Due diligence reduces risk in high-stakes transactions by systematically uncovering hidden liabilities, financial gaps, and operational weaknesses before a deal closes. It gives buyers, investors, and lenders the factual foundation they need to make informed decisions, negotiate fair terms, and avoid costly surprises after the ink is dry. The questions below unpack exactly how that process works, from what it uncovers to when you should start and who should lead it.
What specific risks does due diligence uncover in a transaction?
Due diligence uncovers risks across six key areas: financial, legal, tax, commercial, technical, and HR. These include undisclosed liabilities, inaccurate financial reporting, pending litigation, tax exposures, customer concentration, intellectual property gaps, and problematic employment contracts. Without a structured review, any of these can erode deal value or create serious post-closing problems.
In practice, the risks that surface most often fall into predictable categories. On the financial side, you might find that reported revenue includes one-time items that inflate the picture, or that working capital is tighter than the headline numbers suggest. On the tax side, issues like unfiled VAT returns, disputed corporate income tax positions, or unapproved claims for R&D tax incentives can create significant exposure. Legally, undisclosed disputes or poorly drafted supplier contracts can shift the risk profile of the entire deal.
Commercial due diligence adds another layer: if a target company’s revenue is heavily dependent on one or two customers, the business is far more fragile than it appears. HR due diligence often reveals pension obligations, non-compete clauses, or employment arrangements that carry hidden costs. Each of these categories tells a different part of the story, and together they form a complete picture of what you are actually buying or investing in.
How does financial due diligence differ from legal and operational due diligence?
Financial due diligence focuses on the numbers: revenue quality, cost structure, cash flow, working capital, debt, and the reliability of forecasts. Legal due diligence examines contracts, litigation, compliance, and ownership structures. Operational due diligence looks at how the business actually runs, its systems, processes, technology, and people. Each discipline answers a different question about the same target.
The distinction matters because the risks they surface are different in nature. Financial due diligence tells you whether the business generates the cash flow it claims and whether the valuation is defensible. Legal due diligence tells you whether the business is clean to acquire, whether there are encumbrances, disputes, or regulatory issues that could block or complicate the transaction. Operational due diligence tells you whether the business can sustain and scale its performance after the deal closes.
In a well-run process, these workstreams run in parallel and feed into each other. A finding in one area often triggers a deeper look in another. For example, a commercial contract flagged by the legal team may have financial implications that need to be modeled, or a technology gap identified in operational review may affect the tax treatment of intellectual property. The real value comes from integrating the findings across all disciplines rather than treating them as separate reports.
At what stage of a transaction should due diligence begin?
Due diligence should begin before you sign a letter of intent, not after. While formal due diligence typically starts once exclusivity is granted, the groundwork, organizing documentation, identifying potential issues, and preparing a data room, should start as early as possible. For sellers and companies anticipating a funding round or exit, preparation ideally begins months in advance.
The reason timing matters is straightforward: the later issues surface, the more leverage they hand to the other side. A buyer who discovers a tax exposure or a customer concentration problem during late-stage due diligence has every reason to renegotiate the price or walk away entirely. A seller who has already addressed these issues, or at minimum documented them transparently, is in a far stronger negotiating position.
For companies that want to be acquisition-ready, the best approach is to treat due diligence preparation as an ongoing discipline rather than a one-time exercise. That means maintaining a structured virtual data room, organized by category (financial, legal, tax, technical, commercial, HR), and keeping it continuously updated. Every document should be dated consistently. When a real process begins, the first checkboxes turn green quickly, which builds immediate confidence with investors or buyers and shortens the overall timeline significantly.
How do due diligence findings influence deal pricing and structure?
Due diligence findings directly shape both the price and the structure of a transaction. Material risks identified during the process typically lead to price adjustments, earn-out provisions, escrow arrangements, or specific indemnities that allocate the risk between buyer and seller. In some cases, findings restructure the deal entirely, changing what is being acquired or how the consideration is paid.
The mechanism works in both directions. Positive findings, strong recurring revenue, clean tax history, well-documented intellectual property, a diversified customer base, support the asking price and give the seller negotiating strength. Negative findings do the opposite. A significant tax liability, for example, may be reflected as a price reduction, a holdback, or a specific indemnity clause that protects the buyer if the liability materializes after closing.
Earn-out structures are often a direct response to uncertainty surfaced during due diligence. If there is disagreement about the sustainability of revenue or the likelihood of a key customer renewing, an earn-out ties part of the purchase price to future performance, sharing the risk rather than resolving the disagreement at the table. Understanding how findings translate into deal mechanics is one of the most practically valuable aspects of a thorough due diligence process.
What are the most common due diligence red flags that kill deals?
The most common deal-killing red flags are: significant undisclosed liabilities, revenue that is not repeatable or is concentrated in one customer, unresolved legal disputes, material tax non-compliance, and a finance function that cannot produce reliable data. Any one of these can cause a buyer or investor to lose confidence and withdraw, especially if they are discovered late in the process.
Beyond the hard numbers, there is a softer but equally important red flag: a lack of transparency or organization on the seller’s side. If a management team is slow to provide documentation, inconsistent in its answers, or clearly unprepared for the process, it raises questions about what else might be hidden and whether the business is actually in control of its own operations. This is one reason why proactive preparation matters so much, it signals competence and trustworthiness before a single document is reviewed.
Other flags that frequently cause deals to stall or collapse include:
- Key-person dependency – the business is too reliant on one or two individuals with no succession plan
- Intellectual property that is not properly registered or is disputed
- Employment arrangements that do not comply with current labor law
- Pension obligations that are larger than disclosed
- Forecasts that cannot be reconciled with historical performance
None of these are automatically fatal, but each requires a credible explanation and often a structural solution before a deal can proceed.
When should a company use an external due diligence partner?
A company should use an external due diligence partner whenever the transaction is material, the internal team lacks the bandwidth or specific expertise to run a rigorous process, or when an independent perspective is needed to give the findings credibility with the other party. For most growth-stage companies and scale-ups, this means virtually every significant acquisition, funding round, or exit process.
Internal teams are often too close to the business to conduct an objective review, and too stretched to add a complex due diligence workstream on top of their day-to-day responsibilities. An external partner brings structured methodology and sector experience, and the independence that makes findings credible to investors, buyers, and lenders. They also know what to look for, patterns of risk that are not always visible to someone inside the business.
The CFO plays a central role in this process regardless of who leads it. Whether managing an internal team or coordinating with an external partner, the CFO is responsible for ensuring the data room is complete and current, that findings are properly contextualized, and that the financial narrative holds up under scrutiny. When the internal CFO is also managing a live transaction, an external partner can take on the analytical workload while the CFO maintains strategic oversight.
How we approach due diligence at Greyt
We conduct financial due diligence from a CFO perspective, focused on insight, risk reduction, and value preservation. Our team of experienced (interim) CFOs guides the entire process and delivers clear, action-oriented reports. Depending on where you are in your journey, we offer three distinct services:
- Finance Maturity Assessment (FMA): A thorough review of your finance function, processes, systems, and reporting, to determine whether it is aligned with your strategy and growth ambitions. This is the factual baseline we establish before any M&A or funding process begins.
- Refinancing due diligence: An assessment of financial health, operational performance, and long-term sustainability to support a refinancing process, with a focus on cash flow, debt structure, and forecasts that help you negotiate better terms with your bank.
- Acquisition due diligence: A full review of a target company across financials, operations, and risk, covering cash flow, debt, profitability, and fiscal and legal compliance, to surface hidden risks, test the valuation, and confirm strategic fit.
We work with founders, CFOs, private equity, and venture capital. If you are preparing for a transaction or want to make sure your business is ready when the moment comes, get in touch with us to discuss how we can support you.
Frequently Asked Questions
How long does a typical due diligence process take?
The timeline depends on the size and complexity of the transaction, but most due diligence processes run between four and eight weeks once formal access to the data room is granted. Simpler deals or well-prepared targets can move faster, while complex cross-border transactions or businesses with messy financials can stretch significantly longer. The single biggest factor in timeline is how organized and complete the seller's documentation is from day one — which is why proactive preparation pays off directly in deal speed.
What documents should a company have ready before a due diligence process starts?
At a minimum, you should have three to five years of audited financial statements, management accounts, tax filings, a cap table, key customer and supplier contracts, employment agreements, IP registrations, and any existing legal correspondence or dispute records organized and accessible. Structuring these in a virtual data room by category — financial, legal, tax, commercial, HR, and technical — makes the process significantly smoother. The goal is to be able to answer the first wave of due diligence requests within days, not weeks, as early responsiveness directly influences buyer or investor confidence.
Can due diligence findings ever work in the seller's favor?
Absolutely — and this is an underappreciated point. Strong findings such as clean tax history, high-quality recurring revenue, a diversified customer base, and well-documented intellectual property actively support the asking price and reduce the buyer's perceived risk, which can translate into better terms, fewer protective clauses, and a faster close. Sellers who invest in pre-deal preparation and can demonstrate financial and operational maturity are in a far stronger negotiating position than those who enter the process unprepared. Due diligence is not just a risk filter for buyers; it is also a value validation tool for sellers.
What is the difference between buy-side and sell-side due diligence?
Buy-side due diligence is commissioned by the acquirer or investor to assess the target company before committing to a deal — its purpose is to uncover risks, validate the valuation, and inform deal structure. Sell-side due diligence, sometimes called vendor due diligence (VDD), is commissioned by the seller before going to market, producing an independent report that is shared with potential buyers to accelerate the process and signal transparency. VDD is particularly common in competitive auction processes, where it helps maintain deal momentum and reduces the back-and-forth of multiple buyer requests. Both serve the same ultimate goal — an informed transaction — but from opposite sides of the table.
How should a management team handle a due diligence finding they weren't aware of?
The most important thing is to respond with transparency and a clear plan rather than defensiveness or deflection. Unexpected findings — a tax position that was never properly documented, a contract clause that creates unforeseen liability — are not automatically deal-breakers, but how management responds to them often is. Acknowledge the issue, provide as much context as possible, and where feasible, present a concrete path to resolution. Buyers and investors understand that businesses are not perfect; what they are really assessing is whether the management team is in control and capable of handling complexity honestly.
Is due diligence only relevant for acquisitions, or does it apply to other types of transactions?
Due diligence applies to any high-stakes transaction where one party needs to assess the financial health, risk profile, and operational integrity of another — including venture capital and private equity funding rounds, refinancing and debt restructuring, management buyouts (MBOs), joint ventures, and even significant commercial partnerships. The scope and depth of the review will vary depending on the transaction type, but the underlying principle is the same: verify before you commit. Companies preparing for a funding round, for example, should expect investors to conduct financial and commercial due diligence with the same rigor as a buyer in an M&A process.
What is the most common mistake companies make when going through due diligence for the first time?
The most common mistake is underestimating how much documentation is required and how long it takes to gather and organize it under time pressure. Companies that have never been through a formal process often assume their existing records are sufficient — and then discover that auditors, investors, or buyers require a level of detail, consistency, and traceability that their current systems simply do not support. The practical fix is to treat data room readiness as an ongoing operational discipline rather than a last-minute sprint: maintain organized, up-to-date records continuously, and conduct a periodic internal readiness review so that when a real process begins, you are not starting from zero.