The Due Diligence Illusion
Every M&A advisor will tell you they run comprehensive IT due diligence. What “comprehensive” means in practice is: a questionnaire, a surface-level scan, and a call with the target’s CTO.
This has been the standard for 15 years. It is now becoming obsolete — but not for the reasons most people think.
The problem isn’t that IT due diligence is done badly. The IT estate itself has become too large and too dynamic for a human-scale assessment to cover completely. A team of three consultants spending two weeks on IT due diligence cannot fully assess an estate with 40-80 SaaS applications, 3-7 cloud tenants, 2-4 AD forests, and thousands of user accounts.
What AI Changes About Discovery
An AI layer on top of the same scan does two things:
1. Risk scoring at scale. Every finding gets a risk score based on: does this connect to something critical? Does it have a known vulnerability pattern? Is it being used in a way that suggests it’s production-essential or forgotten?
2. Anomaly detection against your baseline. ACQI maintains a benchmark of what normal IT estates look like across industries, company sizes, and integration types. When your target’s estate has characteristics that fall outside normal parameters, the AI flags it.
Three Patterns AI Finds That Humans Miss
1. Behavioral anomalies in identity
A mid-market manufacturing company had 2,300 AD accounts. AI analysis found 47 of them had login patterns that didn’t match their job function: a service account that only ran during business hours, an inactive account being used for automated API calls by a production application, 12 accounts with domain admin privileges that hadn’t logged in in 60+ days.
2. SaaS contract patterns that signal shadow procurement
In three deals, ACQI’s AI found SaaS procurement patterns indicating the target had been buying software outside IT’s visibility: simultaneous renewals of duplicate tools, auto-renew clauses in contracts that hadn’t been reviewed in 18+ months.
3. Integration dependency chains that aren’t in any architecture doc
An enterprise software company being acquired had an integration between its SaaS CRM and its on-premise ERP that nobody had documented. AI discovery mapped the integration because it traces authentication paths across the entire estate — not just what’s documented, but what’s actually in use.
The Structural Advantage for Early Adopters
The acquirers running AI-enhanced discovery today have a two-year structural advantage. They’re finding things that competitors running traditional assessments are missing. They’re pricing deals more accurately. They’re negotiating from a position of information advantage.
This advantage will disappear as the technology becomes standard. That process takes 18-24 months in enterprise software adoption cycles. Right now, we’re in the early majority phase. In 18 months, it’ll be table stakes.
ACQI’s discovery runs 89 modules across your target’s entire IT estate in 48 hours, with AI risk scoring on every finding. See a sample output.