How do I verify a seller’s customer list?
Cross-check the customer list against the invoicing or CRM system it came from, confirm a sample of listed customers transacted recently rather than years ago, and check whether key customer contracts are assignable to a new owner. Where the list includes personal information, also confirm the seller has a lawful basis to transfer it.
A spreadsheet of names is easy to produce and easy to inflate. What makes a customer list worth anything is evidence that the people on it are active, real, and actually tied to the revenue the business is claiming.
Check the list against its source system
Ask for the export directly from the invoicing, point-of-sale or CRM system the business actually uses, rather than a spreadsheet the seller compiled separately. Compare transaction dates against the list — a customer who has not purchased in years does not represent current revenue, whatever the list implies.
Sample and confirm activity
- Pull a sample of the largest customers by revenue and confirm recent, recurring transactions in the underlying records
- Check whether any single customer or small group accounts for an outsized share of revenue
- Ask how long the top customers have been with the business, and why
- Confirm which relationships are with the business itself versus with the owner personally
Confirm the contracts, not just the names
Where meaningful revenue rests on written agreements — service contracts, supply agreements, standing orders — check whether those contracts are assignable to a new owner without the customer’s separate consent. An anti-assignment clause can mean a valuable relationship does not automatically transfer, which changes what you are actually buying.
The privacy question buyers tend to skip
A customer list is personal information in most cases, and transferring it as part of a business sale is only permitted where it fits within recognized exceptions and is handled consistently with federal privacy law. Ask how the list will be transferred, whether customers will be notified, and whether marketing consents carry over — this is a real compliance question, not paperwork to wave through.
Sources
This answer is checked against primary sources. Links were last confirmed on the dates shown.
- 01Office of the Privacy Commissioner of CanadaGovernmentThe Personal Information Protection and Electronic Documents Act (PIPEDA)
- 02Treadstone LawLegal commentaryCustomer Concentration Risk: Why It Can Sink an Ontario Business Sale
- 03Canada Revenue AgencyGovernmentSelling a business
- 04Treadstone LawLegal commentaryAre Your Contracts Assignable?
Deavo is an advertising and listings platform, not a brokerage, law firm or valuation firm. This page is general information, not legal, tax, accounting or valuation advice, and rules differ by province. Confirm anything you rely on with a qualified professional before you act on it.