What Standard Due Diligence Misses When You Acquire a Startup: A Deeper Look at IP Blind Spots
Photo: corporate due diligence meeting reviewing documents technology startup acquisition, via koala.sh
For mid-market companies pursuing growth through acquisition, early-stage technology firms represent an appealing target. The promise is straightforward: acquire proprietary technology, absorb a talented engineering team, and accelerate competitive positioning in a fraction of the time it would take to build internally. The reality, however, is considerably more complicated.
Year after year, acquiring companies complete their standard due diligence reviews, sign closing documents, and then spend the following months—sometimes years—unwinding IP problems that were present all along. The issue is not a lack of diligence effort. The issue is that conventional due diligence frameworks were not designed to surface the specific vulnerabilities that are endemic to startup IP structures. Checklists developed for mature companies with established legal departments and formalized IP governance simply do not ask the right questions when applied to a three-year-old firm that has been operating at startup speed.
Understanding where those frameworks fall short is the first step toward protecting your organization before a deal closes.
The Founder Assignment Problem
Among the most consequential and most frequently overlooked risks in startup acquisitions is the question of whether the founding team's intellectual property was ever properly assigned to the company in the first place.
In the earliest stages of a startup, founders often develop core technology before the entity is formally incorporated—sometimes while still employed elsewhere. When the company is eventually formed, that pre-incorporation work may not be cleanly transferred. Assignment agreements, if they exist at all, are sometimes drafted informally, signed under duress of a funding deadline, or contain carve-outs that the founders themselves do not fully understand.
Standard due diligence will typically confirm that an assignment agreement exists. It will rarely probe whether the agreement is actually enforceable, whether it covers all of the relevant work product, or whether a prior employer could assert a competing claim under a previously signed invention assignment agreement. In states like California, where employee IP assignment law is particularly nuanced, these questions carry significant legal weight.
Acquirers who skip this deeper analysis may find themselves holding a company whose core technology is legally encumbered—or partially owned by someone who is no longer affiliated with the business.
Employee Invention Disputes: The Sleeping Liability
Startups scale quickly and informally. Engineers join early, work across multiple projects simultaneously, and frequently develop innovations outside of their official job descriptions. In that environment, the line between company-owned inventions and individually owned work can become genuinely blurry.
Conventional due diligence reviews typically confirm that standard employee invention assignment agreements (EIAAs) are on file. What those reviews rarely examine is whether the agreements were properly executed, whether they comply with the specific statutory requirements of the relevant state, or whether any employees have raised—formally or informally—disputes about ownership of specific innovations.
This matters because a disgruntled former engineer who believes they retain rights to a core algorithm does not disappear when your acquisition closes. Their claim travels with the asset. If that individual decides to assert ownership after the deal is complete, the resulting dispute can cloud title to the very technology that justified the acquisition price.
A more rigorous assessment should include a review of any communications, exit interview records, or HR documentation that might signal unresolved invention disputes, as well as a state-by-state analysis of whether existing EIAAs conform to applicable law.
Undisclosed Patent Disputes and Office Actions
Startups are often less than forthcoming about the status of their patent portfolios—not always out of bad faith, but because their internal tracking systems are inadequate. A patent application that has received an adverse office action, a pending inter partes review challenge, or an informal cease-and-desist letter from a competitor may simply not make it onto a disclosure schedule if no one on the founding team recognized its significance.
Acquirers should not rely solely on the target company's representations about the health of its patent portfolio. An independent prosecution history review—examining the actual file wrappers for key applications—can reveal claim limitations, prior art rejections, and examiner objections that significantly narrow the commercial value of the patents being acquired. Similarly, a freedom-to-operate analysis on the target's core products may surface third-party patent risks that the startup never formally assessed.
The absence of active litigation does not mean the absence of risk. It often means the risk has not yet been triggered.
Open Source Entanglement in the Codebase
Early-stage technology companies build fast, and building fast frequently means incorporating open source components without the documentation discipline that a mature software organization would maintain. By the time an acquisition occurs, the codebase may contain GPL-licensed components, AGPL dependencies, or code of uncertain provenance that creates real licensing obligations for any acquirer.
A standard due diligence review will often include a representation from the target company that it has complied with all open source licenses. That representation is only as reliable as the target's internal tracking, which—at a startup—may be minimal. Independent software composition analysis using automated scanning tools is increasingly considered a baseline requirement for any technology acquisition, not a premium add-on.
Failure to identify open source entanglement before closing can result in licensing obligations that constrain how the acquired technology can be commercialized, distributed, or integrated into the acquirer's existing product lines.
A More Rigorous Assessment Framework
Addressing these blind spots requires moving beyond checklist-based due diligence toward a structured IP risk assessment that is specifically calibrated for early-stage targets. The following elements should be considered foundational components of that framework:
Chain-of-title verification. For every material piece of IP, trace ownership from the moment of creation to the present day. Confirm that all pre-incorporation work product was properly assigned, that assignment agreements are enforceable under applicable state law, and that no prior employer has a colorable claim to foundational technology.
EIAA compliance audit. Review all employee and contractor invention assignment agreements for compliance with state-specific statutory requirements. Flag any jurisdictions—California, Washington, North Carolina, and others—where the agreements may contain provisions that are void as a matter of law.
Prosecution history review. Examine the file wrappers for key patent applications to assess the actual scope and strength of the claims being acquired, not just the face of the issued patents.
Software composition analysis. Commission an independent scan of the codebase to identify open source components, map their licenses, and assess any obligations that will transfer to the acquirer.
Dispute signal review. Examine HR records, exit documentation, and any correspondence that might indicate unresolved inventor disputes, third-party IP claims, or informal enforcement activity that did not rise to the level of formal litigation.
The Cost of Waiting
IP problems discovered after an acquisition closes are exponentially more expensive to resolve than those identified during the diligence phase. At that point, the acquirer has limited leverage, and the remediation options—renegotiating the purchase price, pursuing indemnification claims, or restructuring licenses—are all costly and time-consuming.
For mid-market companies competing aggressively for early-stage technology assets, the instinct is often to move quickly and avoid letting due diligence timelines become a competitive disadvantage. That instinct is understandable. But the companies that consistently extract value from their acquisitions are the ones that have developed the internal capability—or engaged the right external advisors—to conduct IP assessments that go well beyond the standard checklist.
Protecting the value of an acquisition begins before the deal closes. The time to surface these risks is during diligence, not during the integration that follows.