3-8)

This is the core of the assessment:

• Automated analysis - Code quality metrics, dependency scanning, security vulnerability detection
• Manual code review - Architecture evaluation, design pattern assessment, critical path analysis
• Infrastructure review - Cloud setup, hosting costs, security configuration, monitoring
• Team interviews - 1-2 sessions with the engineering team (collaborative, not adversarial)

4. Report Drafting (Days 9-10)

We compile our findings into a structured report:

• Executive summary with deal-relevant findings
• Detailed technical assessment across all dimensions
• Risk matrix with severity and likelihood ratings
• Quantified technical debt with remediation estimates
• Recommendations and post-acquisition priorities

5. Delivery & Walkthrough (Day 10-11)

We deliver the report and walk you through the key findings in a call. This is where we answer questions, provide context, and discuss implications for the deal.

Timeline Options

Scope	Duration	Best For
Express Review	3-5 days	Early-stage startups, time-sensitive deals
Standard Assessment	1-2 weeks	Most acquisitions and investments
Comprehensive DD	2-3 weeks	Large platforms, complex architectures

What You Get

Every engagement includes:

• Written report - Structured, actionable, designed for investment committees and boards
• Risk assessment - Categorized findings with severity ratings
• Technical debt quantification - Estimated effort and cost to remediate
• Post-acquisition roadmap - Prioritized recommendations for the first 100 days
• Walkthrough session - Live discussion of findings and implications

Working With the Target

We approach every engagement professionally and respectfully. Our goal is to assess, not to alarm. We work collaboratively with engineering teams and maintain confidentiality throughout the process.

The target company’s team is typically relieved to work with experienced engineers who understand their challenges - not auditors who are looking for gotchas.

Get Started

Ready to start? See our cost guide for pricing, or review the checklist to understand what we cover. If you’re new to tech DD, start with our main overview for context.