What is Due Diligence?

Due diligence is a systematic process of investigation, verification, and analysis conducted before entering into a business transaction, acquisition, merger, investment, or partnership. In India, due diligence has taken on heightened importance in 2026, as regulatory frameworks have become increasingly robust under the Companies Act 2013 (as amended), GST laws, SEBI regulations, and the Foreign Exchange Management Act (FEMA).

Whether you are an investor evaluating a startup, a corporation pursuing an acquisition, or an entrepreneur entering a joint venture, performing thorough due diligence protects you from hidden liabilities, legal pitfalls, and financial surprises. This comprehensive checklist covers every dimension — legal, financial, operational, HR, and intellectual property — aligned with Indian laws and market practices as of 2026.

🎯 Why Due Diligence Matters in India (2026)

The Indian business landscape has evolved dramatically. With regulatory bodies such as SEBI, RBI, MCA, CCI, and NCLT operating with greater enforcement capabilities, non-compliance risks have multiplied. Key reasons due diligence is critical in 2026:

• Rising M&A activity across sectors — technology, pharma, fintech, and manufacturing
• Increased FDI inflows requiring FEMA and RBI compliance verification
• GST audit trails and digital financial records making financial verification more thorough
• Stringent anti-money laundering (AML) requirements under PMLA 2002 (amended 2023)
• SEBI’s enhanced disclosure norms for listed companies post-LODR amendments
• NCLT proceedings rising — hidden pending litigations can derail deals
• Data protection requirements under the Digital Personal Data Protection Act 202

 

PART 1: LEGAL DUE DILIGENCE CHECKLIST

🏢 1.1 Corporate Structure & Incorporation Verification

Documents to Verify

• Certificate of Incorporation issued by the Registrar of Companies (ROC)
• Memorandum of Association (MOA) and Articles of Association (AOA)
• Latest Form MGT-7 (Annual Return) and AOC-4 (Financial Statements) filed with MCA
• Certificate of Commencement of Business (Form INC-20A) — mandatory post-2019
• Board resolutions authorising the transaction
• List of current directors with DIN (Director Identification Numbers) — verify on MCA21 portal
• Shareholding pattern — Form SH-4, SH-7, and PAS-3 filings
• Register of Members (Form MGT-1) and Share Certificates
• Any pending Compounding Applications with RBI or MCA

Key Checks

• Verify company status on MCA21 portal — Active, Struck Off, or Under Liquidation
• Check for any disqualified directors under Section 164 of the Companies Act 2013
• Confirm no initiation of NCLT proceedings under IBC 2016
• Verify authorised vs. paid-up capital discrepancies

⚖️ 1.2 Litigation & Regulatory Compliance Check

Pending Litigations

• Obtain certified list of all pending civil suits, criminal cases, and arbitrations
• Check High Court, District Court, and Supreme Court case records (eCourts platform)
• NCLT / NCLAT proceedings — check insolvency or winding-up petitions
• Consumer Forum complaints — NCDRC, State and District level
• Labour court and Industrial Tribunal disputes
• Environmental tribunal (NGT) orders and show-cause notices

Regulatory Compliance

• SEBI show-cause notices (for listed entities or SEBI-regulated entities)
• Competition Commission of India (CCI) — any anti-trust investigations
• Enforcement Directorate (ED) proceedings under FEMA or PMLA
• GST Department notices, audit reports, and demand orders
• Income Tax assessments, appeals pending at CIT(A) or ITAT
• Customs and Excise duty disputes

📜 1.3 Contract & Agreement Review

Key Contracts to Review

• All material customer and supplier contracts — check lock-in periods, exit clauses, and change-of-control provisions
• Loan agreements, debenture trust deeds, and charge documents registered with ROC
• Lease deeds and rental agreements for office, factory, or warehouse
• Employment contracts of key managerial personnel (KMPs)
• Non-Disclosure Agreements (NDAs) and Non-Compete Agreements
• Joint venture, partnership, and shareholder agreements
• Agency, distributor, and franchise agreements
• Government contracts or licenses (e.g., MSME certificates, sector-specific licenses)

Red Flags in Contracts

• Change-of-control clauses requiring third-party consent
• Unlimited indemnity clauses or uncapped liability provisions
• Automatic renewal clauses with unfavourable terms
• Penalty clauses for breach or termination
• Arbitration clauses specifying foreign jurisdictions (impacts enforcement in India)

🏠 1.4 Property & Real Estate Verification

Title Verification

• Original title deeds and chain of title going back minimum 30 years
• Encumbrance certificate from Sub-Registrar’s office
• Property tax receipts (up to date for FY 2025-26)
• RERA registration (for real estate developers) — verify on state RERA portals
• Land conversion certificate (if agricultural land converted for commercial use)
• Building plan approvals and Occupancy Certificate (OC) from municipal authority
• Mutation entries in land records (7/12 extracts in Maharashtra, Pahani in Telangana etc.)

Encumbrances & Charges

• Search at the Sub-Registrar’s office for mortgages and encumbrances
• ROC search for charges created on property under Section 77 of Companies Act 2013
• CERSAI (Central Registry of Securitisation Asset Reconstruction) search for equitable mortgages
• Check for acquisition proceedings under Land Acquisition Act

🔐 1.5 Intellectual Property (IP) Due Diligence

IP Assets to Verify

• Trademark registrations — verify on IP India portal; check for oppositions or cancellations
• Patent filings and grants — check expiry dates, annuity payments, and infringement risks
• Copyright registrations — especially for software, creative works, and databases
• Design registrations under Designs Act 2000
• Domain name ownership and SSL certificate validity
• Software licenses — check proprietary vs. open-source compliance (GPL, MIT etc.)

IP Red Flags

• IP registered in founder’s personal name rather than company name
• Absence of IP assignment agreements from founders and employees
• Pending trademark opposition proceedings
• Use of third-party IP without proper licensing

👥 1.6 Employment & HR Legal Compliance

Labour Law Compliance (India 2026 — Labour Codes Framework)

• Compliance with Code on Wages 2019 — minimum wage, overtime, bonus
• Code on Social Security 2020 — EPF, ESIC, gratuity, maternity benefit compliance
• Industrial Relations Code 2020 — standing orders, trade union registrations
• Occupational Safety, Health and Working Conditions Code 2020 compliance
• POSH (Prevention of Sexual Harassment) Act compliance — Internal Complaints Committee
• Employment agreements of all employees including ESOP documentation
• PF and ESIC registration, ECR filings, and payment records
• Contract labour registrations and principal employer compliance

Employee Verification

• List of all employees, consultants, and gig workers with CTC details
• Pending employee-related litigations or disputes
• Gratuity fund compliance for entities with 10+ employees
• Non-compete and IP assignment clauses in employment agreements

🌐 1.7 Data Privacy & Cybersecurity Compliance

Digital Personal Data Protection Act 2023

• Appointment of Data Protection Officer (DPO) where required
• Consent management framework for personal data processing
• Data localisation compliance for sensitive personal data
• Data breach incident response policy and notification procedures
• Contracts with data processors aligned to DPDPA requirements

Cybersecurity

• CERT-In compliance — Cybersecurity Incident Reporting within 6 hours (for reportable incidents)
• ISO 27001 certification (if applicable)
• IT infrastructure security audit reports
• Cloud storage compliance — data storage locations verified

PART 2: FINANCIAL DUE DILIGENCE CHECKLIST

📊 2.1 Financial Statements Review

Documents Required (Last 3–5 Years)

• Audited Balance Sheets, P&L Accounts, and Cash Flow Statements (FY 2021-22 to FY 2024-25)
• Standalone and Consolidated Financial Statements (if applicable)
• Auditor’s Report including qualifications, emphasis of matter, and key audit matters
• Notes to Accounts — review all contingent liabilities
• Internal Audit Reports and Audit Committee Minutes
• Management Discussion & Analysis (MD&A) reports

Key Financial Ratios to Analyse

Ratio	Formula	Healthy Benchmark
Current Ratio	Current Assets / Current Liabilities	> 1.5
Debt-to-Equity Ratio	Total Debt / Shareholders’ Equity	< 2.0 (sector dependent)
EBITDA Margin	EBITDA / Revenue × 100	> 15% (industry specific)
Return on Equity (ROE)	Net Profit / Equity × 100	> 15%
Gross Profit Margin	Gross Profit / Revenue × 100	Varies by sector
Interest Coverage Ratio	EBIT / Interest Expense	> 2.5

💰 2.2 Tax Due Diligence

Direct Tax (Income Tax)

• Income Tax Returns (ITR-6 for companies) for the last 5 years — verify against audited accounts
• Tax Assessment Orders — check pending assessments and demands from IT Department
• TDS compliance — Form 26AS reconciliation, TDS returns (Form 24Q, 26Q, 27Q)
• Pending Income Tax Appeals — CIT(A), ITAT, High Court
• MAT (Minimum Alternate Tax) credit entitlement — Form 29B
• Transfer Pricing compliance — Form 3CEB and TP Documentation for international transactions
• Deferred Tax Assets and Liabilities — verify recoverability
• Tax loss carry-forward — Section 72 unabsorbed depreciation and business losses

Indirect Tax (GST)

• GST Registration Certificate — GSTIN verification on GST portal
• GST Returns — GSTR-1, GSTR-3B, GSTR-9 and GSTR-9C for last 3 years
• Input Tax Credit (ITC) reconciliation — GSTR-2B vs. Books
• GST audit reports under Section 65 or 66 of CGST Act
• Pending GST demand orders, SCNs (Show Cause Notices) and appeals
• E-way bill compliance for goods movement
• Reverse Charge Mechanism (RCM) compliance

Other Taxes

• Stamp Duty compliance on instruments — verify with respective state laws
• Professional Tax registration and payment records (state-specific)
• Customs duty assessment and pending disputes (for import/export businesses)

🏦 2.3 Debt & Banking Due Diligence

Loan & Credit Facilities

• List of all secured and unsecured loans with outstanding amounts as of March 31, 2025
• Loan agreements — repayment schedule, interest rates, covenants, and security details
• Charge documents filed with ROC — verify on MCA21 portal
• CIBIL Score and credit report of the company (check via TransUnion CIBIL)
• NPA (Non-Performing Asset) status — check RBI’s CRILC database records
• Bank Statements for last 3 years — verify cash flows and unusual transactions
• Working capital limits — Sanctioned vs. Utilized, Cash Credit, and Overdraft facilities
• ECB (External Commercial Borrowings) compliance with RBI guidelines

Currency & Financial Exposure

• Foreign currency exposure and hedging policy
• FEMA compliance for foreign transactions — ODI, FDI filings with RBI
• Letter of Credit facilities and Bank Guarantees outstanding

💹 2.4 Revenue & Business Model Verification

Revenue Analysis

• Revenue breakdown by product/service, geography, and customer segment
• Customer concentration risk — Top 5 clients contributing > 30% revenue is a red flag
• Order book, pipeline, and signed contracts vs. recognized revenue
• Revenue recognition policy — verify Ind AS 115 compliance
• Related Party Transactions — Section 188 of Companies Act; verify arm’s length pricing
• Deferred revenue analysis — especially for SaaS, subscription, and advance receipt models

Cost Structure Analysis

• Raw material costs — supplier concentration and pricing agreements
• Employee costs as percentage of revenue — benchmark vs. industry
• Discretionary vs. non-discretionary expenses
• Capital Expenditure (CapEx) history and planned future CapEx
• Working capital cycle — Debtors Days, Creditors Days, Inventory Days

📈 2.5 Valuation & Financial Projections Review

Valuation Methods Used in India

• Discounted Cash Flow (DCF) — verify WACC assumptions and growth rate
• Comparable Company Multiple (CCM) — EV/EBITDA, P/E, EV/Revenue
• Net Asset Value (NAV) method — for asset-heavy businesses
• Rule 11UA valuation for FEMA/FDI transactions (DCF or NAV method mandated)
• SEBI Takeover Code valuations for listed companies

Financial Projections

• Review 3–5 year financial projections and stress-test key assumptions
• EBITDA to Free Cash Flow conversion efficiency
• Capital allocation policy — dividend, buyback, and reinvestment history
• Revenue CAGR vs. industry benchmarks

🧾 2.6 Working Capital & Cash Flow Analysis

• Monthly cash flow statements for last 24 months
• Days Sales Outstanding (DSO) — industry norm typically 30–60 days
• Inventory ageing analysis — slow-moving or obsolete inventory
• Creditor ageing analysis — any overdue payables indicating cash stress
• Contingent liabilities disclosed in notes — quantify potential cash outflows
• Provisions for bad debts — adequacy assessment
• Off-balance sheet liabilities — operating leases, factoring arrangements

PART 3: REGULATORY & SECTOR-SPECIFIC CHECKLIST

🏗️ 3.1 Sector-Specific Licenses & Permits

Depending on the business sector, the following sector-specific licenses must be verified:

Sector	Key Licenses / Compliance
Fintech / NBFC	RBI Certificate of Registration, KYC/AML Policy, PPI License
Pharma / Healthcare	CDSCO License, Drug License, Clinical Trial approvals
Food & Beverage	FSSAI License, AGMARK certification, Pollution NOC
Manufacturing	Factory License, Pollution Control Consent, BIS Certification
Telecom / IT	DoT License, Software Technology Park (STPI) registration
Real Estate	RERA Registration, DTCP Approval, Environment Clearance
Education	AICTE/UGC Recognition, Trust/Society Registration
E-commerce	GST, FDI compliance (B2C), Consumer Protection Act 2019 compliance

🌍 3.2 Foreign Direct Investment (FDI) & FEMA Compliance

• FDI route — Automatic or Government Route — verify applicable sectoral cap
• FC-GPR, FC-TRS, and FLA (Foreign Liabilities & Assets) filings with RBI
• Compliance with Foreign Investment Facilitation Portal (FIFP) guidelines
• FEMA filings for ODI (Overseas Direct Investment) — Form ODI with RBI
• Pricing guidelines for FDI under Rule 11UA compliant valuation
• Repatriation of dividends and royalties — RBI compliance
• Downstream investment guidelines for foreign-owned entities

🔬 3.3 Environmental, Social & Governance (ESG) Compliance

Environmental Compliance

• Environment Impact Assessment (EIA) clearance for applicable projects
• Consent to Establish (CTE) and Consent to Operate (CTO) from State Pollution Control Board
• Hazardous waste management compliance — HSMD Rules 2016
• Carbon footprint disclosure — SEBI’s Business Responsibility and Sustainability Report (BRSR) for top 1000 listed companies

Social & Governance

• CSR compliance — Companies (CSR Policy) Rules; 2% of average net profits (for companies meeting threshold)
• Board composition — Independent Directors requirement under SEBI LODR
• Whistleblower policy under Section 177 of Companies Act
• Related Party Transaction policy and audit committee oversight

PART 4: TOP 20 RED FLAGS IN DUE DILIGENCE

⚠️ Critical Warning Signs to Watch For

#	Red Flag Description
1	Frequent changes in auditors — possible financial manipulation
2	Qualified or adverse auditor opinions on financial statements
3	Large unsecured loans to promoters or related parties
4	Sudden spike in debtors with no corresponding revenue increase
5	Contingent liabilities exceeding 30% of net worth
6	Tax demands exceeding ₹1 crore pending without adequate provision
7	Promoter pledging > 50% of equity shares
8	Director disqualification under Section 164(2) of Companies Act
9	NCLT / IBC proceedings initiated by creditors
10	Non-filing of GST returns for 3+ consecutive months
11	Mismatch between income tax returns and audited accounts
12	IP registered in individual names without assignment to company
13	Key customer contracts with change-of-control exit clauses
14	Labour court disputes involving > 100 employees
15	Missing environmental clearances for manufacturing operations
16	FEMA violations — unremitted export proceeds, unauthorized ODI
17	High employee attrition (> 40% annually) among key roles
18	Undisclosed related party transactions with offshore entities
19	Data breach incidents without proper CERT-In reporting
20	Round-tripping of funds via subsidiary or shell company structures

PART 5: DUE DILIGENCE PROCESS & TIMELINE

🗓️ 5.1 Typical Due Diligence Timeline in India

A comprehensive due diligence exercise in India typically spans 4 to 12 weeks depending on the complexity of the transaction, company size, and availability of documents. Below is a recommended timeline:

Phase	Activities	Duration
Phase 1	Information Request & NDA Execution	Week 1
Phase 2	Document Collection & Virtual Data Room Setup	Weeks 2–3
Phase 3	Legal, Financial & Technical Review	Weeks 3–8
Phase 4	Management Interviews & Site Visit	Week 8–9
Phase 5	Due Diligence Report Preparation	Weeks 9–10
Phase 6	Findings Discussion & Deal Structuring	Weeks 10–12

💼 5.2 Virtual Data Room (VDR) Best Practices

• Use secure VDR platforms (Merrill DatasiteOne, Intralinks, or Indian alternatives like LeapSight)
• Organise documents by category: Legal, Financial, Tax, HR, IP, Contracts
• Set tiered access permissions — control who sees sensitive documents
• Watermark all documents to prevent unauthorised sharing
• Maintain audit logs — track who accessed which documents
• Set document expiry and revocation rights post-deal

💸 5.3 Cost of Due Diligence in India (2026 Estimates)

Due diligence costs vary based on transaction size and complexity. Below are indicative cost ranges in Indian Rupees:

Type	Small Deal (< ₹10 Cr)	Large Deal (> ₹100 Cr)
Legal DD	₹2–5 Lakhs	₹20–50 Lakhs
Financial DD	₹1.5–4 Lakhs	₹15–40 Lakhs
Tax DD	₹1–3 Lakhs	₹10–30 Lakhs
Technical / IP DD	₹50K–2 Lakhs	₹5–20 Lakhs
Total Estimated	₹5–14 Lakhs	₹50–140 Lakhs