Subscription box business due diligence

Due diligence on a subscription box business is about verifying that the numbers the seller presented actually hold up at the cohort level, and that the deferred-revenue balance, the payment-processor relationship and the brand-partner agreements can genuinely transfer to a new owner without unravelling. Because almost the entire asset lives inside a recurring-billing relationship rather than in equipment or real estate, the diligence that matters most here is document and data verification, not a physical inspection.

Cohort-level churn verification, not a summary chart

A seller’s summary retention chart is a starting point, not proof, so ask for the underlying subscriber-level or cohort-level data going back at least a year and rebuild the retention curve independently rather than accepting the seller’s aggregate figure. Look specifically at how each cohort behaves in its first two or three billing cycles, since that is exactly where churn concentrates when a box does not match what the marketing promised, and a cohort that looks fine in month one but falls apart by month three tells a very different story than steady, gradual attrition spread evenly across a subscriber’s tenure.

Reconciling deferred revenue against what is actually owed

The deferred-revenue figure on the seller’s books needs to be reconciled directly against the actual subscription terms in force — how many prepaid annual plans exist, how many boxes are owed against each one, and what it would genuinely cost to fulfil that obligation at today’s product and shipping costs. A gap between the reported deferred-revenue balance and what a rebuild of the underlying subscription terms actually shows is one of the more common findings in this sub-sector, and it directly reduces what a buyer should be willing to pay, since it is effectively an unfunded liability inherited at closing.

Payment-processor and chargeback-history review

Request full payment-processor statements, not a summary, and look specifically for any warning correspondence, rolling reserve requirements, or account restrictions the processor has previously imposed, since a merchant account with that kind of history can be harder to have re-approved under a new owner’s name than the seller may let on. A dispute rate trending upward in the months before a sale process started is worth investigating directly with the seller, because it can point to a product or billing-clarity problem that has not been fully disclosed.

Brand-partner and fulfilment-vendor contract review

Pull every brand-partner agreement supplying product for the box and check specifically for assignment or change-of-control clauses, since many of these arrangements are personal to the founder and may require the partner’s separate consent before they continue on the same terms with a new owner. The same review applies to the fulfilment and packaging vendor relationships — confirm whether pricing and capacity commitments are contractual or informal, because an informal arrangement that quietly changes after closing can affect margins in a way the historical financials never show. A registry search against the seller entity is also worth running before closing, to confirm no undisclosed security interest sits over the inventory or equipment being acquired.

Confirm GST/HST has actually been remitted against the recurring charge

GST/HST is owed on the recurring charge itself, not only on the notional retail value of what is inside the box, and it is worth reconciling a sample of billing periods against the seller’s actual remittance filings rather than assuming the bookkeeping has kept pace with a subscription model that bills automatically every cycle. A mismatch here is rarely deliberate — it is usually the result of accounting built for a simpler one-time-sale business being stretched to cover recurring billing without anyone re-checking the mechanics — but it is still a liability that follows the business, not the previous owner personally, and it is easier to quantify now than to discover after closing.

CASL and privacy consent audit

Ask for the actual consent records behind the subscriber list — how each segment opted in, when, and under what basis — rather than relying on the fact that the list has been sending without incident so far, since CASL exposure attaches to the record-keeping, not just to the send history. Billing and shipping data held on the platform is also subject to PIPEDA and, for Quebec subscribers, Quebec’s Law 25, so confirm the seller’s actual data-handling practices match what its privacy policy claims before you inherit any gap between the two.

Findings that most often kill this kind of deal

• A material gap between the reported deferred-revenue balance and what the underlying subscription terms actually obligate the business to fulfil
• A payment processor with an active warning, reserve requirement or restriction that puts the merchant account itself at risk during the transition
• A dominant brand partner whose supply agreement is personal to the founder and who will not commit to continuing on the same terms after closing
• Churn concentrated heavily in the first one or two billing cycles across recent cohorts, suggesting the box does not match what current marketing promises