The three main types of due diligence are financial due diligence, legal due diligence, and commercial due diligence. Together, they give buyers, investors, and lenders a complete picture of a company before committing capital or signing a deal. Depending on the industry or transaction type, additional workstreams such as tax, HR, and technical due diligence are often layered on top. The sections below unpack what each type examines, how they differ, and how they work together in practice.
What does each type of due diligence actually examine?
Each type of due diligence focuses on a distinct dimension of a business. Financial due diligence examines the numbers: revenue, costs, cash flow, and forecasts. Legal due diligence reviews contracts, ownership structures, and compliance. Commercial due diligence assesses the market position, customers, and competitive dynamics. Together, these three workstreams cover the financial health, legal integrity, and strategic viability of a company.
Beyond the core three, most serious transactions also include:
- Tax due diligence: corporate income tax filings, VAT and payroll tax compliance, innovation box approvals, and any rulings with tax authorities
- HR due diligence: employment contracts, pension schemes, key person dependencies, and compensation structures
- Technical due diligence: software documentation, patents, intellectual property rights, and technology infrastructure
The scope of a due diligence process for your transaction is always shaped by the nature of the transaction. A funding round for a SaaS scale-up will weight technical and commercial findings heavily. A manufacturing acquisition will focus more on legal, tax, and operational risks. The three core types remain the consistent foundation regardless of context.
How does financial due diligence differ from an audit?
Financial due diligence and an audit are fundamentally different in purpose. An audit verifies that historical financial statements comply with accounting standards. Financial due diligence goes further: it investigates the quality of earnings, the sustainability of cash flow, the accuracy of forecasts, and the risks embedded in the financials, all from the perspective of a potential investor or buyer making a forward-looking decision.
An auditor answers the question: “Are these numbers accurate and compliant?” A financial due diligence team answers a different question: “What do these numbers actually mean for the future of this business, and what risks are hidden in them?”
In practice, financial due diligence typically covers:
- Annual accounts and management reports across multiple years
- Business plans and financial forecasts, including underlying assumptions
- Working capital analysis and cash conversion cycles
- Debt structure, off-balance-sheet liabilities, and contingent obligations
- Key financial KPIs and the zero moment of cash, the point at which the cash position reaches zero
This forward-looking orientation is what makes financial due diligence indispensable in M&A and funding processes. It surfaces issues that a clean audit opinion can never reveal.
What does legal due diligence look for in a deal?
Legal due diligence examines the legal integrity of a company and the enforceability of its key relationships. It reviews incorporation documents, the shareholders’ register, ownership structures, UBO (Ultimate Beneficial Owner) identification, existing contracts, litigation history, and regulatory compliance. The goal is to identify legal risks that could affect the deal’s structure, price, or viability.
Lawyers conducting legal due diligence typically focus on three broad areas:
Corporate structure and ownership
This covers the articles of association, shareholder agreements, board resolutions, and any pledges or encumbrances on shares. Investors need to know exactly who owns what, whether there are any pre-emption rights that could complicate the transaction, and whether the ownership structure is clean and transferable.
Contracts and commercial obligations
Key supplier agreements, customer contracts, lease agreements, and licensing arrangements are all reviewed for change-of-control clauses, termination rights, and material obligations. A single poorly structured commercial contract can become a significant liability post-acquisition if it was not identified during legal due diligence.
Regulatory compliance, employment law adherence, and any pending or historical litigation round out the legal picture. Companies that keep their legal documentation centrally organized, in a structured virtual data room, make this process significantly faster and create a stronger impression of being in control.
Why is commercial due diligence important in M&A?
Commercial due diligence is important in M&A because it tests whether the financial performance of a business is actually sustainable. Strong historical numbers mean little if the underlying market is shrinking, the customer base is concentrated in one or two accounts, or the competitive position is eroding. Commercial due diligence answers the question: does this business have a defensible future?
In practice, commercial due diligence examines:
- The size, growth rate, and dynamics of the target market
- The company’s market share and competitive differentiation
- Major customer relationships, contract terms, and revenue concentration risk
- Key supplier dependencies and supply chain vulnerabilities
- Pricing power and the sustainability of margins
For buyers and investors, commercial due diligence is often where the investment thesis is either validated or challenged. A company might look attractive on paper, but if 60% of its revenue comes from a single customer on a contract that expires in six months, that fundamentally changes the risk profile of the deal. Commercial due diligence surfaces those realities before they become expensive surprises.
When should you run all three types simultaneously?
All three types of due diligence should run simultaneously whenever time is a constraint and the transaction is material, which describes most M&A processes and significant funding rounds. Running them in parallel rather than sequentially compresses the timeline, allows workstreams to cross-reference findings in real time, and reduces the risk of one team’s discovery being missed by another.
Sequential due diligence, finishing financial before starting legal, for example, is rarely practical in competitive deal environments. Sellers typically set timelines, and buyers who take too long risk losing the deal or signaling a lack of readiness.
There are situations where a phased approach makes sense. In early-stage funding rounds, a lighter commercial and financial review may precede a full legal process. In distressed situations, financial due diligence may need to be completed first to determine whether the deal is viable at all before committing legal resources. But as a general rule, parallel workstreams managed by a coordinated team produce faster, more integrated results.
The practical enabler of parallel due diligence is a well-organized virtual data room. When all documentation, financial, legal, tax, HR, technical, and commercial, is stored in one structured, up-to-date location with clear categories and consistent dating, all three teams can work simultaneously without bottlenecks.
Who typically leads each due diligence workstream?
Each due diligence workstream is typically led by a specialist in that domain. Financial due diligence is led by an experienced CFO, financial advisor, or M&A specialist. Legal due diligence is led by a corporate lawyer or M&A legal team. Commercial due diligence is often led by strategy consultants or sector specialists with deep market knowledge. In practice, a transaction advisor or lead CFO coordinates across all workstreams to ensure findings are integrated.
On the sell side, the CFO plays a central role regardless of which workstream is being reviewed. They are responsible for ensuring the virtual data room is complete, current, and well organized, from annual accounts and management reports to commercial contracts and tax rulings. A CFO who applies an “always due diligence ready” mindset means that when a buyer or investor requests information, the answers are available immediately rather than being assembled under pressure.
On the buy side, the lead advisor, often a fractional CFO with M&A expert services, coordinates the financial workstream and acts as the integration point between legal, commercial, and tax teams. This coordination role is critical: due diligence findings only create value when they are synthesized into a coherent risk and opportunity assessment that informs the final investment decision.
How Greyt supports your due diligence process
We approach due diligence from a CFO perspective, focused on insight, risk reduction, and protecting value at every stage of a transaction. Whether you are preparing for a funding round, evaluating an acquisition, or refinancing your business, we bring the structure and senior expertise to make the process faster and more effective.
Our due diligence services cover three specific situations:
- Finance Maturity Assessment (FMA): a thorough review of your financial organization, processes, systems, and reporting, to determine whether your finance function is ready to support your growth ambitions. This is the factual baseline we establish before any M&A or funding process begins.
- Refinancing due diligence: an assessment of financial health, cash flow, debt structure, and long-term sustainability to help you negotiate better terms with lenders.
- Acquisition due diligence: a rigorous review of a target company’s financials, operations, and risks, uncovering hidden liabilities, stress-testing the valuation, and confirming strategic fit before you commit.
Our team of experienced (interim) CFOs guides the process from start to finish and delivers clear, action-oriented reports, not just findings, but concrete next steps. Ready to go into your next deal with confidence? Get in touch with us to discuss how we can support your due diligence process.
Frequently Asked Questions
How long does a typical due diligence process take from start to finish?
The timeline varies significantly depending on the complexity of the transaction and how well-prepared the target company is. A straightforward funding round might require two to four weeks of due diligence, while a complex M&A transaction can take anywhere from six to twelve weeks. The single biggest factor within a seller's control is the quality and completeness of the virtual data room — companies that maintain an 'always due diligence ready' posture can compress timelines dramatically and avoid the costly back-and-forth that drags most processes out.
What is the most common mistake sellers make during due diligence?
The most common mistake is treating due diligence as a reactive exercise — scrambling to gather documents only after a buyer or investor has made a request. This creates delays, signals a lack of operational control, and can erode trust at a critical moment in the negotiation. A second frequent mistake is underestimating the legal workstream: sellers often focus on getting the financials right but overlook incomplete shareholder agreements, missing board resolutions, or change-of-control clauses buried in customer contracts that can become serious deal complications.
What is a virtual data room, and do I really need one?
A virtual data room (VDR) is a secure, cloud-based repository where all due diligence documentation — financial statements, legal contracts, tax filings, HR records, and more — is organized and shared with authorized parties. For any serious transaction, a VDR is not optional; it is the practical infrastructure that allows multiple workstreams to run simultaneously without bottlenecks. Beyond convenience, a well-structured VDR signals to buyers and investors that the business is professionally managed, which itself contributes positively to their overall risk assessment.
How do due diligence findings typically affect deal pricing or structure?
Due diligence findings directly feed into the final negotiation on price, deal structure, and contractual protections. Material risks uncovered during the process — such as undisclosed liabilities, revenue concentration, or pending litigation — typically result in a price adjustment, an escrow arrangement, or specific representations and warranties in the purchase agreement. In some cases, findings lead buyers to restructure the deal entirely, for example shifting from a full acquisition to a staged earn-out. This is why a thorough due diligence process protects buyers and gives sellers an incentive to proactively address known issues before the process begins.
What should a company do to prepare for due diligence before a deal is even on the table?
The best preparation is to build and maintain a living data room as part of normal business operations, not as a last-minute project. This means keeping annual accounts, management reports, contracts, tax filings, and corporate documents consistently up to date and centrally organized. Conducting a Finance Maturity Assessment (FMA) ahead of any transaction is a practical way to identify gaps in your financial reporting, processes, or documentation before a buyer does. Companies that invest in this readiness not only move faster when a deal materializes but often achieve better valuations because they project confidence and control.
Is due diligence only relevant for large companies or big transactions?
No — due diligence is relevant at virtually every stage of a company's growth, from Series A funding rounds to full acquisitions. The scope and depth naturally scale with the size and complexity of the transaction, but even early-stage investors conduct some form of commercial and financial review before committing capital. For smaller companies, the principles are the same: clean financials, clear ownership structures, and well-documented commercial relationships reduce friction and increase investor confidence regardless of deal size.
What happens if a significant issue is discovered late in the due diligence process?
A late-stage discovery is one of the most disruptive scenarios in any transaction. Depending on the severity, it can trigger a price renegotiation, a deal restructuring, a request for additional representations and warranties, or in serious cases, a complete withdrawal by the buyer. To minimize this risk, sellers are increasingly opting for vendor due diligence (VDD) — commissioning their own independent review before going to market — so that any issues are identified and addressed proactively. This approach not only reduces the risk of late surprises but also accelerates the buyer's process, since much of the groundwork is already done.
Related Articles
- What is due diligence and why is it important before a deal?
- What is an investment thesis in M&A and why do I need one?
- What is M&A and how does an acquisition process actually work?
- How does a financial business partner help a company prepare for funding rounds?
- Should a SaaS company hire a fractional CFO?