Surviving Due Diligence: The Legal and Financial Audit Checklist for Cafe Sellers

1. De-risking the Most Volatile Stage of a Hospitality Business Transaction

Of every ten heads-of-terms signed on a UK independent café in 2025, our practice data suggests fewer than six made it through due diligence to a binding exchange of contracts at the originally agreed price. The remaining four either renegotiated downwards by 8–25%, slipped past the original long-stop date by more than 90 days, or collapsed entirely. The single recurring cause is not buyer cold feet, broker incompetence or solicitor delay — it is the moment the buyer's accountant cannot make the seller's EPOS reports tie back to the VAT returns, or the moment the buyer's solicitor receives an EICR dated 2018 and an "Unsatisfactory" overall classification.

Due diligence is the structured forensic examination the buyer conducts between exclusivity and exchange. Its purpose is not to confirm what the buyer already believes; it is to find anything the seller has missed, mis-described or misunderstood. In a UK café transaction this typically covers four parallel workstreams: financial DD (the accountant), legal DD (the solicitor), property and compliance DD (the surveyor and specialist consultants), and operational DD (frequently the buyer themselves, walking the floor at 6am). Each workstream produces a "report on title" or "report on findings" that the buyer's lender, the buyer's investors and the buyer's solicitor will rely on for the next decade. Anything found, but not adequately disclosed in the disclosure letter, becomes a post-completion warranty claim.

The seller who treats DD as something that happens to them loses control. The seller who treats DD as something they conduct on themselves first — and arrives at exclusivity with a fully indexed data room, a clean reconciliation pack and current compliance certificates — sets the pace and protects the price. This guide walks through the seven workstreams a 2026 UK café DD will touch, in the order they typically arise, with the regulatory citations a competent buyer's solicitor will already have in their checklist.

2. Financial Verification: Matching EPOS Reports, Merchant Card Statements and VAT Returns Against the P&L

The financial DD pack a buyer's accountant will request is, at minimum: three years of statutory accounts filed at Companies House (or three years of self-assessment for sole traders), three years of management accounts month by month, 24 months of bank statements for every business account, 24 months of merchant card-acquirer statements (Stripe, Square, Zettle, Worldpay, Dojo, SumUp), 24 months of EPOS Z-reports or daily takings summaries, the last four VAT returns plus the underlying VAT workings, the last three P11Ds, the most recent PAYE settlements, and a schedule of any director's loan account movements.

The accountant then performs the cross-reconciliation that catches most sellers off guard. For any given trading week, the EPOS gross takings, the merchant card deposits (gross of acquirer fees), the cash banked, and the VATable sales declared must all reconcile to within a tolerance of ±1.5%. A single week with a 7% variance will not kill a deal; a recurring pattern of EPOS-reported sales exceeding banked deposits by 5–10% suggests either cash skimming, walk-out fraud, a broken till protocol or — most damaging — that the management accounts have been inflated for sale.

Common reconciliation failures

• EPOS > bank deposits — implies cash leakage. The buyer will assume the worst (skimming) unless you can evidence till errors, refunds processed outside EPOS, or a clear staff theft incident.
• EPOS < merchant card receipts — implies EPOS under-recording. Often a misconfigured EPOS that drops gift-card redemptions or split-bill scenarios.
• VAT return < EPOS — implies under-declaration. HMRC will treat this as a potential evasion issue and the buyer's accountant will require a voluntary disclosure to HMRC before exchange.

Run the reconciliation yourself, in a single spreadsheet, before the buyer's accountant ever asks. Where you find a variance, document the cause in a one-page memorandum and include it in the data room. A disclosed variance with a reasonable explanation is rarely fatal; an undisclosed variance discovered by the buyer is almost always a price-renegotiation trigger.

3. The Property Compliance Audit: Navigating EICR (Electrical Installation Condition Reports) and Gas Safety Certificates (CP12)

UK commercial premises are subject to a layered regulatory regime that requires the occupier to commission, retain and act upon specific certificates. The buyer's solicitor will request originals of each, dated and signed by a competent person registered with the relevant scheme. Two certificates dominate café DD.

EICR — Electrical Installation Condition Report

Required under the Electricity at Work Regulations 1989 and BS 7671 (IET Wiring Regulations, 18th Edition Amendment 2:2022, with Amendment 3 expected to apply from 2026). Commercial premises require an EICR every 5 years or at change of occupancy. The certificate is issued by an NICEIC, NAPIT or ECA registered electrician and must give an overall classification of either Satisfactory or Unsatisfactory. An Unsatisfactory rating means C1 (danger present) or C2 (potentially dangerous) coded observations exist and must be remediated. A buyer's solicitor receiving an Unsatisfactory EICR will require remediation to a Satisfactory standard before exchange, at the seller's cost. Anticipate £400–£1,200 for the inspection itself and £800–£6,000+ for typical café remediation works (replacing legacy fuse boards, installing RCBO protection, separating circuits serving wet areas).

CP12 — Gas Safety (Installation and Use) Regulations 1998

Every commercial gas appliance (combi boiler, water heater, gas hob, gas grill, gas-fired espresso machine) must be inspected annually by a Gas Safe-registered engineer (registration number is mandatory on the certificate). A current CP12, ideally less than 6 months old at the date of exchange, is a non-negotiable DD item — a missing or expired CP12 will halt the buyer's lender from releasing funds because it suggests a non-insured trading position. Budget £90–£180 per appliance per year, plus rectification if any appliance is classified "Immediately Dangerous" (ID) or "At Risk" (AR).

4. Operational & Safety Disclosures: Fire Risk Assessments, Asbestos Surveys and Water Testing (Legionella)

Fire Risk Assessment — Regulatory Reform (Fire Safety) Order 2005 as amended by the Fire Safety Act 2021 and the Fire Safety (England) Regulations 2022

The "responsible person" — almost always you as the operator — must commission and maintain a written Fire Risk Assessment. The post-Grenfell amendments tightened the documentation requirement: the assessment must be in writing regardless of premises size, must be reviewed annually or after any material change to layout, occupancy or use, and must be produced on demand to the local Fire and Rescue Authority. A buyer's solicitor will request the current FRA, evidence of remedial actions completed, the fire-detection servicing schedule (BS 5839-1), the fire-extinguisher service records (BS 5306-3, annual), and emergency-lighting test records (BS 5266-1, monthly functional plus annual full discharge).

Asbestos Management Survey — Control of Asbestos Regulations 2012

If the building was constructed or refurbished before 2000, the duty-holder (typically the leaseholder for the demised premises, the landlord for common parts) must hold an Asbestos Management Survey identifying any asbestos-containing materials (ACMs), their condition and their location. A buyer purchasing a leasehold café in a pre-2000 building will require sight of the AMS and, where ACMs are present, evidence of an asbestos management plan. The survey itself costs £350–£900 for a typical 80–200 sqm café unit; a Refurbishment & Demolition Survey (R&D) is only required if works are planned.

Legionella Risk Assessment — HSE ACoP L8 and HSG274

Any premises with a hot/cold water system serving the public must hold a current Legionella Risk Assessment, reviewed every two years or on system change. For most cafés this means a documented assessment, a written scheme of control (monthly tap temperature checks, quarterly shower head descaling if applicable, annual tank inspections), and a maintenance log. The cost of the assessment is modest (£180–£400), but a missing log of monthly temperature checks is one of the most common DD-stage findings and will require backfilled remediation.

5. Food Hygiene and Environmental Health: Preserving the "Scores on the Doors" Rating History During Ownership Change

The Food Standards Agency's Food Hygiene Rating Scheme (FHRS) — known publicly as "Scores on the Doors" — assigns a 0–5 rating to every food business based on Environmental Health Officer inspection findings against the Food Safety and Hygiene (England) Regulations 2013. The rating attaches to the food business operator at the premises, NOT to the limited company. This matters at completion in two distinct ways.

First, the rating is published and indexed by Google, so a drop from 5 to 3 between heads of terms and exchange is publicly visible to the buyer's investors and their lender within 28 days of the inspection. Second, on a change of food business operator (which a sale almost always triggers, even if the limited company is being acquired with the same trading name), the rating is technically reset to "Awaiting Inspection" until the new FBO is inspected — typically within 6 months but sometimes longer. A buyer purchasing a 5-rated business expecting to inherit that rating must be advised in writing that the rating attaches to the FBO and a re-inspection will follow.

The seller's pre-DD protective measures are: commission an unannounced mock EHO inspection from a private consultant (£250–£500) at the moment heads of terms are signed; address every observation in writing within 14 days; retain the consultant's report in the data room as evidence the rating is defensible; and request that the buyer registers as the new FBO with the local authority within 28 days of completion (a statutory requirement that, if missed, exposes the buyer to enforcement).

6. Contractual Assets: Auditing Equipment Leases (Commercial Dishwashers, Coffee Roasters) and Software Subscriptions

The legal characterisation of every piece of equipment in the café matters at completion because only owned assets can pass to the buyer in the asset sale. Leased, hire-purchased and consigned equipment falls into three different legal buckets, each handled differently.

• Operating leases (typically dishwashers, ice machines, refrigeration units on managed-service contracts) — title remains with the lessor. The buyer must either novate the lease (lessor consent required, often with a credit check of the buyer) or the seller must terminate and pay the early-settlement figure. Lease termination charges of 6–12 months of remaining rentals are common.
• Hire purchase (typically espresso machines, grinders, ovens on Pacific Lease, BNP Paribas Leasing or similar) — title passes to the lessee on payment of the final balloon. If the balloon is unpaid at completion, title has not yet passed and the equipment cannot be sold as the seller's asset.
• Consigned / placed equipment (the classic example is the bean-to-cup machine "provided free" by the roaster in exchange for a minimum coffee-bean purchase commitment) — title NEVER passes to the operator and the equipment must be returned at end of contract. The supply contract usually contains a change-of-control or assignment clause; the buyer either inherits the obligation or the seller must terminate and pay liquidated damages.

Software subscriptions follow the same logic. EPOS contracts (Lightspeed, Square, Toast, Epos Now), accounting software (Xero, QuickBooks), payroll (Brightpay, Sage), scheduling (7shifts, Deputy), online ordering (Flipdish, UberEats merchant contracts, Deliveroo), gift-card platforms and loyalty platforms all need to be inventoried with their renewal dates, monthly costs, change-of-control clauses and customer-data ownership terms documented.

7. Supplier & Vendor Disclosures: Verifying Trade Debts, Open Credit Lines and Supply Exclusivity Contracts

The supplier disclosure pack lists every active trade account (typically 20–60 for an independent café), the credit terms (30-day EOM is standard for established accounts), the current balance owed, the personal guarantee position, and any exclusivity or minimum-purchase obligations. The pack is cross-referenced against the trade-creditor balances on the most recent management accounts; material discrepancies trigger an immediate adjustment to the completion statement.

Two categories warrant particular scrutiny. Personally guaranteed accounts — common with milk suppliers and some coffee roasters for newer operators — survive the company sale unless the supplier releases the personal guarantee in writing (rarely done; expect to negotiate). Exclusivity and minimum-purchase contracts with coffee roasters can lock the buyer into specific suppliers for 24–60 months and either inherit a substantial liability or trigger an early-termination charge. Both must be disclosed in the disclosure letter and reflected in the SPA's warranty schedule.

8. The Ultimate 30-Point Cafe Due Diligence Matrix

The buyer's professional team will work this matrix top to bottom over 4–6 weeks of exclusivity. The seller who hands over a fully populated data room indexed against the same matrix on day one of exclusivity will compress that timeline to 3 weeks, retain pricing power and demonstrate the operational professionalism that justifies the upper end of the SDE multiple.