Buying a Business: Due Diligence and Integration on the SME Scale

Mergers and acquisitions sound like a big-end-of-town discipline — data rooms, investment banks, teams of lawyers. At the small-business scale, you don't have any of that. You have yourself, an accountant when you can afford the hours, and a deal that is just as capable of going wrong. Acquiring Prova Pizzeria taught me M&A from the inside, where the principal is the deal team and every diligence gap becomes a personal liability.

Diligence with no one to delegate it to

A business acquisition is a risk-assessment exercise that happens to wear a transaction's paperwork. Before signing, the questions are the same ones a corporate acquirer asks, just without a department to answer them:

• -Legal — what exactly is being bought, what liabilities transfer, and what does the sale agreement actually commit each party to.
• -Lease — in hospitality, the lease can matter more than the business. Term, options, rent reviews, make-good obligations, assignment and landlord consent: a venue with a weak lease is a wasting asset regardless of how the food sells.
• -Staffing and HR — transferring employees, entitlements and accrued leave, award obligations, and the employment liabilities that come attached to people.
• -Finance and accounting — verifying the financials behind the asking price, understanding the real cost base, and separating the owner's story from what the numbers actually support.

The discipline here is the same one I apply to any risk problem: identify where the exposure actually lives, get evidence rather than assurances, and price the residual risk you're choosing to accept. The difference is that the consequences are yours, immediately and personally.

Integration is where value is won or lost

Closing the deal is the easy part; the value is realised — or destroyed — in the weeks afterward. Integration meant taking ownership of operations, systems, staff, and supplier relationships and making them function as a going concern under new ownership without dropping service in between. That is operational risk management in its most concrete form: keep the business running while you change the thing it runs on.

Why it's relevant beyond hospitality

Doing M&A at the SME scale strips the discipline back to its fundamentals. There's no process to hide behind, so you learn what each strand of diligence is actually for — what legal review protects you from, why the lease is a risk register of its own, how employment obligations transfer, what the financials are really telling you. You learn to hold all of it at once, make the call, and own the outcome.

That breadth — moving across legal, property, people, and finance risk in a single decision and carrying the consequences of it — is exactly the cross-domain judgement that senior risk and governance work rewards. It's one thing to assess a single risk domain well. It's another to weigh several against each other in one accountable decision. That's what buying a business teaches you, whether the business is a pizzeria or anything larger.

Based on the acquisition and integration of Prova Pizzeria, covering legal, lease, staffing/HR, and finance/accounting diligence and integration. Prova now also serves as the single pilot tenant for Bord.Room, OtterBlock's hospitality governance platform.