Access Controls

Definition

Due diligence is a comprehensive review of a company or asset before a transaction is finalised. It is performed by the buy-side to verify representations made by the seller, surface risks, validate the valuation and confirm there are no deal-breakers hidden in the company’s books, contracts, technology stack or operations.

While most associated with mergers and acquisitions, due diligence is also standard in venture capital and private equity investments, IPOs, real-estate transactions and joint ventures.

Why due diligence matters

A typical mid-market M&A transaction involves thousands of documents and dozens of stakeholders. Without a disciplined diligence process:

• Undisclosed liabilities — tax exposure, litigation, employee disputes — surface after closing, when they are far more expensive to fix.
• Valuation drifts as the buyer discovers the target’s financials are softer than the teaser deck suggested.
• Integration fails, because the buyer never validated assumptions about technology, customer concentration or key-person risk.

Types of due diligence

Although the workstreams overlap, most deals separate diligence into a handful of tracks led by specialised advisors:

Where the VDR fits in

The virtual data room is the operational backbone of due diligence. A modern VDR provides:

Built-in Q&A that routes questions to the right subject-matter expert and keeps the conversation discoverable.

Granular access controls so different bidders, advisors and individual users see only what they need.

Dynamic watermarking on every page view, print and download — a critical deterrent against leaks.

An audit trail that records every action, providing legal evidence of what was disclosed, to whom and when.