What a Due Diligence Checklist Is, and Why Templates Fail
A due diligence checklist is a structured list of documents, data, and questions used to test the assumptions a transaction rests on. It is not the seller's data room index, which is organized to present the company, and it is not a legal opinion. It runs in two modes: exploratory, where you are still forming a view, and confirmatory, where you hold a view and are hunting for what would break it. A downloaded template fails because it is undifferentiated. It asks for the same corporate, financial, and commercial file set whether the target is a young software business or a distributor with leased warehouses, so requests that decide the outcome sit at the same weight as requests that decide nothing. Build the list the other way. Name the claims the price depends on: ownership of the code, the renewal behavior behind the revenue line, the absence of undisclosed liabilities. For each, write the document or the recomputation that would settle it.
The Seven Workstreams a Complete Checklist Has to Cover
A complete checklist splits into seven workstreams. Corporate and legal: formation documents, good standing, minute books, board consents, the capitalization table, option grants, and pending litigation. Financial: historical statements, quality of earnings, revenue recognition policy, working capital, debt, and off-balance-sheet obligations. Commercial: customer contracts, concentration, renewal and churn definitions, pipeline, and pricing history. Technology and intellectual property: ownership and assignment, open-source usage and license obligations, security posture, and infrastructure dependencies. People: key employees, compensation, employment agreements, contractor classification, and benefits. Regulatory and compliance: licenses, data protection obligations, and industry-specific rules. Operational: suppliers, insurance, real estate, and core systems. Give each workstream one named owner who carries its requests, open questions, and findings end to end, and decide which parts your team runs and which need outside counsel or an accounting firm. That split drives the timeline more than the request list does: an outside firm needs scoping and an engagement letter before it opens a file, so that workstream starts later than yours.
Tiering the Request List So the Checklist Stays Workable
Tier every request by consequence, because a list the seller cannot work through returns late, thin answers on the items that decide the deal. Tier one is where a bad answer ends it: clean title to the company and its intellectual property, a cap table that reconciles, litigation that could take the business. Tier two moves price or terms. Tier three only matters for integration after closing. Each line carries five things: the request in plain language, why it matters, the format you want, the responsible person on both sides, and a due date. Format is not a detail. A spreadsheet exported to PDF hides its formulas, and a summary prepared for you hides the query behind it, so ask for native files and source-system exports. Track the list in one place with a status per line. When requests live only in email threads, no one can say which tier-one item is still open, and the tier-three items answer first because they are easy.
How the Diligence Timeline Actually Runs, Stage by Stage
Diligence moves through recognizable stages: public research before any contact, an NDA and an initial request list, a letter of intent or term sheet, the data room released in waves, management and functional sessions, a confirmatory phase once the main issues are settled, and closing conditions. Exclusivity is not automatic. Some letters of intent grant it, some are silent, and some leave it to a separate agreement, so read for it rather than assume it, because it sets what the seller can do with a competing bidder while you spend. It does not run in a straight line, because every answer generates follow-ups. Number the questions in one log, route each to the named workstream owner rather than to whoever asked, and hold a standing call where owners report their open tier-one items. Third-party items start first: landlord consents, lender waivers, change-of-control notices, and regulatory filings run on clocks you do not control. A closing can be document-complete and still wait on one.
Verification: Turning a Document Request Into Evidence
Receiving a document is not diligence. Verification means checking the company's account against a source it does not control. Compare corporate registry filings against the ownership chart you were given. Recompute the fully diluted share count from the option ledger, convertible instruments, and warrants, then see whether it reconciles to the cap table you received. Tie reported revenue from the general ledger to bank deposits and to signed contracts. Choose your own customer references instead of accepting a curated list. Confirm intellectual property assignment agreements exist for every contributor, including founders and contractors. Where a number can be recomputed, recompute it. Where a claim depends on a definition such as active user, recurring revenue, or bookings, get the definition in writing along with the query that produces it. Treat a discrepancy as a question, not a verdict: ask for the reconciliation, and see whether the explanation holds when you apply it to the next period you test.
Reading Red Flags: What Each Finding Points To
Read each flag for what it forces you to do next. Missing or reconstructed minute books and unsigned board consents mean the corporate record cannot support the representations a buyer or investor will ask for, which turns into a cleanup covenant, a specific indemnity, or a delayed signing. Cap table versions that do not reconcile have several causes: a stale file, an option ledger nobody updated, a side letter promising equity outside the ledger, or spreadsheet error. Ask which, and ask for the instrument behind it. Revenue concentrated in a few customers, in related parties, or in contracts with short terms and easy termination rights changes what that revenue is worth. When a metric definition shifts between the deck and the data room, rerun both queries on the same period. When an easy request stays open, ask whether that document exists yet. Sort every flag into fixable before closing, priced into the deal, or disqualifying. The sorting tells you whether to keep spending.
From Checklist Findings to Deal Terms and a Written Record
Findings are worthless until they attach to something. Each material one should land in a purchase price adjustment, a specific indemnity or escrow, a closing condition the seller must satisfy, or a written acceptance of the risk. Produce a diligence memo that states each finding, the evidence behind it, the exposure sized in dollars wherever it can be computed and stated as a range with its assumptions where it cannot, and the recommended treatment. That sizing is what an escrow or a price adjustment gets negotiated against; an exposure recorded only as serious cannot be traded. Write it so the decision stays reviewable by people who were not in the room. Representations and warranties are negotiated against what diligence did and did not confirm, so an area you could not verify is exactly where you want a specific representation rather than a general one. Keep the tracker and the memo after closing. They become the integration plan and the first post-close review baseline.
Ready to Apply This? Our Platform Makes It Easy.
Access company profiles, funding data, and competitive analysis, all powered by AI.
Built for company research · cancel anytime. Start Free Today.
Full company profiles, funding data, competitive analysis, and export tools, all free to start.
📚 More Resources
What Is Series A Funding
Read guide →Startup Valuation Methods
Read guide →How To Research Companies
Read guide →Venture Capital Explained
Read guide →Browse every guide in the Resources library.