
In Parts 5-7, you survived the Diligence Gauntlet. Your team has produced the "Red Flag Report," and you now know exactly what you are buying—the good, the bad, and the ugly.
Now, we forge the "Marriage Contract."
This is the Definitive Purchase Agreement (DPA)—which will be an Asset Purchase Agreement (APA) or a Stock Purchase Agreement (SPA), as we discussed in Part 3. This is the single source of truth for the deal. The friendly, non-binding LOI is gone. This is the 100-page, legally binding fortress that dictates every aspect of the transaction.
Your lawyers will now work to translate every risk we found in diligence into a specific protection for you.
A DPA is a complex document, but it is built on three key pillars:
This section states the final, negotiated purchase price and its form. This is where we codify the results of our diligence. For example, the LOI may have said $100M, but after our QoE (Part 5) and legal diligence (Part 6) findings, the final price is $92M in cash at closing, plus a $5M "earnout" to be paid only if a certain new product ships.
It also definitively states the legal structure: Asset Purchase, Stock Purchase, or Triangular Merger.
Covenants are legally binding promises to do (or not do) something.
Pre-Closing Covenants (The most critical): These govern the seller's behavior during the "interim period" between signing the DPA and closing the deal. This period can last for weeks or months while we wait for regulatory approvals.
The #1 Covenant: The seller must "operate in the ordinary course of business".
Why this matters: This covenant preserves the value of the business you've agreed to buy. You cannot allow the seller, who now has "seller's remorse" or has mentally "checked out," to stop paying key suppliers, fire the entire sales team, sell off valuable assets, or declare a massive dividend to drain the company of cash. This covenant makes them keep the business intact until you take the keys.
Post-Closing Covenants: These are promises that survive the deal, such as the seller's agreement not to compete with you for a set number of years.
This is your final "walk-away" right. This section states that the deal is not done and the money will not be wired until every single item on this checklist is complete and true.
Key conditions always include:
The "Material Adverse Change" (or MAC) clause is one of the most heavily negotiated provisions in the entire agreement.
This clause is your "panic button." It says that if something catastrophic, "unknown," and durational happens between signing and closing that fundamentally destroys the target's business, you are not required to close the deal.
The negotiation is all about the "carve-outs". The seller's lawyers will fight to exclude (carve out) as many risks as possible. They will say, "We are not responsible if the entire economy collapses," or "We are not responsible for industry-wide downturns, pandemics, natural disasters, or acts of war".
Your legal team's job is to fight these carve-outs. We will argue that a pandemic should be a MAC if it disproportionately affects the target company compared to its peers.
I must be blunt: the bar to successfully invoke a MAC clause is incredibly high. A Delaware court, in the rare Akorn case, found that a MAC had occurred, but the facts were extreme. A MAC is not a "buyer's remorse" clause. It is your ultimate, last-ditch protection against buying a company that has, quite literally, fallen apart.
The Purchase Agreement sets the rules, the price, and the final checklist. It protects you from the seller's actions before the deal closes.
But what happens if a promise is broken? What if you discover, after closing, that the seller lied to you about a key fact?
Continue to Part 9 where we'll cover the most heavily negotiated clauses in the entire deal: the "Reps & Warranties" and "Indemnification"—the "what if you lied to me" provisions.
Previous: Part 7: The Diligence Gauntlet (Part 3 - People, Compliance, & Regulatory)
Next: Part 9: The "What If You Lied?" Clauses

Ryan previously served as a PCI Professional Forensic Investigator (PFI) of record for 3 of the top 10 largest data breaches in history. With over two decades of experience in cybersecurity, digital forensics, and executive leadership, he has served Fortune 500 companies and government agencies worldwide.

In fintech M&A, a high-performing gradient boosted tree that unintentionally reconstructs race from zip codes is the new toxic asset. A deep dive into the specific libraries, metrics, and statistical tests required to forensically audit black box models for fairness.

In distressed M&A, you're not buying future cash flows—you're assuming a high-interest technical loan the previous owners stopped servicing. Learn how to quantify the hidden cyber liabilities before they destroy your deal value.

When lawyers claim 'the AI made it up,' how do we validate that claim? A forensic deep-dive into the JSON parameters, log files, and API signals that differentiate stochastic error from intentional fraud.