What Is Due Diligence? Definition, Types, and Real-World Examples

Due diligence is the investigative process a buyer, investor, or partner completes before signing a deal. It means checking the financial statements, legal contracts, operations, and reputation of the other party so that nothing important is discovered only after the ink is dry.

The stakes are high. Research summarized by Wharton's Knowledge at Wharton found that 70–90% of mergers and acquisitions fail to deliver the value that was promised at signing, and weak diligence is consistently named as one of the leading causes. This guide breaks down what due diligence means, the main types companies and investors rely on, how long the process usually takes, and how boards can run it more efficiently.

What Is Due Diligence?

Due diligence is a comprehensive appraisal of a business, asset, or investment opportunity, carried out before a contract is signed. The goal is to confirm that the facts presented by the seller or partner are accurate, that no material risks have been hidden, and that the price or terms of the deal reflect reality rather than a sales pitch.

Material information is any fact that a reasonable investor would want to know before making a decision — things like undisclosed debt, pending lawsuits, or a customer contract that ends the moment a company changes hands.

The term has a specific legal history in the United States. According to Wikipedia's history of the term, "due diligence" became standard business and legal language after the Securities Act of 1933, which made securities dealers and brokers liable for failing to disclose material facts about the investments they sold unless they could show they had performed a "reasonable investigation." That legal defense is the direct ancestor of the modern due diligence process.

Today, due diligence applies far beyond securities law. Companies use it to vet vendors, investors use it to evaluate stocks, and boards use it to satisfy their fiduciary duty to shareholders before approving a major transaction.

Why Due Diligence Matters

Skipping or rushing due diligence is one of the most expensive mistakes a company can make. A few data points illustrate why:

• 70–90% of M&A deals fail to create the shareholder value they were expected to, according to research reviewed by both Wharton and the CFA Institute.

• Overpaying, weak diligence, and poor integration are the three most commonly cited causes of deal failure, with inadequate due diligence alone responsible for roughly a third of failed transactions, per analysis from Acquisition Stars.

• First-time acquirers succeed far less often than experienced ones. The same analysis found only a 23% success rate for first-time buyers, compared with 54% for acquirers who have completed ten or more deals — a gap that largely comes down to process discipline, including diligence.

• A KPMG study, cited by Lakelet Capital, found that 83% of merger deals failed to boost shareholder returns.

High-profile cases show what happens when diligence falls short. HP's acquisition of Autonomy is one of the most frequently cited examples: after the deal closed, accounting irregularities surfaced and HP recorded an $8 billion write-down. Bayer's acquisition of Monsanto and General Electric's purchase of Alstom's power business are two more deals where post-closing losses traced back to gaps in the pre-deal review, according to Wharton's analysis. The lesson scales down as well as up — on a smaller acquisition, a missed liability of a few hundred thousand dollars can be just as damaging relative to deal size.

Types of Due Diligence

Most transactions draw on several categories of due diligence at once. The right mix depends on the size and nature of the deal, but these are the categories that come up most often.

1. Financial Due Diligence

This is the review of a company's financial statements, tax returns, cash flow, and projections to confirm its financial health. It looks for red flags such as inconsistent accounting, unusual revenue recognition, or unexplained swings in margins. Financial due diligence typically covers multiple years of audited statements so reviewers can spot trends rather than a single, possibly flattering, snapshot.

2. Legal Due Diligence

Legal due diligence examines contracts, intellectual property rights, pending or threatened litigation, corporate formation documents, and regulatory compliance. The goal is to surface legal exposure — like a lawsuit that hasn't yet been filed, or a contract that automatically terminates in a change-of-control event — before it becomes the buyer's problem.

3. Operational Due Diligence

Operational due diligence looks at how the business actually runs: production processes, supply chain reliability, IT infrastructure, and internal controls. It identifies risks that could disrupt operations after the deal closes, such as a single point of failure in the supply chain or outdated systems that will need costly upgrades.

4. Tax Due Diligence

This evaluates a company's tax filings and obligations to confirm there are no unpaid taxes, disputed assessments, or structuring issues that could create penalties after the transaction closes.

5. Commercial (Market) Due Diligence

Commercial due diligence assesses a company's market position: its customers, competitors, and growth prospects. It validates whether the revenue projections used to justify the deal price are realistic given industry trends.

6. Hard vs. Soft Due Diligence

Due diligence activities are sometimes grouped into two broader categories, a distinction explained by The Motley Fool:

• Hard due diligence covers measurable, numbers-driven work — financial statements, contracts, and asset valuations.

• Soft due diligence covers qualitative factors — leadership quality, company culture, and employee relationships — that numbers alone can't capture but that heavily influence whether a merger actually succeeds.

Some organizations break the process into as many as seven to nine parallel workstreams (adding HR, IT/technical, environmental, and strategic-fit review to the list above), according to deal-advisory research from DealRoom. Most deals run five to seven of these workstreams at once, scaled to the size and complexity of the transaction.

How Long Does Due Diligence Take?

Timelines vary by deal size, but a few benchmarks are useful for setting expectations:

• Middle-market M&A deals typically allow 30–45 days for due diligence, though thorough reviews often need 60–90 days, per data compiled by Acquisition Stars.

• A full due diligence engagement usually moves through defined stages: scoping and planning, document request and data-room setup (a data room is a secure, permissioned repository — physical or virtual — where sellers upload requested documents for reviewers), analysis by functional specialists, and a findings report that feeds directly into deal terms like price adjustments, escrow holdbacks, or indemnification clauses.

• Time pressure is a recurring theme in the research: rushed reviews are more likely to miss the exact issues due diligence exists to catch.

Real-World Examples of Due Diligence

In a merger or acquisition, due diligence typically means scrutinizing the target company's financial statements, legal obligations, operations, and strategic position. An acquiring company might review balance sheets, interview key personnel, and study market positioning to confirm the target is worth the agreed price — and to negotiate protections, such as indemnification, for anything concerning that turns up.

For individual investors, due diligence looks different but follows the same logic. Before buying a stock, an investor might evaluate a company's revenue trends, profit margins, market capitalization, and competitive position using quarterly and annual reports. The U.S. Securities and Exchange Commission's own investor education arm, Investor.gov, describes this research as a core part of an investor's due diligence, and provides tools to help retail investors check the backgrounds of firms and professionals before committing money.

In board governance, due diligence extends into ongoing regulatory compliance and reporting. Public companies are required to disclose material information, and internal reviewers often cross-check that disclosures — including SEC filings — match the underlying financial records before a board signs off.

Common Due Diligence Red Flags

Reviewers across financial, legal, and operational due diligence tend to watch for the same warning signs:

• Inconsistent or restated financial statements

• Revenue concentrated in one or two customers

• Contracts that terminate automatically on a change of control

• Unresolved or undisclosed litigation

• Gaps or inconsistencies in tax filings

• Key employees with no retention plan in place

• Outdated IT systems or unresolved cybersecurity issues

How Technology Supports the Due Diligence Process

Due diligence generates a large volume of sensitive documents that need to move between reviewers, advisors, and board members securely and with a clear record of who accessed what. This is where governance technology plays a direct role:

• A reliable document management system keeps financial statements, contracts, and diligence reports organized and version-controlled in one place.

• An audit trail creates a timestamped record of who viewed or edited each document, which matters if a diligence finding is later disputed.

• Secure file sharing tools let boards exchange sensitive diligence materials with outside counsel or auditors without relying on unsecured email attachments.

• A dedicated board portal gives directors a single, controlled space to review diligence findings ahead of a vote, which supports stronger corporate governance overall.

BoardCloud brings these capabilities together, giving boards and executives a structured way to review documents, track access, and manage the communications that a due diligence process depends on.

Key Takeaways

• Due diligence is a comprehensive appraisal of a business or investment carried out before entering into a contract or transaction.

• Research reviewed by Wharton and the CFA Institute puts the M&A failure rate at 70–90%, with inadequate due diligence consistently cited as a top contributing cause.

• The main categories are financial, legal, operational, tax, and commercial due diligence, often grouped into "hard" (quantitative) and "soft" (qualitative) due diligence.

• Middle-market deals typically allow 30–45 days for due diligence, though thorough reviews often take 60–90 days.

• Due diligence isn't limited to M&A — individual investors, boards, and companies vetting vendors all rely on the same underlying process of verifying facts before committing.

• BoardCloud simplifies due diligence by offering tools for reviewing documents, tracking audit trails, and managing secure board communications.

To learn more about how to incorporate due diligence into your governance processes, try BoardCloud today.

Sources

1. Knowledge at Wharton — "Why Many M&A Deals Fail — and How to Beat the Odds"

2. CFA Institute Enterprising Investor — "What's the Winning Ingredient in M&A? The Answer Lies in Due Diligence"

3. Acquisition Stars — "M&A Failure Rate: 70–90% of Deals Fail to Create Value"

4. Lakelet Capital — "Reasons Why Mergers & Acquisitions Fail and Succeed"

5. DealRoom — "Due Diligence Definition (Types + Examples)"

6. The Motley Fool — "Due Diligence: What It Is, Types, Example"

7. Wikipedia — "Due Diligence"

8. U.S. SEC Investor.gov — "Research Before You Invest"