Legal Suvidha is a registered trademark. Unauthorized use of our brand name or logo is strictly prohibited. All rights to this trademark are protected under Indian intellectual property laws.
Legal Suvidha
Startup And Fundraising

DUE DILIGENCE

Due diligence is the structured investigation of a target before signing or closing a transaction. It covers legal, financial, tax, commercial, operational, technology, HR and ESG workstreams, conducted through a secure virtual data room with a tailored request list and Q&A tracker. The objective is to confirm seller representations, surface undisclosed issues and translate findings into purchase price adjustments, conditions precedent, indemnities and escrow in the definitive agreement. In 2026 India, MCA V3, GSTN and Account Aggregator data sharply improve diligence quality.

Mayank WadheraMayank Wadhera
Published: 22 Sept 2022
Updated: 23 May 2026
17 min read
DUE DILIGENCE
1
2
3
4
5
6
7
8
9
10
11
12
13

A practitioner's guide to due diligence in 2026 β€” types, what to look at in legal, financial and tax workstreams, the VDR process, and converting findings into deal terms.

DUE DILIGENCE

Due diligence is the structured investigation of a target before you commit capital or sign a definitive agreement. In plain terms: it separates what you think you are buying from what you are actually inheriting β€” including the Rs. 1.2 crore GST demand buried in a sub-note, the unregistered pledge on the company's plant, and the key-customer contract that terminates automatically on change of control. In India's 2026 deal environment, where MCA V3 disclosures, GSTN transaction trails and Account Aggregator-linked bank data have collapsed information asymmetry, rigorous diligence is both faster to execute and more consequential than at any earlier point in this decade.


Why Diligence Is Not Optional β€” Even at Letter-of-Intent Stage

The most expensive diligence failure is not a deal that collapses; it is a deal that closes at the wrong price with the wrong risk allocation. Once you have paid and transferred shares, the leverage to fix a discovered liability is close to zero unless you specifically contracted for it before signing.

Three things every diligence exercise must accomplish:

  1. Confirm what the seller has represented β€” revenue, EBITDA, assets, liabilities, compliance track record.
  2. Surface what the seller has not volunteered β€” contingent tax liabilities, aged MSME payables, unregistered charges, labour disputes, FEMA contraventions.
  3. Price in the risks that survive closing β€” through purchase price adjustments, specific indemnities, conditions precedent or escrow holdbacks.

For the seller, commissioning vendor due diligence (VDD) before approaching buyers achieves the symmetric goal: controlling the narrative, compressing buyer timelines and preventing late-stage price chips at the moment when negotiating leverage has already shifted to the buyer.


The Seven Workstreams β€” and How to Scope Each

Diligence is not a single exercise; it is a portfolio of parallel workstreams. The right scope depends on deal size, sector and timeline. A Rs. 5 crore acqui-hire needs a lighter touch than a Rs. 150 crore majority acquisition with a PE co-investor.

WorkstreamCore questionRun it when…
LegalIs the company transferable and clean?Always
FinancialIs the EBITDA real and recurring?Always
TaxWhat is the contingent tax tail?Always
CommercialIs the market position defensible?Enterprise value > Rs. 20 crore
Operational / TechCan systems scale; are they secure?Tech-enabled business
ESG & complianceDPDP Act, labour, environment tripwires?PE deal or regulated sector
HR / ESOPAre key people retained and incentivised?Talent-dependent business

Agree the scope in a written scope note before the VDR opens. A distraction-free scope note saves three weeks of misdirected effort and prevents the seller from flooding the room with low-priority documents to dilute focus on material issues.


Corporate records

Start with MCA V3: pull the company's master data, director-DIN status, full Index of Charges, and the latest Annual Return (Form MGT-7 or Form MGT-7A for small companies). Reconstruct share capital history from Form PAS-3 (return of allotment) and Form SH-7 (notice of alteration in share capital) to verify every round of equity issuance matches the cap table the seller has provided.

Check registered charges under Section 77 of the Companies Act, 2013. An unregistered charge is still valid between the parties β€” it is only unenforceable against third parties β€” so an undisclosed secured lender can follow the asset even after you have acquired it.

Material contracts

Review every contract above your materiality threshold (typically Rs. 25–50 lakhs in annual value, or operationally critical regardless of value). Focus on three provisions that are routinely missed:

  • Change-of-control (CoC) clauses β€” does the contract require the counterparty's consent when ownership changes? A portfolio where the top three customer contracts each contain a CoC clause is structurally fragile and often undisclosed by sellers who hope the buyer will not notice.
  • Assignment restrictions β€” IP licences, distributor agreements and critical SaaS subscriptions often cannot be transferred without a full novation, which requires counterparty cooperation post-signing.
  • Automatic termination β€” certain government licences, shop and establishment registrations and SEBI-registered mandates terminate on change of ownership and must be freshly applied for by the acquirer.

IP and FEMA

Every trademark, patent, domain and copyrightable codebase must be formally assigned to the company by written deed β€” usage is not ownership. Founder-to-company IP assignment deeds executed after the deal announcement are contractually suspect and practically useless against a third-party challenger.

For targets with foreign investment, verify FEMA compliance: FC-GPR filings (Foreign Currency-Gross Provisional Return for FDI received), FC-TRS filings (for secondary share transfers between residents and non-residents), and ODI filings for any overseas investments made by the Indian entity. Outstanding FEMA contraventions attract compounding charges, and the RBI can withhold approval for a subsequent transfer until the contraventions are resolved.


Financial Due Diligence: Quality of Earnings and Balance-Sheet Integrity

Quality of earnings

Build a normalised EBITDA bridge across three full financial years β€” FY 2023-24, FY 2024-25 and FY 2025-26 β€” plus the current stub period. Strip out:

  • Non-recurring revenues: government grants, one-time export orders, litigation settlements, one-off asset disposals.
  • Owner add-backs: promoter salary drawn at below-market levels (add the gap to cost if the buyer must hire a replacement), personal expenses routed through the P&L.
  • Capitalised operating costs: recurring engineering maintenance capitalised as an intangible under Ind AS 38 inflates EBITDA while masking cash burn.

Quick illustration: Seller claims Rs. 2.5 crore EBITDA. You remove Rs. 25 lakhs of non-recurring revenue and Rs. 15 lakhs of understated promoter remuneration. Normalised EBITDA drops to Rs. 2.1 crore. At an 8Γ— multiple, that is a Rs. 3.2 crore reduction in headline price before any tax or working-capital adjustment.

Hidden debt-like items

Build the net debt bridge to include items that are economically debt but classified elsewhere in the balance sheet:

  • Unfunded gratuity liability β€” the actuarial present value of the obligation not funded through an insurer or approved trust. This belongs in net debt, not as a footnote disclosure.
  • MSME payables aged beyond 45 days β€” under Sections 15 and 16 of the MSMED Act 2006, amounts unpaid to Micro and Small Enterprise suppliers beyond 45 days (or beyond any agreed period, which cannot exceed 45 days) accrue compound interest at three times the RBI bank rate (as notified) per annum with monthly rests. At current rates, the effective interest approaches 18–19% per annum. A company sitting on Rs. 50 lakhs of aged MSME payables for an average of ten months has a compound interest tail that belongs in the net debt bridge, not in trade payables at face value.
  • Deferred revenue treated as equity β€” particularly common in SaaS and subscription businesses that have received multi-year upfront payments.
  • Refundable customer advances β€” advance payments received against unfulfilled delivery obligations that must be returned if the contract lapses.

Tax Due Diligence: Direct Tax, GST and Transfer Pricing

Tax diligence consistently surfaces the largest contingent liabilities in Indian M&A. Budget at least four additional working days beyond your first instinct for this workstream.

Direct tax

Obtain the target's Form 26AS and AIS/TIS (Annual Information Statement / Tax Information Summary) for at least three assessment years, with the target's written consent and portal access. Reconcile declared revenues against receipts reflected in the AIS β€” unexplained gaps attract inquiry under Section 133(6) and, if the gap indicates escaped income, a notice under Section 148A of the Income-tax Act 1961.

Confirm the assessment status of AY 2023-24, AY 2024-25 and AY 2025-26: are the returns processed, under scrutiny on a Section 143(2) notice, or subject to a pending Section 143(3) assessment order? Any open demand β€” even one under appeal β€” must be quantified and probability-weighted. Management's assurance that "it will be dropped in appeal" is not diligence; it is optimism. Pending demands belong in a tax contingency reserve.

GST

Pull GSTR-9 (annual return) and GSTR-9C (reconciliation statement) for FY 2022-23 through FY 2024-25. GSTR-9 for a financial year is due by 31 December of the following year; consistent late filing is itself a compliance signal. The single most productive check is the GSTR-3B vs. GSTR-2B ITC reconciliation. Under Section 16(2)(aa) of the CGST Act 2017, Input Tax Credit is available only to the extent reflected in the auto-generated GSTR-2B statement. Excess ITC claimed attracts:

  • Interest at 18% per annum under Section 50 of the CGST Act, from the date of wrong claim to reversal.
  • Penalty under Section 122(1) equal to the amount of tax evaded β€” i.e., equal to the excess ITC.

On a Rs. 10 lakh ITC excess claimed 24 months ago: interest = Rs. 10L Γ— 18% Γ— 2 = Rs. 3.6L; penalty if adjudicated = Rs. 10L. Total adjudicated exposure = Rs. 23.6 lakhs on a Rs. 10 lakh misstatement. That multiplier is why GST is never a benign workstream. Also request confirmation of any DRC-01A pre-show-cause intimations or DRC-07 demand orders currently outstanding on the target's GST portal.

Transfer pricing

For targets with cross-border related-party transactions β€” a management service fee paid to a Singapore entity, a royalty charged by a UAE IP holding company β€” verify that Form 3CEB (Transfer Pricing Audit Report from a Chartered Accountant) has been filed by 31 October of each relevant assessment year under Section 92E of the Income-tax Act 1961. Confirm that an arm's length price (ALP) study is on file, documented under a prescribed method in Rule 10B. A Transfer Pricing Officer (TPO) adjustment under Section 92CA, if the income is reclassified as misreported, can carry a penalty under Section 270A of up to 200% of the tax on the adjustment β€” one of the highest penalty multiples in the Income-tax Act.


The VDR Process: NDA to Red-Flag Report in Four Phases

Phase 1 β€” Scoping and access (Days 1–3) Sign the NDA. Issue a prioritised due diligence request list (DDRL): tag each item as Priority 1 (deal-breaker or valuation-moving) or Priority 2 (confirmatory). Structure the VDR in numbered folders: 01-Corporate / 02-Financial / 03-Tax / 04-Contracts / 05-IP / 06-Real Estate / 07-HR / 08-Litigation / 09-Regulatory / 10-FEMA. Set access controls: workstream leads read-only; one administrator uploads on behalf of the seller.

Phase 2 β€” Document review (Days 4–14) Each workstream lead logs findings against the DDRL in a shared workstream log with a RAG rating: Red (potential deal-breaker), Amber (pricing or warranty impact), Green (immaterial or resolved). All clarification requests go through a single Q&A tracker β€” not email β€” so the written record is complete and usable in any post-closing warranty dispute.

Phase 3 β€” Management sessions (Days 10–18) Schedule two to three structured calls: one for finance and tax, one for legal and compliance, one for commercial and operations. Log all verbal representations in the Q&A tracker within 24 hours; follow up with written confirmation requests for every material oral statement.

Phase 4 β€” Reports and contractual inputs (Days 16–22) Produce a Red-Flag Report (three to five pages, deal-breakers only) for the buyer committee first. Follow with a full workstream report. Convert every Amber and Red finding into a specific contractual ask before the SPA negotiation opens. A mid-market deal should close this process in 20–22 days. Complex multi-jurisdiction transactions may need 40–60 days.


2026 Digital Tools That Collapsed Three Weeks of Legwork

The information asymmetry that once made Indian M&A diligence so opaque has largely dissolved because five public and consent-based data sources give buyers granular visibility within hours:

  • MCA V3 β€” bulk-queryable: company status, director-DIN links, full charge history, filing compliance. A target that has not filed its Annual Return (Form MGT-7) for two or more consecutive years is an immediate compliance red flag and signals Board governance problems.
  • GST portal β€” GSTIN registration status (active, suspended or cancelled), GSTR-1 and GSTR-3B filing trail by return period, and HSN-level outward supply patterns. Two minutes here can confirm or refute a claimed revenue profile.
  • Income-tax AIS/TIS β€” with the target's consent and portal access, this reconciles all reported receipts, TDS credits, capital gains and interest income against the Income Tax Department's own records. A revenue-AIS discrepancy that once took four weeks to forensically reconstruct surfaces in twenty minutes.
  • Account Aggregator (AA) network β€” with borrower consent, bank-account-level cash flows, existing loan EMIs and lender relationships flow directly into your analysis. As of FY 2025-26 and going into FY 2026-27, AA coverage extends across most scheduled commercial banks and major NBFCs.
  • IBBI database β€” the Insolvency and Bankruptcy Board of India's public search engine flags any pending Section 7 (financial creditor) or Section 9 (operational creditor) IBC petition against the target, its promoters or related group companies. A company facing an active IBC petition is not a clean acquisition target.

These tools have not eliminated the need for judgment; they have redirected it from information-gathering to interpretation.


Vendor Diligence: Why Sellers Should Go First

Sellers preparing for an exit increasingly commission a vendor due diligence (VDD) report from an independent professional before approaching buyers. The report is shared with shortlisted buyers under NDA and forms the baseline for buyer's confirmatory diligence.

Done well, VDD delivers three outcomes the seller cannot achieve any other way. First, it controls the narrative around known issues β€” so they are disclosed rather than discovered, which keeps them smaller in negotiation. A Rs. 40 lakh contingency surfaced in a seller-prepared VDD at week one is discussed at its economic value; the same contingency surfaced by the buyer at week seven of an eight-week process becomes a hammer. Second, it compresses the buyer's timeline from six weeks to two to three, reducing deal fatigue and the risk of a buyer using delay as a pressure tactic. Third, it preserves seller price: because the buyer is confirming, not discovering.

The cost of a VDD on a Rs. 30–50 crore deal is typically Rs. 8–15 lakhs. The price it routinely defends is ten times that.


Common Mistakes That Derail Deals β€” and How to Avoid Them

1. Accepting management's tax summary without independent verification. Pull AIS/TIS with target consent. Management's view of the tax position and the Income Tax Department's own records routinely diverge, particularly on deferred revenue timing, related-party receipts and TDS reconciliation.

2. Running workstreams in complete isolation. A legal finding (the promoter has pledged shares to a lender) and a financial finding (undisclosed contingent liability on the balance sheet) are frequently the same issue viewed from different angles. Run weekly cross-workstream syncs to consolidate and avoid duplication β€” or worse, opposite conclusions in separate reports.

3. Missing MSMED Act payables in the net debt bridge. Aged payables to Micro and Small Enterprise suppliers are a compounding interest liability under Section 16 of the MSMED Act, not a routine trade payable. Price them into the net debt calculation at their true cost, not face value.

4. Treating VDR Q&A responses as informal. Every seller response to a DDRL question or Q&A tracker item is a representation that feeds the warranty schedule and disclosure letter. Log everything systematically; follow up verbal answers with written confirmation requests within 24 hours.

5. Not re-verifying conditions precedent at closing. A seller who files a belated GST return to technically satisfy a CP β€” without paying the underlying tax and interest β€” has not cured the liability. Build a pre-closing verification checklist for every CP that confirms both form and substance of completion.

6. Scope creep without priority discipline. Buyers request everything; sellers upload selectively. Use the DDRL priority system, escalate Priority 1 gaps within the first week, and run a weekly triage call to keep the focus on deal-moving issues.


Worked Example: Quantifying the Risk Tail on a Rs. 15 Crore SaaS Acquisition

Setup: You are acquiring a profitable SaaS company for a headline price of Rs. 15 crore, representing 8Γ— management's claimed EBITDA of Rs. 1.87 crore for FY 2025-26.

Step 1 β€” Financial diligence: Quality of Earnings adjustment

Reviewing three years of audited accounts and the FY 2025-26 stub, you identify:

  • Rs. 22 lakhs of non-recurring revenue: a government technology-adoption grant received in FY 2025-26, credited to topline.
  • Rs. 18 lakhs owner add-back: the promoter drew Rs. 12 lakhs in salary; replacing him with a market-rate CEO costs Rs. 30 lakhs.

Normalised EBITDA: Rs. 1.87 crore βˆ’ Rs. 0.22 crore βˆ’ Rs. 0.18 crore = Rs. 1.47 crore. Revised 8Γ— valuation: Rs. 11.76 crore β€” Rs. 3.24 crore below the headline before any tax or debt adjustment.

Step 2 β€” Tax diligence: Direct tax contingency

AIS/TIS with target consent reveals receipts Rs. 24 lakhs higher than declared revenue in FY 2023-24. AY 2024-25 is already under scrutiny on a Section 143(2) notice served April 2025. Potential income addition: Rs. 24 lakhs.

  • Tax liability at 25.17% effective rate (Section 115BAA domestic company): Rs. 6.04 lakhs
  • Interest under Section 234B at 1% per month for 24 months (April 2024 to approximately April 2026): Rs. 1.45 lakhs
  • Under-reporting penalty under Section 270A at 50%: Rs. 3.02 lakhs
  • Total direct tax contingency: Rs. 10.5 lakhs

Step 3 β€” Tax diligence: GST ITC mismatch

GSTR-2B reconciliation for FY 2022-23 through FY 2024-25 reveals excess ITC of Rs. 10.8 lakhs claimed over three years, with an average 24-month lag.

  • Interest under Section 50 CGST Act at 18% per annum for 2 years: Rs. 10.8L Γ— 18% Γ— 2 = Rs. 3.89 lakhs
  • Section 122(1) penalty if adjudicated: Rs. 10.8 lakhs
  • Minimum GST exposure (principal + interest): Rs. 14.7 lakhs
  • Maximum including penalty: Rs. 25.5 lakhs

Step 4 β€” Net debt: MSME tail

MSMED Act analysis reveals Rs. 18 lakhs in payables to Micro Enterprise vendors aged an average of 8 months beyond the 45-day limit. Compound interest at approximately 18.75% per annum (3Γ— RBI bank rate as notified) with monthly rests: approximately Rs. 2.4 lakhs. The Rs. 20.4 lakh total belongs in net debt, not trade payables.

Deal outcome summary:

ItemAmount
Headline price (8Γ— Rs. 1.87 crore)Rs. 15.00 crore
QoE price chip (8Γ— Rs. 0.40 crore EBITDA reduction)βˆ’ Rs. 3.20 crore
MSMED net debt additionβˆ’ Rs. 0.20 crore
Revised closing priceRs. 11.60 crore
Direct tax specific indemnity (capped)Rs. 10.5 lakhs
GST specific indemnity (maximum)Rs. 25.5 lakhs
Escrow holdback β€” 24 monthsRs. 75 lakhs

The escrow covers the combined maximum identified tax tail (Rs. 36 lakhs) plus a buffer for legal costs and assessment uncertainty. It is released in two tranches: 50% at 24 months from closing on no adverse assessment order, and the balance at 48 months.

The buyer moved from a Rs. 15 crore headline to an economic price of approximately Rs. 11.6 crore with a Rs. 75 lakh escrow β€” an outcome entirely driven by structured diligence, not negotiating bravado.


Translating Findings into the SPA: The Four Contractual Levers

Every diligence finding that survives into the report must convert into one of four deal mechanics in the Share Purchase Agreement. Generic representations and warranties cannot do this job alone β€” they are too broadly worded to drive a reliable post-closing recovery.

  1. Price chip β€” a deduction from headline consideration for a confirmed, quantifiable, undisputed liability. Use this for items whose existence and amount are not contested: an undisclosed term loan, aged MSMED payables, unfunded gratuity.
  1. Specific indemnity β€” separately capped, time-bound and triggered by the specific identified risk materialising. Use for issues of known probability but uncertain final quantum: an open tax scrutiny, pending NCLT proceedings, a contested employee termination. The specific indemnity survives post-closing because the fact pattern is captured at signing; recovery is far more reliable than under a general warranty where the buyer must prove causation from scratch.
  1. Condition precedent (CP) β€” the identified issue must be resolved before closing. Use for structural problems the seller can genuinely fix: an unexecuted IP assignment deed, a FEMA compounding application that can be filed and approved, a lapsed licence that can be renewed. Always verify satisfaction of CPs on both form and substance, not just document submission.
  1. Escrow holdback β€” a tranche of purchase price held in escrow and released on no adverse outcome. Use for risk tails with long windows: 18–24 months for operational risks; three to six years for tax risks (aligned to the reassessment limitation window under Section 149 of the Income-tax Act, scaled to the quantum of income alleged to have escaped assessment). Size the escrow to the realistic worst-case of the identified risk β€” not an arbitrary 5–10% of deal value that neither protects the buyer nor incentivises the seller to cooperate on resolution.

A finding without a contractual lever is a cost you have absorbed for free.


Key Takeaways

  • Three jobs, in order: confirm what was claimed, surface what was not disclosed, price what survives closing. Every diligence activity must serve one of these three goals β€” if it does not, cut it from scope.
  • Tax workstream almost always delivers the largest contingent number. Pull AIS/TIS with the target's consent, reconcile GSTR-2B ITC line by line, scrutinise every cross-border related-party transaction, and get written confirmation of the status of every open assessment before you price.
  • Digital tools have transformed the information game. MCA V3, GSTN, AIS/TIS and Account Aggregator data compress what was once three weeks of legwork into two focused days β€” but trained judgment is still required to interpret the signals correctly.
  • MSMED Act payables belong in net debt. Section 16 compound interest on aged supplier payables is a real, compounding liability that regularly causes buyers to overpay when it is misclassified as routine trade creditors.
  • Vendor diligence pays for itself. At a Rs. 30–50 crore deal, a Rs. 10–15 lakh VDD investment protects multiples of that in deal certainty and price. Commission it before the process opens, not after the first buyer raises questions.
  • Match every finding to a specific contractual lever. Price chip, specific indemnity, condition precedent or escrow β€” a finding without a lever is a cost you carry alone from the day of closing.
  • The deal you walk away from is often as valuable as the one you close. Diligence is the only instrument that tells you which is which before the money changes hands.

Frequently Asked Questions

What is the difference between red-flag and full due diligence?
A red-flag report focuses only on deal-breakers and material risks identified within a compressed timeline. A full due diligence report systematically covers every workstream area, lists all findings (material and minor), and provides recommendations for the definitive agreement. Buyers often commission red-flag first and progress to full diligence after exclusivity.
How long does due diligence take?
For an Indian mid-market acquisition, three to six weeks is typical, depending on data readiness, target size and complexity. Sellers can shorten timelines materially by running vendor due diligence in advance and pre-populating the data room with a logical folder taxonomy and current statutory documents.
Is GST and indirect tax review part of diligence?
Yes. Tax diligence specifically reviews GST registrations, monthly returns versus books, e-invoicing compliance, ITC reconciliation with GSTR-2B, RCM exposures, customs/SEZ matters where relevant, and any open scrutiny or DRC proceedings. Findings here often translate into specific indemnities or holdbacks.
Who pays for due diligence?
The buyer typically bears the cost of its own diligence, while the seller bears the cost of any vendor due diligence it commissions. Some transactions split certain shared workstream costs (such as environmental or technical assessments) by negotiation in the term sheet.
Mayank Wadhera
Content Reviewed By

CA | CS | CMA | Lawyer | Insolvency Professional | IBBI Valuator

"I help founders increase real business value and achieve stronger valuations | Turning messy workflows into scalable, time-saving systems"

Share this article:

Related Posts

View All