A Study of the Due Diligence Process, Its Categories, and a Contemporary Case Illustration

INTRODUCTION 

Each major business deal with an a merger, acquisition, joint venture, investment,  or even onboarding of a new business partner, has an unsuspecting aspect of risk.  A company might have a nice, strong balance sheet, contracts might look like  they are airtight, management might be trustworthy, and it may all look well –  and then, when it is closed, there’s a shroud of hidden liabilities, pending  litigation, inflated receipts or non-compliant practices that kill the value of a  company. The discipline of due diligence is to avoid just this kind of surprise.  Process with which a party to a prospective transaction, in an investigative  manner, reviews all aspects of the business, financial, legal and operations of  another party prior to entering into contractual and financial commitments.  

The concept of due diligence as it is now used in securities law began to define  the standard of care that securities brokers and underwriters must provide in the  investigation of a company before recommending securities to investors in order  to prevent being held liable for misstatements. In time, the idea grew into  something far more expansive and today is a fixture on the vast majority of the  large commercial deals in the world such as mergers and acquisitions (M&A),  private equity deals, venture capital investments, real estate deals, joint ventures  and even personal and reputational vetting.  

The project explains what constitutes due diligence, provides an overview of the  shake-up process and describes in detail the major types of due diligence checks  that are completed in today’s typical transaction, before ultimately transforming  the reader into a High Court damages case involving Hewlett-Packard’s failed  acquisition of British software firm Autonomy Corporation in 2011, one of the  best examples of the consequences of poor diligence practices. 

MEANING AND DEFINITION OF DUE DILIGENCE 

The most basic definition of due diligence is in professional terms, the application  of reasonable care and investigation that a prudent person or business, like one  doing due diligence, would use before entering into a deal or contract with another  party. It is an audit, review and verification process to ensure that facts,  assumptions and representation offered by other party in a deal are accurate. Its  aim is not only to identify fraud but to create an accurate and evidence-based  understanding of the target’s true financial circumstances, legal status, working  capacity, and strategic worth in order to justify an invested or acquired company’s  price and protection contractual safeguards such as representations, warranties  and indemnities, allocate risk sensibly and appropriately and negotiate a fee.  

Warren Writer’s recent commentary states that as a part of distributors and third  parties’ due diligence, they need to “confirm that the deal thesis is grounded in  reality” and avoid being caught off-guard with potential renegotiation or  regulatory issues, as well as focusing on factors that have a real impact on pricing,  deal structure, and certainty.  

OBJECTIVES AND IMPORTANCE OF DUE DILIGENCE There are a number of interconnected functions to a Due Diligence in a  transaction:  

Risk Identification – surface unknown liabilities, active or future legal action,  contractual issues, non-compliance of the rules, gaps in operation etc. prior to the  buyer’s problem.  

Valuation verification — A check on the actual value of the prospect of  acquisition, is it worthwhile paying this accompanied by the assets and financial  results of the subject or do they represent guesswork?  

Discuss structuring of the deal — providing input regarding the structure of the  deal (asset purchase v. share purchase, earn out/indemnity arrangements) based  on the risks identified. 

Regulatory compliance — certifying that the acquisition is in compliance with  relevant competition, securities, tax and environmental laws and other industry specific regulations, as well as that the business of the target, continues to be in  compliance.  

Negotiation leverage — Results from due diligence activities are often leveraged  in subsequent negotiations to renegotiate price, insert specific warranties or even  to exit the deal altogether.  

Research regularly reveals the importance of this process to deal success:  according to one industry study, more than 80 percent of all mergers that fall short  are due to inadequate pre-deal investigation, and in another widely cited study,  about sixty percent of business leaders cite poor due diligence as the number one  reason deal failure or disappointment occurs.  

THE DUE DILIGENCE PROCESS 

Although the specific checklist varies with the nature and scale of a transaction, the due  diligence process generally follows a structured sequence of stages. 

1. Planning and Scoping  

It starts with the establishment of goals, scope and timeline of the review. With  the support of legal counsel, accountants and industry consultants, the acquiring  party determines what types of due diligence issues are relevant (financial, legal,  tax, operational etc.) and forms a cross functional due diligence team.  

2. Confidentiality and Arrangements for access  

The parties normally will enter into a non-disclosure agreement (NDA) or  confidentiality agreement before any sensitive information is shared. This ensures  the protection of the seller’s proprietary information, offers consistency to the  seller that they will not be negatively affected if the deal doesn’t make it through. 

3. Establish a data room and request information.  

A list of items for the buyer’s due diligence is sent and the target prepares the  necessary documents for financial statements, contracts, corporate records,  litigation files, employment records, IP registrations, and regulatory filings and  then upload them into a safe (usually virtual) data room where the buyer can  access them for review.  

4. Provide a document review and analysis.  

A team of specialists, such as accountants (for financial records), lawyers (for  contracts and litigation), tax advisers (for tax exposure) and technical consultants  (for operational or environmental issues), reviews the data room contents  systematically checking the data more carefully against third-party information  like bank statements, court documents, and regulatory disclosures.  

5. Conversations with managers and site visits.  

Numbers written on paper don’t tell the whole story. The due diligence team  interviews the management and key employees of the target company (and on  occasion key customers or suppliers of the target) and then visits the facilities or  plants or the key assets to confirm the assurances provided in the documentation.  

6. Red-Flag Reporting  

During the process, interim so called “red-flag” documents are created by the due  diligence team that detail key concerns, allowing the buyer to make a decision,  rather than wait until the end of due diligence, if a specific issue isn’t going to be  a deal breaker.  

7. Final Due Diligence Report  

The full report summarizes the results of the analysis from all workstreams, often  prioritizing issues by level of severity and suggesting the resolution needed – either differing closing price, specific closing conditions, or roll-back of the  closing.  

TYPES OF DUE DILIGENCE 

Due diligence is not a single, uniform exercise; it is a collection of specialised investigations,  each focused on a distinct dimension of the target business. The principal types are explained  below.  

1. Financial Due Diligence  

The financial due diligence is at the heart of any transaction review. It includes an extensive  review of the target’s financial position, including its financial statements from the past,  revenue recognition principles, profitability trends, cash flow conditions, working capital  needs, all financial obligations, assumptions made in financial forecasts, and much, much more.  When looking at reported earnings, accountants usually perform the exercises to remove  unusual and non-recurring gains or losses, giving an insight into the target’s underlying and  enduring profitability, which in practice may be termed a ‘quality of earnings’ analysis.  

2. Legal Due Diligence  

Legal due diligence involves investigating the entity’s organizational structure, charter papers,  key contracts, litigation experience, employment contracts, licenses and titles to valuable  assets. The goal is to substantiate title, good title and marketability, no hidden issues or  breaches of contract, and that all corporate approvals have been granted to effect the sale.  

3. Tax Due Diligence  

The scope is to review the target’s compliance with income tax, goods and services tax / value  added tax, withholding tax, transfer pricing, customs tax and its identification of contingent tax  liabilities, withholding tax, value added tax (VAT), transfer pricing and customs tax liabilities  that have not been settled, or questionable tax positions extracted by the target which may be  assigned in the future by the tax authorities. 

4. Operational Due Diligence  

Operational DD focuses on efficiencies and sustanability of its target company’s business  processes; supply chain, production lines, quality control, technology and/or operational key  metrics etc. It aims to find out if the business “can” continue and grow without the current  owner, after the ownership change.  

5. Commercial (Market) Due Diligence  

Commercial due diligence examines things that are outside the company, including the  competitive landscape, size and growth of the market, customer focus, risks associated with  contract renewals and the trustworthiness of the company’s business plans. In essence, it  evaluates the rationale and justifications for the transaction, such as market share expansion,  cross-selling potential, geographic expansion — versus whether the market actually exists.  

6. Human Resources (HR) Due Diligence  

HR due diligence includes auditing employment contracts, compensation and benefit packages,  pension obligations, key person dependency, employees’ demographics, current labour  relations issues and labour law compliance. One of the key issues in this category is retention  risk of critical personnel such as founder and technical leaders.  

7. Information Technology and Intellectual Property Due Diligence  

IT due diligence evaluates the strength, size and security of the target’s technical systems, such  as cyber and data-protecting adherence. Intellectual property (IP) due diligence is similar in  that it establishes IP rights, determines if they’ve been claimed, confirms proper registration  and/or assignment of IP essential to the business, and validates that the IP is assigned to the  particular target instead of to individual founders or third parties.  

8. Environmental Due Diligence  

Focusing mainly in real estate, energy, mining and manufacturing, environmental due diligence  examines past or present environmental compliance with laws, environmental liabilities, and  the cost of remediation, as liabilities often remain with the land or asset even when the property  changes hands. 

9. Regulatory and Compliance due diligence  

This type of diligence effort questions the target’s business and whether the transaction itself  will be compliant with regulatory requirements in the sector in which the target company  operates — such as health-sector transactions, if the transaction involves patient information  regulations should be checked, financial-services transactions, if the transaction is above a  certain threshold, compliance laws will also be checked, and competition or antitrust laws . . .  . But, if the transaction is otherwise viable but potential regulatory obstacles are not anticipated,  it can derail the transaction even if nothing wrong has been committed by the target company  itself.  

10. Reputational and Cultural Due Diligence  

Reputational due diligence activities explore the target’s public image, media history and  examiner the track record of its leading directors and managers, while information on corporate  culture and employee morale looks into are part of cultural due diligence activities. If the issue  of cultural misalignment amongst the two parties to a merger or acquisition is a hidden killer,  commentators estimate that it kills approximately thirty percent of mergers and acquisitions.  

A RECENT ILLUSTRATION: HEWLETT-PACKARD’S ACQUISITION  OF AUTONOMY  

One of the most repetitive examples of a due diligence mistake in corporate history is Hewlett  Packard’s purchase of British enterprise software company Autonomy Corp. for some $11.7  billion in 2011. Only about a year after the deal, HP announced an $8.8 billion write-down in  the value of Autonomy and publicly accused of accounting irregularities by the company’s  founder, Dr Mike Lynch, and finance director, Sushovan Hussain, that inflated the company’s  growth and revenue prior to its sale.  

There was plenty of litigation on both sides of the Atlantic thereafter. The High Court recently  ruled in favour of England in a civil fraud case where Lynch and Hussain were held to have  made “the wrongful representation” of the financial position of Autonomy. In 2018, Hussain  was found guilty separately of wire fraud in the United States and sentenced, but Lynch was  extradited in 2023 to face criminal charges and but acquitted by a federal jury in June 2024. In  the next August, Lynch passed away when his yacht, the Bayesian, sank off the coast of Sicily. 

That was the last instalment of the civil action, which reached the finish line recently, back in  July 2025, when Mr Justice Hildyard of the English High Court handed down a 197-page  judgment awarding HP damages. While HP’s valuation of $4 billion was ‘substantially  exaggerated’, the court found that Autonomy had actually been overvalued as its true financial  situation was not properly disclosed and if the accounts had been accurately presented then HP  would have paid off around £23 per share, not £25.50 per share . He awarded HP about £646  million for what he termed “inflated” purchase price under the UK Financial Services and  Markets Act and an additional £51.7m for deceit in the matter of “misrepresentation” against  Lynch’s estate and Hussain, a case which is set for a hearing on interest and currency conversion  to follow.  

First, because it is instructive; secondly, because HP was a not reckless or inexperienced  buyer—so clever actually that they brought in reputable advisers as well as conducting a due  diligence exercise prior to closing the Autonomy deal. The review itself did not identify the  alleged “crooked” revenue recognition policies that made Autonomy appear to be growing  more rapidly than it actually was, such as the reclassification of the sales of hardware at low  margins as high margin software sales. Interestingly, Autonomy’s auditor Deloitte itself was  also found guilty by the UK’s Financial Reporting Council (FRC) of grossly inadequate  accounting service in relation to the company. The case therefore illustrates the need to explore  the revenue recognition methodology underlying the financial information, the need for legal  due diligence to account for the prospect of securities and fraud litigation even after closing,  and the counterattacks this illustrates on the issue that no single type of due diligence should  ever be looked at as a “boiler room” approach and should also be carefully and independently  considered in all work streams. 

CONCLUSION  

“Doing due diligence” isn’t a back-end mechanical process added onto the end of deal  negotiations—it is analytical underpinning of good transactional decision-making. A well orchestrated due diligence should proceed in phases — planning, information collection and  verification, and risk allocation — while incorporating the full spectrum of the financial, legal,  tax, operational, commercial, HR, technological, environmental, regulatory and reputational  disciplines and fields — and end up with an accurate valuation and appropriate contractual  protections for the acquirer, avoiding the catastrophic, decades long, post-closing battles that  bogged down Hewlett-Packard and Autonomy. Bad due diligence can come at a  disproportionate price – of course in rands and schillings, but also in years of litigation,  reputational damage and, in this case, personal tragedy. Good and independent due diligence  is the only best security that any organisation can have against these risks where it is  considering undertaking a major transaction. 

FOOTNOTE(S):

1. Alex Lubyansky, M&A Due Diligence: 7 Categories, Checklist, Red Flags, Acquisition  Stars (Feb. 9, 2026), https://acquisitionstars.com/blog/ma-due-diligence-guide.  
2. Due Diligence in Mergers and Acquisitions: Complete Overview, DealRoom (Nov. 13,  2025), https://dealroom.net/blog/due-diligence-in-mergers-and-acquisitions.  
3. Dan Watkins, Due Diligence Is Crucial in Any Merger or Acquisition, Watkins Firm (Oct.  4, 2025), https://watkinsfirm.com/why-due-diligence-is-crucial-in-any-merger-or acquisition/.  
4. Mergers and Acquisitions Due Diligence Checklist: Quick Wins, Kons L. (Nov. 11, 2025),  https://konslaw.com/legal-news/mergers-and-acquisitions-due-diligence-checklist/.  
5. The Importance of Cultural Due Diligence in Mergers and Acquisitions, Herbein (Jan. 8,  2025), https://www.herbein.com/blog/cultural-due-diligence-in-mergers-and-acquisitions.  
6. Merger Due Diligence Checklist: Key Steps & Tools, Altrata (Apr. 13, 2026),  https://altrata.com/articles/merger-due-diligence-checklist.  
7. Hewlett Packard Enter. Co. v. Autonomy Corp. Ltd [2022] EWHC 1178 (Ch) (Eng.).  
8. Mike Lynch Estate Owes HPE $943M over Autonomy Fallout, The Register (Jul. 22,  2025), https://www.theregister.com/2025/07/22/mike_lynch_hpe_damages/.  
9. Hanna Ziady, Court Rules Estate of Mike Lynch, Who Died When His Yacht Sank, and  Ex-Business Partner Owe HPE over $940 Million, CNN Bus. (Jul. 22, 2025),  https://www.cnn.com/2025/07/22/business/mike-lynch-hewlett-packard-fraud-ruling-intl.  
10. The HP-Autonomy Lawsuit: Timeline of an M&A Disaster, CIO (Jul. 22, 2025),  https://www.cio.com/article/304397/the-hp-autonomy-lawsuit-timeline-of-an-ma disaster.html.  
11. Mike Lynch’s Estate Hit with £700m Bill as High Court Rules in HP’s Favour over  Autonomy Fraud, Bus. Matters (Jul. 22, 2025), https://bmmagazine.co.uk/news/mike-lynch estate-700m-hp-autonomy-ruling/.  
12. Hewlett-Packard Wins £700m Court Ruling Against Mike Lynch Estate over Autonomy  Deal, StartupNews.fyi (Jul. 23, 2025), https://startupnews.fyi/2025/07/23/hewlett-packard wins-700m-court-ruling-against-mike-lynch-estate-over-autonomy-deal/.