The compliance checklist buyers (and inspectors) actually run against small businesses
Compliance paperwork never made anyone excited. But it is the same short list that an inspector can fine you on today and a buyer's lawyer will run in due diligence tomorrow, and gaps get more expensive the later they surface.
The checklist
- Licences and permits, current and findable. Trade licence, premises licence, health registration, alcohol licence if you serve it, music licence if you play it. The test is not "do we have them" but "could I produce each one, in date, within ten minutes". Expired-but-operating is the classic silent risk.
- Insurance that matches what you actually do. Public liability at minimum; employer's liability where you have staff; treatment or professional cover where you treat or advise. The trap is drift: services added since the policy was written are often not covered by it. Read the schedule against your current service list once a year, and diarise the renewal date.
- Staff certifications, tracked with expiry dates. Anywhere practitioners need credentials (clinics, trainers, aestheticians, food handlers), each certificate is a document with a date on it. A spreadsheet with names, certs, and expiries is the whole system. What kills businesses is nobody owning the dates.
- Customer data handled like it belongs to someone else, because it does. A defensible basis for your marketing list, consent you can show, records kept no longer than needed, and the customer database in YOUR control rather than trapped in a platform you rent. That last point is also a sale asset; see transferability.
- The lease, read before it matters. Term remaining, break clauses, and above all assignment: can it transfer to a buyer, and on what conditions? A great business on an unassignable lease with 18 months left has a serious valuation problem that takes months to fix and minutes to check.
- The brand you trade under. If the name is not yours to own (someone else registered it, or it is unregistrable), every sign, bag, and review is building an asset you may have to hand back. A trademark check costs little; discovering the problem in due diligence costs the deal.
Make it boring and quarterly
The failure mode is not ignorance, it is decay: everything was fine when checked three years ago. Put the six items above in a quarterly 30-minute review with three columns: document, in date until, where it lives. Scan everything into one folder a stranger could navigate.
That folder has a name in a sale: the data room. Owners who maintain one look prepared, and prepared reads as trustworthy, which is worth real money in a negotiation. The same paperwork discipline is what our exit readiness score checks in its compliance questions, and what separates the sellable from the 70 to 80 percent that never sell.