Company Due Diligence Checklist: How to Verify a Business Before a Deal
Company due diligence is most useful when it tests the claims on which a relationship depends. Before signing with a supplier, partner or investment target, establish exactly which business you are dealing with, who is behind it and which inconsistencies could change the proposed decision.
- Resolve the legal entity and contracting party first.
- Check owners, management and material related parties together.
- Corroborate operational claims and put adverse information in context.
- End with decision-relevant findings, not a generic pass or fail label.
1. Define the relationship and review depth
A low-value recurring supplier and a strategic joint venture do not need an identical review. Write down the proposed relationship, value or significance, countries, role of intermediaries and what the business is expected to do. Identify which facts would make you pause, change terms or reject the relationship.
Separate investigative due diligence from legal, financial, tax and technical work. Research may reveal an undisclosed affiliate or a disputed management claim, but it does not by itself validate an acquisition model or determine contractual protections. Agree who receives findings that affect other advisers.
Set a base scope and escalation triggers. An ordinary review might cover one entity, its disclosed owners and key managers. A foreign parent, unresolved identity or material contradiction can justify a second stage. Document the trigger so the review does not expand without a decision.
2. Verify the company and the contracting entity
Ask for the full legal name, registration number, jurisdiction and proposed contracting entity. Compare those details with the business shown on the website, the proposal and any invoice instructions. A trading brand may be used by several entities, only one of which is party to the agreement.
Review status, incorporation date, historical names and relevant filings. Preserve the underlying record references. An entity being registered is a fact about registration; it is not proof that it has the staff, assets or operating history claimed in a presentation.
If the entity was recently formed, investigate whether the claimed track record belongs to a founder, a predecessor or an unrelated group company. Each is a different proposition. Ask the counterparty to explain the relationship and corroborate material parts independently.
| Question | Evidence to seek | Typical mistake |
|---|---|---|
| Who will sign? | Exact legal name and identifier in the draft agreement | Checking the brand while contracting with another entity |
| Is the history consistent? | Historical names, formation and relevant filings | Attributing a founder’s career to a newly incorporated business |
| What does registration establish? | The original record and its scope | Treating an official filing as verification of every business claim |
3. Map owners and meaningful related parties
Record disclosed shareholders, parent companies, controlling individuals and the date of the information. Follow the chain across jurisdictions where the question requires it. Stop only with a supported answer or an explicitly documented gap, rather than at the first corporate parent.
Look for material relationships with the proposed customer, supplier, intermediary or decision-maker. A shared officer or address is a lead whose relevance needs testing. Explain whether the relationship is current, historical, operational or merely administrative.
Use the beneficial ownership research guide for a deeper ownership workflow. Do not apply one country’s disclosure threshold as a universal rule or assume that a registered shareholder and an ultimate controlling individual must be the same person.
4. Test management and track-record claims
Prioritise people who can materially affect the relationship: founders, controlling owners, signatories and relevant executives. Build a dated role history and resolve namesakes before attaching court cases, media or other adverse records.
Translate important claims into questions. “Experienced in defence manufacturing” may mean employment, ownership, consulting or a single completed project. “Worked with a global brand” may describe a subcontract rather than a direct customer. Ask what the claim means, then seek corroboration at that level.
A discrepancy should be described precisely. An uncorroborated claim is not automatically a false one, and an old role may be irrelevant to the present decision. Record the person’s explanation, how it was obtained and which parts were independently supported.
5. Corroborate operating capacity and commercial claims
A convincing website is a source of claims, not independent evidence of operations. Compare the claimed product, location, team and timeline with available corporate records, original project references, relevant public notices and other sources appropriate to the sector.
Look for consistency between scale and evidence. A company may legitimately use contractors, share premises or outsource production, so absence of a large office is not conclusive. The question is whether the operating model supports the promises relevant to your agreement.
Where a physical fact is decisive, identify whether a separately authorised local verification is needed. Keep desk-research conclusions within what the sources establish. Do not write that a facility was inspected if the review only examined its photographs.
- Identify which entity owns or operates the relevant facility or product.
- Separate self-published customer logos from corroborated customer relationships.
- Check whether dates, locations and named personnel fit the claimed history.
- Record gaps as questions for clarification rather than automatically labelling them misconduct.
6. Review adverse information without losing context
When reviewing disputes, regulatory information, sanctions references or adverse media, first confirm identity and relevance. Record the issuing body or publisher, date, procedural status and what the source actually says. Distinguish an allegation from a finding and a pending case from a resolved one.
Trace repeated stories to their origin. Ten articles copying one allegation are one evidence chain, not ten independent confirmations. Look for later developments or a documented response. Avoid treating an old accusation as the current state of the record.
Make the decision connection explicit. A small historical commercial dispute may not affect a routine supply contract, while an unresolved ownership conflict could be central to a strategic partnership. Responsible legal or compliance reviewers should determine the significance of any jurisdiction-specific requirement.
7. Turn the checklist into a decision register
A useful output separates the finding, supporting record, business implication and unresolved question. This makes it possible to disagree about the response without losing the underlying facts. Avoid using a single colour or number as a substitute for that reasoning.
Possible responses include proceeding, obtaining clarification, narrowing the relationship, asking another adviser to assess a specific issue or pausing until a material gap is resolved. The investigator should identify the factual uncertainty; the authorised business owner makes the relationship decision.
Keep an update plan for facts that may change, such as ownership or an unresolved proceeding. The first report is a snapshot. Define what event or elapsed period would trigger another review and who is responsible for it.
| Finding | Question for the decision-maker | Follow-up |
|---|---|---|
| A parent entity was omitted from disclosures | Does the parent create material exposure? | Research the parent and request an explanation |
| A claimed project cannot be corroborated | Is that project central to the supplier’s capability? | Seek original references or other verification |
| A dispute is reported without its outcome | Would the outcome affect this relationship? | Review the underlying record and later developments |
Worked example: checking a new distribution partner
Illustrative scenario: a business is offered exclusive distribution through a company with an impressive website and a short registration history. The review first establishes the contracting entity, then identifies that the claimed decade of experience belongs to a director’s earlier employer.
That distinction is not itself evidence of deception. The report should ask whether the proposal clearly explains the difference and whether the present company has the people, authorisations and relationships needed for the agreement. It should also test the role of any intermediary being paid for the introduction.
The practical outcome could be a request for documentary clarification and a narrower first contract, rather than a generic “high risk” label. For a scoped investigation of unresolved claims, see our OSINT due diligence and investigation services and the due diligence service overview.
Frequently asked questions
What should I check first when a company uses several brand names?
Resolve the exact legal entity that will sign the agreement and receive payment. Then map which brands and related companies belong to the review. Otherwise research into a reputable group name may be incorrectly attributed to a different contracting business.
Is a company with little online information automatically risky?
No. The significance depends on the sector, age, operating model and claims being made. Record which important claims remain unverified and seek proportionate clarification. A thin public footprint is an information limitation, not a standalone finding of wrongdoing.
Can one due diligence checklist be used for every country?
Use a common set of questions, but adapt the sources and expectations to each jurisdiction. Record which registers, languages and historical records were covered. A missing record may mean that the source is unavailable rather than that the entity has nothing to disclose.
How often should a completed company review be updated?
Set a review trigger based on the relationship and information likely to change. Examples include a material ownership change, a new country of operation or an unresolved issue reaching a new stage. Record an owner for updates instead of relying on an arbitrary universal interval.
Sources and further reading
This guide presents an editorial research workflow. The specialist references below support its background concepts; the examples are hypothetical and do not describe client cases. Source scope and access can change, so record what was available during your own enquiry.