Skip to content
Spectra Forensics, Investigation Specialist

Knowledge base · Due diligence

What is due diligence?

Short answer

Due diligence is a structured investigation of a company, person or asset carried out before a decision such as an acquisition, investment, loan, partnership or appointment. It verifies facts and identifies financial, legal, commercial, integrity and regulatory risks so that the decision-maker can price, mitigate or walk away from them.

Definition of Due Diligence (also: DD, pre-transaction due diligence, financial due diligence, legal due diligence, commercial due diligence)

Due diligence is the work done before a significant decision to find out whether the facts are what they appear to be. It is used before mergers and acquisitions, private equity and venture investments, lending, joint ventures, appointing distributors or agents, onboarding major suppliers, and hiring senior executives. The aim is not to eliminate risk but to identify it early enough to price it, manage it or avoid it.

The term comes from the idea of the care a reasonable person would exercise. In a transaction, it describes both the process and the standard: what a careful buyer, investor or lender would have checked.

What types of due diligence are there?

Due diligence is usually divided into workstreams, each led by specialists:

Type Main question
Financial Are the reported earnings, assets, debt and cash flows reliable and sustainable?
Legal Does the target own what it claims, and what contracts, disputes and liabilities exist?
Tax What historical and structural tax exposures exist?
Commercial Is the market, customer base and business plan credible?
Regulatory and compliance Does the target hold necessary licences and comply with key laws?
IntegrityWho really owns and runs the target, and is there evidence of fraud, corruption or reputational risk?
Technology, cyber and data Are systems secure and personal data handled lawfully?
Environmental, social and governance What ESG liabilities or controversies exist?

Outside transactions, the same thinking applies to vendor due diligence on suppliers, background verification on individuals, and Know Your Customer checks by regulated entities.

How does the due diligence process work?

  1. Scoping. Identify the decision, the key risks and the questions that would change the outcome.
  2. Information gathering. Review data-room documents, management responses and site visits, together with independent sources such as corporate registries, court records, regulatory databases, media and other open-source intelligence.
  3. Analysis and verification. Test management's claims against independent evidence, reconcile financial data and map ownership, including beneficial ownership.
  4. Interviews and enquiries. Speak to management and, where appropriate and lawful, to former employees, customers, suppliers and industry sources.
  5. Reporting. Present findings by severity, with their implications for price, structure, conditions or the go/no-go decision.

Why does due diligence matter in India?

Indian transactions often involve family-controlled groups, related-party networks, informal arrangements and records spread across many authorities, so published information does not always tell the full story. Directors have a duty under s. 166 of the Companies Act 2013 to exercise due and reasonable care, skill and diligence, and lenders and investors increasingly expect a documented basis for their decisions.

For anti-bribery purposes, due diligence on business partners is one of the six principles in the UK Ministry of Justice guidance on adequate procedures, and is widely used as a benchmark by Indian companies in the absence of notified guidelines under s. 9 of the Prevention of Corruption Act 1988.

What are common due diligence failures?

  • Relying only on information supplied by the target.
  • Treating integrity checks as a database search rather than an investigation.
  • Limiting checks to the target entity and ignoring promoters, related parties and key intermediaries.
  • Completing due diligence at onboarding and never refreshing it.
  • Failing to escalate red flags because the deal timetable is fixed.

Our articles on due diligence on business partners in India and on integrity due diligence before an acquisition explore these gaps in practice.

How does due diligence differ from an audit?

A statutory audit gives an opinion on whether financial statements are true and fair, based on sampling and management's records. Due diligence is decision-focused, forward-looking and scoped by the buyer or investor. A forensic audit looks back at suspected wrongdoing. They can overlap, but each answers a different question.

Spectra Forensics' integrity due diligence service covers integrity, ownership and reputation workstreams alongside financial and legal advisers.

Frequently asked questions

Is due diligence a legal requirement in India?

There is no single law requiring due diligence for every transaction. Specific regimes require particular checks: KYC for regulated entities under the PMLA and sector rules, and the duty of directors under s. 166 of the Companies Act 2013 to act with due and reasonable care, skill and diligence. In practice, due diligence is also how boards and lenders demonstrate that they acted with care if a transaction later goes wrong.

How long does due diligence take?

It depends on scope, the target's size and cooperation, and the number of jurisdictions involved. A desk-based check on a single counterparty can be quick, while full acquisition due diligence across financial, legal, tax and integrity workstreams can run for several weeks. Defining the key questions at the start keeps the work focused on risks that could change the decision or the price.

What happens if due diligence finds a problem?

Findings feed the decision. Options include renegotiating price, adding warranties, indemnities or escrow, imposing conditions precedent such as remediation of a compliance gap, restructuring the deal to exclude a problem asset, or not proceeding. Serious findings such as evidence of fraud or bribery may also require legal advice on reporting obligations and on how the finding affects the parties' exposure.

Sources

  1. Government of India, Companies Act, 2013 (India Code) link
  2. UK Ministry of Justice, Bribery Act 2010 Guidance (2011) link
  3. Reserve Bank of India, RBI (Commercial Banks – Know Your Customer) Directions, 2025 (2025) link
Confidential enquiry