Membership site business due diligence

Once a membership site deal is under LOI, diligence has to move past the monthly-revenue chart and into the three places risk in this business actually hides: what the churn number is really made of, whether the payment processor will keep the billing running under a new owner, and whether the community needs the founder specifically to stay alive. None of the three is obvious from a standard set of financials, which is exactly why a buyer who treats this like an ordinary content-site diligence exercise can close without ever finding out.

The documents that actually matter

Start with raw billing data broken out by involuntary churn — failed or expired payments — versus voluntary cancellation, reconciled month by month rather than accepted as a single blended figure. Payment-processor statements and dispute or chargeback history matter just as much, since they reveal whether the account has ever been flagged or restricted in a way the seller has not mentioned. Content and community platform records — publishing history, moderation logs, community activity trends — round out the file, along with whatever documentation exists for how renewal and marketing consent is captured and stored.

Checks beyond the paper file

There is no registry search specific to a membership business, but a buyer should independently confirm, ideally directly with the processor rather than only through the seller, that the account is in good standing and understand what re-underwriting the new owner will actually require. It is also worth a genuine test of founder dependency — reviewing what happened to engagement and content output during any past period the founder was away, whether planned or not, since that history is a far better predictor of post-sale durability than anything the seller says about it.

The findings that actually kill this kind of deal

A payment processor that will not commit to re-underwriting the buyer is close to a hard stop, since it threatens the business’s basic ability to keep collecting revenue rather than merely denting the numbers. A churn reconciliation showing involuntary churn materially higher than the blended figure the seller reported is nearly as serious, because it means real retention is weaker than the headline number suggested and the fix — better payment recovery — takes time the buyer has to plan for rather than assume away. A community or content cadence that visibly collapsed during a past founder absence, and a member growth history that tracks discounting more closely than genuine demand, round out the findings that most often unwind a deal that looked solid going into diligence.

What a finding actually means once it appears

Not every finding carries equal weight, and treating them all as equally serious wastes leverage on the ones that do not matter. A processor that asks a few extra underwriting questions but ultimately approves the new owner is a normal step, not a red flag; a processor that hesitates and will not give a clear answer either way is telling the buyer something the seller may not have volunteered. Similarly, a modest, explainable dip in engagement during one specific founder absence reads very differently than a pattern of the community consistently slowing every time the founder steps back — the first is a data point, the second is the structural risk the whole diligence exercise exists to catch.

Verifying billing and privacy compliance in practice

Confirming that a renewal or cancellation policy exists on paper is not the same as confirming members can actually cancel the way that policy describes, and a buyer should test the cancellation flow directly rather than take the policy document’s word for it, since provincial consumer protection requirements around continuous-billing disclosure differ from province to province. Member and payment data is separately subject to federal privacy law, and to Quebec’s stricter privacy legislation for any Quebec-resident member, so a buyer should confirm the site’s actual data-handling practice matches what its own privacy policy claims rather than assume it because nothing has gone wrong yet.

Confirming the membership itself transfers cleanly

Underneath the churn data and the processor review, a buyer still needs to confirm who actually owns the pieces that make the membership work. That means checking the membership-platform account, the content library and, where one exists, the community or forum are registered to the entity being sold rather than sitting in the founder’s personal account with the business simply granted access. It also means confirming any proprietary community or content-management software the site relies on is owned by the business or licensed on terms that survive a change of owner, rather than built and personally maintained by the founder with no documentation anyone else could pick up. A buyer who skips this step can find, after closing, that the software running the community or the account holding the member list was never actually the business’s to sell, which turns a routine handover into a dispute over what was actually purchased.