Key-person risk

Key-person risk is the financial risk a lender or buyer assigns to a business where one person — usually the founder — is load-bearing: the business loses material value if that person becomes unavailable. It is the financial framing of founder dependency, and it is the single most common reason an established business is valued below its comparable peers.

The same dependency that feels, to a founder, like “the business needs me” is, to a buyer or lender, a measurable discount on price, on loan-to-value, and on terms. This guide covers what key-person risk is, how it is measured, and — most usefully — how to remove it before it costs you.

Key-person risk and founder dependency: condition vs. cost

The two terms describe the same underlying reality from different angles:

• Founder dependency is the condition: the business cannot operate without the founder’s daily involvement.
• Key-person risk is the cost of that condition: the discount a lender or buyer applies because the business is exposed to one person.

You do not negotiate away key-person risk at the deal table. You remove it beforehand, by removing the dependency it measures. A business that demonstrably runs without its founder has, by definition, no key-person risk to discount.

How lenders measure it

Lenders price key-person risk directly, because it changes the risk profile of the loan. The signals they look for are consistent across corporate and structured finance:

1. Relationship concentration. If the founder holds the key customer, supplier, and banking relationships personally, the lender sees a business that loses access if that person leaves. This lowers the loan-to-value.
2. Decision concentration. If every important decision routes through one person, the lender sees operational fragility. The business cannot adapt quickly if the founder is unavailable.
3. Operational memory. If “how things work here” lives in the founder’s head rather than in documented systems, the lender sees a business that stalls without that person. The cost of capital climbs to reflect it.

The practical output is a lower loan offer, a higher interest rate, a personal guarantee, or a requirement for key-person life insurance. Each is a price tag on the dependency.

How buyers price it

Buyers apply key-person risk through the deal structure, not just the headline valuation:

• Lower valuation multiple. Comparable businesses that run independently trade at higher multiples because the cash flow is durable. A founder-dependent business is marked down to reflect that the asset the buyer is acquiring is fragile.
• Longer earn-outs. The buyer locks part of the price behind the founder staying on for one to three years to hand over relationships and decisions. Money the founder cannot touch until the dependency is transferred.
• Larger escrows. A portion of the purchase price is held back against the business underperforming if the founder steps away too quickly. Effectively, the buyer is hedging the very risk the founder did not remove before the sale.

The pattern I saw across years on the side of the table that prices businesses: founders rarely realise how much of their company’s value is held back this way until they see the term sheet.

What removes it

Key-person risk is structural, so the fix has to be structural. It cannot be insured away, contracted away, or talked down in a deal. What removes it is building the operating architecture:

Area	What it looks like with key-person risk	What it looks like without
Relationships	Founder holds key relationships personally	Team owns them; introductions and continuity are documented
Decisions	”Ask the founder” is the operating system	Decision rights are clear and held by named people with a mandate
Operations	Workflows run on the founder’s memory	Workflows run on a playbook the team can execute
Continuity	Untested under absence	Proven under a hard week, an absent founder, a key person away

Each row, moved from left to right, removes a piece of the discount a lender or buyer would otherwise apply.

The honest timeline

For an established £2-15M business, removing key-person risk is measured in months per area, not weeks, because each part has to be redesigned, proven, and handed over. A typical arc runs about 12 months from founder-dependent to founder-free. The businesses that do it fastest start with the area where the risk concentrates — usually operational systems — and prove it holds before moving to the next.

---

Want to see where the risk concentrates in your business? Take the free Autonomy Scorecard: two minutes, a pillar-by-pillar score, and a “where to start first” plan.