Most acquisition due diligence starts with financials.
Revenue. Margins. Customer concentration. Growth rates. Cash flow.
But somewhere inside a virtual data room sits another source of information that can materially change how you look at the deal: the company’s contracts.
Customer agreements, supplier contracts, leases, licensing agreements, employment arrangements, NDAs, partnership agreements and amendments often contain risks and obligations that are not immediately visible in a spreadsheet.
That is why Contract Repository Analysis should be an important part of any acquisition due diligence exercise. The challenge, of course, is scale.
A company may have hundreds or thousands of agreements accumulated over many years. Some will be properly organized. Others will be sitting in folders with names such as “Final,” “Final_v2,” or the always-dangerous “Final_Signed_Latest.”
Before an acquisition closes, the objective is not simply to count contracts. It is to understand what those contracts collectively mean for the acquiring company.
Here is the checklist I would use.
-
First, Understand What Is Actually in the Repository
Start with the basics. How many contracts exist? What types of agreements are they? Are executed copies available? Are amendments linked to their original agreements?
This sounds straightforward, but contract repositories are rarely as clean as people expect.
There may be duplicate agreements, unsigned versions, missing exhibits or amendments stored separately from their parent contracts.
A good contract management repository should allow the diligence team to classify agreements and establish a reliable inventory before deeper analysis begins.
At minimum, identify:
- Contract type
- Counterparty
- Effective date
- Expiration date
- Contract value
- Business owner
- Governing law
- Contract status
- Related amendments
Without this foundation, every subsequent analysis becomes less reliable.
-
Identify Change-of-Control Provisions
This is one of the first areas I would examine in an acquisition. Some contracts contain provisions requiring notification, consent or even termination when ownership of the company changes.
Imagine acquiring a business primarily because of its ten largest customers and discovering that several major contracts allow those customers to terminate following a change of control.
That is not a minor contractual issue. It can directly affect the economics of the transaction.
During a Contract Audit, identify agreements containing:
- Change-of-control clauses
- Assignment restrictions
- Consent requirements
- Mandatory notifications
- Termination rights triggered by acquisition
The important question is not merely whether these clauses exist, but which commercially significant contracts contain them.
-
Look Closely at Customer Revenue
The next step is connecting contracts to revenue. Management may report $50 million in annual revenue, but the contract repository can tell you how secure that revenue actually is.
Review major customer agreements for renewal provisions, termination rights, pricing commitments and minimum purchase obligations. For example, two customers may each generate $2 million annually. Customer A may be locked into a three-year agreement with minimum commitments. Customer B may have the right to terminate for convenience with 30 days’ notice.
From an accounting perspective, both may currently represent $2 million of revenue. From an acquisition risk perspective, they are very different. A strong contract repository tool should help the diligence team identify these differences across the portfolio rather than reviewing each contract manually.
-
Review Termination and Renewal Exposure
Contract expiry dates alone do not tell the complete story. Some agreements automatically renew unless notice is provided 60 or 90 days before expiration. Others expire automatically. Some customers can terminate for convenience while others require cause.
This becomes particularly important when analysing the acquired company’s future revenue and supplier commitments.
Your repository analysis should identify:
- Contracts expiring within 30, 60, 90 and 180 days
- Automatic renewal provisions
- Notice periods
- Termination-for-convenience rights
- Termination-for-cause provisions
- Early termination fees
This information should ideally be viewed at portfolio level rather than contract by contract.
-
Analyze Liability and Indemnification
One contract containing unusually broad liability may be manageable. Fifty of them may represent a material acquisition risk. The diligence team should examine whether the target company has consistently followed its preferred legal positions or regularly accepted aggressive customer terms.
Look for provisions involving unlimited liability, uncapped indemnification, consequential damages, intellectual property claims, cybersecurity incidents and regulatory exposure. This is where AI-based Contract Repository Analysis becomes particularly useful. Instead of relying entirely on manual review, AI can identify clauses across thousands of agreements, group similar provisions and surface contractual outliers requiring legal attention.
The lawyer can then focus on the agreements where the risk actually exists.
-
Check Data Protection and Security Commitments
Technology companies increasingly make detailed contractual commitments around privacy, information security and data processing. These obligations should be carefully reviewed during acquisition diligence. A customer contract might require specific security certifications, breach notification periods, data residency requirements or cybersecurity controls.
The acquiring company needs to know whether these commitments can continue to be met after the transaction. Look particularly at Data Processing Agreements, security schedules and contractual commitments relating to GDPR, CCPA or other applicable privacy requirements.
-
Find Obligations That Survive the Acquisition
Contracts contain more than rights. They contain obligations. The acquired company may have committed to service levels, customer credits, implementation milestones, volume discounts, rebates, exclusivity arrangements or future pricing protections.
Individually, these commitments may appear manageable. Across an entire portfolio, they can create meaningful financial exposure. Repository analysis should therefore identify not only legal risk but also operational and financial obligations that the acquiring organization will inherit.
-
Identify Missing Contracts and Documentation Gaps
One of the most valuable findings from a contract review can sometimes be what is missing. If management says there are 500 active customer relationships but only 420 executed contracts are available, that requires investigation. Similarly, missing amendments, unsigned agreements or incomplete documentation can create uncertainty around contractual rights.
The best contract repository is therefore not simply the system with the largest number of documents. It is the repository that allows the organization to establish a trusted contractual record. From Contract Review to Acquisition Intelligence
Traditionally, acquisition contract diligence meant assembling a large team of lawyers and manually reviewing agreements based on predefined criteria. That approach is still necessary for important contracts.
What is changing is the way the first level of analysis can be performed. AI can classify thousands of documents, extract key metadata, identify clauses, detect unusual provisions, establish parent-child relationships between agreements and amendments, and create portfolio-level insights.
This allows legal and transaction teams to spend more time investigating material issues and less time searching through PDFs. For me, that is the real objective of Contract Repository Analysis before an acquisition. You are not simply organizing documents.
You are trying to answer a much more important question:
What contractual rights, risks, revenue and obligations are we actually acquiring? The earlier you can answer that question, the fewer surprises you are likely to discover after the deal closes.
Frequently Asked Questions
- What is Contract Repository Analysis?
Contract Repository Analysis is the process of reviewing an organization’s entire contract portfolio to identify important metadata, rights, obligations, risks, expirations and commercial commitments.
- Why is contract analysis important before an acquisition?
Contracts can reveal risks that may not appear in financial statements, including termination rights, change-of-control provisions, liabilities, customer obligations and future financial commitments.
- What contracts should be reviewed during acquisition due diligence?
The review should generally cover major customer contracts, supplier agreements, technology licenses, leases, partnership agreements, employment-related agreements and other contracts that create material rights or obligations.
- What is a contract repository tool?
A contract repository tool provides a centralized location for storing, organizing, searching and analyzing contracts and related documents such as amendments and exhibits.
- How is a Contract Audit different from financial due diligence?
Financial due diligence analyzes the financial performance and condition of the business. A Contract Audit examines the contractual arrangements supporting that business and the obligations or risks associated with them.
- Can AI analyze thousands of contracts during an acquisition?
Yes. AI can help classify agreements, extract metadata, identify clauses and surface potential risks across large contract repositories. Material findings should still be reviewed by the appropriate legal or business experts.
- What are the most important clauses to review during an acquisition?
Change of control, assignment, termination, renewal, liability, indemnification, pricing, exclusivity, intellectual property, data protection and service obligations are typically among the most important areas.
- What makes the best contract repository for due diligence?
The best contract repository should provide reliable document organization, metadata extraction, search, parent-child contract relationships, clause analysis and portfolio-level reporting rather than simply functioning as document storage.
- Should every contract receive the same level of review?
Usually not. Contracts can be prioritized based on factors such as value, counterparty importance, risk, jurisdiction and strategic significance. AI can help identify which agreements deserve deeper manual review.
- What should happen after the acquisition is completed?
The analyzed repository should become part of the post-acquisition operating model. Critical obligations, renewals, risks and commitments should be assigned to appropriate owners and continuously monitored rather than leaving the diligence analysis as a one-time exercise.