Staffing agency due diligence checklist: contracts, compliance and records

What does a staffing agency due diligence checklist cover?

A staffing agency checklist covers six areas: client contracts and concentration, wage-hour and classification compliance, workers' compensation and insurance, licensing and registrations, recruiter and candidate agreements, and the records and systems the business runs on. The sixth area is the one most checklists skip, and it is where a data license can sit beside the sale.

Staffing is a thin-margin, compliance-heavy business, so buyers test how the gross margin is earned as much as how large it is. Client dependence and payroll compliance are the first places buyers look. This is general information, not legal, tax or financial advice. Confirm with your own counsel, tax adviser or professional body before acting.

Client contracts and concentration

Start with the top ten clients by gross profit, not by revenue. A staffing firm's revenue includes pass-through wages, so revenue rankings overstate small-margin accounts.

• Master services agreements and statements of work for every top-ten client, with term, renewal and termination-for-convenience language
• Gross profit by client by year, with bill rates, pay rates and markup trend
• Any single client that supplies a large share of gross profit, and how long the relationship has run
• Change-of-control, assignment and consent clauses in each client contract
• Vendor-management-system (VMS) or managed-service-provider (MSP) program terms, including rate cards and fees the agency pays to the program
• Open disputes, credits, write-offs and aged receivables by client

Concentration also shapes records. A firm that places most of its people with two clients holds two clients' confidential work instructions, job descriptions and performance feedback. Read customer concentration in M&A before you decide what a license could include.

Wage-hour, classification and payroll

Staffing firms are the legal employer of people who work on someone else's site, so payroll compliance is the core exposure.

• Worker classification for every population: W-2 temporary, W-2 payroll-only, independent contractor, and any employer-of-record arrangements
• Overtime calculations, meal and rest break practices and timekeeping rounding rules, by state
• Multi-state payroll tax registrations and unemployment insurance accounts
• Affordable Care Act offers and reporting for temporary workers who reach full-time status
• Open or past wage claims, audits and agency inquiries
• Payroll funding arrangements, including any factoring agreement and its lien on receivables

Workers' compensation, insurance and licensing

• Experience modification rate (EMR) history by state, and the carrier's loss runs for several years
• Current policies: workers' compensation, general liability, professional liability, employment practices liability, cyber and fidelity or crime coverage
• Any state-level staffing, employment-agency or temporary-help registrations, and renewal dates
• Safety program records for light-industrial placements, including incident logs
• Client indemnity and additional-insured requirements and certificates of insurance issued

Licensing and insurance rules differ by state, so ask your deal counsel to confirm the list for each state where the agency places workers.

Recruiters, candidates and non-competes

• Employment agreements for recruiters and account managers, with non-compete, non-solicit and confidentiality terms
• Commission plans and any earned-but-unpaid commissions
• Candidate agreements, right-to-represent forms and terms that govern candidate submission
• Conversion (temp-to-hire) fee terms in client contracts
• Who holds the client relationships: the owner, the account managers or the recruiters

Enforceability of non-competes varies by state and keeps changing, so treat any retention assumption as something counsel confirms.

Records and systems: what a buyer sees and what a data license could cover

Most checklists end at systems access. A staffing agency also holds records that are separable from the people in its database, and that separation is the useful point for an advisor.

The rule of thumb: candidate personal data stays out, client-owned content needs the client's consent, and the agency's own operational records are the licensable layer. Which parts qualify is decided with the company, under redaction rules agreed before any work begins.

How to use the checklist with a seller

Run the diligence list first, because it is what the sale needs. Then add one extra pass.

1. Ask the controller or operations lead for a list of systems and how many years each holds.
2. Ask who can run an export from the ATS, CRM, billing and payroll tools.
3. Ask whether any client contracts forbid using work records beyond the engagement.
4. Check the company against the who qualifies baseline: 50+ full-time employees at peak (contractors excluded), several years of documented operations, rights to license, and an authorized sponsor.

For staffing, the headcount test counts the agency's own internal staff, not the temporary workers it places. Many agencies with large field populations have a small internal team, so check this early. The company fit checker gives a preliminary, non-binding screen with no contact details required.

What the results mean

Red flags that rule out a data license

• The agency's data is mostly candidate personal information with no licensing basis
• A bankruptcy trustee or lender controls the assets and has not been consulted
• The same records were already licensed for AI training
• Nobody can export from the ATS or payroll platform
• The owner will not consider an exclusive license for an agreed term

A flag on the license does not affect the sale, which proceeds on its own track. Compare with the manufacturing company due diligence checklist and the broader cybersecurity due diligence checklist, since a licensed dataset still needs the security controls a buyer expects. After the LOI, confirmatory due diligence is where the system exports get tested.

How partner rewards work for an advisor

Partners earn 25% of the eligible platform fees SourceX actually collects from the referred company's licensing deals, capped at $100,000 per referred company. The reward is paid only after the buyer pays and SourceX receives its fee; an introduction, meeting or signed agreement alone does not trigger payment, and no reward is guaranteed. The reward is a share of SourceX's fee and is never deducted from what the company receives. Advisors who are licensed or regulated should check their own rules on referral fees, engagement letter disclosure and conflicts before referring a client. See referral opportunities for M&A advisors and the program terms.

Next step

Add the records pass to your next staffing engagement. If the agency clears it, register as a partner and make the introduction, or have the owner apply at sourcex.si/apply using your referral link.