Prepared by: Layer8TechGroup · Framework: 10 Technology Fixes — Tier 1 · Documents Ingested: cached collection (previously ingested)
Overall Score
3.3/10
5-domain blend
Buyer Discount Risk
1.5 – 1.8×
SDE · Main Street
EBITDA
$465,000
most recent FY
Vertical
Default
default
Assessment Scores — 8-Domain Profile
Value Recovery RoadmapTotal Recoverable Value: $395,250
Prioritized by estimated recovery value · 8 scored domains · 90-day remediation timeline
| Domain | Layer8 Service | Deal Impact | Value at Risk | Est. Timeline | Typical Investment | Est. ROI |
|---|---|---|---|---|---|---|
DRDiligence Risk✓ Quick Win | Security Hardening & Data Room Preparation | +13% | $59,288 | ⏱ 6–8 wks | $4,500 – $7,500 | ~10x |
OROwner Risk✓ Quick Win | Succession Planning & Knowledge Capture Sprint | +13% | $59,288 | ⏱ 8–10 wks | $6,000 – $10,000 | ~7.5x |
CQCustomer Quality✓ Quick Win | Contract Audit & CRM Implementation | +13% | $59,288 | ⏱ 8–10 wks | $5,000 – $9,000 | ~8.5x |
FRFinancial Readiness✓ Quick Win | Books Cleanup & Add-Back Schedule | +11% | $51,383 | ⏱ 6–8 wks | $4,000 – $7,000 | ~9.5x |
OSOperational Scalability✓ Quick Win | Process Documentation & Systems Audit | +10% | $47,430 | ⏱ 10+ wks | $6,500 – $11,000 | ~5.5x |
TMTechnology & Systems Maturity | Technology Infrastructure Audit & Modernization Plan | +10% | $47,430 | ⏱ 8–12 wks | $5,000 – $9,000 | |
LCLegal & Regulatory Compliance | Legal Compliance Audit & Contract Review | +9% | $39,525 | ⏱ 8–10 wks | $6,000 – $10,000 | |
HCHuman Capital & Key Employee Risk | Key Employee Retention & Documentation Sprint | +7% | $31,620 | ⏱ 8–10 wks | $5,000 – $9,000 | |
| TOTAL | — | $395,250 | — | $42,000 – $72,500 | ~7x | |
Quick Win items are flagged ✓ in the table above — these deliver the highest remediation ROI in the shortest timeline and are the recommended starting point for any remediation plan.
Typical investment ranges reflect market-rate remediation costs and are provided for prioritization purposes only. Actual engagement scope and pricing depend on business size, gap severity, and selected service provider. Layer8 Tech Group provides formal engagement proposals following assessment delivery.
Ready to recover this value before you list?
Layer8 Tech Group delivers these services for businesses preparing for acquisition.Schedule a Discovery Call →
Layer8 Tech Group delivers these services for businesses preparing for acquisition.Schedule a Discovery Call →
Valuation Impact Analysis
Main Street · SDE
Default businesses in this size range typically trade at
1.5–2.5× SDE
— General SMB multiple range for businesses that do not fit a named vertical. Assign the most specific vertical available for accurate valuation guidance.
Score-adjusted range
(Exit Readiness 3.3/10 — Main Street — at floor)
EBITDA (most recent FY): $465,000 (AI-extracted)
Not Ready
Very High — consider delaying go-to-market
| Scenario | Score-Adjusted Range | Implied Value (SDE) |
|---|---|---|
| Current (as-is) | 1.5×–1.8× SDE | $697,500 – $837,000 |
| Post-Remediation (5.3/10 est.) | 1.5×–2.0× SDE | $697,500 – $930,000 |
Implementing the recommended priority fixes over 90 days could add an estimated ~$46,500 to the transaction value — a potential 6% lift on the same underlying business.
Domain Detail & Findings
Diligence Risk3.5/10 NEEDS WORK (15% blend)
Deal Impact: Documentation gaps will extend diligence and require owner availability — expect timeline delays and buyer leverage.
| ID | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| fix_01 | Documented Processes & SOPs GLS_Customer_Onboarding_SOP.txt · GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt · GLS_Financials.csv — High confidence — multiple documents corroborated The company has minimal documented processes with critical knowledge concentrated in individual employees. The Customer Onboarding SOP contains only working notes with person names rather than role descriptions, explicitly states "Everything lives in [PERSON]'s head and [PERSON]'s head right now" regarding subcontractor scheduling, and lacks formal procedures for key workflows like installation project management and chemical handling. Training is entirely informal with no documented playbook, and the operational backbone employee has no documented backup, creating severe single-person dependencies that would require the owner to return to full-time field operations if this individual departed. | 3/10 | CRITICAL RISK | |
| fix_02 | Cybersecurity Posture GLS_Cybersecurity_Assessment.txt · GLS_Customer_Onboarding_SOP.txt · GLS_HC_Profile.txt · GLS_CIM.txt — High confidence — multiple documents corroborated The company has a minimal cybersecurity posture with significant gaps across access controls, endpoint protection, and incident response. MFA is enforced only for the owner, ServiceTitan uses shared credentials with no audit trail, there is no EDR deployed, no MDM for 10 field iPads, no formal incident response policy, and backups rely solely on a local NAS with no offsite redundancy or documented testing. The cybersecurity assessment explicitly rates the overall risk as MEDIUM and identifies multiple HIGH-priority gaps requiring remediation before a sale process, including no MFA enforcement and shared client data access credentials. | 4/10 | NEEDS WORK | |
| fix_03 | Owner Dependency GLS_HC_Profile.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Cybersecurity_Assessment.txt · GLS_CIM.txt — High confidence — multiple documents corroborated The owner is the primary operator and holds critical relationships across the business, creating significant single-point-of-failure risk. The documents explicitly state "No succession plan. Business has not operated without the owner for more than 5 consecutive business days," and note that a key operational manager has "No documented backup for his role" such that "If [PERSON] departed, the owner would need to step back into full-time field operations." Additionally, the owner personally signs all commercial contracts, approves all crew leader hires, handles estimates over $10K, and manages top HOA relationships with only informal secondary contacts documented. | 3/10 | CRITICAL RISK | |
| fix_04 | Revenue Quality & Concentration GLS_HC_Profile.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Cybersecurity_Assessment.txt · GLS_Financials.csv — High confidence — multiple documents corroborated Greenscape Landscaping demonstrates moderate revenue quality with a diversified client base (48+ clients listed), but lacks documented evidence of recurring revenue percentages, renewal rates, or contract terms. While the financial excerpt shows multiple maintenance contracts suggesting recurring revenue, the largest client represents 3.1% of revenue with no concentration risk, yet critical operational dependencies on the owner and one key foreman (documented in succession planning section as "Both required for renewals" for commercial accounts) create revenue predictability concerns that are not offset by formal contract documentation or renewal rate tracking. | 5/10 | NEEDS WORK | |
| fix_05 | Customer Contracts GLS_HC_Profile.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Financials.csv · GLS_Cybersecurity_Assessment.txt — High confidence — multiple documents corroborated Customer contracts lack standardization and centralized documentation; the onboarding SOP shows contracts are signed by the owner and manually entered into ServiceTitan, with "everything lives in [PERSON]'s head and [PERSON]'s head right now" regarding subcontractor management and scheduling. No evidence of change-of-control clauses, assignment language, or formal renewal tracking exists in the retrieved documents, and a 2022 H-2B labor shortage forced the company to subcontract work at reduced margins, indicating contracts may lack sufficient flexibility or transferability provisions. | 3/10 | CRITICAL RISK | |
| fix_06 | IT Infrastructure & Asset Documentation GLS_Customer_Onboarding_SOP.txt · GLS_Cybersecurity_Assessment.txt · GLS_HC_Profile.txt — High confidence — multiple documents corroborated The company maintains minimal IT infrastructure documentation with significant gaps in asset inventory and maintenance practices. The cybersecurity assessment identifies no endpoint device management (field iPads lack MDM enrollment and remote wipe capability), no documented backup testing, and critical business processes residing in individual employees' knowledge ("Everything lives in [PERSON]'s head and [PERSON]'s head right now"). There is no formal disaster recovery plan, and the local NAS serves as the only backup with no offsite or cloud redundancy, creating single points of failure for client data and operational continuity. | 3/10 | CRITICAL RISK | |
| fix_07 | CRM & Pipeline Documentation GLS_Customer_Onboarding_SOP.txt · GLS_Cybersecurity_Assessment.txt · GLS_HC_Profile.txt — High confidence — multiple documents corroborated Greenscape uses ServiceTitan as a CRM but with significant gaps in adoption and discipline. The onboarding document explicitly states "Everything lives in [PERSON]'s head and [PERSON]'s head right now" regarding installation projects and subcontractor scheduling, and the cybersecurity assessment notes that field supervisors share a single ServiceTitan login with no audit trail, indicating limited individual accountability and pipeline visibility. There is no evidence of forecast validation, stage discipline enforcement, or documented sales process beyond owner-driven estimates for projects over $10K. | 3/10 | CRITICAL RISK | |
| fix_08 | Key Employee Risks GLS_HC_Profile.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Cybersecurity_Assessment.txt — High confidence — multiple documents corroborated The business has multiple critical single points of failure with no documented succession plan or retention agreements. The operational backbone ([PERSON]) manages crew scheduling, quality control, equipment troubleshooting, and field supervision with "no documented backup for his role" and the owner would need to return to full-time field operations if he departed. Additionally, commercial account renewals require both the owner and Miguel with no backup identified, institutional knowledge exists only in individuals' heads ("Everything lives in [PERSON]'s head and [PERSON]'s head right now"), and there is no formal training playbook or documented SOPs for critical processes like equipment operation and chemical handling. | 3/10 | CRITICAL RISK | |
| fix_09 | Financial Trajectory & EBITDA Quality GLS_Customer_Onboarding_SOP.txt · GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt · GLS_CIM.txt — High confidence — multiple documents corroborated The company demonstrates 3 years of consistent revenue growth (12.5% and 11.1% YoY) with improving EBITDA margins (12.0% to 15.0%), meeting basic growth criteria. However, the documents provide no evidence of audited or reviewed financials—only internal financial summaries—and add-backs appear reasonable but limited in documentation ($47,000 total for FY [DATE_TIME], primarily owner compensation and vehicle expenses). The lack of third-party financial review and absence of any audit or review statement places this in the "compiled financials" category despite otherwise clean margin performance. | 6/10 | ADEQUATE | |
| fix_10 | Data Room Readiness GLS_Customer_Onboarding_SOP.txt · GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt — High confidence — multiple documents corroborated The retrieved documents reveal critical gaps in data room organization and readiness. Key operational and compliance documentation is either missing, scattered across personal systems, or exists only in informal notes—for example, the onboarding SOP notes that subcontractor processes and critical scheduling information "lives in [PERSON]'s head," and there is no documented training playbook, no formal offboarding checklist, and no backup for critical operational roles. The company would require substantial preparation to compile and organize the financial records, contracts, HR documentation, compliance certifications, cybersecurity policies, and operational procedures needed for buyer due diligence. | 2/10 | CRITICAL RISK |
Owner Risk2.8/10 CRITICAL RISK (15% blend)
Deal Impact: Critical owner dependency — high probability of deal restructuring, escrow requirement, or significant price reduction.
| ID | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| owr_01 | Succession Readiness GLS_HC_Profile.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Cybersecurity_Assessment.txt · GLS_Financials.csv — High confidence — multiple documents corroborated No formal succession plan exists; the documents explicitly state "No succession plan. Business has not operated without the owner for more than 5 consecutive business days." The owner is the single point of failure across critical functions (commercial account renewals, client onboarding, estimates over $10K, HOA relationships), and the operational backbone—the Lead Foreman—has no documented backup, meaning "if [PERSON] departed, the owner would need to step back into full-time field operations." Key client and vendor relationships lack documented handoff protocols, with critical knowledge residing entirely with the owner and one foreman ("Everything lives in [PERSON]'s head and [PERSON]'s head right now"). | 2/10 | CRITICAL RISK | |
| owr_02 | Institutional Knowledge Capture GLS_Customer_Onboarding_SOP.txt · GLS_HC_Profile.txt · GLS_Financials.csv · GLS_Cybersecurity_Assessment.txt — High confidence — multiple documents corroborated The company has minimal institutional knowledge documentation with critical processes existing primarily in individuals' heads. The onboarding SOP notes "Everything lives in [PERSON]'s head and [PERSON]'s head right now" regarding subcontractor scheduling and project estimates, while the human capital profile states "No documented training playbook; learning is informal and positional" and reveals that the operational backbone employee has "no documented backup for his role." The business has not operated without the owner for more than 5 consecutive business days, indicating severe dependency on undocumented knowledge held by key individuals. | 3/10 | CRITICAL RISK | |
| owr_03 | Management Team Depth GLS_Customer_Onboarding_SOP.txt · GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt · GLS_CIM.txt — High confidence — multiple documents corroborated The business lacks formal management depth and cannot operate independently for 60+ days. The human capital profile explicitly states "Business has not operated without the owner for more than 5 consecutive business days" and "No succession plan" exists, with the operational backbone manager having "No documented backup for his role" and the owner required for all commercial account renewals and HOA relationships. Critical knowledge and decision-making authority reside with the owner and two key individuals, as evidenced by the onboarding SOP noting "Everything lives in [PERSON]'s head and [PERSON]'s head right now," creating material operational risk in an exit scenario. | 3/10 | CRITICAL RISK | |
| owr_04 | Key Person Concentration Beyond Owner GLS_HC_Profile.txt · GLS_Financials.csv · GLS_Customer_Onboarding_SOP.txt · GLS_Employee_Roster.csv — High confidence — multiple documents corroborated The company has multiple critical single points of failure beyond the owner. The Lead Crew Supervisor is described as "the operational backbone of the field operation" managing crew scheduling, quality control, equipment troubleshooting, and worker supervision with "no documented backup for his role," and departure would force the owner into full-time field operations. Additionally, client onboarding and project estimation processes are heavily concentrated, with documents stating "Everything lives in [PERSON]'s head and [PERSON]'s head right now," and the Lead Crew Supervisor's raise was directly tied to negotiating a large HOA contract renewal, indicating concentrated client relationship dependency. | 3/10 | CRITICAL RISK |
Customer Quality4.5/10 NEEDS WORK (15% blend)
Deal Impact: Customer concentration or churn risk increases buyer discount risk — expect sensitivity analysis and possible escrow.
| ID | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| cq_01 | Top Customer Concentration GLS_HC_Profile.txt · GLS_Financials.csv · GLS_CIM.txt · GLS_Customer_Onboarding_SOP.txt — High confidence — multiple documents corroborated The company demonstrates strong customer diversification with 48 active commercial maintenance clients, where the largest customer concentration is managed through preferred vendor relationships with four commercial property management companies representing 31% of revenue combined. The top individual customers shown in financial data range from 3.1% down to 1.7%, with 38 additional clients averaging $24,000 each, indicating no single customer exceeds 10% of revenue and top 5 customers likely fall within the 40-55% range, positioning the company in the moderate diversification category with manageable concentration risk. | 8/10 | STRONG | |
| cq_02 | Revenue Predictability & Recurring Mix GLS_HC_Profile.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Cybersecurity_Assessment.txt · GLS_CIM.txt — High confidence — multiple documents corroborated Greenscape demonstrates moderate revenue predictability with 55% recurring revenue as of the most recent fiscal year (up from 50% two years prior), supported by preferred vendor relationships with four commercial property management companies representing 31% of revenue. However, the business lacks documented multi-year contract terms and formal renewal rate tracking; while commercial maintenance contracts exist in ServiceTitan, the documents do not specify contract lengths or renewal rates, and the company's reliance on H-2B seasonal labor creates forecasting uncertainty—in 2022, a partial H-2B cap allocation forced subcontracting at reduced margins. The remaining 45% of revenue derives from project-based installation work and seasonal services, limiting predictability beyond 12 months. | 6/10 | ADEQUATE | |
| cq_03 | Contract Transferability GLS_HC_Profile.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Cybersecurity_Assessment.txt · GLS_CIM.txt — High confidence — multiple documents corroborated The documents provide no evidence of formal assignment or change-of-control clauses in customer contracts, and instead reveal significant personality and key-person dependencies that would obstruct transferability. The CIM states there are "48 active commercial maintenance contract clients" but the onboarding SOP and organizational structure show that the owner and specific individuals (Miguel, [PERSON]) are embedded in client relationships—particularly "Owner + Miguel [are] both required for renewals" and the owner "is always on site for new clients"—indicating contracts are relationship-dependent rather than contractually transferable. Without documented assignment language or change-of-control provisions in the contract excerpts provided, and given the explicit key-person risks noted throughout the human capital profile, customer consent would likely be required for any business transfer, placing this well below the threshold for M&A readiness. | 2/10 | CRITICAL RISK | |
| cq_04 | Churn Rate & Retention Metrics GLS_Financials.csv · GLS_HC_Profile.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Cybersecurity_Assessment.txt — High confidence — multiple documents corroborated The documents provide no customer churn rate, net revenue retention metrics, or formal retention tracking for the landscaping services business. While a client list shows individual maintenance contracts, there is no evidence of monthly or quarterly churn analysis, root-cause investigation, or retention programs—only an informal customer onboarding process where "everything lives in [PERSON]'s head." The absence of any documented retention metrics, recovery playbooks, or proactive churn prevention initiatives indicates a reactive, undocumented approach to customer retention typical of a trades business without mature SaaS-style customer management practices. | 2/10 | CRITICAL RISK |
Financial Readiness3.2/10 CRITICAL RISK (13% blend)
Deal Impact: Financial readiness is a deal blocker — books must be restructured before any formal sale process can begin.
| ID | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| fr_01 | Books Quality & CPA Relationship GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt · GLS_Customer_Onboarding_SOP.txt · GLS_CIM.txt — High confidence — multiple documents corroborated The retrieved documents contain no information about the quality of financial books, CPA relationships, or the nature of financial statements (audited, reviewed, or compiled). The only financial metrics mentioned in the CIM are high-level revenue ($3.1M) and EBITDA figures ($465K reported, $512K normalized), but there is no documentation of how these financials were prepared, by whom, or their audit status. Without evidence of CPA involvement, financial statement quality, or diligence-readiness, the company presents significant financial documentation risk for an exit transaction. | 2/10 | CRITICAL RISK | |
| fr_02 | Add-Back Documentation GLS_HC_Profile.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Cybersecurity_Assessment.txt · GLS_CIM.txt — High confidence — multiple documents corroborated The company has identified only $47,000 in add-backs for FY[DATE_TIME] ($36,000 owner compensation above market and $11,000 personal vehicle/fuel expenses), but these lack detailed supporting documentation or independent verification. The HC Profile identifies additional owner-specific expenses ($820/mo vehicle and trailer, $125/mo cell phone) and informal cash bonuses (~$2,500/yr to crew leaders) that are acknowledged but not formally documented or separated in the financial records, and the documents explicitly note "significant restructuring required at close" with no evidence of CPA review or buyer-ready normalization schedules. | 3/10 | CRITICAL RISK | |
| fr_03 | Revenue Recognition & Consistency GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt · GLS_Customer_Onboarding_SOP.txt · GLS_CIM.txt — High confidence — multiple documents corroborated The retrieved documents contain no information regarding revenue recognition policies, GAAP compliance, deferred revenue tracking, or consistency of revenue recognition practices across periods. While financial summary data is provided showing revenue growth from $2.48M to $3.1M over three years, there is no documentation of the accounting methods, revenue recognition timing, or audit procedures that would be necessary to assess this critical due diligence area. The absence of any revenue accounting policy documentation represents a significant gap for M&A exit readiness. | 1/10 | CRITICAL RISK | |
| fr_04 | Three-Year Financial Trend GLS_HC_Profile.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Cybersecurity_Assessment.txt · GLS_CIM.txt — High confidence — multiple documents corroborated Greenscape demonstrates solid three-year revenue growth of 12.5% (FY2 to FY3) and 11.1% (FY3 to FY4), with EBITDA expanding from $297,600 to $465,000 and margins improving from 12.0% to 15.0%, placing the company in the 7-8 range. However, the growth rate of approximately 11-12% CAGR falls slightly below the 15% threshold for a 9-10 score, and the financial trend is supported by normalized EBITDA adjustments of $47,000 in add-backs (owner compensation and vehicle expenses), which should be considered in assessing true operating performance. | 7/10 | ADEQUATE |
Operational Scalability2.2/10 CRITICAL RISK (12% blend)
Deal Impact: Operational fragility is a deal risk — buyers will factor significant remediation cost and may require price concession.
| ID | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| ops_01 | Process Documentation & Repeatability GLS_Customer_Onboarding_SOP.txt · GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt — High confidence — multiple documents corroborated Greenscape has minimal process documentation with heavy reliance on individual knowledge and person-dependent execution. The onboarding SOP explicitly states "Everything lives in [PERSON]'s head and [PERSON]'s head right now," and the human capital profile notes that the operational backbone employee "manages crew scheduling, quality control, equipment troubleshooting" with "no documented backup for his role" and no succession plan. Core workflows lack repeatability—the business has not operated without the owner for more than 5 consecutive business days, indicating fundamental dependency on key individuals rather than documented, repeatable processes. | 2/10 | CRITICAL RISK | |
| ops_02 | Technology & Systems Scalability GLS_HC_Profile.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Cybersecurity_Assessment.txt · GLS_Financials.csv — High confidence — multiple documents corroborated The company's technology stack is not scalable and represents a critical liability for growth. Core operations depend on undocumented processes residing "in [PERSON]'s head and [PERSON]'s head right now," with scheduling, subcontractor management, and equipment decisions lacking formal systems or backup personnel. Critical infrastructure gaps include no cloud backup (local NAS only with ransomware/fire risk), no mobile device management (10 unmanaged iPads), and no documented policies, making a 3x growth scenario operationally impossible without complete architectural and process overhaul. | 2/10 | CRITICAL RISK | |
| ops_03 | Vendor & Supplier Concentration GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Financials.csv — High confidence — multiple documents corroborated Greenscape has a critical single-source dependency on H-2B visa workers for 18 seasonal positions (60% of peak workforce), with no viable domestic alternative documented—when the H-2B cap allocation was not fully received in 2022, the owner was forced to subcontract work at reduced margins. Additionally, the business relies on a single H-2B placement agency (Visagate) managed through an informal contract, and the owner himself is the undocumented single source for all commercial contract negotiations, client renewals, and major equipment decisions with no succession plan or backup, creating existential risk if either the visa program or owner relationship changes. | 2/10 | CRITICAL RISK | |
| ops_04 | Financial Controls & Reporting Cadence GLS_Customer_Onboarding_SOP.txt · GLS_Cybersecurity_Assessment.txt · GLS_HC_Profile.txt · GLS_Financials.csv — High confidence — multiple documents corroborated The retrieved documents contain no evidence of monthly financial closes, formal budget vs. actual reviews, documented financial controls, or a CFO/Controller role. The only financial document provided is a customer revenue list (GLS_Financials.csv) with no indication of regular reporting cadence, close timelines, or control documentation. The company appears to lack formal financial oversight infrastructure, placing it in the category requiring significant financial cleanup before acquisition diligence can proceed. | 3/10 | CRITICAL RISK |
Technology & Systems Maturity3.4/10 CRITICAL RISK (12% blend)
Deal Impact: Technology infrastructure is a deal risk — undocumented systems, personal dependencies, or technical debt will trigger buyer discount.
| ID | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| tm_01 | Core Systems Documentation & Ownership GLS_Cybersecurity_Assessment.txt · GLS_Customer_Onboarding_SOP.txt · GLS_HC_Profile.txt · GLS_Financials.csv — High confidence — multiple documents corroborated Core business systems exist but lack formal documentation and entity-level ownership. The onboarding SOP explicitly states "Everything lives in [PERSON]'s head and [PERSON]'s head right now" regarding client setup, scheduling, and subcontractor management, while ServiceTitan appears to be the primary system but lacks documented backup procedures. Additionally, critical operational knowledge is concentrated in key individuals with no documented succession plans—the cybersecurity assessment identifies no MDM, no cloud backup (local NAS only), and no formal policies, creating significant business continuity and data security risks that would impede a smooth transition to new ownership. | 3/10 | CRITICAL RISK | |
| tm_02 | Cybersecurity & Data Protection Posture GLS_Cybersecurity_Assessment.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Financials.csv · GLS_HC_Profile.txt · GLS_CRM_Pipeline.csv — High confidence — multiple documents corroborated The company lacks foundational cybersecurity controls required for exit readiness. The cybersecurity assessment identifies critical gaps including no MDM for 10 field iPads (creating client data exposure risk), no cloud backup with only local NAS storage vulnerable to ransomware/theft, and critically, "No Formal Policies" including no incident response plan, acceptable use policy, or password policy. Additionally, there is no evidence of endpoint detection and response (EDR), data classification, cyber insurance, or vendor security reviews—the company relies on basic individual logins and informal access controls that leave sensitive client contract and scheduling data exposed. | 3/10 | CRITICAL RISK | |
| tm_03 | Data Integrity & Business Intelligence GLS_Customer_Onboarding_SOP.txt · GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt · GLS_CIM.txt — High confidence — multiple documents corroborated Data exists in multiple systems (ServiceTitan, QuickBooks Online, Google Workspace) but with significant integrity and accessibility issues. Critical operational knowledge is undocumented and held by individuals—the onboarding document states "Everything lives in [PERSON]'s head and [PERSON]'s head right now" for subcontractor scheduling, and the HC profile notes that the operational backbone has "no documented backup for his role" and manages crew scheduling, equipment decisions, and quality control without succession planning. Additionally, ServiceTitan uses shared login credentials with no audit trail of individual actions, and the only backup system is a local NAS with no offsite copy, creating substantial risk of data loss and limiting reliable reporting accessibility. | 3/10 | CRITICAL RISK | |
| tm_04 | Technology Vendor & Subscription Management GLS_Customer_Onboarding_SOP.txt · GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt — High confidence — multiple documents corroborated The company relies on cloud-based vendor tools (ServiceTitan, QuickBooks Online, Google Workspace) that appear entity-owned, but critical operational knowledge and vendor relationships are undocumented and concentrated with key personnel. The cybersecurity assessment identifies significant gaps including shared ServiceTitan login credentials among field supervisors with no audit trail, unmanaged field devices (10 iPads with no MDM), and a local NAS as the only backup system—creating transfer risk if key personnel depart or devices are lost. Additionally, the human capital profile indicates that "Everything lives in [PERSON]'s head and [PERSON]'s head right now" regarding subcontractor scheduling and critical operational processes, with no formal vendor management documentation evident. | 3/10 | CRITICAL RISK | |
| tm_05 | Technical Debt & Modernization Risk GLS_Cybersecurity_Assessment.txt · GLS_HC_Profile.txt · GLS_Financials.csv · GLS_Customer_Onboarding_SOP.txt — High confidence — multiple documents corroborated The company uses ServiceTitan for client management and scheduling, which is a modern, cloud-based SaaS platform appropriate for the landscaping industry. However, critical operational knowledge and processes exist primarily in individual employees' heads rather than in documented systems—the onboarding SOP notes "Everything lives in [PERSON]'s head and [PERSON]'s head right now" regarding installation projects and subcontractor scheduling—and infrastructure has meaningful gaps including no cloud backup (only local NAS), no mobile device management for 10 iPads, and informal security policies, though the cybersecurity assessment rates these as "fast and cheap to remediate" under $1,500 one-time. | 7/10 | ADEQUATE |
▲ Layer8's primary practice area. Technology & Systems Maturity is where Layer8 delivers directly — not just identifies gaps. Where this domain shows deficiencies, remediation is available immediately through Layer8 engagements.
Legal & Regulatory Compliance3.8/10 NEEDS WORK (10% blend)
Deal Impact: Compliance gaps will surface in diligence — expect buyer requests, timeline extension, and potential price adjustment.
| ID | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| lc_01 | Business Licenses & Permits GLS_HC_Profile.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Cybersecurity_Assessment.txt · GLS_Financials.csv · GLS_CIM.txt — High confidence — multiple documents corroborated The documents confirm the company holds a Georgia Pesticide License and a Travelers workers' compensation policy (both transferable), but provide no evidence that all required business licenses are current, documented in a data room, or that transferability has been reviewed with counsel. The CIM references only the pesticide license as a highlight, and the workers' comp policy is noted as "entity-owned" and "transferable," but there is no comprehensive inventory of all required licenses and permits (such as contractor licensing, municipal permits, or HOA vendor certifications), no documentation of renewal dates, and no formal transferability analysis for a change-of-control transaction. | 3/10 | CRITICAL RISK | |
| lc_02 | Contract Change-of-Control Provisions GLS_HC_Profile.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Cybersecurity_Assessment.txt · GLS_CIM.txt — High confidence — multiple documents corroborated The retrieved documents contain no evidence of legal review of vendor, customer, or lease agreements for change-of-control provisions or assignment clauses. While the CIM mentions "48 active commercial maintenance contracts" and "preferred vendor relationships with four commercial property management companies representing 31% of revenue," there is no documentation showing these agreements have been reviewed by counsel or assessed for assignability. The only contract reference with specificity is the "Visagate H-2B placement agency" contract and a "lease renewal negotiation for a large HOA contract," neither of which are documented as having change-of-control provisions reviewed. | 2/10 | CRITICAL RISK | |
| lc_03 | Employment Law Compliance GLS_HC_Profile.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Cybersecurity_Assessment.txt — High confidence — multiple documents corroborated The company has significant employment compliance gaps that would require material remediation before exit. While H-2B workers are managed through proper visa petitions and compensation is generally market-competitive per PLANET benchmarks, critical deficiencies exist: informal and undocumented PTO policies with no balance sheet tracking, informal year-end cash bonuses (~$2,500/yr) paid outside payroll that "must be formalized or eliminated at close," no group health plan, no retirement plan, informal background check practices limited to crew leaders only, and undocumented OSHA training compliance. The documents provide no evidence of current I-9 verification status, non-compete agreements, or the absence of any open EEOC/DOL matters, leaving substantial compliance uncertainty. | 4/10 | NEEDS WORK | |
| lc_04 | Intellectual Property Ownership GLS_Customer_Onboarding_SOP.txt · GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt · GLS_CIM.txt — High confidence — multiple documents corroborated IP ownership is ambiguous and largely undocumented. While the company uses cloud-based tools (ServiceTitan, QuickBooks Online, Google Workspace) for core operations, there is no evidence of formal IP assignment documents, trademark registration, or an IP schedule. Critical operational processes and client data are managed through shared credentials and personal devices with no formal ownership documentation, and the cybersecurity assessment reveals that "client contract and scheduling data exposure" risks exist due to unmanaged field devices and shared logins, indicating the company has not established clean, formal ownership of its digital assets and customer information. | 3/10 | CRITICAL RISK | |
| lc_05 | Litigation & Contingent Liability GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt · GLS_CIM.txt · GLS_Customer_Onboarding_SOP.txt — High confidence — multiple documents corroborated The documents reviewed contain no evidence of material open litigation, undisclosed claims, or contingent liabilities that would impair business value. However, the assessment identifies several operational and compliance gaps (cybersecurity vulnerabilities, informal HR practices, lack of documented training protocols) that present moderate risk exposure rather than disclosed legal matters. The company maintains standard commercial insurance (Workers Comp through Travelers) and operates within regulated landscaping and pesticide applicator licensing frameworks without indication of regulatory violations or legal disputes. | 7/10 | ADEQUATE |
Human Capital & Key Employee Risk2.7/10 CRITICAL RISK (8% blend)
Deal Impact: Key employee dependency is a deal risk -- high probability of post-close talent loss will trigger buyer discount or escrow requirement.
| ID | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| hc_01 | Employee Documentation & Compensation GLS_Customer_Onboarding_SOP.txt · GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt · GLS_Financials.csv — High confidence — multiple documents corroborated Employee Documentation & Compensation is severely deficient and poses significant acquisition risk. While compensation for most roles appears market-competitive based on PLANET benchmarking (e.g., Lead Foreman at $72,000, Crew Leaders at $52,000–$58,000), critical documentation gaps exist: roles lack formal job descriptions, compensation lacks documented benchmarking process ("Owner sets compensation based on hiring experience"), key operational knowledge is undocumented and concentrated in specific individuals (noted as living "in [PERSON]'s head"), and informal compensation structures (cash bonuses, owner distributions not on payroll) require substantial restructuring at close. No formal performance reviews, no succession plan, and no documented training protocols further demonstrate minimal formalization of employee roles and responsibilities. | 3/10 | CRITICAL RISK | |
| hc_02 | Retention Agreements & Non-Competes GLS_HC_Profile.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Financials.csv · GLS_Cybersecurity_Assessment.txt — High confidence — multiple documents corroborated The company has no documented non-compete or retention agreements in place for any key employees. The documents reveal critical dependency on two individuals—the owner and a lead foreman ([PERSON])—with "No succession plan" and acknowledgment that "Business has not operated without the owner for more than 5 consecutive business days," combined with informal compensation structures (undocumented cash bonuses to crew leaders) and no formalized employment contracts beyond S-corp distribution arrangements. The absence of any agreement mechanism creates significant flight risk for the lead operational employee who "is the operational backbone of the field operation" managing crew scheduling, quality control, and equipment decisions with "No documented backup for his role." | 2/10 | CRITICAL RISK | |
| hc_03 | Bench Depth & Succession GLS_Customer_Onboarding_SOP.txt · GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt — High confidence — multiple documents corroborated The company exhibits severe bench depth deficiencies with multiple critical single points of failure. The operational backbone foreman has "no documented backup for his role exists" and "if [PERSON] departed, the owner would need to step back into full-time field operations," while the company "has not operated without the owner for more than 5 consecutive business days." Additionally, commercial account renewals require "both [owner and Miguel] required for renewals," and key processes like subcontractor scheduling and large project estimates exist primarily "in [PERSON]'s head," with no documented succession plan in place. | 3/10 | CRITICAL RISK |
▲ Automation Maturity IndexScored separately — excluded from overall score and buyer discount risk band
0.8/10MANUAL (raw: 1/12)
Revenue operations are evaluated across all six automation criteria at equal weight as a standalone maturity index.
Automation maturity is scored separately from the valuation composite. The gaps below represent operational efficiency opportunities and post-close value creation for a buyer — not valuation discounts.
| # | Criterion & Finding | Score | Rating | Bar |
|---|---|---|---|---|
| R01 | AI Voice / After-Hours Call Handling GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt · GLS_Customer_Onboarding_SOP.txt · GLS_CIM.txt There is no evidence of AI voice agents or automated after-hours call handling in any of the retrieved documents; the company's communication infrastructure focuses on manual processes (ServiceTitan CRM, owner/staff-dependent scheduling) with no mention of voicemail systems, auto-attendants, or call routing capabilities. | 0/2 | MANUAL | |
| R02 | CRM Presence & Workflow Automation GLS_Customer_Onboarding_SOP.txt · GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt · GLS_CIM.txt Greenscape uses ServiceTitan for client setup and scheduling, but CRM adoption is inconsistent and heavily dependent on key personnel—critical processes like subcontractor scheduling and installation project management "live in [PERSON]'s head," indicating partial capability without systematized workflows or transferability. | 1/2 | PARTIAL | |
| R03 | 24/7 Lead Capture GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt · GLS_Customer_Onboarding_SOP.txt · GLS_CIM.txt The retrieved documents contain no evidence of a website contact form, chatbot, or any after-hours lead capture system; all new client onboarding is manually managed by office staff during business hours with no documented capability for 24/7 automated lead routing. | 0/2 | MANUAL | |
| R04 | SMS Appointment Reminders & Confirmations GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt · GLS_Customer_Onboarding_SOP.txt · GLS_CIM.txt The retrieved documents contain no evidence of any SMS appointment reminder or confirmation system; the company uses ServiceTitan for scheduling and job management but there is no mention of automated SMS workflows, and the operational procedures rely on manual processes managed by office staff and field supervisors. | 0/2 | MANUAL | |
| R05 | Automated Review Solicitation GLS_HC_Profile.txt · GLS_Customer_Onboarding_SOP.txt · GLS_Cybersecurity_Assessment.txt · GLS_CIM.txt There is no evidence of any automated or manual post-service review solicitation process in the retrieved documents; reviews are entirely organic with no systematic request mechanism in place. | 0/2 | MANUAL | |
| R06 | Smart Follow-Up Sequences GLS_HC_Profile.txt · GLS_Cybersecurity_Assessment.txt · GLS_Customer_Onboarding_SOP.txt · GLS_CIM.txt The retrieved documents contain no evidence of automated follow-up sequences for leads or dormant clients; the company uses ServiceTitan for scheduling and client management, but follow-up activities are entirely manual and owner/staff-dependent with no documented drip campaigns or re-engagement automation. | 0/2 | MANUAL |
Interpretation: Manual — buyer will underwrite operational risk, expect discount
A low Automation Maturity Index score indicates the business relies on manual processes that a buyer will need to systematize post-close, typically reflected as a discount to the valuation multiple.
📈 Buyer Opportunity: A buyer who systematizes these automation gaps post-close would deploy a proven playbook: AI voice handling, CRM workflows, and follow-up sequences that collectively recover 15–25% of leads currently lost to slow response. This is a predictable, acquirable value-creation lever.
Layer8 delivers exactly this. Our 90-day Automation Sprint closes AI voice, CRM workflow, lead capture, and follow-up gaps — the same gaps that increase buyer discount risk. The work is defined, the timeline is fixed, and the ROI is measurable before you go to market.
► Operational Automation OpportunitiesVertical-specific — excluded from overall score
0.0/10MANUAL (raw: 0/10)
Vertical-specific operational automation gaps identified in General Business Operational Automation operations. These gaps represent immediate efficiency opportunities for the current owner and post-close value creation levers for a buyer.
Operational automation gaps identified below are framed as efficiency and revenue recovery opportunities. Dollar estimates reflect operational impact, not valuation buyer discount risk reduction. Layer8 delivers these implementations directly.
| Automation Opportunity | Score | Status | Bar | Layer8 Opportunity |
|---|---|---|---|---|
| Accounts Payable & Invoice Processing | 0/2 | MANUAL | AP automation typically reduces invoice processing cost by 60-80% and eliminates the duplicate payment and missed discount risk that costs SMBs an average of 1-2% of annual spend. | |
| Employee Onboarding & Offboarding | 0/2 | MANUAL | Offboarding automation is the most overlooked security risk in SMBs — former employee account access is the #1 source of insider threat incidents and a common finding in cybersecurity due diligence. | |
| Vendor Contract & Renewal Tracking | 0/2 | MANUAL | Vendor renewal automation eliminates auto-renewal surprises and creates the negotiation window most SMBs miss by discovering renewals after the fact. | |
| Customer Onboarding Sequences | 0/2 | MANUAL | Customer onboarding automation reduces early churn by 20-35% — the highest-ROI retention investment available to a service business. | |
| Compliance Training & Certification Tracking | 0/2 | MANUAL | Compliance training automation eliminates the certification gap liability that frequently surfaces in employment law due diligence and creates the audit-ready documentation buyers require. |
These operational automation gaps represent post-close value creation opportunities for a buyer — and immediate efficiency gains for the current owner. Layer8 Tech Group delivers these implementations directly.
Top 3 Strengths
- Diversified Client Base with Stable Growth: Greenscape demonstrates a healthy 48+ client roster with no single-customer concentration risk (largest client at 3.1% of revenue) and consistent YoY revenue growth of 11-12.5% over three years, indicating market traction and operational scalability beyond any single relationship.
- Improving Unit Economics: EBITDA margins have expanded from 12.0% to 15.0% over the measurement period, suggesting operational leverage and cost discipline despite the organizational constraints, positioning the business as fundamentally profitable and capable of supporting debt service in a leveraged transaction.
- Established Service Delivery Platform: The company utilizes ServiceTitan as a production CRM and maintains field operations across 10+ crew members with documented maintenance contracts, demonstrating a repeatable service model that generates recurring revenue and could support a professional management structure post-acquisition.
Top 3 Risks
- Critical Single-Point-of-Failure Dependencies (Scores: Owner Dependency 3/10, Key Employee Risks 3/10, Documented Processes 3/10): The owner has not delegated authority over contract signing, major estimate approval (>$10K), or top HOA relationship management, and the operational backbone employee manages crew scheduling, quality control, and equipment troubleshooting with no documented backup—creating a scenario where the business cannot operate without the owner's full-time return if this individual departs, a deal-killing risk for most institutional buyers.
- Absence of Documented Processes and Knowledge Transfer Risk (Scores: Documented Processes 3/10, CRM & Pipeline Documentation 3/10, Data Room Readiness 2/10): Critical workflows including installation project management, chemical handling, subcontractor scheduling, and training exist only in individual employees' heads with explicit statements that "Everything lives in [PERSON]'s head," creating acute transition risk and making it impossible for a buyer to assess operational continuity or integrate the business into their platform without months of informal knowledge extraction.
- Cybersecurity and Data Protection Gaps with Regulatory Exposure (Score: Cybersecurity Posture 4/10, IT Infrastructure 3/10): The company lacks MFA enforcement across client data systems, uses shared ServiceTitan credentials with no audit trail, has no EDR or MDM for field devices, and relies solely on a local NAS with no offsite backup testing—creating HIGH-priority exposure to data breaches, regulatory liability (particularly if customer data is compromised), and deal-delay risk if a buyer's security review identifies unmitigated MEDIUM-rated vulnerabilities before closing.
Recommended Priority Fixes
Actions the company should take in the next 90 days to maximise exit readiness:
Fix 1
Document All Critical SOPs with Role-Based Accountability (Weeks 1-4): Create formal procedure documents for the top 5 critical workflows (crew scheduling, installation project management, chemical handling, equipment maintenance, customer onboarding) written in role-based language (not person names) and have the operational backbone employee co-author with the owner to ensure accuracy; publish these to a centralized wiki or shared drive with sign-off from both parties to begin knowledge externalization and reduce single-person dependency risk.
Fix 2
Implement MFA Across All Client-Facing Systems and Establish Individual User Accounts (Weeks 2-5): Enforce multi-factor authentication on ServiceTitan for all users (not just owner), eliminate shared credentials by assigning individual logins to field supervisors with role-based access controls, and enable audit logging so that pipeline changes and client data access are traceable; this addresses the HIGH-priority cybersecurity finding and prepares the CRM for buyer integration.
Fix 3
Deploy Offsite Backup with Documented Testing Protocol (Weeks 3-6): Configure automated daily offsite backups (cloud-based or secondary secure facility) for all critical business data currently stored on the local NAS, document the backup schedule and recovery procedures, and execute a full test restore to validate integrity; this eliminates the single point of failure in IT infrastructure and demonstrates business continuity readiness to a buyer's technical team.
Fix 4
Create a 90-Day Cross-Training and Succession Plan for the Operational Backbone Role (Weeks 1-12): Assign the second-most-senior crew leader or operations coordinator to shadow the key operational employee for 2-4 hours per week, document the handoff plan for crew scheduling and quality oversight, and establish a formal backup to manage scheduling if the primary person is unavailable; formalize this in a one-page succession summary for the data room to address Key Employee Risks (3/10) and give a buyer confidence in operational continuity.
Fix 5
Compile Centralized Customer Contract Repository with Renewal Tracking (Weeks 4-8): Gather all signed customer contracts into a single folder or contract management system, extract key terms (renewal date, auto-renewal language, change-of-control provisions) into a master spreadsheet, and identify which contracts lack assignment or change-of-control clauses requiring renegotiation; this addresses Customer Contracts (3/10) and Data Room Readiness (2/10) scores and allows the buyer to quickly assess contract transferability risk during diligence.
Compliance Notes
No PII was detected in the ingested documents.