What we have seen is this: a Shopify business can look simple because the storefront is polished and the platform is hosted. Behind it may sit one founder-owned domain account, an undocumented private app, manual supplier spreadsheets, fragile tracking and customer acquisition that depends on a channel or personality that will not transfer.
Buying the revenue without understanding those dependencies can turn the first hundred days into a rescue project. This guide shows how to inspect the technical and operational asset alongside professional financial and legal due diligence.
Table of contents
- Keyword decision
- Define the asset and evidence room
- Verify revenue quality
- Inspect the Shopify build
- Map apps, integrations and ownership
- Review customers, SEO and data
- Test operations and transition
- Turn findings into a deal plan
- StoreBuilt point of view
Keyword decision
| Decision | Direction |
|---|---|
| Primary keyword | buying a Shopify business UK |
| Secondary keywords | ecommerce due diligence UK, Shopify technical due diligence, ecommerce acquisition checklist |
| Search intent | Assess risk before acquiring an ecommerce business |
| Funnel stage | High-intent commercial investigation |
| Page type | Technical and operational due diligence guide |
| Why StoreBuilt can win | StoreBuilt can inspect the live storefront, platform configuration, data, integrations, SEO and delivery dependencies |
Search results often focus on valuation multiples or generic acquisition checklists. The StoreBuilt opportunity is the commerce-system layer between the accounts and the customer experience. This supports a free Shopify audit starting point and deeper migration and replatforming work where the target requires change.
Define the asset and evidence room
List what is included: company, Shopify store, domain, trademarks, product designs, inventory, supplier terms, customer data, content, photography, code, apps, integrations, analytics, advertising accounts, email lists, social profiles and support history.
For every asset, record the legal owner, account owner, billing owner, administrator, renewal date, export route and transfer constraint. A password is not proof of ownership, and access through the seller’s personal identity may not survive completion.
Request evidence at a level that supports reconciliation rather than screenshots alone. Transaction exports, settlement reports, app invoices, theme history, contracts, analytics access, Search Console, supplier service data and support categories create a more reliable picture.
This guide is not legal, financial or tax advice. Coordinate technical findings with qualified transaction advisers so warranties, conditions and price mechanisms reflect material risk.
Verify revenue quality
Reconcile Shopify orders, cancellations, refunds and taxes with payment settlements and finance records. Separate online, POS, wholesale, draft, subscription, gift-card and test activity. Investigate spikes, extreme discounts, unusual addresses, self-referrals and orders placed near the measurement cutoff.
Move below revenue. Measure contribution by product, channel and cohort after product cost, payment, fulfilment, delivery subsidy and returns. Check whether recent growth came from sustainable demand or margin-heavy promotion.
| Question | Evidence |
|---|---|
| Are sales real and settled? | Orders, gateways, bank and finance reconciliation |
| Is demand diversified? | Channel, query, campaign and customer concentration |
| Are customers valuable? | Repeat cohorts, returns, support and discount dependence |
| Are margins durable? | SKU costs, fulfilment, fees, returns and supplier terms |
| Is growth transferable? | Brand-owned assets versus founder or partner relationships |
Use mature cohorts when comparing returns and repeat behaviour. A recent sales surge can look unusually attractive before its refund and service costs arrive.
Inspect the Shopify build
Review plan, organisation, markets, checkout settings, payments, shipping, tax configuration, locations, customer accounts, notifications, policies and users. Export a configuration inventory where possible.
Inspect the published theme and theme library. Establish whether the theme is licensed, who owns custom code, whether source control exists and how releases are made. Look for duplicate snippets, abandoned app code, hard-coded credentials, inaccessible components, performance regressions and changes made directly in production.
Map critical customer journeys across representative products: search, collection, product, subscription or bundle selection, cart, checkout entry, account, contact, tracking and returns. Test edge cases such as sold-out variants, discounts, international delivery and failed forms.
An anonymous StoreBuilt review found that a store’s core product configurator depended on a service billed to a former developer’s account. The storefront value and the transfer risk were inseparable; identifying it before transition allowed the buyer to require documentation and migration support.
Map apps, integrations and ownership
Create an application register covering purpose, owner, plan, cost, permissions, data held, exportability, API or webhook dependencies, service limits and replacement options. Identify overlapping apps and functionality that appears native but is actually external.
Trace orders and data into ERP, WMS, 3PL, accounting, CRM, email, reviews, loyalty, subscriptions, feeds and support. Document failure handling and manual reconciliation. Ask what happens if each connection stops for a day.
Review custom and private applications, repositories, deployment accounts, environment variables, API credentials and technical documentation. Confirm intellectual-property ownership with advisers and ensure secrets are rotated during transition rather than simply handed over.
For a complex estate, our Shopify store design and development service can turn findings into a stabilisation backlog.
Review customers, SEO and data
Assess customer-file quality, duplicates, consent evidence, suppression, retention, deletion workflows and processor inventory. Confirm what can legally and operationally transfer; obtain qualified privacy advice.
For SEO, inspect Search Console and analytics rather than relying on a traffic screenshot. Review branded versus non-branded demand, top query and page concentration, index coverage, canonicals, redirects, international targeting, backlinks and recent migrations. Check whether high-performing content, imagery and product descriptions are owned and will remain published.
Review measurement implementation: consent behaviour, analytics properties, advertising pixels, server-side connections, campaign naming and purchase deduplication. Historical dashboards lose value if definitions changed without annotation.
Examine retention channels for list health, deliverability, automation ownership, unsubscribes and discount dependency. A large audience is not automatically a transferable, reachable or profitable audience.
Test operations and transition
Follow an order into picking, dispatch, delivery, return, refund and support. Record supplier lead times, inventory accuracy, backorders, packaging, carrier contracts, service levels, chargebacks and manual work. Identify tasks that only the founder knows how to complete.
Build a transition matrix:
| Timing | Priority |
|---|---|
| Before completion | Ownership proof, critical access, IP, material dependency and data risk |
| Completion day | Store, domain, payment, banking, email and administrator control |
| First week | Secret rotation, monitoring, supplier and fulfilment continuity |
| First 30 days | Documentation, cost validation, access review and urgent defects |
| First 100 days | Architecture, CRO, SEO, retention and operating roadmap |
Agree who supports the handover, for how long and with what response expectations. Test account recovery and emergency contacts before the seller becomes unavailable.
Contact StoreBuilt for an independent Shopify technical and operational review before acquisition or handover.
Turn findings into a deal plan
Classify findings as transaction blockers, pre-completion conditions, transition actions, planned investment or accepted risk. Estimate time, dependency and trading impact rather than producing a long undifferentiated defect list.
Connect technical risk to commercial consequence. Missing source control may increase release risk; a non-transferable subscription platform may threaten recurring revenue; poor inventory accuracy may invalidate margin and working-capital assumptions.
Keep a separate opportunity backlog. Conversion improvements and platform consolidation can support the investment case, but they should not hide the cost of stabilising what already exists.
StoreBuilt point of view
StoreBuilt believes ecommerce due diligence should prove that the business can still trade when the seller’s accounts, memory and relationships are removed. Shopify reduces infrastructure burden, but it does not remove ownership, data, integration or operating risk.
Buy a transferable system, not a convincing dashboard. If the target’s value depends on technology and trading continuity, Contact StoreBuilt before the transition plan becomes an emergency plan.