Customer concentration risk — how much revenue from one client is too much

A business that generates 60% of its revenue from a single customer is not the same business when that customer leaves. Yet many buyers price the target as if all revenue is equally durable. Customer concentration risk—the exposure created when one client or a handful of clients represent an outsized portion of total revenue—sits at the intersection of valuation and operational reality. It’s not just a footnote in the financial statements; it’s the difference between what you paid and what you’re actually acquiring.

What Makes Customer Concentration a Valuation Problem

Customer concentration becomes a valuation problem the moment it creates asymmetric downside risk. If a business earns $500K in annual EBITDA and 50% comes from one customer, your normalized earnings calculation captures that revenue. But the valuation multiple applied to that EBITDA should reflect the risk that the customer walks. Traditional Quality of Earnings engagements flag this risk explicitly. On smaller deals, where a full QoE engagement isn’t always justified, many buyers still apply a haircut to EBITDA or SDE—an informal risk adjustment.

The deeper issue: customer concentration often correlates with customer dependency. That one large customer may receive custom products, priority support, or pricing terms that make them sticky but also hard to replace. Or they may be a relationship customer who chose the target business specifically, not a commodity revenue stream that could easily migrate elsewhere. The revenue number tells you volume; contract terms and relationship durability tell you risk.

How Much Revenue from One Client Is Too Much?

There is no universal threshold, and anyone who cites a hard rule (“never more than 30%”) is oversimplifying. Context matters: industry, contract enforceability, customer tenure, switching costs for the customer, and whether the revenue is recurring or project-based all shift the risk calculus.

In consumer services (staffing, managed services, logistics), 20–30% from a single customer is typically flagged as material. These businesses are often relationship-driven and have modest switching costs for customers; a large customer can leave quickly.

In manufacturing or specialized B2B services, 40–50% from one customer may be acceptable if that customer is locked in by long-term contract, switching costs, or specialized production capacity. A aerospace parts supplier with a multi-year contract to a major OEM carries different risk than a janitorial service relying on one property management firm.

In software or subscriptions, the calculation hinges on customer tenure and product stickiness. A SaaS business where the top customer has been with the company for 7+ years and uses 60% of annual recurring revenue may pose less risk than a services firm where the same customer ratio exists in a 2-year-old client relationship.

Calculating Concentration Risk: A Worked Example

Let’s say you’re evaluating a business services firm with:

• TTM revenue: $3M
• TTM EBITDA: $600K
• Top customer: $1.2M (40% of revenue)
• Second customer: $600K (20%)
• Remaining customers: $1.2M (40% across 47 small accounts)

A buyer might normalize EBITDA at $600K on face value. But the top customer’s contract has two years remaining, no auto-renewal clause, and the customer is a procurement department known for aggressive rebidding. This is material concentration risk.

One adjustment method: apply a customer concentration haircut. If the buyer believes there’s a 20% probability the customer exits within 24 months (and generates similar EBITDA margins when replaced, or isn’t replaced at all), a risk-adjusted EBITDA might be:

Adjusted EBITDA = $600K − ($1.2M × 20% margin impact) = $600K − $120K = $480K

This is not a universal formula—it reflects the buyer’s specific view of replacement risk. A different buyer might assess the same contract as 40% risk, moving adjusted EBITDA to $360K. The point is to make the risk assumption explicit and quantifiable, not hidden in a loose valuation multiple.

Another method: segment the revenue into tiers by confidence and apply different multiples. If the buyer believes the top customer’s $1.2M is 75% durable, the second customer’s $600K is 90% durable, and the tail is 100% durable (because it’s diversified), the calculation becomes:

• Confident revenue: ($600K × 90%) + ($1.2M across 47 small accounts) = $1.74M
• At-risk revenue: ($1.2M × 25%) = $300K
• Apply 6× multiple to confident, 3× to at-risk, total implied value = $10.44M + $900K = $11.34M

Again, the multiples and durability percentages are buyer judgment calls, but the framework forces rigor.

What to Look for in Customer Contracts and History

Contract terms: A 1-year renewable is different from a 3-year fixed commitment. Look for auto-renewal clauses, termination-for-convenience provisions, and notice periods. A customer with 90 days’ notice can leave faster than one with a 12-month wind-down.

Pricing and margin: If the top customer receives a 20% discount or custom pricing, and other customers don’t, that customer’s departure may not simply be “replace with another customer at standard margins.” The business may face a temporary margin compression.

Switching costs and product fit: Has the business invested in custom integrations, dedicated resources, or proprietary processes for this customer? If so, the switching cost is high for the customer—they’re less likely to leave. If the customer uses the business as a commodity vendor interchangeable with others, risk is higher.

Tenure and track record: A 10-year customer relationship carries less departure risk than a 2-year relationship. Check whether the customer has ever threatened to leave or renegotiated terms in a way that signals vulnerability.

Replacement pipe: Does the sales team have genuine alternative opportunities to replace the customer’s revenue if they depart? Talk to the seller’s sales lead. “We could replace it” often means “theoretically we could, but it hasn’t happened yet.” Measure depth of opportunity versus hope.

Customer Concentration in Normalized EBITDA Calculations

If you’re using Outsourcing Processing to organize and calculate normalized EBITDA, customer concentration doesn’t disappear from the data—it’s flagged. The platform isolates revenue by customer and notes concentration ratios. When you’re adjusting for one-time items, owner compensation, or other addbacks, a side-by-side view of revenue durability helps you weight which adjustments matter most.

For example: if you’re adding back $50K in owner compensation that the business claims was “excess,” but that compensation was directly tied to the top customer’s onboarding project (now complete), the true normalized run-rate may be lower. The platform’s structure makes these conversations explicit—you can see the revenue source, the add-back, and the customer contract status all at once.

Concentration Risk and Deal Structure

Once you’ve quantified customer concentration risk, deal structure choices emerge. An earnout tied to customer retention makes sense: if the seller claims the top customer is stable, make part of the purchase price contingent on that customer still being there in 12 months. A working capital peg can also protect you—if customer churn causes collections or inventory to swing, working capital adjustments post-close catch that change.

Some buyers also negotiate seller reps and warranties around customer concentration: an explicit warranty that customer contracts are in good standing and that there are no known threats to the top accounts. If a customer departs within a specified period (often 12–24 months), the warranty has been breached and the seller indemnifies the buyer.

Red Flags and Deeper Due Diligence Triggers

Customer concentration alone doesn’t kill a deal, but certain patterns should trigger deeper diligence:

• Concentration is rising: If the top customer represented 30% three years ago and 50% now, the business is becoming riskier, not more stable. Understand why the customer’s share grew—did they steal share from others, or did the business lose other customers?
• Customer is the seller’s former employer: A founder who left a large corporation to start a service business often wins that former employer as the first customer. This is common and not inherently bad, but it increases switching risk—the customer knows how to do the work themselves and may revert if management changes.
• No formal customer contracts: Handshake deals or informal terms with large customers are a red flag. Formalize and document before closing, or accept that the relationship is even riskier than the revenue suggests.
• Customer satisfaction metrics are missing: If the seller has no NPS, retention data, or customer satisfaction tracking, you can’t objectively assess durability. Request whatever data exists and be skeptical of verbal assurances alone.

Concentration Risk and Earnout Design

When customer concentration is material, earnouts often become part of the offer structure. A typical earnout might tie 20–30% of the purchase price to revenue retention over 12 months. The logic: if you’re paying for $1M of EBITDA but $400K comes from one customer with uncertain durability, an earnout protects you by making part of the seller’s payday conditional on that customer staying.

Build the earnout carefully. “Revenue retention” is blunt—it doesn’t account for price changes or seasonal variation. A better metric might be “customer retention by count” combined with a revenue floor, so the seller can’t simply retain the customer at lower margins. Or structure it around EBITDA itself, which captures both retention and efficiency.

Frequently Asked Questions

What percentage of revenue from one customer triggers a concentration risk concern?

There’s no universal threshold—context drives the assessment. In highly competitive, relationship-driven industries, 20–30% may warrant closer inspection. In contract-locked or specialized industries, 40–50% may be acceptable. The key is whether the customer is locked in by contract, switching costs, or tenure versus whether they could easily switch. Always look at contract terms, not just the percentage.

How do I adjust EBITDA for customer concentration risk?

Common approaches include applying a percentage haircut (e.g., reduce EBITDA by 15–25% of the at-risk customer’s contribution), segmenting revenue by durability and applying different multiples, or using earnouts to make part of the deal price contingent on customer retention. The method depends on your conviction about replacement risk and how much visibility you have into the customer contract and relationship.

Should I always use an earnout for concentration risk?

Not always, but earnouts are effective when concentration risk is material but not disqualifying. If concentration risk is severe (say, 70% from one customer with a 1-year contract), you may either demand a lower upfront price or walk away rather than use an earnout to absorb the risk. If concentration risk is moderate and the customer relationship is stable, an earnout can align seller incentives with your concerns at a lower transaction cost than a broad price reduction.

How do I verify that a large customer will actually stay after closing?

Request formal customer contracts, not verbal assurances. Conduct a customer reference call with the top accounts if possible—you may not be able to interview the customer directly, but the seller’s relationship manager can walk you through the account and highlight any recent friction. Check for contract auto-renewal clauses and notice periods. Ask whether the customer has ever threatened to leave or renegotiated terms. Review customer tenure, pricing vs. market, and any pending contract renewals.

Can Outsourcing Processing help me flag customer concentration during due diligence?

Yes. The platform organizes revenue by customer in the normalized EBITDA calculation, so you can see the top customers and their share of total revenue at a glance. This helps you prioritize which customers to investigate further and makes it easier to compare concentration risk across multiple targets you’re evaluating. You’ll still conduct the deeper contract review and risk assessment yourself, but the data structure makes concentration visible upfront.

Customer concentration risk is not binary. It exists on a spectrum, shaped by contract terms, customer tenure, switching costs, and your replacement capacity. The goal is to make that risk explicit in your valuation and deal structure—not to avoid concentration entirely, but to price it accurately and protect yourself if your assumptions are wrong. A customer-concentrated business can still be a good acquisition, as long as you’ve done the work to understand the risk and built your offer accordingly.

This article is educational and does not constitute M&A, investment, or accounting advice — confirm findings with a licensed CPA or M&A advisor before making an offer.

This article is educational and does not constitute M&A, investment, or accounting advice — confirm findings with a licensed CPA or M&A advisor before making an offer.

For a faster alternative to a traditional QoE engagement, see IncomeReady for M&A Buyers.