Light-touch due diligence covers a focused review of the most critical financial and legal information, while full-scope due diligence is a comprehensive investigation across every area of a business: financials, tax, legal, commercial, HR, and technical. The right approach depends on the size of the transaction, the risk profile of the target, and how much information is already available. The sections below break down when each type applies, how long they take, and what happens when you choose the wrong one.
When is light-touch due diligence enough?
Light-touch due diligence is enough when the transaction is relatively small, the risk is well understood, and the buyer or investor already has meaningful insight into the business. It focuses on the highest-priority areas, typically financial health, key contracts, and ownership structure, rather than conducting a line-by-line review of every document.
In practice, light-touch due diligence tends to be appropriate in the following situations:
- Early-stage funding rounds where the company is young and the financial history is limited
- Follow-on investments where the investor already knows the business well
- Smaller acquisitions where the deal value does not justify the cost of a full investigation
- Situations where a Finance Maturity Assessment has already been completed and provides a reliable baseline
The key question to ask is: what would genuinely change our decision if we found it? If the list of deal-breaking issues is short and well-defined, a targeted review is often faster, cheaper, and just as effective as a full-scope process. If significant unknowns remain, light-touch due diligence carries real risk.
What does full-scope due diligence actually cover?
Full-scope due diligence is a structured investigation across every major area of a business, designed to give buyers or investors a complete picture before committing to a transaction. It goes well beyond financial statements and covers six distinct workstreams, each addressing a different category of risk.
Financial due diligence
This is the core of any due diligence process. It covers annual accounts, management reports, cash flow analysis, debt structure, working capital trends, and financial forecasts. The goal is to verify that the numbers are accurate, sustainable, and consistent with the story the seller is telling.
Legal, tax, and compliance due diligence
Legal due diligence reviews incorporation documents, shareholder agreements, contracts, and any ongoing or potential litigation. Tax due diligence examines VAT filings, corporate income tax returns, payroll tax compliance, and any special arrangements with tax authorities such as innovation box approvals or tax rulings. Together, these workstreams identify hidden liabilities that do not appear on the balance sheet.
Commercial, HR, and technical due diligence
Commercial due diligence assesses the quality and concentration of the customer base, the strength of supplier relationships, and the durability of revenue. HR due diligence reviews employment contracts, pension obligations, and key-person dependencies. Technical due diligence covers intellectual property, software documentation, and patents, particularly relevant in technology and biotech businesses where IP is a core asset.
A full-scope process brings all six workstreams together into a coherent picture, allowing the buyer to assess not just whether the numbers add up, but whether the business is structurally sound and positioned to deliver on its projections.
How long does each type of due diligence take?
Light-touch due diligence typically takes two to four weeks. Full-scope due diligence usually runs four to twelve weeks, depending on the complexity of the business, the quality of the documentation available, and how many workstreams are running in parallel.
The single biggest factor influencing the timeline is how well-prepared the target company is. When all documentation is organized in a structured virtual data room, with clear categories for financial, legal, tax, commercial, HR, and technical materials, the process moves significantly faster. When a company has to locate, produce, or reconstruct documents during the investigation, timelines stretch and investor confidence drops.
For businesses that go through funding rounds or M&A processes regularly, maintaining an always-ready data room is one of the most practical ways to compress due diligence timelines. It also signals to buyers and investors that the company is in control, which strengthens the negotiating position before a single question has been formally asked.
What are the risks of choosing the wrong due diligence scope?
Choosing too narrow a scope leaves material risks undiscovered. Choosing too broad a scope wastes time and money on a process that does not match the complexity of the deal. Both errors are costly, but they play out differently.
When a light-touch review misses something significant, the consequences typically emerge after the transaction closes: unexpected tax liabilities, undisclosed legal disputes, customer concentration risk, or cash flow dynamics that were not visible from a surface-level financial review. At that point, recourse is limited and the cost of the oversight falls entirely on the buyer.
When a full-scope process is applied to a transaction that does not warrant it, the cost is primarily time and money. For smaller deals, an over-engineered due diligence process can actually kill a transaction by introducing delays, creating friction between parties, and consuming resources disproportionate to the deal value.
The practical risk is that scope decisions are often made based on habit or precedent rather than a structured assessment of what the specific transaction actually requires. A clear-eyed view of the risk profile, before the process begins, is the most reliable way to avoid both failure modes.
Who decides which due diligence approach to use?
The buyer or investor typically drives the due diligence scope, but the decision is usually made in consultation with their financial advisor or CFO. The scope should reflect the transaction size, the risk profile of the target, the time available, and the buyer’s existing knowledge of the business.
In practice, the decision often comes down to three questions:
- What is the downside if something is missed? Higher-value and higher-risk transactions justify broader scope.
- How much do we already know? Prior relationships, existing data, or a completed Finance Maturity Assessment can reduce the scope needed without increasing risk.
- What can we realistically complete in the time available? A well-scoped process completed thoroughly is more valuable than a full-scope process rushed to meet a deadline.
Sellers and target companies also have a role to play. A well-organized data room, proactive disclosure, and clean documentation reduce the scope that buyers feel they need to conduct. Companies that are genuinely due diligence-ready give buyers the confidence to move faster and with less scrutiny, which typically leads to better deal terms and shorter timelines for everyone involved.
How Greyt approaches due diligence
We conduct financial due diligence from a CFO perspective, focused on insight, risk reduction, and protecting value at key decision moments. Depending on where you are in your transaction journey, we offer three distinct approaches through our expert financial advisory services:
- Finance Maturity Assessment (FMA): A thorough review of your financial organization, processes, systems, and reporting, to establish a factual baseline before any transaction begins. This is Phase 0 of any M&A process and produces a concrete report with actionable recommendations.
- Refinancing due diligence: An assessment of financial health, operational performance, and long-term sustainability ahead of refinancing, with a focus on cash flow, debt structure, and forecasts to help you negotiate better terms.
- Acquisition due diligence: A full review of a target company across financials, operations, and risk, including cash flow, profitability, tax compliance, and strategic fit, so you can make a well-informed decision and avoid surprises after closing.
Our team of experienced (interim) CFOs guides you through the process and delivers clear, action-oriented reporting. Whether you need a targeted review or a full-scope investigation, we scope the work to match what the transaction actually requires, not more, not less. Reach out to us to discuss what the right due diligence approach looks like for your situation.
Frequently Asked Questions
Can a light-touch due diligence be upgraded to full-scope mid-process if red flags emerge?
Yes, and this happens more often than most buyers anticipate. If a targeted review uncovers inconsistencies in the financials, undisclosed liabilities, or gaps in key contracts, the scope can be expanded before the transaction closes. The practical challenge is that expanding mid-process adds time and cost, and can create friction with the seller — which is why defining clear escalation criteria at the outset is a smarter approach than assuming the initial scope will hold.
What is a Finance Maturity Assessment, and how does it reduce due diligence scope for buyers?
A Finance Maturity Assessment (FMA) is a structured review of a company's financial organization, processes, systems, and reporting quality, completed before a transaction begins. When a credible FMA is already in place, buyers have a verified baseline to work from, which reduces the amount of ground they need to cover independently. This can meaningfully compress both the timeline and the cost of due diligence without increasing the buyer's risk exposure.
What are the most common mistakes sellers make that slow down the due diligence process?
The most frequent issues are disorganized or incomplete documentation, inconsistencies between management accounts and statutory filings, and undisclosed liabilities that surface late in the process. Each of these erodes buyer confidence and forces the investigation to broaden in scope. Sellers who prepare a structured virtual data room in advance — with clean, categorized materials across financial, legal, tax, HR, and commercial areas — consistently experience faster timelines and stronger negotiating positions.
How should a company decide between hiring a financial advisor versus relying on its internal CFO for due diligence?
Internal CFOs bring valuable context and business knowledge, but due diligence — particularly on the buy side — requires a level of objectivity and transaction-specific expertise that is difficult to maintain when you are also running the business. An experienced external advisor brings benchmarking insight, a structured methodology, and the independence to surface findings that an internal team might unconsciously minimize. For most mid-market transactions, the combination of both — an internal CFO coordinating and an external advisor leading the investigation — produces the best outcome.
What happens to due diligence findings after the report is delivered — do they affect deal terms?
Absolutely, and this is one of the most practical reasons to invest in a thorough process. Material findings typically feed directly into price adjustments, earn-out structures, representations and warranties in the purchase agreement, or specific indemnities from the seller. A well-documented due diligence report gives the buyer's legal team the evidence they need to negotiate protections that would otherwise not exist, effectively turning the investigation into a value-protection tool rather than just a risk-identification exercise.
Is due diligence always the buyer's responsibility, or can sellers commission their own report?
Sellers can — and increasingly do — commission vendor due diligence (VDD) reports ahead of a sale process. A credible vendor due diligence report, prepared by an independent advisor, gives prospective buyers a verified starting point and signals that the seller has nothing to hide. This typically accelerates the buyer's own review, reduces the number of information requests, and shortens the overall transaction timeline, which benefits both parties. In competitive sale processes, a strong VDD package can also support a higher valuation by reducing the uncertainty premium buyers would otherwise price in.
How do you maintain a due diligence-ready data room without it becoming a full-time administrative burden?
The most effective approach is to treat data room maintenance as an ongoing financial hygiene practice rather than a transaction-specific project. This means keeping key documents — shareholder agreements, employment contracts, tax filings, financial statements, and IP registrations — updated on a rolling basis, ideally within your existing financial reporting cycle. Companies that integrate data room upkeep into their quarterly or annual close processes find that when a transaction opportunity arises, they are ready within days rather than weeks, with no last-minute scramble and no gaps that invite additional scrutiny.