Legal due diligence checklist

Set scope around the transaction decision

Ask what the reviewer and decision maker need to decide. An investor may focus on ownership, rights, use of funds, founder obligations, and future governance. A buyer may add title, liabilities, consents, integration, and exit exposure. A customer may care about authority, licences, security, and service continuity. Set materiality in business terms, with lower thresholds for ownership, fraud, sanctions, data incidents, licences, IP title, related parties, or other agreed areas. Identify entities, subsidiaries, branches, time periods, countries, and excluded topics. Name the internal lead and one owner for each workstream. Agree how questions, updates, and urgent findings will be handled. The request list should be tailored after a short business briefing. A generic list can miss the regulated activity while asking for records the company never needed. Independent counsel should confirm scope and privilege arrangements before collection begins.

• Transaction and decision purpose
• Entities, periods, and jurisdictions
• Materiality and zero-tolerance topics
• Workstream owners and escalation
• Privilege and access protocol

Index authoritative and signed records

Create a numbered index with document title, parties, date, status, signature state, owner, period, and notes. Separate signed records from drafts. Corporate folders should reconcile incorporation, articles, registers, certificates, board and shareholder actions, cap tables, filings, and financial records. Contract folders should identify current terms, amendments, orders, notices, and renewal or consent dates. Employment and IP files should link each person to the operative agreement and any transfer record. Regulatory and tax folders should contain licences, registrations, filings, acknowledgements, and material correspondence. Remove unnecessary duplicate copies without destroying records, and preserve version history where it matters. Redact personal or sensitive information only under an agreed process and keep an unredacted source available to authorised reviewers. The data room should tell the story a future custodian can follow.

Reviewers should know when the index changed.

• Numbered document index
• Signed records separated from drafts
• Corporate and cap-table reconciliation
• Current contracts and amendments
• Controlled personal-data redaction

Explain gaps before the reviewer finds them

Run management interviews against the index. Ask where practice differs from documents, which approvals were informal, what is disputed, which licences are pending, where former employees retain access, which contracts depend on a relationship, and what compliance work is late. Keep a gap log with facts, source, owner, business impact, proposed action, professional advice, and status. Do not create or backdate records to make the file look complete. If a document is missing, say what searches were made and whether a counterparty copy has been requested. Some gaps can be corrected before signing. Others should be disclosed, priced, conditioned, indemnified, or accepted. Management and advisers must distinguish factual remediation from a paper exercise. A disclosure schedule should point to records and explain exceptions clearly. Concealing a known issue usually makes the transaction response worse when it emerges later.

• Management interview by workstream
• Fact-based gap and remediation log
• No backdating or invented record
• Disclosure tied to source evidence
• Decision on correction, price, or acceptance

Convert findings into closing and integration work

A due diligence report should identify the fact, evidence, legal or commercial issue, severity, action, owner, and transaction consequence. Separate matters that block signing, conditions for closing, document changes, price or escrow points, post-closing work, and ordinary housekeeping. Test whether a proposed condition can be proved and completed within the timetable. Third-party consents, government approvals, employee communications, IP transfers, data migration, bank steps, and foreign-investment filings may need their own sequences. After closing, move obligations into an integration register with accountable owners and dates. Preserve the final data room and Q&A record under the agreed retention and confidentiality rules. Recheck current law for any remediation or filing performed later. Diligence creates value when the buyer or investor can act on the findings, and when the company knows which problem still exists the morning after closing.

• Signing and closing blockers separated
• Evidence-based conditions
• Transaction-document changes
• Post-closing integration register
• Final room and Q&A archive