A practical guide to the due diligence data room for buying a dental practice -- covering production reports, PPO contracts, lease assignment and the closing pack.
Buying a dental practice means reviewing production by provider and procedure, verifying PPO fee schedules, confirming lease assignment rights, and checking HIPAA compliance before you wire the funds. Miss any one of these workstreams and the practice's value on paper does not survive contact with the real numbers.
Papermark: best for dental practice M&A due diligence. EU-hosted, SOC 2 Type II and ISO 27001 certified, from $99/month with unlimited data rooms, NDA gating and per-page analytics. See the Papermark profile for full detail.
Crestwood Dental Group is a DSO acquiring a three-location family practice in the Southeast. The seller, Dr. Emily Vargas, has operated each location for eight to fifteen years and employs seven dentists (two are associates, five are contractors), twelve hygienists, and a shared administrative team of nine. Total annual collections across the three locations are approximately $4.2 million.
Crestwood's deal team has 45 days to complete diligence before the purchase agreement must be signed. The seller's practice management consultant has produced a practice summary deck, but the underlying data sits in a Dentrix database that Crestwood's analysts cannot query directly. All diligence will flow through a data room that the sell-side adviser sets up in the first week.
Crestwood's M&A associate notes three complicating factors immediately: two of the three locations are subleased from a real estate holding company that Dr. Vargas controls personally, the largest PPO contract at the main location renegotiates at the end of the calendar year, and one of the contractor dentists accounts for 31 percent of production at the busiest site. Each factor creates a contingency that must be resolved or priced before the deal closes.
The data room is the only way Crestwood can work through all three complicating factors in parallel, coordinate its dental-specific CPA, practice management consultant, and healthcare attorney across 45 days, and produce a documented record of what was reviewed if the representations-and-warranties insurer asks.
A dental acquisition data room follows a tighter, more specialized structure than a general business acquisition. The items below reflect the categories that show up in every buy-side request list for a multi-location dental practice.
01 Corporate and Governance
01.1 Entity formation documents (all entities in the practice group)
01.2 Operating agreements, bylaws, shareholder agreements
01.3 Ownership schedule with percentage interests
01.4 Any professional entity or management services organization (MSO) structure chart
01.5 State dental board registrations for each location
01.6 DEA registrations by location
02 Production and Financial
02.1 Practice management system production reports -- by provider, by procedure (3 years)
02.2 Collections reports by provider, by payer, by location (3 years)
02.3 Accounts receivable aging report (current, 60, 90, 120+ days by payer)
02.4 Overhead analysis by location (12 months trailing)
02.5 Tax returns (business entity, 3 years)
02.6 Reviewed or audited financial statements (if available)
02.7 Bank statements (12 months trailing)
02.8 Year-to-date profit and loss statement (within 30 days of LOI)
03 Insurance and Payer Contracts
03.1 All PPO fee schedules by carrier and location
03.2 PPO network participation agreements (full contract text, not summaries)
03.3 HMO or capitation agreements (if applicable)
03.4 Medicaid or CHIP participation agreements (if applicable)
03.5 Credentialing files for each provider (current and historical)
03.6 Out-of-network billing history and any payer disputes
04 Human Resources and Provider Agreements
04.1 Associate employment agreements (all current associates)
04.2 Independent contractor agreements (all contracted providers)
04.3 Non-compete and non-solicitation agreements (all providers)
04.4 Staff roster with role, tenure, compensation, and status (W-2 or 1099)
04.5 Any key-person agreements or retention bonuses
04.6 Employee benefit plan summary (health, retirement)
04.7 Payroll records (last 12 months)
05 Real Estate and Equipment
05.1 Lease agreements for each location (full text)
05.2 Lease assignment or change-of-control provisions (highlighted)
05.3 Any landlord consent or notice requirements
05.4 Equipment list by location with purchase date, financing, and estimated value
05.5 Equipment financing and loan agreements
05.6 Dental equipment service contracts (compressors, sterilization, imaging)
05.7 CBCT and digital imaging system agreements
06 Compliance and Regulatory
06.1 HIPAA privacy officer designation and training records
06.2 Business Associate Agreements (BAAs) with all third-party vendors
06.3 Most recent HIPAA risk assessment
06.4 OSHA compliance records (bloodborne pathogen training, exposure control plan)
06.5 Infection control policies and last inspection results
06.6 Radiation safety compliance (state-specific)
06.7 Any state dental board investigations, complaints, or disciplinary actions (5 years)
06.8 DEA Controlled Substance registration and any audit history
07 Patients and Clinical
07.1 Active patient count by location (30, 60, 90, and 180-day recall windows)
07.2 New patient volume by month (24 months)
07.3 Hygiene recall percentage by location
07.4 Malpractice claims history (5 years), including claims closed without payment
07.5 Current malpractice insurance declarations page
07.6 Any open patient complaints
08 Technology and Systems
08.1 Practice management software: name, version, and license terms
08.2 Electronic dental record (EDR) system (if separate)
08.3 Digital imaging software and PACS agreements
08.4 Patient communication platform (recall, reviews, scheduling)
08.5 IT support contract and last network assessment
09 Transaction
09.1 Letter of intent
09.2 Draft purchase agreement
09.3 Seller disclosure schedules
09.4 Any prior offers, letters of intent, or broker engagement letters
Production reports are the diagnostic that every dental-specific CPA and practice broker will review first. For a multi-provider practice, ask for the following from the practice management system (Dentrix, Eaglesoft, Curve, or equivalent):
By provider, by procedure, by month. Three years of monthly production broken down by each dentist and each ADA procedure code category. This shows who is producing what, how each provider's mix has shifted over time, and whether production is concentrated in one doctor.
In Crestwood's case, the contractor dentist at Site A accounts for 31 percent of production. His contractor agreement includes a 30-day termination clause with no restrictive covenant enforceable in his state. Crestwood's model must stress-test the acquisition price assuming that provider's production drops by 50 percent in year one.
By payer. A production-by-payer report shows the PPO network mix: what percentage of production comes from Delta Dental, Cigna, Aetna, MetLife, Humana, United Concordia, and other networks. This sets up the PPO fee schedule review (see below) and tells you whether the practice is over-reliant on any single payer. Over 40 percent from one PPO is a concentration risk, particularly if that payer has contractual renegotiation triggers on a change of ownership.
By procedure category. Production by category (preventive, restorative, endodontics, oral surgery, orthodontics, implants) reveals the revenue mix. A practice that has grown implant or Invisalign revenue in the last two years may warrant a separate revenue sustainability analysis, especially if the growth was driven by a single provider.
PPO contracts are not transferable by default. Every network participation agreement has change-of-ownership provisions: some require prior notice, some require re-credentialing, some give the payer a right to terminate. A DSO that has gone through dental acquisitions before will already have a network contract management firm or an internal payer relations team. A private buyer typically relies on its healthcare attorney.
The diligence checklist for payer contracts:
For Crestwood, the Delta Dental contract at Site A renews at year-end and includes a fee schedule that is currently 12 percent above Crestwood's existing Delta rate at other locations. Crestwood's payer relations team estimates that renegotiation will bring the fee schedule to parity, reducing net production revenue at Site A by approximately $180,000 annually. That finding goes directly into the purchase price model.
Dental practices are worth far less without the locations they operate in. A buyer who signs a purchase agreement without confirming lease assignability has a deal that may not close if the landlord refuses to consent.
Review the lease for:
Assignment clause. Can the tenant assign the lease to a buyer? Is landlord consent required, and on what terms (not to be unreasonably withheld, or at sole discretion)?
Change-of-control trigger. Some leases define a change in majority ownership of the tenant entity as an assignment requiring consent, even if the entity itself is not changing. This is common in healthcare real estate leases.
Remaining term. A buyer paying 7x EBITDA for a practice on a lease with 18 months remaining and no renewal option has a valuation problem.
Sublease risk. In Crestwood's case, two of the three locations are subleased from Dr. Vargas's personal real estate holding company. That sublease structure introduces a related-party conflict: the seller controls the landlord entity. The sublease must be reviewed for market terms, and the buyer must confirm it will survive the ownership change or negotiate a direct lease with the underlying landlord.
An AR aging report is not just a snapshot; it is a window into the billing and collections function. Review:
A dental practice with more than 15 percent of AR in the 90+ day bucket typically has a billing workflow problem, a payer dispute, or both. Normalizing the AR picture before closing -- by negotiating an AR holdback or post-close collection mechanism -- protects the buyer from inheriting a billing backlog.
The active patient count is a leading indicator of revenue sustainability. The standard definition is patients who have visited at least once in the past 18 months (some buyers use 24 months). Compare this to the recall percentage in the hygiene department:
Hygiene recall rate is the percentage of active patients who are current on their preventive care schedule. A recall rate below 60 percent suggests the practice is not converting active patients into recurring hygiene visits, which is the foundation of dental practice revenue.
For each location, ask for:
Patient records are protected health information (PHI) under HIPAA. The buyer is assuming responsibility for that data. HIPAA compliance is not optional and is not a box to check at closing: a buyer who discovers post-close that the practice has not conducted a HIPAA risk assessment in five years has inherited a regulatory liability.
Confirm:
If any of the above is missing, a pre-close remediation plan is required.
Each dental practice location that administers controlled substances (typically nitrous oxide, oral sedation agents, or injectable anesthetics) holds a DEA registration. That registration is site-specific and provider-specific: it does not transfer with the practice.
The buyer must:
Treating the production summary as the production report. A one-page practice summary from a broker is not the same as a provider-by-procedure production report pulled from the practice management system. Insist on the raw data.
Skipping the payer contract review. PPO fee schedules are not transferable without review. A DSO that assumes its existing payer rates will apply to an acquired practice without a network transition analysis is making a material pricing error.
Underweighting key-person concentration. In a small dental practice, one provider accounting for more than 25 percent of production is a known risk. Build a sensitivity analysis, review the non-compete agreement for enforceability, and consider a retention arrangement as a condition of close.
Signing without lease clarity. A letter of intent that does not condition close on lease assignability (or a binding landlord consent) creates a negotiating problem after the purchase agreement is signed.
Ignoring HIPAA. A post-close HIPAA breach at a practice that had no Business Associate Agreements in place is both a regulatory exposure and a reputational problem. Add it to the pre-close checklist.
Dental acquisitions generate large volumes of sensitive documents: production reports, PPO contracts, patient count data, provider agreements, and HIPAA compliance files. The data room must enforce view-only access on clinical and patient-adjacent records, support separate permission groups for the buyer's CPA, healthcare attorney, and practice management consultant, and produce an audit log that documents which files were reviewed by whom and when.
Papermark is the best choice for buy-side dental practice due diligence:
The best virtual data room for M&A hub covers the full M&A use case in detail.
What is the most important document in dental practice due diligence?
The provider-by-procedure production report is the single most important document. It shows who is producing what revenue, through which procedures, and at what payer mix. Every other financial metric follows from the production data.
Do PPO contracts transfer automatically in a dental acquisition?
No. Each network participation agreement has its own change-of-ownership provisions. Some require prior notice; some require re-credentialing; some give the payer a right to terminate. A DSO may extend its existing agreements to acquired locations, or may need to re-credential from scratch. A healthcare attorney with dental payer contract experience should review all agreements before close.
How is active patient count defined?
The standard definition is a patient who has visited at least once in the last 18 months. Some buyers and lenders use 24 months. Confirm which definition the seller is using when they report an active patient count.
What is a typical hygiene recall rate for a well-run dental practice?
A well-run general dental practice typically achieves a hygiene recall rate of 75 percent or above. A rate below 60 percent indicates a workflow or scheduling problem that will require correction under new ownership.
How should a DSO handle lease assignment at acquired locations?
The buyer should identify the assignment clause and any change-of-control trigger in each lease during diligence, confirm that landlord consent is obtainable, and condition the purchase agreement on receiving that consent (or a binding representation from the seller that it will be delivered by close).
What HIPAA steps are required before a dental practice acquisition closes?
Before close, the buyer should confirm: a HIPAA privacy officer is designated, Business Associate Agreements are in place with all relevant vendors, a risk assessment has been conducted within the last two years, and the data room platform itself has a BAA available. Post-close, the buyer should conduct its own HIPAA risk assessment within 90 days.
What happens to the DEA registration when a dental practice is acquired?
DEA registrations are site-specific and do not transfer. The buyer's providers must apply for new DEA registrations for each location where they will administer controlled substances. Plan for a 4-6 week processing time and ensure the seller's current registration remains valid through close.
Is a dental practice acquisition different from other healthcare M&A?
Yes, in several important ways: production data lives in a practice management system (not standard financial accounting software), payer contracts are network-specific and not automatically assignable, HIPAA covers patient records rather than just financial data, and the DEA registration is provider-specific. A general M&A data room setup will miss these categories without dental-specific customization.
For related guides on M&A due diligence across other sectors, see:
História real de uma aquisição industrial de $50M: como a empresa-alvo usou funcionalidades de VDR para acelerar a due diligence, gerir vários compradores e fechar 6 semanas mais cedo do que esperado.
Primeira aquisição? Fundador a preparar uma saída? Eis a checklist prática de due diligence de M&A de que realmente precisa, além de como organizar tudo numa data room que não leve os compradores à loucura.
Guia completo de due diligence operacional, incluindo framework, checklist e melhores práticas para avaliar operações, pessoas, sistemas e conformidade de empresas-alvo em operações de M&A.
Guia completo de due diligence farmacêutica, incluindo requisitos regulatórios, conformidade FDA, avaliação de produtos e considerações específicas do setor para transações de M&A na indústria farmacêutica.