The $5M Problem That Doesn’t Exist Yet: Finding Hidden Operational Risk Before a MedTech Acquisition

By Brent Chelgren, Director, Life Sciences & MedTech Industry Leader

A MedTech company is growing. Customers are satisfied. The quality system is functioning. The ERP works. Products are shipping. EBITDA is healthy. So why worry?

Because one of the most important questions during due diligence isn’t whether the business works today.

It’s this:

Will the company’s current operating infrastructure still work when the investment thesis succeeds?

That distinction matters.

A company can operate successfully at its current size while accumulating millions of dollars of future technology, quality, capacity, and operational investment requirements. Those costs may not appear in historical financial statements because the events that trigger them—rapid growth, an acquisition, facility consolidation, product transfer, ERP replacement, international expansion, or increased regulatory scrutiny—haven’t happened yet.

That’s the $5 million problem that doesn’t exist yet.

What Is Hidden Operational Risk in a MedTech Acquisition?

Hidden operational risk in a MedTech & Life Sciences organization is a technology, quality, manufacturing, compliance, or organizational weakness that is not materially affecting today’s financial performance but can become expensive as the company grows, changes, or executes its value creation plan. Examples include:

• ERP systems that support today’s volume but can’t scale across additional facilities
• Quality processes heavily dependent on manual records and spreadsheets
• Manufacturing processes dependent on tribal knowledge or a few key employees
• Computer system validation programs that haven’t kept pace with technology
• Fragmented ERP, MES, QMS, and laboratory systems
• Capacity constraints masked by overtime or scheduling workarounds
• Inconsistent processes and data definitions across multiple facilities
• Infrastructure that becomes difficult to separate during a carve-out or integrate after an acquisition

None necessarily means the company is poorly run. In fact, many are the natural result of growth.

The diligence question is whether those constraints will become material during the sponsor’s ownership period.

The Question Isn’t “Is It Broken?”

In a recent MedTech diligence, we encountered a familiar situation.

The target was an established regulated manufacturer with experienced employees, functioning quality processes, active customers, and operations successfully supporting the current business.

At first glance, there wasn’t an obvious technology or operational crisis. Dig deeper, however, and a different question emerged.

Could the same environment support significantly higher volume, multiple locations, greater automation, tighter customer requirements, and the value creation initiatives contemplated by a new owner?

That is a very different test.

Processes that were perfectly adequate at the company’s current scale could eventually require investment in systems, automation, validation, capacity, data, and organizational capabilities.

The issue wasn’t necessarily: “Something is broken.” It was: “What will have to change if the investment thesis works?”

That is one of the most important distinctions in operational due diligence.

Today’s Workaround Can Become Tomorrow’s Constraint

Middle-market MedTech companies are often remarkably good at making imperfect environments work.

Experienced employees know how to navigate exceptions. Production planners understand which spreadsheet contains the real schedule. Quality personnel know which manual steps matter most. Finance reconciles data across systems. Operations leaders know which customer or product needs attention.

At the current scale, that can work surprisingly well. Growth changes the equation.

A spreadsheet used by one planner becomes difficult to manage across three plants. A manual quality process supporting 50 transactions becomes burdensome at 500. A scheduling process based on tribal knowledge struggles when the experienced planner leaves. An ERP that adequately supports one facility becomes a constraint when management wants consolidated planning, inventory visibility, standardized costing, or integration with an acquisition.

Growth doesn’t necessarily create these problems. It exposes them.

Five Areas Where the Future Cost Often Hides

1. Technology and Systems

An ERP, MES, QMS, LIMS, CRM, or other platform doesn’t have to be failing to represent future investment.

The better IT due diligence questions are:

• Can the architecture support projected growth?
• Can systems integrate with an acquirer’s environment?
• Are critical processes occurring outside core systems?
• Is master data reliable and governed?
• Can management obtain consistent information across sites?
• Are regulated systems appropriately validated?

A legacy application that works today may still become tomorrow’s ERP replacement, integration program, or validation project.

2. Quality and Regulatory Infrastructure

A company can have a good regulatory history while still carrying quality-system debt.

Manual records, inconsistent validation practices, weak data governance, excessive reliance on individual knowledge, or fragmented quality systems may remain manageable until transaction volumes, product complexity, or regulatory expectations increase.

The important distinction is between passing today’s audit and sustaining compliance at tomorrow’s scale.

3. Manufacturing Capacity and Scalability

Current utilization numbers don’t always tell the complete story. Capacity may depend on overtime, manual scheduling, specific operators, long changeovers, excess WIP, inspection bottlenecks, or equipment that cannot economically support significantly higher volume.

A growth thesis should therefore ask: What capital, labor, automation, and process changes are required to produce the revenue in the investment case?

4. Data and Management Visibility

One of the simplest diligence tests is surprisingly powerful: Ask different leaders for the same operating metric.

Inventory. Scrap. Capacity. On-time delivery. Utilization. Forecast accuracy.

If definitions or answers vary materially, the company may have a data problem that hasn’t yet become a financial problem. That matters because sophisticated value creation increasingly depends on reliable data for S&OP, pricing, margin management, automation, and AI.

AI won’t fix data the management team doesn’t trust.

5. Organizational Dependency

Sometimes the most important system isn’t software. It’s a person.

Many successful middle-market companies rely on highly experienced employees who understand processes, customer requirements, equipment, planning rules, and system workarounds better than anyone else. Those people are tremendously valuable.

But when a critical business process works only because one person knows how to run it, that expertise also creates operational concentration risk. Scalability requires converting institutional knowledge into repeatable processes, systems, controls, and data.

Translate Risk Into the Investment Thesis

Identifying a weakness isn’t enough. Good operational diligence should connect the observation to financial and strategic impact.

Consider the difference:

Observation:
The company relies heavily on spreadsheets for production planning.

Versus:

Investment implication:
The current planning process supports existing volume but may not scale with the projected growth plan. Achieving targeted capacity and inventory improvements may require additional planning capabilities, system integration, and process standardization.

The second statement helps an investor make a decision.

Every significant diligence finding should ultimately answer four questions:

1. What did we observe?
2. Why does it matter?
3. When could it become material?
4. What could it cost or require to address?

That is how operational diligence becomes useful to an investment committee rather than simply producing another list of findings.

Not Every Gap Needs to Be Fixed

This is equally important.

Finding operational debt doesn’t mean recommending that the investor immediately replace every legacy system, automate every process, or remediate every imperfection. Some gaps may never become material. The decision should depend on the investment thesis. If the strategy is modest organic growth, the existing environment may remain perfectly adequate.

If the post-merger integration strategy calls for doubling revenue, completing three add-on acquisitions, consolidating facilities, launching new products, or significantly expanding margins, the same infrastructure may become a major constraint.

The right future state depends on where the business is going—not simply where it is today.

A Better Question for MedTech Investors

During diligence, investors understandably ask: “Can this business support itself today?”

Add another question: “Can this operating model support the company we expect to own three to five years from now?”

That question changes the diligence conversation. It shifts attention from today’s problems to tomorrow’s constraints. From current compliance to scalable compliance. From installed systems to required capabilities. From existing capacity to investment-thesis capacity. And from identifying risks to understanding the capital and execution required to create value.

Sometimes the most important problem in a MedTech acquisition is the one that doesn’t exist yet. Finding it before close gives investors something far more valuable than another red flag.

It gives them time to plan for it.

Find the Risk Before It Becomes Yours

A MedTech target may be performing well today and still require significant investment to support growth, integration, or increased regulatory demands. TriVista helps investors and management teams assess technology, quality, operations, and scalability before close, then translate the findings into a practical plan for value creation.

Talk to a MedTech Due Diligence Expert >

Frequently Asked Questions

What operational risks should investors assess during MedTech due diligence?

Investors should evaluate manufacturing scalability, quality systems, regulated technology, validation and data integrity, cybersecurity, organizational dependencies, capacity, and the ability of existing infrastructure to support the investment thesis.

How can operational diligence identify future costs?

Operational diligence compares current capabilities with future business requirements. Gaps between the two can reveal likely investments in ERP, MES, QMS, automation, capacity, validation, infrastructure, and organizational capabilities before those costs affect financial performance.

Why can a successful MedTech company still have significant operational risk?

Processes and systems can work effectively at the company’s current scale but become constraints as transaction volume, product complexity, regulatory requirements, acquisitions, or manufacturing capacity increase.

How should private equity firms evaluate technology during MedTech diligence?

Technology should be evaluated against the value creation plan, not simply its current functionality. Investors should assess scalability, integration, data quality, validation, cybersecurity, technical debt, and the likely cost and timing of required improvements.

Does every technology or operational gap require remediation?

No. The significance of a gap depends on the investment thesis. The goal of diligence is to distinguish manageable technical debt from constraints that could materially affect growth, integration, compliance, EBITDA improvement, or exit value.