What Is Legal Due Diligence and at What Depth Is It Conducted?
Legal due diligence is the systematic review of the legal position of the target company, or of the businesses and assets to be transferred, with regard to the risks that affect the transaction decision and the contract provisions. The scope of the review is determined by the parties, the transaction model, the sector, the country, the timing, the nature of the data room, the price and the risk appetite.
Full-scope legal due diligence
- Purpose
- Detailed analysis of the position and risks in the defined areas of law
- When it may be appropriate
- Strategic acquisition, complex target, long-term investment, broad operations
- Main output
- Detailed report with findings, legal assessment, risk classification and transaction recommendations
Red flag review
- Purpose
- Focusing on matters that could stop the transaction or significantly affect the economic decision
- When it may be appropriate
- Fast auction process, preliminary offer, limited time or phased review
- Main output
- Critical findings, open information requests and a recommendation for the next review
Vendor legal due diligence
- Purpose
- Identifying problems before the sale and preparing the data room and disclosures
- When it may be appropriate
- Controlled sale process, multiple potential buyers, carve-out transaction
- Main output
- Remediation plan, vendor report or a file ready for the buyer’s review
Confirmatory review
- Purpose
- Verifying the current position of an earlier report as of a given date
- When it may be appropriate
- A longer gap between signing and closing, a new event or additional documents
- Main output
- List of changes, remaining risks and an updated assessment for the closing decision
Issue-specific review
- Purpose
- In-depth assessment of a specific risk area
- When it may be appropriate
- Permit, real estate, data, technology, labor law, litigation or regulatory issue
- Main output
- Issue note, solution options and provisions to be carried into the transaction document
A legal due diligence report should not be a sum of long document summaries. How the findings affect the transaction must be explained; the finding, the legal consequence, the likelihood and impact, the recommended action, the responsible party and the completion time should be linked. Unknown matters, unanswered information requests and limitations of the review should be kept visible.
Scope of Legal Due Diligence, Materiality and the Information Request List
Depending on the transaction model and the target’s field of activity, the topics of company law, contracts, financing, litigation, permits, labor law, real estate, intellectual property, technology, personal data, environment, compliance and competition are selected. Document, time and monetary materiality thresholds are not applied blindly; matters whose monetary value appears low but which affect the transaction, such as the revocation of a permit or a share ownership problem, are reviewed separately.
The information request list is prepared specifically for the target and the sector. Repeated general requests are reduced; unanswered items, missing periods and documents added later to the data room are tracked through version control.
Main Areas of Legal Due Diligence
Review of Company Records, Capital and Share Ownership
The incorporation, articles of association, trade registry records, resolutions of the management body and general assembly, capital movements, share ledger, share certificates, beneficial owner information, signature authorities and group structure are reviewed. Whether the capital has been validly formed, to whom the shares belong and whether the shares subject to transfer are available for disposition are assessed.
Differences between the trade registry record and the company’s internal books and documents, lost share certificates, the special conditions of registered or bearer shares, the form of share transfer in a limited liability company, and the required partners’ meeting or general assembly actions are turned into separate closing steps.
Rights, Encumbrances and Transfer Restrictions over the Shares
Pledge, usufruct, attachment, injunction, purchase or sale rights, pre-emption, tag-along, drag-along, options, voting agreements and the contextual provisions of the articles of association are reviewed. Whether the existing shareholders’ agreement will terminate with the transaction, or whether some of its provisions will continue, is determined.
At closing, the removal of encumbrances over the shares, obtaining waivers or consents, terminating old documents and creating the new share ownership records are planned as interdependent deliverables.
Significant Commercial Contracts and Change-of-Control Provisions
Customer, supply, distribution, franchise, agency, lease, license, maintenance, logistics, service, outsourcing, public contracts and shareholder agreements are reviewed with respect to term, termination, renewal, minimum purchase, exclusivity, price adjustment, liability and security provisions.
Even if a share transfer does not change the company, a “change of control” clause in a contract may give rise to a notification, consent or termination right. In an asset transfer, consent may additionally be required for the assignment of the contract to the counterparty. Critical consents are tied to a condition precedent to closing or to a specific risk arrangement.
Review of Financing, Indebtedness and Security
Loan agreements, bonds or other debt instruments, shareholder loans, cash pooling, factoring, financial leasing, derivative transactions, letters of guarantee, guarantees, suretyships, pledges, mortgages and account blocks are reviewed. Whether the transaction triggers early repayment, default, cross-default or an additional security obligation is determined.
If a cash-free, debt-free price approach is used, legal debt and debt-like items are aligned with the financial definitions. For the repayment of debts and the release of security at closing, bank letters, the payment flow and delivery conditions are planned.
Litigation, Enforcement, Arbitration and Bankruptcy Risks
Pending and potential lawsuits, enforcement proceedings, arbitrations, administrative actions, investigations, complaints, settlements and decisions are reviewed. In addition to the amount claimed, the cessation of operations, permits, intellectual property rights, reputation, key customers, manager liability and precedent effect are assessed.
Whether the company faces over-indebtedness, loss of capital, composition with creditors, restructuring or enforcement risk is analyzed separately. Uncertain outcomes are not presented in the report as final debts; the likelihood, impact, stage of the process and the existing defense are explained.
Review of Licenses, Permits and Regulatory Compliance
The licenses, permits, authorizations, registrations, certificates and public contracts required for the target to operate are identified. Their validity, scope, terms, transferability, and whether a change in ownership or management requires notification or approval are reviewed.
In regulated fields such as banking, insurance, payments, energy, electronic communications, media, health, education, transport, tourism and defense, sector thresholds and competent authorities are verified for the specific transaction. A general list of permits is not applied to all transactions.
Review of Labor Law and Social Security
Employee lists, employment contracts, collective labor agreements, wages and fringe benefits, seniority, leave, overtime, bonuses, remote work, senior executive arrangements, occupational health and safety, work permits of foreign employees, lawsuits and social security records are reviewed.
In a share transfer, the employer company may remain the same; in a transfer of a business or workplace, the transfer of employment contracts and statutory liabilities is assessed separately. Dismissals, changes in conditions or requiring new contracts to be signed because of the transaction are not accepted as an automatic consequence.
Arrangements for Managers, Key Employees and Incentives
The duties, remuneration, bonuses, premiums, share options, phantom shares, non-compete, confidentiality, intellectual property and termination provisions of board members, managers, authorized representatives and key employees are reviewed. Payments or vesting triggered by the transaction are reflected in the price and the closing calculation.
If a retention bonus, a new role, an incentive plan or a reasonable non-compete restriction is to be arranged to protect key employees, the consequences under labor law, tax, personal data and enforceability are assessed together.
Review of Real Estate, Zoning and Projects
Ownership, lease, easement, usufruct, mortgage, annotation, declaration, expropriation, allocation, zoning, building permit, occupancy permit, condominium ownership, environmental restrictions and actual use are reviewed. Whether the title deed record, the contract and the use on site are the same is compared with the work of the relevant specialists.
In a share transfer, even though the real estate remains in the target company, financing security or permit risk may affect the economic value. In an asset transfer, the official form, permits, pre-emption and foreign investment restrictions are addressed separately for each real estate.
Review of Intellectual Property and the Trademark Portfolio
The owner, scope, term, country, renewal, assignment, pledge and disputes concerning trademarks, patents, utility models, designs, works, domain names, trade names, know-how, databases and license rights are reviewed. Whether the assignment of rights from employees, founders, agencies and contractors was validly obtained is assessed.
If the target’s core revenue-generating trademark or software belongs to another group company or to the founder, an assignment or a long-term license may be required at closing. Open-source and third-party content obligations are addressed together with the technology review.
Review of Information Technology, Software and Digital Assets
Software ownership, development agreements, source code access, licenses, open-source components, cloud and data center agreements, service levels, critical suppliers, cyber incident records, business continuity, domain names and digital accounts are reviewed.
Legal due diligence is not a code audit or penetration test. Where a technical assessment is needed, the scope of the competent specialists is determined; the legal report assesses the consequence of the technical finding for the contract, permits, data, liability and closing.
Review of Environment, Occupational Health and Safety, and Sustainability
Environmental permits, waste, emissions, water, soil contamination, hazardous substances, past operations, remediation obligations, workplace accidents, occupational diseases and occupational health and safety records are reviewed. Where technical measurement and site inspection are needed, environmental or engineering specialists are engaged.
Sustainability statements, supply chain commitments and reporting obligations are not only a matter of corporate communication; they may give rise to contractual breach, financing conditions, administrative sanctions and the risk of misleading statements.
Review of Ethics, Anti-Corruption and Sanctions Compliance
Ethics policy, whistleblowing channel, relations with public officials, intermediaries, donations and sponsorships, gifts and hospitality, third-party payments, anti-money laundering, sanctions lists, export restrictions and the beneficial owner structure are reviewed on a risk basis.
If foreign anti-bribery or sanctions rules may apply, the opinions of local competent lawyers and compliance specialists are obtained. Suspicious findings are not presented as proven violations; investigation steps and transaction protections are determined.
Coordination with Tax, Financial and Technical Reviews
The requests of the legal, financial, tax, operational, commercial, environmental and technical review teams are coordinated through a common data room and Q&A process. The conflicting interpretation of the same document by different teams, or a critical issue being left without an owner between teams, is prevented.
The law firm does not perform independent audit, tax certification, valuation or technical verification. It does, however, ensure that the finding of the relevant specialist is carried into the contract in terms of the price, a condition to closing, a specific indemnity, representations and warranties or a post-transaction action.
Legal Due Diligence Report and Red Flag Report
The findings of the review are reported together with the source document, the legal position, the transaction impact, the risk level, the open question and the recommended action. Whether the report will be provided to the buyer’s management, investment committee, financing provider or insurer is determined by the scope of the engagement and the confidentiality conditions.
The report is not reduced to a single opinion in the form of “suitable/not suitable.” A matter that could prevent the transaction, a matter for price or indemnification, a deficiency to be remedied before closing, a matter to be monitored after the transaction and a risk that can be accepted on an informed basis are separated from one another.
Vendor Legal Due Diligence and the Remediation Plan
Before the sale process, corporate records, significant contracts, permits, employee and intellectual property files, lawsuits and compliance records are reviewed. An applicable remediation timetable is prepared for matters such as a missing resolution, an expired permit, an unrecorded assignment of intellectual property rights, a related-party transaction or unreleased security.
Where the vendor report is to be given to the buyer, the right to rely on it, the liability cap and the update conditions are regulated separately. A vendor review does not by itself remove the buyer’s own need for review.
How Is a Legal Due Diligence Finding Managed in the Transaction?
Critical / potentially transaction-blocking
- Meaning
- Share ownership problem, a main permit that cannot be transferred, a prohibited transaction or a fundamental unlawfulness that cannot be remedied
- Possible transaction response
- Changing the transaction structure, mandatory approval, remediation, postponing closing or withdrawing from the transaction
Price or indemnification risk
- Meaning
- A past liability whose amount or economic effect can be foreseen
- Possible transaction response
- Price adjustment, specific indemnity, escrow, retention or insurance
Pre-closing remediation
- Meaning
- A corporate, contractual or regulatory deficiency that can be completed
- Possible transaction response
- Condition precedent, seller undertaking, delivery of documents and verification
Post-closing action
- Meaning
- A matter that does not block the transaction but requires time-bound remediation
- Possible transaction response
- Integration plan, new contract, policy, registration, permit or follow-up
Acceptable on disclosure
- Meaning
- A matter that does not change the transaction decision and is knowingly assumed by the buyer
- Possible transaction response
- Adequate disclosure, price and documenting the risk acceptance in the management decision
Open / unverified
- Meaning
- A matter whose outcome cannot be determined because no document or answer is available
- Possible transaction response
- Additional information request, confirmation, scope limitation, assumption or specific contractual protection
The risk color should not be used on its own to make a decision. The impact of the same finding may vary with the transaction price, the target’s sector, the buyer’s integration plan and the time needed for remediation. The final decision is taken by considering the legal, financial, tax, commercial and technical assessments together.
Frequently Asked Questions
What is legal due diligence?
Legal due diligence is the process of reviewing, within the agreed scope, the legal position of the target company or of the assets to be transferred and the risks that may affect the transaction decision. The effect of the findings on the price, the contract, permits, closing and the post-transaction plan is assessed.
Is legal due diligence mandatory in a merger or acquisition?
There may be no general obligation for every private transaction; however, not conducting a review may lead to acquiring the target company without understanding its debt, litigation, permit, contract and compliance risks. For publicly held or regulated companies, special review and reporting obligations may also arise separately.
Does legal due diligence ensure that all hidden debts will be found?
No. The review is limited by the documents provided, the records accessible, the answers given, the scope, materiality and time. Facts that are undisclosed, misrepresented or inaccessible may not be detected. These limitations are shown in the report and assessed together with the contractual protections.
What is the difference between a full-scope review and a red flag review?
A full-scope review addresses the defined areas of law in detail. A red flag review focuses on matters that could stop the transaction or significantly affect the economic decision. A red flag exercise does not replace a subsequent detailed review where one is needed.
What is vendor legal due diligence used for?
It serves to identify deficiencies before the sale, to prepare a remediation plan, to organize the data room and to present the disclosures consistently. In controlled sales, it can make it easier for buyers to proceed on the same basic set of information.
Why is a change-of-control clause important?
Even if the contracting party does not change in a share transfer, a change in control of the target company may give rise to a notification, consent or termination right for a customer, bank, licensor or public authority. Critical contracts should be reviewed before closing.
What happens to employees’ contracts in a transfer of a workplace?
In a transfer of a workplace or a part of it by a legal transaction, the existing employment contracts may pass to the transferee under the conditions in the law. Past debts, length of service and termination rights are subject to special provisions. In a share transfer, on the other hand, the employer company does not as a rule change.
What problems are most often seen in an intellectual property review?
A trademark or software belonging to the founder or to another group company instead of the target, missing assignments of rights from employees and contractors, a license ending upon a change of control, and open-source obligations are significant risks. The registry record and the actual use are reviewed together.
How long does a legal due diligence take?
The size of the target, the sector, the number of countries, the organization of the data room, the scope of the review and the speed of responses are decisive. A priority red flag exercise can be done in a short time; a broad-scope transaction may take weeks or longer. The timetable should not be shortened to an unrealistic degree of certainty by narrowing the scope.