What due diligence should businesses complete before acquiring another company?

Executive Summary

Corporate due diligence is the systematic legal, financial, regulatory, operational, and commercial investigation conducted before acquiring a company or its assets. For cross-border transactions involving Indian entities, due diligence must verify compliance with the Companies Act 2013, Foreign Exchange Management Act 1999 (FEMA), taxation laws, competition regulations, intellectual property protections, employment laws, environmental regulations, contractual commitments, and sector-specific regulatory frameworks.

A Singapore-based private equity fund acquired a majority stake in a Mumbai-headquartered manufacturing company for $18 million in August 2022. Within six months, the investor discovered undisclosed pending litigation involving ₹4.2 crore in indirect tax liabilities, unrecorded environmental non-compliance penalties imposed by the Maharashtra Pollution Control Board, and disputed trademarks critical to operations. The fund's internal rate of return collapsed within the first year because corporate due diligence was treated as a regulatory formality rather than a strategic legal investigation.

Key due diligence failures include:

• Incomplete regulatory compliance verification across ministries
• Undetected pending litigation or arbitration claims
• Undisclosed tax liabilities, notices, or pending assessments
• Defective title to real estate or intellectual property assets
• Unenforced contractual obligations or supplier disputes
• Environmental non-compliance or regulatory violations
• Shareholder disputes or corporate governance failures
• Employee liabilities or unrecorded statutory dues
• Weak cybersecurity infrastructure or data protection violations
• Inadequate FEMA compliance or foreign investment structuring issues

Corporate due diligence is not merely statutory verification. It is strategic enterprise risk investigation designed to identify legal exposure, quantify liabilities, validate representations, protect transaction value, and create enforceable indemnification mechanisms.

Why Corporate Due Diligence Matters for Cross-Border Acquirers

Most acquisition failures occur not because businesses were unprofitable, but because legal, regulatory, and operational liabilities were inadequately investigated before closing.

Corporate due diligence protects acquirers by:

• Identifying undisclosed liabilities that reduce enterprise value
• Verifying compliance with regulatory frameworks across multiple authorities
• Detecting pending or threatened litigation that creates financial exposure
• Confirming ownership and enforceability of critical intellectual property
• Validating employment contracts, statutory dues, and labor law compliance
• Reviewing contractual commitments that create post-acquisition obligations
• Assessing environmental compliance and potential regulatory penalties
• Investigating corporate governance structures and shareholder arrangements
• Quantifying tax liabilities and evaluating open assessments or notices
• Evaluating cybersecurity infrastructure and data protection compliance

For foreign investors acquiring Indian entities, corporate due diligence also verifies compliance with FEMA, competition law filings, sectoral investment caps, pricing regulations, overseas investment approvals, and Registrar of Companies (ROC) reporting.

Incomplete due diligence creates post-acquisition disputes, shareholder claims, regulatory investigations, hidden tax liabilities, and operational disruptions that reduce investor returns. A poorly executed acquisition can lead to significant financial exposure, regulatory scrutiny, and reputational damage.

Legal Framework Governing Corporate Due Diligence in India

Corporate due diligence for acquisitions must verify compliance across multiple regulatory authorities:

1. Companies Act 2013

• Corporate structure, share capital, and shareholder rights verification
• Board composition and director disqualifications under Section 164
• Related party transactions compliance under Section 188
• Statutory filings with the ROC under Sections 92, 137, and other provisions
• Corporate governance compliance and secretarial audit requirements
• Charges registered under Section 77 and loan documentation
• Statutory registers, minute books, and corporate records maintenance

2. Foreign Exchange Management Act 1999 (FEMA)

• Foreign investment compliance and pricing regulations
• Overseas Direct Investment (ODI) approvals where applicable
• Foreign Currency Convertible Bonds (FCCB) compliance
• Reporting to Reserve Bank of India (RBI) under applicable regulations
• Foreign borrowing limits and External Commercial Borrowing (ECB) regulations
• Repatriation compliance for foreign shareholders

3. Competition Act 2002

• Merger and acquisition notification thresholds
• Combination filings with Competition Commission of India (CCI)
• Antitrust review and market dominance assessment
• Regulatory approvals and waiting periods

4. Income Tax Act 1961

• Pending tax assessments, appeals, or disputes
• Transfer pricing compliance for related party transactions
• Tax deducted at source (TDS) compliance and outstanding demands
• Advance tax payments and GST compliance verification
• Notices issued by the Central Board of Direct Taxes (CBDT) or tax authorities

5. Intellectual Property Laws

• Trade Marks Act 1999 compliance and registration validity
• Patents Act 1970 protections and ownership verification
• Copyright Act 1957 compliance and licensing agreements
• Domain name ownership and technology asset documentation

6. Employment and Labor Laws

• Industrial Disputes Act 1947 compliance for factory closures or retrenchment
• Employee Provident Fund (EPF) and Employee State Insurance (ESI) compliance
• Gratuity payments and pending labor disputes or strikes
• Compliance with Code on Wages 2019 and other labor codes

7. Environmental Regulations

• Environment Protection Act 1986 compliance
• State Pollution Control Board approvals and clearances
• Hazardous waste management compliance
• Consent to Operate (CTO) and Consent to Establish (CTE) validity

8. Data Protection and Cybersecurity

• Digital Personal Data Protection Act 2023 compliance readiness
• Information Technology Act 2000 compliance
• Cybersecurity policies and breach notification procedures
• Data localization compliance and cross-border data transfer agreements

Core Components of Corporate Due Diligence

1. Legal and Corporate Structure Review

What should be verified:

• Incorporation documents, Memorandum of Association (MOA), Articles of Association (AOA)
• Shareholding structure and shareholder agreements
• Board composition, director appointments, and disqualifications
• Corporate actions including share allotments, buybacks, mergers, or demergers
• Statutory registers and compliance with secretarial obligations

Why it matters:

Defective corporate structure creates shareholder disputes, challenges to board decisions, regulatory penalties, and invalidated corporate actions. Analyzing the company's ownership and organizational structure is essential to assess legal risks that may transfer to the acquirer.

2. Title Verification and Asset Ownership

What should be verified:

• Ownership of real estate, manufacturing facilities, and land holdings
• Encumbrances, mortgages, or charges registered on assets
• Intellectual property registrations, trademarks, patents, copyrights, and domain names
• Validity of licenses, permits, and regulatory approvals
• Lease agreements and tenancy documentation

Why it matters:

Defective title prevents asset transfers, creates litigation exposure, and reduces transaction value. Trademarks, patents, and domain names are often licensed rather than owned, creating post-acquisition operational risks.

3. Material Contracts and Commercial Commitments

What should be verified:

• Key supplier contracts and purchase agreements
• Customer agreements and revenue commitments
• Joint venture agreements and partnership documentation
• Distribution agreements and agency contracts
• Confidentiality agreements, non-disclosure agreements, and licensing contracts
• Change of control clauses that require third-party consents

Why it matters:

Undisclosed contractual commitments create post-acquisition liabilities, operational disruptions, and supplier disputes. Key contracts often require third-party consent for ownership transfers, creating contractual disputes if not addressed before closing.

4. Litigation, Arbitration, and Regulatory Investigations

What should be verified:

• Pending civil litigation, criminal prosecutions, and arbitration claims
• Regulatory investigations by tax authorities, SEBI, RBI, or Ministry of Corporate Affairs (MCA)
• Notices issued under the Bharatiya Nyaya Sanhita 2023 (BNS) for corporate fraud or economic offenses
• Serious Fraud Investigation Office (SFIO) investigations
• Enforcement Directorate (ED) proceedings involving money laundering or FEMA violations
• Consumer disputes and product liability claims

Why it matters:

Undisclosed litigation creates contingent liabilities, financial exposure, and regulatory penalties that reduce enterprise value. Post-acquisition discovery of pending lawsuits creates unexpected legal costs and damages transaction value.

5. Tax Compliance and Statutory Obligations

What should be verified:

• Income tax returns filed and pending assessments
• Goods and Services Tax (GST) compliance and outstanding liabilities
• TDS compliance and penalty notices
• Transfer pricing documentation for related party transactions
• Outstanding statutory dues to EPF, ESI, or other authorities
• Advance tax deposits and refund claims

Why it matters:

Hidden tax liabilities create post-acquisition financial exposure, regulatory penalties, and potential prosecution under tax laws. Examining financial statements, tax compliance, and accounting practices prevents unexpected tax burdens that turn profitable acquisitions into financial liabilities.

6. Employee Liabilities and Labor Compliance

What should be verified:

• Employment contracts and termination obligations
• Pending labor disputes, strikes, or industrial actions
• EPF and ESI compliance and outstanding dues
• Gratuity liabilities and pension obligations
• Compliance with labor codes and wage regulations
• Employee stock option plans (ESOPs) and vesting obligations

Why it matters:

Undisclosed employee liabilities create unexpected financial obligations and operational disruptions. Analyzing employee contracts, turnover rates, and compensation structures is essential to understand cultural fit and potential integration challenges.

7. Environmental and Regulatory Compliance

What should be verified:

• Pollution Control Board clearances and environmental approvals
• Hazardous waste management compliance
• Consent to Operate (CTO) validity and renewal status
• Pending environmental violation notices or penalties
• Compliance with environmental impact assessment requirements

Why it matters:

Environmental violations create regulatory penalties, operational shutdowns, and reputational damage. Non-compliance with environmental laws creates enforcement actions that disrupt business operations and reduce enterprise value.

8. Cybersecurity and Data Protection

What should be verified:

• Cybersecurity policies and incident response protocols
• Compliance with Digital Personal Data Protection Act 2023
• Data breach history and notification compliance
• Third-party data processing agreements
• Cross-border data transfer compliance and adequacy assessments

Why it matters:

Weak cybersecurity infrastructure creates data breach risks, regulatory penalties, and operational disruptions. Assessing IT systems, software licenses, and cybersecurity protocols identifies operational risks that may impact post-acquisition integration.

Essential Steps in the Corporate Due Diligence Process

Step 1: Define Objectives and Assemble Team

Before diving into the corporate due diligence process, set clear objectives based on the nature of the target company and intended acquisition structure. Develop a cross-functional team comprising legal advisors, financial analysts, operational managers, and external consultants. Each member evaluates their area of expertise, ensuring a holistic review.

Step 2: Engage Indian Legal Counsel Early

Foreign investors should appoint Indian corporate lawyers before signing term sheets to structure regulatory compliance, due diligence scope, and transaction documentation. Early engagement prevents costly missteps in navigating diverse legal frameworks and regulatory compliance requirements.

Step 3: Conduct Regulatory Compliance Verification

Verify filings with ROC, RBI, SEBI, tax authorities, environmental regulators, and sectoral authorities. Assess compliance with Indian corporate laws, including the Companies Act and other relevant statutory provisions. Verify licenses, permits, and regulatory approvals that impact operations.

Step 4: Commission Litigation Searches

Conduct litigation searches across civil courts, arbitration tribunals, tax tribunals, NCLT, and regulatory authorities. Investigate ongoing litigations or regulatory investigations that create contingent liabilities and financial exposure.

Step 5: Review Material Contracts and Obtain Third-Party Consents

Identify contracts requiring change of control approvals and obtain consents before closing. Review all material contracts, including vendor agreements, sales contracts, leases, employment agreements, and intellectual property rights to understand liabilities and obligations.

Step 6: Verify Intellectual Property and Asset Ownership

Conduct title searches, trademark registrations, patent filings, and domain name ownership verification. Confirm ownership and enforceability of critical intellectual property to prevent post-acquisition operational risks.

Step 7: Assess Tax Liabilities and Pending Assessments

Review tax filings, demand notices, transfer pricing documentation, and GST compliance. Evaluate tax returns and liabilities to investigate potential tax exposures that could affect the acquisition.

Step 8: Analyze Industry and Market Conditions

Research the target company's position in the market, including market trends and competitor analysis. Understanding the competitive environment helps determine strategic fit and competitive advantages offered by the acquisition.

Step 9: Consider Cross-Border Implications

For multinational corporations, cross-border transactions present unique challenges. Review FEMA regulations for compliance related to foreign investment. Understand international tax implications, double taxation treaties, and transfer pricing regulations. Evaluate which jurisdiction's laws will apply post-acquisition.

Step 10: Document Findings

Maintain thorough documentation of the corporate due diligence process, including checklists and reports. Ensure that all identified risks, concerns, and liabilities are well recorded and presented in the final due diligence report.

Step 11: Structure Indemnification and Escrow Mechanisms

Draft share purchase agreements with warranties, indemnities, and escrow arrangements to protect against undisclosed liabilities. Remedies for undisclosed liabilities discovered after closing depend on share purchase agreement warranties and indemnity provisions.

Step 12: Develop Post-Acquisition Integration Plan

Following due diligence, develop a detailed plan for post-acquisition integration to facilitate smoother transitions and mitigate operational disruptions. Key activities include integrating cultures, aligning corporate governance frameworks, and reevaluating operational processes.

Common Due Diligence Failures and Mistakes

1. Relying Solely on Seller Representations

Acquirers who accept seller warranties without independent verification later discover undisclosed liabilities. Not validating information through independent assessment increases transactional risks and exposes buyers to hidden liabilities.

2. Limiting Due Diligence to Corporate Documents

Legal due diligence must extend to regulatory filings, litigation searches, tax assessments, environmental clearances, and operational compliance. Overlooking key risk areas leads to unforeseen challenges post-acquisition.

3. Ignoring Pending Notices or Regulatory Correspondence

Many tax notices, environmental violations, or labor disputes are treated as administrative matters until they escalate into enforcement actions. Failing to evaluate all critical aspects creates unexpected regulatory penalties and financial exposure.

4. Failing to Verify Intellectual Property Ownership

Trademarks, patents, and domain names are often licensed rather than owned, creating post-acquisition operational risks. Intellectual property disputes, patent challenges, or copyright infringement claims disrupt operations and reduce enterprise value.

5. Inadequate Investigation of Change of Control Clauses

Key contracts often require third-party consent for ownership transfers, creating post-acquisition contractual disputes if not addressed during corporate due diligence.

6. Overlooking Cross-Border Regulatory Compliance

Foreign acquirers frequently underestimate FEMA reporting obligations, RBI approvals, and sectoral investment restrictions. Non-compliance with foreign investment regulations creates RBI enforcement actions and repatriation restrictions.

7. Inadequate Team Preparation

Lack of a well-coordinated cross-functional team results in incomplete assessments. Each team member must evaluate their area of expertise to ensure thorough investigation.

8. Underestimating Time Requirements

Thorough due diligence often takes longer than anticipated. Unrealistic timelines lead to rushed assessments that miss critical liabilities. Corporate due diligence typically requires 4 to 8 weeks depending on transaction complexity, regulatory filings, pending litigation, intellectual property portfolio size, and cross-border compliance requirements. Complex transactions involving multiple subsidiaries, international operations, or regulatory approvals may require 12 weeks or longer.

9. Neglecting Post-Merger Integration

Acquisitions fail if proper integration planning is not prioritized. Developing a detailed post-acquisition plan prevents operational disruptions and ensures successful enterprise integration.

What Happens When Due Diligence Fails

Undisclosed Litigation

Post-acquisition discovery of pending lawsuits reduces transaction value and creates unexpected legal costs. Acquirers face financial exposure from contingent liabilities not identified during investigation.

Regulatory Penalties

Non-compliance with environmental laws, labor regulations, or tax obligations creates enforcement actions and operational shutdowns. Regulatory violations lead to fines, penalties, and reputational damage.

Defective Intellectual Property

Trademark disputes, patent challenges, or copyright infringement claims disrupt operations and reduce enterprise value. Weak intellectual property protections create operational risks and competitive disadvantages.

Shareholder Disputes

Unresolved shareholder conflicts create governance paralysis and legal disputes after closing. Defective corporate structure leads to challenges to board decisions and invalidated corporate actions.

FEMA Violations

Non-compliance with foreign investment regulations creates RBI enforcement actions and repatriation restrictions. Foreign investors face financial penalties and operational constraints from inadequate FEMA compliance verification.

Financial Losses

Unexpected liabilities turn seemingly profitable acquisitions into financial burdens. Hidden tax liabilities, undisclosed contractual commitments, and unrecorded statutory dues create post-acquisition financial exposure that damages investor returns.

Frequently Asked Questions

What is corporate due diligence?

Corporate due diligence is the systematic legal, financial, regulatory, and operational investigation conducted before acquiring a company or its assets. It identifies undisclosed liabilities, verifies compliance, confirms asset ownership, and protects transaction value by uncovering risks that affect enterprise valuation and post-acquisition operations.

Which laws govern corporate due diligence in India?

Corporate due diligence must verify compliance with the Companies Act 2013, FEMA 1999, Income Tax Act 1961, Competition Act 2002, intellectual property laws, employment laws, environmental regulations, Digital Personal Data Protection Act 2023, and sector-specific regulatory frameworks. Regulatory filings across ROC, RBI, tax authorities, and pollution control boards must be verified.

What happens if due diligence is incomplete?

Incomplete corporate due diligence exposes acquirers to undisclosed litigation, hidden tax liabilities, regulatory penalties, contractual disputes, intellectual property conflicts, environmental violations, and shareholder disputes. Post-acquisition discovery of liabilities reduces transaction value and creates unexpected legal and financial exposure that damages investor returns.

How long does corporate due diligence take?

Corporate due diligence typically requires 4 to 8 weeks depending on transaction complexity, regulatory filings, pending litigation, intellectual property portfolio size, and cross-border compliance requirements. Complex transactions involving multiple subsidiaries, international operations, or regulatory approvals may require 12 weeks or longer for thorough investigation.

What documents should sellers provide?

Sellers should provide incorporation documents, shareholder agreements, board resolutions, statutory registers, ROC filings, tax returns, GST compliance records, pending litigation details, material contracts, intellectual property registrations, employment agreements, environmental clearances, regulatory approvals, and financial statements for at least three years.

Can foreign investors conduct due diligence remotely?

Yes, foreign investors can conduct corporate due diligence through Indian legal counsel using virtual data rooms, online documentation review, video conferences, and remote regulatory searches. However, physical site inspections, operational audits, and local regulatory filings verification often require on-ground presence for thorough investigation.

What remedies exist for undisclosed liabilities discovered after closing?

Remedies depend on share purchase agreement warranties, indemnities, and escrow arrangements. Acquirers may claim damages for breach of warranty, enforce indemnity provisions, or pursue litigation for fraudulent misrepresentation. Escrow mechanisms allow buyers to withhold portions of purchase price pending resolution of disputed liabilities.

Why is legal due diligence critical during acquisitions?

Legal due diligence identifies existing liabilities, contractual obligations, and compliance issues that may impact the acquirer's investment, ensuring informed decision-making. It protects against financial, legal, and operational risks while aligning business strategies for long-term success.

What are common financial metrics reviewed during due diligence?

Common financial metrics include revenue growth, profit margins, cash flow, and debt levels. Reviewing balance sheets, income statements, and cash flow statements from the last three to five years helps assess the target company's financial health and determines enterprise worth.

How does cross-border due diligence differ from domestic due diligence?

Cross-border corporate due diligence involves navigating diverse legal frameworks, regulatory compliance, and international taxation, which adds layers of complexity compared to domestic transactions. Foreign investors must verify FEMA compliance, RBI approvals, sectoral investment caps, and cross-border data transfer regulations.

What is the importance of operational due diligence?

Operational due diligence assesses the efficiency of business operations and integration risks, crucial for ensuring a seamless transition post-acquisition. It evaluates human resources, technology infrastructure, and regulatory obligations to identify potential disruptions and cultural fit challenges.

Strategic Takeaway and Corporate Outlook

Corporate due diligence is not compliance verification alone. It is strategic enterprise risk investigation designed to protect transaction value, quantify liabilities, and create enforceable legal protections before capital deployment. Well-structured due diligence converts hidden risks into negotiated indemnities, reduces post-acquisition disputes, and protects investor returns across jurisdictions.

In today's competitive global marketplace, the corporate due diligence process determines the fate of mergers and acquisitions. Effective investigation protects against financial, legal, and operational risks while aligning business strategies for long-term success. By approaching this vital step with thoroughness and precision, businesses safeguard stakeholder interests while securing sustainable competitive advantage.

About LawCrust

LawCrust Global Consulting Ltd. is the enterprise legal and consulting arm of the LawCrust Group, delivering lawyer-led corporate legal services, alternative legal services (ALSP), legal process outsourcing (LPO), legal operations support, and AI-enabled legal infrastructure for global businesses, multinational corporations, law firms, procurement-led enterprises, general counsels, investors, and institutional clients.

With operational headquarters in Mumbai's Bandra Kurla Complex (BKC) and a strategic US presence through LawCrust Inc., Delaware, we support cross-border legal and commercial operations involving India, the United States, the Middle East, and other international jurisdictions.

Since 2016, LawCrust has successfully handled over 10,000 legal matters through a strong network of 70+ in-house lawyers and senior partnered advocates.

Our work sits at the intersection of law, business, operations, governance, compliance, risk, and execution.

Our practice spans corporate advisory, commercial contracting, legal operations, due diligence, litigation support, compliance management, risk analytics, managed legal services, enterprise legal infrastructure, and cross-border regulatory support.

For expert legal assistance:

Call Now: +91 8097842911

Email: inquiry@lawcrust.com