The capital allocators that survive in the GCC are the ones who run a standard pre-investment validation discipline on every deal — not just the ones that "feel risky." This page documents the eight checks that distinguish a real validation process from the polite confirmation exercise most firms call due diligence.
1. Why GCC deals fail validation more often than they should
Four structural reasons. First, much of the deal-flow comes through warm intros where social capital discourages hard questions. Second, founder narratives in the region often blur the distinction between addressable market and actual revenue. Third, family-conglomerate distribution control creates conflicts that don't surface in management decks. Fourth, regulatory edge cases (foreign-ownership caps, Saudisation quotas, free-zone substance) catch investors after the cheque clears.
2. The eight pre-investment checks
| # | Check | Time needed | Common failure mode |
|---|---|---|---|
| 1 | Regulatory feasibility | 2-3 days | Structure allowed in theory but blocked by sector permit |
| 2 | Founder track record | 3-5 days | Prior bankruptcy or litigation not disclosed |
| 3 | Cap-table audit | 2-3 days | Offshore SPVs with unclear beneficial owners |
| 4 | Revenue verification | 5-8 days | Reported revenue 20%+ above bank reality |
| 5 | Partner conflict scan | 3-5 days | Distributor represents competing products |
| 6 | Customer concentration | 3-5 days | One customer 50%+ with no contractual depth |
| 7 | Working-capital cycle | 2-3 days | DSO 180+ days masked in headline numbers |
| 8 | Exit pathway plausibility | 2-3 days | No comparable exits in the region |
3. Check 1: Regulatory feasibility
The question to answer is not "Is this activity allowed?" but "Is this specific structure with this specific ownership allowed for this specific product category?" In UAE, 100% foreign ownership applies to most activities since 2021 — but not all. Sector permits (DHA for healthcare, KHDA for education, VARA for crypto, CBUAE for fintech) gate operational launch even after the licence is granted.
4. Check 2: Founder track record
Two layers: public records and reference calls.
- Public records — UAE Federal Court e-Services, DIFC Courts judgments database, Saudi MOJ for litigation. Free-zone authority records for prior company registrations. Bankruptcy filings (UAE law has a formal bankruptcy regime since 2016).
- Reference calls — three minimum. One supportive (founder-provided), one industry-peer (your network), one prior employer or co-founder (sometimes adversarial). The triangulation matters more than any single call.
5. Check 3: Cap-table audit
Walk through every funding round. Verify:
- Pre-money and post-money valuations are arithmetically consistent.
- Option pool size and grant history.
- Anti-dilution provisions and their triggers.
- Beneficial ownership behind any SPV or holding entity.
- Prior secondary transactions, especially founder secondaries (often a hidden signal).
6. Check 4: Revenue verification (the most important one)
Three-source cross-check:
| Source | What it shows |
|---|---|
| Bank statements (12 months) | Actual cash collected. Deposits matched to invoices. |
| VAT filings (UAE: 5%, KSA: 15%) | Declared revenue to tax authority. Hard to inflate without trail. |
| Customer calls (top 3-5) | Confirmation of contracts, prices, volumes, renewal intent. |
Gap analysis: a 20%+ delta between management-reported revenue and any of these sources is the highest-conviction kill signal. The gap doesn't always mean fraud — could be timing differences, related-party transactions, or one-off contracts — but it requires explicit reconciliation before proceeding.
7. Check 5: Partner and distribution conflict scan
In every GCC market, a small number of family conglomerates control distribution in most categories. Failing to map them is the single most common entry mistake. For each significant distributor or channel partner:
- What other portfolio brands do they carry?
- Any direct competitors in their stable?
- Conflict-of-interest risk if you appoint them?
- Exclusivity terms (and exit clauses)?
- Performance history with other clients in the same category?
8. Check 6: Customer concentration
| Concentration | Risk grade | Mitigation |
|---|---|---|
| Top customer > 50% revenue | HIGH | Contract length, renewal history, switching cost analysis |
| Top 3 customers > 70% | HIGH | Diversification plan with milestones |
| Top 5 customers > 80% | MEDIUM | Pipeline depth verification |
| No customer > 15% | LOW | Standard scenario modelling sufficient |
9. Check 7: Working-capital cycle
GCC payment terms in many sectors run 90-180 days. A business that reports growing revenue but has a 180-day DSO is consuming cash faster than it generates. Cash-conversion-cycle calculation:
CCC = DSO + DIO − DPO
Verify each component against bank statements. Compare to industry benchmarks. A CCC of 60-90 days is normal in B2B services; 30-45 days is healthy in retail. A 180+ day CCC with reported "growth" is a financing-burn pattern that often precedes failure.
10. Check 8: Exit pathway plausibility
Test three exit scenarios with regional comparables:
- Strategic sale to a regional buyer (e.g., a GCC family conglomerate, regional PE platform). Recent comparable transactions in the same sub-sector?
- Secondary buyout to a larger PE firm. Is the business at a stage that attracts secondary buyers?
- IPO on Tadawul, ADX, or DFM. Recent IPOs in the same sub-sector? What revenue and EBITDA size are required?
If none of the three scenarios has a recent (last 24 months) comparable transaction, the exit pathway is theoretical. That doesn't kill the deal automatically but requires explicit risk pricing.
11. Synthesizing into a verdict
After the eight checks, synthesise into one of three verdicts:
- PROCEED — all eight checks pass or have manageable risk profiles.
- PROCEED WITH CONDITIONS — investment is viable but contingent on specific resolutions (e.g., a partner renegotiation, a customer-contract extension, a regulatory clarification).
- AVOID — one or more checks identified a deal-killer. Document the killer in writing.
Need pre-investment validation on a specific GCC deal?
Gulf Commercial Insights delivers eight-check pre-investment validation as a 10-section evidence-graded report with PROCEED, CONDITIONS, or AVOID verdict. Trade Licence CL11954, DIFC.
Request a scoping callRead the methodology