Due diligence documents are the records a buyer, investor, or lender collects and reviews to verify a company’s legal standing, finances, and operations before closing a transaction. They replace what the seller says about the business with evidence a reviewer can test. The exact request list changes with the deal, but almost every checklist pulls from the same categories: corporate formation records, financial statements and tax filings, lien searches, debt agreements, material contracts, litigation files, intellectual property records, permits and environmental reports, insurance policies, employee and benefit plan documents, and data privacy records.
What follows is each category, what it contains, and why a reviewer wants it.
Corporate and Ownership Records
A company’s legal identity begins with its formation filing. Corporations file Articles of Incorporation; LLCs file Articles of Organization. Both are filed with the Secretary of State and establish the entity as a separate legal person. Bylaws (for corporations) and operating agreements (for LLCs) sit alongside those filings and set the governance rules: how decisions get made, how profits are split, and how an owner exits.
A Certificate of Good Standing confirms the entity is current on state filings and franchise taxes. The name varies by state. Some call it a Certificate of Status, Certificate of Existence, or Certificate of Compliance. If the company can’t produce one, that is an early warning. It usually means overdue filings or unpaid fees, and in some states the business can lose its authority to transact.
Minute books carry the records of board meetings and shareholder votes and prove the company followed proper formalities when it authorized stock issuances, approved major contracts, or elected officers. Shareholder lists and capitalization tables show who owns what percentage and in what class of stock. Organizational charts show reporting lines and management hierarchy. Sloppy or missing minutes create a governance gap that can undermine the transaction if a prior board action is later challenged.
Financial Statements and Tax Returns
Financial statements are the core of the review. Buyers typically ask for both audited and unaudited versions covering three to five years: the balance sheet, income statement, cash flow statement, and statement of changes in equity. Audited statements carry more weight because an independent accountant has verified them, but unaudited interim statements fill the gap between audit periods. These generally follow Generally Accepted Accounting Principles, which standardize how assets, liabilities, and revenue are reported.
General ledgers sit underneath the summary statements and record every transaction. When something in the financials does not add up, the ledger is where the reviewer traces the discrepancy.
Federal tax returns show what the company reported to the IRS. Corporations file Form 1120, with schedules for depreciation, credits, deductions, and net operating loss carryovers.1Internal Revenue Service. Instructions for Form 1120 Comparing what the company told the IRS with what it told investors is one of the more revealing exercises in any review. Differences do not always mean fraud, since book and tax accounting methods differ, but they need an explanation. Payroll filings and sales tax reports belong in this request too, and unpaid taxes can produce liens that attach to the company’s assets.
Liens and UCC Filings
A UCC-1 financing statement is a public filing by which a creditor registers a security interest in a borrower’s personal property, such as inventory, equipment, or receivables. Filing the statement “perfects” the security interest, meaning the creditor’s claim takes priority over later creditors if the business becomes insolvent. A UCC search is one of the first things a buyer runs, because it shows who already has a claim on the company’s assets. If the target pledged equipment as collateral for a loan, the buyer needs to know before agreeing on a price.
The search should also surface federal and state tax liens, judgment liens, and mechanic’s liens. Tax liens can attach to all of the company’s property and take priority over most other creditors. These encumbrances change what the buyer is actually getting and what obligations transfer with the deal.
Debt and Loan Documents
Loan agreements, promissory notes, and credit facility documents list the company’s outstanding financial obligations with principal amounts, interest rates, maturity dates, and the collateral securing each loan. Reviewing them shows whether the business can service its debt and whether any loan contains an acceleration clause that fires on a change of ownership.
Guarantees and letters of credit belong here as well. If owners personally guaranteed a business loan, that guarantee may or may not survive the sale. Subordination agreements between lenders set the pecking order for repayment and can affect how sale proceeds are distributed.
Material Contracts
Material contracts define where revenue comes from and what the company is obligated to deliver. Customer contracts, supplier agreements, master service agreements, and purchase orders all go into the data room. Reviewers look at pricing, volume commitments, exclusivity, termination clauses, and the notice required to end the relationship.
Real estate leases and equipment leases represent fixed obligations that will outlive the transaction. Monthly cost, duration, renewal options, and restrictions on assignment all matter. A lease that prohibits transfer without the landlord’s consent can cost the buyer the company’s primary operating location.
Change-of-Control Clauses
Many deals hit friction here. A change-of-control clause can give the counterparty the right to terminate the contract or demand renegotiated terms when ownership changes hands. If the largest customer’s contract contains one, the buyer could close the deal and immediately lose the revenue that justified the price. Diligence teams flag every contract with these provisions so consents can be obtained before closing, or the deal terms adjusted.
Partnership and joint venture agreements need the same scrutiny. They set out shared profit arrangements, management responsibilities, and exit mechanisms with third parties. Indemnification agreements, which allocate responsibility for specific legal losses, are reviewed alongside them.
Litigation and Regulatory Matters
A single undisclosed lawsuit can dwarf the purchase price, which makes litigation review one of the higher-stakes parts of the process. The target should disclose all pending lawsuits, arbitration proceedings, and government investigations. Threatened claims matter equally: demand letters, pre-litigation correspondence, and disputes where litigation is reasonably foreseeable.
The litigation file usually includes:
- Full copies of complaints, answers, counterclaims, and settlement correspondence for pending and threatened lawsuits.
- Records of past litigation outcomes, including settlement amounts, consent decrees, and ongoing compliance obligations.
- Correspondence with federal or state agencies, subpoenas, and any enforcement actions.
- Auditor inquiry letters (sometimes called litigation letters) in which outside counsel summarizes pending and threatened claims for the company’s accountants.
The buyer’s legal team weighs each matter for probable financial exposure and operational disruption. Open litigation can also shape the deal itself. Buyers may insist on a larger escrow holdback or specific indemnification for identified claims.
Intellectual Property and Physical Assets
For companies whose value sits in proprietary technology, brands, or creative works, IP records can decide the deal. Patent filings cover inventions and processes. Trademark registrations cover brand names, logos, and slogans. Copyright registrations establish ownership of creative works, including software code and marketing materials.2U.S. Copyright Office. Circular 61 Copyright Registration of Computer Programs Domain name registrations confirm the company controls its online presence.
What catches buyers more often than missing registrations is missing assignment paperwork. If employees or contractors created the IP, the company needs signed invention assignment agreements or work-for-hire provisions that transfer ownership from the creator to the business. Without those documents, the company may not actually own what it is selling. This gap turns up regularly in technology acquisitions and can delay or kill a deal.
Physical asset documentation is simpler. Deeds establish ownership of real property. Vehicle and equipment titles show ownership and reveal any liens. The buyer confirms clear title and the authority to sell or pledge the assets.
Permits, Environmental Reports, and Workplace Safety
Every business needs some combination of licenses and permits to operate legally. The list depends on industry, location, and activities: business operating licenses, zoning approvals, health department permits, liquor licenses, professional licenses, and industry-specific authorizations from federal or state regulators. A permit that does not transfer with the sale, or one the company has been operating without, becomes the buyer’s compliance problem.
Environmental Due Diligence
Environmental exposure deserves its own attention because the numbers can be large. Under federal environmental law, a company that acquires contaminated property can be liable for cleanup costs even when the contamination predates the purchase by decades. The primary defense is conducting “all appropriate inquiries” into the property’s environmental history before closing. Federal regulations at 40 CFR Part 312 set the standards for these inquiries, which must be completed within one year before the acquisition date.3eCFR. 40 CFR Part 312 – Innocent Landowners, Standards for Conducting All Appropriate Inquiries Meeting them is what qualifies a buyer for the “innocent landowner” defense or the “bona fide prospective purchaser” protection under CERCLA.4Office of the Law Revision Counsel. 42 US Code 9601 – Definitions
In practice, this means commissioning a Phase I Environmental Site Assessment from a qualified environmental professional. The Phase I reviews historical uses, government environmental records, and site conditions to identify potential contamination. If the Phase I turns up concerns, a Phase II with soil and groundwater sampling usually follows.
Workplace Safety Records
OSHA requires employers to keep injury and illness logs, the OSHA 300 log, 300A annual summary, and 301 incident reports, going back at least three calendar years.5Occupational Safety and Health Administration. Field Operations Manual – Chapter 3 Inspection Procedures These show patterns of injuries, recurring hazards, and any OSHA citations. A history of willful violations signals systemic safety problems that will follow the business.
Insurance and Loss History
Insurance documentation shows what risks are covered and what exposure is unprotected. The core request pulls together all active policies, certificates of insurance, and recent renewal notices across general liability, property, workers’ compensation, professional liability, directors and officers, cyber, and any specialty coverage. Buyers compare limits against the company’s actual risk profile. A company with substantial revenue and thin liability coverage is underinsured, and that gap becomes the buyer’s problem after closing.
Loss run reports are equally important. These usually cover five years of claims and show the date of each claim, the type of loss, amounts paid, amounts reserved, and current status. Repeated claims in the same category point to operational problems the financial statements alone will not reveal.
Long-tail liabilities, such as product liability or environmental claims that can surface years after the underlying events, deserve particular attention. Buyers may need to negotiate tail coverage or extended reporting periods for claims that arise after closing but relate to pre-closing events.
Employees and Benefit Plans
Human resources documentation covers the legal relationship between the company and its workforce. The buyer needs a complete employee roster with job titles, compensation, hire dates, and any employment agreements with special terms. Employee handbooks set out workplace policies, and collective bargaining agreements set out negotiated terms at unionized companies.
Benefit plans get a close read. Summary Plan Descriptions for retirement and health plans are required under ERISA and must be written clearly enough for an average participant to understand rights, eligibility, and claims procedures.6Office of the Law Revision Counsel. 29 US Code 1022 – Summary Plan Description The reviewer uses these to understand benefit obligations and whether plans are properly administered. Unfunded pension liabilities or noncompliant plans can generate significant post-closing costs.
Executive employment contracts often contain severance and non-compete provisions that trigger on a change of ownership. If a CEO’s contract guarantees a large severance payment on a sale, that number has to be built into the deal price. Documentation of active employment litigation or EEOC claims also has to be disclosed, since those represent current exposure that transfers with the business.
Data Privacy and Cybersecurity
For companies that handle personal data, which in practice is nearly all of them, privacy and security documentation is now a standard part of the request. Buyers want to see the company’s data privacy policies, records of how personal information is collected, stored, processed, and shared, and evidence of compliance with applicable privacy laws such as the CCPA or GDPR.
A SOC 2 Type II audit report carries significant weight when available. A Type I report evaluates control design at a single point in time. A Type II report tests whether those controls actually operated effectively over a sustained period, typically three to twelve months. Data breach history, incident response plans, and any regulatory enforcement actions related to data handling complete this category.
How the Documents Get Delivered
In most transactions, these records are uploaded to a virtual data room, a secure cloud platform with access controls that let the seller decide who can view, download, or print specific files. Folders are usually organized by category (corporate, financial, legal, operations, HR, IP, insurance) with an index that maps each folder to a section of the diligence request list. Access is managed by role, so the buyer’s legal team may see litigation files the operational team cannot, and the seller’s advisors can track who viewed which documents and when. Sellers who organize the data room before opening it tend to close faster. A disorganized room signals to the buyer that the rest of the business may be run the same way.