Buying a vertical SaaS platform in Canada

A buyer looking at a vertical platform is evaluating two things at once: a software product and a position in an industry. The product can be rebuilt by a good team. The position, meaning the trust of firms that run their day on it, the connections to the systems around it, and the reputation that brings in new customers, is not something a buyer can buy separately. This guide is for someone weighing an opportunity. It covers what to look for in a stronger platform and a weaker one, what a seller may not mention, and what you must be able to do yourself to own it. It is general information about how the process works, not a view on whether any acquisition makes sense.

Signs of a stronger platform

Signs of a stronger vertical platform include daily use by staff at customer firms rather than occasional use by one manager, since daily use makes removal more disruptive; customers spread across firms of different sizes and regions; new customers arriving by more than one route; implementation that is largely repeatable rather than rebuilt for each account; a roadmap set by the product team rather than by whichever customer paid last; and someone besides the founder who can ship a release. A weaker one can look identical on the revenue line and different everywhere else: a few anchor customers who steer the roadmap, a codebase bent around one customer’s workflow, a product that only works through one partner’s connection, and a founder who personally answers the support line.

Judge how much of it belongs to someone else

A vertical platform may sit on top of the industry’s own system of record, such as the clinical record or the dealer system, in which case the owner of that system may be able to change the terms. Judge how much of the product stops working if access is repriced, restricted or withdrawn, and whether the system’s owner sells a competing module. The same question applies to distribution. If most customers arrived through one association or one reseller, the next owner may be renting that relationship. Ask what the platform would do with a month’s notice of a change from either side. A specific answer is worth more than a reassuring one.

What a seller may not volunteer

These are questions a seller may not have been asked. Ask directly about the following.

• Which customers run a customized or older version, and what it costs to keep them there
• What the implementation team really spends per new customer, and how much reported revenue is project fees rather than subscription
• Which promises were made verbally, such as price protection, special features or exclusivity, to customers or to the association
• Which coming changes in the industry’s rules would force a rebuild of a compliance module
• Whether there has been a security incident and what the breach record shows; the Office of the Privacy Commissioner says organizations must keep a record of every breach of security safeguards, reported or not
• Which customers are reconsidering at renewal, and why

What you must meet personally

Owning a platform brings duties a buyer should be ready to carry. Under PIPEDA, an organization is responsible for personal information under its control and must designate an individual or individuals accountable for its compliance, and it is responsible for personal information in its possession or custody, including information transferred to a third party for processing, so whichever organization controls the platform’s data after closing is answerable for it. Quebec adds that a person who operates an enterprise is responsible for protecting the personal information it holds, and companies must publish the title and contact details of the person in charge of privacy on their website. If the buyer is not Canadian, ISED says non-Canadians who acquire control of an existing Canadian business must submit either a Notification or an Application for Review unless a specific exemption applies, and describes the Act as also allowing review of foreign investments of any size on national security grounds, aimed at foreign actors seeking control of sensitive Canadian goods, technology, infrastructure or personal data. A buyer that is itself a software consolidator should ask a lawyer whether the Competition Act’s notification provisions apply; the Competition Bureau says they cover transactions of a specified type that exceed thresholds and are not exempt.

Who else is bidding

A buyer can ask who else might bid for a platform: consolidators already in the industry, private equity platforms assembling several vertical products, or strategic buyers that sell other systems to the same customers. An individual or small-team buyer can ask what it could offer that larger bidders might not: willingness to take over the founder’s role, financing that includes a vendor take-back, or a long commitment to the industry. The glossary entry on key person risk explains why the first matters, and the guide on what a vertical SaaS platform is worth sets out how different buyers might look at the same platform.