# Cross-Border Due Diligence for UK Firms Acquiring in the US: The Operational Playbook **Category:** MA **Author:** AI Assistant **Published:** 2026-05-11 **Read Time:** 7 min read ## Summary UK firms acquiring US targets face CFIUS reviews, HSR filings, multi-state compliance, and operational blind spots. Here is the due diligence playbook that prevents post-close surprises. M&A Pro+ from $190/month. ## Full Content # Cross-Border Due Diligence for UK Firms Acquiring in the US: The Operational Playbook **You found the perfect US target. The financials look clean. The strategic fit is obvious. Your board is excited. Then your lawyers mention CFIUS, your accountants flag GILTI, and someone asks which of the target's 14 state registrations have lapsed.** Welcome to transatlantic M&A. Global M&A values climbed 36-43% in 2025, with the US commanding over 50% of worldwide deal value. UK firms are actively acquiring American businesses, driven by valuation gaps (UK FTSE 350 assets trade at persistent discounts to US equivalents), a strong dollar, and sector opportunities in AI, cybersecurity, and digital infrastructure. But the gap between signing a deal and successfully operating the acquired business is where most cross-border acquisitions fail. Not because of bad strategy. Because of incomplete due diligence. Here is what actually matters when a UK firm acquires in the US. ## The Regulatory Landscape: What UK Buyers Get Wrong UK acquirers tend to underestimate the US regulatory environment because they assume it mirrors the UK's centralised model. It does not. ### CFIUS: The National Security Gatekeeper The Committee on Foreign Investment in the United States reviews acquisitions by foreign buyers for national security implications. If your target operates in technology, healthcare, critical infrastructure, or defence-adjacent sectors, CFIUS will have an opinion. **What UK buyers need to know:** - CFIUS filings are technically voluntary for most transactions. But not filing when you should is worse. CFIUS can unwind completed deals retroactively. - Review timelines have extended 20-30% since 2024 due to heightened scrutiny, particularly around AI, semiconductor, and data-related businesses. - The UK's own National Security and Investment Act (NSIA) may also apply if the acquired business has UK-connected operations, creating a parallel regulatory track. **Operational impact:** Budget 4-6 months for CFIUS review in sensitive sectors. Build this into your deal timeline from the start, not as an afterthought. ### HSR Act: The Antitrust Filing If the deal exceeds the HSR Act thresholds (currently approximately $119.5 million), you must file with the FTC and DOJ before closing. The 2025 guidelines require significantly more upfront data than previous years, including competitive overlap analysis and customer concentration data. **What this means operationally:** Your target needs to produce data it may never have compiled before. If the target is a 50-person company with informal record-keeping, this becomes a project in itself. ### Multi-State Compliance: The Hidden Layer Unlike the UK, where Companies House provides a single registry, the US requires separate compliance in every state where the target operates. Each state has its own: - Corporate registration and annual report requirements - Tax obligations (income tax, franchise tax, sales tax) - Employment law (at-will states vs. implied contract states, non-compete enforceability varies dramatically) - Data privacy regulations (California CCPA, Illinois BIPA, Connecticut CTDPA) A UK buyer accustomed to dealing with HMRC and Companies House will find the US's fragmented compliance landscape genuinely disorienting. ## The Due Diligence Checklist That Actually Matters Most DD checklists are legal documents designed by lawyers for lawyers. Here is the operational version. ### Financial DD: Beyond the Numbers | What to verify | Why it matters | Common trap | |---|---|---| | Revenue recognition by state | Tax nexus implications for the acquirer | Target may not track revenue by jurisdiction | | Deferred revenue | US GAAP treatment differs from UK GAAP/IFRS for SaaS and subscription businesses | Overstated current-year revenue | | Related-party transactions | Transfer pricing scrutiny from IRS | Informal arrangements undocumented | | GILTI and BEAT exposure | US tax on UK parent's global income from US subsidiary | Often ignored until post-close tax planning | ### Operational DD: Where Deals Actually Fail Financial DD tells you what the business looks like on paper. Operational DD tells you what it looks like on Monday morning. - **IT systems and integration risk.** What is the target's tech stack? Is it compatible with yours? Data migration costs are routinely underestimated by 40-60%. - **Key person dependency.** In a 50-person US company, three people often hold 80% of the institutional knowledge. What are their employment terms? Are they staying post-close? - **Customer concentration.** If one client represents more than 15% of revenue, that is not a customer. That is a dependency. What does their contract say about change of control? - **Supplier contracts.** Do any vendor agreements have change-of-control provisions that trigger renegotiation or termination? ### Legal and Compliance DD: The US-Specific Items - **Employment litigation history.** US employment lawsuits are far more common and more expensive than in the UK. Check the target's litigation history thoroughly. - **IP assignment chain.** Verify that all intellectual property created by employees and contractors has been properly assigned. US IP law requires explicit assignment, and gaps are common in startups. - **State-by-state registration.** Confirm active registrations, filed annual reports, and paid franchise taxes in every state of operation. Lapsed registrations can mean loss of good standing and inability to enforce contracts in that jurisdiction. ## Building the DD Process: Practical Steps **Phase 1: Pre-LOI Assessment (2-4 weeks)** Before you spend money on formal due diligence, answer three questions: 1. Does the target operate in a CFIUS-sensitive sector? If yes, engage specialised counsel immediately. 2. Does the deal exceed HSR thresholds? If yes, budget time and cost for the filing. 3. How many US states does the target operate in? This determines the scope of your compliance review. **Phase 2: Structured DD (6-12 weeks)** Run financial, legal, operational, and commercial workstreams in parallel. For cross-border deals, add: - **Tax structuring workstream.** UK-US tax treaty implications, GILTI planning, withholding tax on dividends. - **Regulatory workstream.** CFIUS, HSR, and any sector-specific approvals (FCC for telecom, state insurance regulators, etc.). - **Integration planning workstream.** Start planning integration during DD, not after close. The operational model for Day 1 should be drafted before you sign. **Phase 3: Risk Quantification (2-4 weeks)** Convert DD findings into financial terms. Every risk needs a dollar figure: - Lapsed state registrations: cost to cure plus penalty exposure. - IP assignment gaps: cost to obtain assignments plus litigation exposure. - Key person departure risk: replacement cost plus revenue impact. - Integration costs: IT migration, redundancy, rebranding. These numbers feed directly into your purchase price negotiation and warranty/indemnity provisions. ## Where Simplif-i's M&A Pro+ Fits Simplif-i's M&A module was built for exactly this type of complexity. Not as a replacement for your lawyers and accountants, but as the operational layer that keeps the entire DD process visible, organised, and on track. **What M&A Pro+ does:** - **Centralised data room management.** Every document, every workstream, every finding in one place. Not scattered across email, Dropbox, and three different legal team portals. - **Task and milestone tracking.** DD is a project with deadlines. Treat it like one. Assign tasks, track completion, flag delays. - **Risk register.** Log every DD finding with its financial impact, probability, and mitigation plan. Feed this directly into your negotiation position. - **Post-close integration tracking.** The deal does not end at closing. Integration milestones, regulatory compliance actions, and operational handover tasks need the same rigour as DD. - **Connected to governance.** The Company Secretary module tracks the new entity's statutory obligations. The Contracts module manages the acquired contracts. The GRC module handles the merged compliance framework. **Pricing:** Full platform at $190/month (£149 founding member pricing). That is not per-deal pricing. That is your ongoing operational backbone for every acquisition, every integration, and every governance obligation that follows. ## The Cost of Getting DD Wrong PwC and McKinsey data consistently shows that 50-70% of M&A deals fail to deliver expected value. The primary reason is not bad strategy. It is poor integration execution driven by incomplete due diligence. A single missed state tax obligation can cost $50,000-$200,000 in back taxes and penalties. A single IP assignment gap can invalidate the core asset you thought you were buying. A single key person departure in the first 90 days can crater the revenue trajectory your valuation was based on. Due diligence is not a checkbox exercise. It is the operational foundation for everything that comes after closing. Do it properly. Or do not do the deal. **Start a free trial at [simplif-i.com](https://simplif-i.com). 7 days. Full access. No credit card.** --- Source: https://simplif-i.com/api/blog/readable/ma/cross-border-due-diligence-uk-firms-acquiring-us Web Version: https://simplif-i.com/blog/ma/cross-border-due-diligence-uk-firms-acquiring-us © Simplif-i - Unified Business Management Platform