Transactions and technology leadership

Technical due diligence for software acquisitions

A technical due diligence tells a buyer, investor or lender what they are really buying in a software company: architecture, code and security, dependence on key people, licences, operations and the cost of what has to be fixed. For acquisitions of software SMEs in Switzerland and the DACH region. A red-flag scan takes 5 working days and starts at CHF 9,500; a full due diligence takes 10–15 working days from CHF 19,500.

Request a proposal Book a free 30-minute call

You need this if

  • You are about to sign a letter of intent for a software company, and all you have is the seller's presentation.
  • The founder is the only one who really understands the code.
  • The product runs on a framework that is no longer supported, and nobody has priced the rewrite.
  • You have to tell your bank or investment committee what the technology is worth, and what it will cost.
  • Customers run old versions with individual modifications.
  • The seller says the software is cloud-ready.

What you get

  • Red-flag report

    The five to ten findings that should change the price, the terms or the decision, each with evidence and an estimated cost to fix.

  • Architecture and code assessment

    Structure, technical debt, tests, dependencies and components that are out of support.

  • Security and data protection review

    Vulnerabilities, access, backups, and readiness for the Swiss Data Protection Act and the GDPR.

  • People and knowledge risk

    Key-person dependencies, documentation and what it takes to transfer the knowledge.

  • Value creation and 100-day plan

    What to fix first after closing and what it costs, as input for your business plan.

How it works

  1. Kick-off

    Day 1

    Scope, data room access, interview plan and the questions your investment decision depends on.

  2. Data room and code

    Days 2–6

    Documents, repository, infrastructure and tooling, with read-only access.

  3. Interviews

    Days 4–8

    Founder, lead developers and operations, in German, English or French.

  4. Report

    Final days

    Findings, quantified risks, suggested contract protections and a management summary for your committee.

Packages and prices

  • Red-flag scan

    Deal-breaker check before or right after the letter of intent: architecture, code sample, security basics and key-person risk.

    Duration
    5 working days
    Price
    from CHF 9,500
    Request this package: Red-flag scan
  • Full technical due diligence

    Complete assessment with code analysis, interviews, quantified risks and recommendations for the purchase agreement.

    Duration
    10–15 working days
    Price
    from CHF 19,500
    Request this package: Full technical due diligence
  • Post-closing 100-day plan

    A prioritised technology plan for the first 100 days after closing, with owners and budget.

    Duration
    2–3 weeks
    Price
    on request
    Request this package: Post-closing 100-day plan

Prices are indicative, in Swiss francs and excluding VAT. Your proposal confirms scope and price.

Why Bit2Board

  • 18 years in software, as developer, architect, team lead of software consulting and adviser: we read code and talk to developers in their language.
  • Software risk assessment and cost and productivity analysis were core to Faysal Cherradi's work as a senior transformation consultant.
  • TOGAF 9 certified and an MBA in strategic management: findings expressed as price, terms and plan, not jargon.
  • We are paid for the assessment, not for the closing of the deal.

How we use AI

  • AI-assisted code and dependency analysis covers the whole repository, not a sample.
  • AI makes the first pass through the data room; every finding in the report is verified by a person.
  • Code and data-room content are processed only under the terms of the NDA and, if required, without any cloud AI.

Questions

When should the technical due diligence take place?

A red-flag scan is most useful before or right after the letter of intent, while findings can still change the price. The full due diligence runs during exclusivity, in parallel with the financial and legal workstreams.

Do you need access to the source code?

Read access is best. If the seller refuses, we work with a supervised code review, architecture documentation and interviews, and we state the limits in the report.

How does the seller experience it?

As a professional and respectful process. Interviews are planned with the seller, and we do not contact customers or employees without agreement.

Can you assess the IT of a company that is not a software company?

Yes, where the company's value depends on its IT, for example in e-commerce, logistics or services. The scope is adapted.

What happens after the deal?

Many buyers continue with a 100-day plan or a fractional CTO during the transition. That is a separate decision after closing. For a checklist of what to ask before signing, read twelve technical questions.