Understanding Due Diligence: Scope, Sources and Limits

Due diligence means verification carried out before a decision: an acquisition, an equity investment, an appointment, a partnership, a structural contract. The phrase has become familiar to the point of covering very different kinds of work. That confusion creates expectations which few reports can meet.

A simple distinction helps. Financial due diligence checks numbers; legal due diligence checks commitments; integrity due diligence checks people and reputations. The three complement one another but do not substitute for one another, and each depends on sources of its own.

What due diligence actually covers

In practice, an integrity check addresses four families of questions. Who the counterparty really is: ownership, beneficial owners, directors, addresses. What that person or entity has done: litigation, published rulings, insolvency proceedings, sanctions. What is said about them publicly: press, professional networks, regulatory notices. And what cannot be established, which must be named as such.

These four rarely overlap by chance. A change of director days before a transaction, an address shared by dozens of companies, a claim brought by a former partner: taken alone, none of it proves anything. Placed on a timeline, they form a pattern that deserves checking.

Public sources and lawful sources

Most of the work rests on sources open to anyone: commercial registers, official gazettes, published court decisions, licence registers, sanctions lists, old and recent press, publications by supervisory authorities. Using them requires less access than method, careful reading and cross-checking.

Then comes the category of sources that are lawful but not public: interviews with people who agree to speak, field verification, observation in public space. Their value depends entirely on how they are documented. Undated, unattributed and unchecked verbal information has no place in a serious report.

• Official registers and authority publications
• Court decisions and published proceedings
• Press and archives, including local and historical
• Sanctions, debarment and politically exposed person lists
• Consented interviews and observation in public space

What falls outside that list matters just as much: bank records, private communications, police files, information obtained through identity deception or intrusion. A report resting on such material is not merely fragile. It exposes both the client who ordered it and the person who produced it.

The limits that must be stated

No verification produces certainty. It produces a snapshot of the information available on a given date, with a confidence level attached to each finding. Some registers are incomplete or closed abroad, some companies are structured precisely to make ownership unreadable, some events leave no usable trace at all.

Those limits belong in the report, not in a later conversation. An informed client knows what remains unknown and can decide accordingly. A client led to believe that everything was checked will discover otherwise at the worst moment, typically in front of a court, a bank or a regulator.

Reports also end. A due diligence carries a cut-off date, and events after it are not covered. Stating that date is not a formality: it prevents a decision taken in June from being defended with material gathered in March and presented as current.

Time weighs just as heavily. A review completed in ten days does not cover the same ground as one that runs for six weeks. Saying so plainly is better than promising full coverage within a timeframe the necessary checks cannot fit into.

What a report contains

A useful report is short where it matters and long in its annexes. It opens with a summary that answers the questions asked, without detour and without rhetoric. It then sets out method, sources and limits, followed by findings ranked by significance and tied to their documentary origin.

• Purpose, scope and cut-off date of the research
• Summary of what is confirmed and what is not established
• Map of the entities and individuals involved
• Sourced findings with an explicit confidence level
• Open questions and proposed further checks

The last point is often neglected. A good report does not present itself as final. It indicates what could be examined further, what that would involve and what it would change in the decision. That honesty is what separates a working document from a comfortable one.

Reading a report without being misled

Three habits help the reader. Look for the date of every finding, since information that was accurate three years ago may be wrong today. Separate what is documented from what is merely reported. And check that every adverse statement is tied to a source that can be consulted, rather than to a general impression.

A report that piles up adjectives without citing sources, or concludes that someone is dishonest on the strength of coincidences, should be read with suspicion. Conversely, a report that writes « not established » where it could not conclude is doing its reader a service, and sometimes the person concerned as well.

Due diligence is always framed around a specific decision and a real timetable. An initial confidential consultation defines what must be checked, to what depth, and within which limits. It commits you to nothing. These pages are editorial information and do not constitute legal advice.