How to systematically identify and assess risks. With practical case studies and categorization of findings. From corporate structure to commercial agreements and compliance.
Why Due Diligence is Crucial for Your Company
The acquisition or sale of a company is one of the most important business decisions entrepreneurs make. Millions invested, years built up – yet the risk remains of overlooking problems that could significantly jeopardize the company's value. This is precisely where due diligence comes in.
Due diligence is more than just a checklist. It is a systematic process that illuminates all essential aspects of a company. Especially for the German Mittelstand – the backbone of our economy – a thorough review is essential. Whether you want to sell, plan an acquisition, or bring in a business partner: due diligence protects your financial security and gives you the certainty to make informed decisions.
In this guide, we will walk you through the core aspects of classic due diligence in the Mittelstand. We focus on practical knowledge – not legal subtleties, but what you, as a managing director or entrepreneur, truly need to know.
1. Definition and Scope of Due Diligence
What exactly is Due Diligence?
The English term "Due Diligence" literally means "due care." In the M&A context, it refers to a comprehensive and systematic review of a company before a transaction. You examine the legal, financial, operational, and commercial situation of the company to uncover hidden risks.
Due diligence serves several goals simultaneously: it reveals significant risks and opportunities, supports company valuation, identifies necessary measures ("repairs"), and forms the basis for informed negotiations. At the same time, it is an expression of proper business management – if a problem arises later, it can be proven that all reasonable review measures were taken.
Furthermore, the careful examination of the object of purchase is legally required: a manager is obliged to make investment decisions based on an adequate information basis. This applies in particular to PE managers who manage third-party assets (funds/LPs), as well as to managing directors of a GmbH within the scope of their legality obligation and Business Judgment Rule. Failure to conduct an adequate review can lead to liability consequences.
Conversely, the seller also has a duty to disclose: essential circumstances relevant to the purchase decision must be disclosed without being asked, provided they are recognizably important to the buyer and the buyer can reasonably expect them. Concealing such facts can constitute deception by omission and trigger corresponding warranty or rescission rights.
Modern Due Diligence Reports are "Red Flag Reports" – concise analyses that quantify risks and provide concrete recommendations for action. It's about analysis with an "economic lens," not just a mere description of facts.
How extensive should Due Diligence be?
The depth and scope of due diligence depend on several factors: the size of the company, the transaction value, the industry, and the risk profile. A craft business with 20 employees requires a different depth than a software company with 200 employees. Crucially: the scope of work should be defined together with the client at the outset and documented in writing – including materiality thresholds, level of detail, and demarcation from other advisors.
Full Due Diligence: In-depth review of all relevant areas, typical for larger transactions or increased risk profiles. This includes extensive document reviews, management interviews, on-site inspections, and the involvement of specialized advisors.
Legal Due Diligence: Focus on legal structures, contracts, governance, and compliance. It is an indispensable core component of any transaction – even if other areas are only reviewed in a "light" version.
Financial Due Diligence: Analysis of financial statements, P&L, cash flow, working capital, and potential "hidden liabilities." Essential for buyers to understand the economic substance and sustainable earning power.
Tax Due Diligence: Review of the tax structure, risks, and optimization potential. This particularly includes latent tax risks, tax audits, loss carryforwards, withholding taxes, and the tax structuring of the transaction (e.g., share vs. asset deal). Especially in international structures and PE setups, it is regularly decision-relevant.
Operational Due Diligence: Assessment of business processes, efficiency, scalability, quality of organization, and the performance of the management team and operational infrastructure.
Commercial Due Diligence: Analysis of market, competition, customer base, pricing power, and growth prospects. The goal is to validate strategic positioning and actual market potential.
For real estate-heavy transactions, additional specific review areas are regularly added: a technical due diligence (structural condition, maintenance backlog, CAPEX requirements) as well as an environmental due diligence (contaminated sites, contaminations, regulatory approval issues). These aspects can significantly influence valuation, financeability, and liability structure.
For many Mittelstand companies, a "well-dosed" due diligence is often the right approach: not excessively comprehensive, but thorough enough to cover the main risks.
Case Study: Mechanical Engineering Company (120 Employees)
A mid-sized mechanical engineering company was for sale. The initial due diligence checklist focused exclusively on contracts and licenses. It was initially overlooked that the technical director – owner of 15 core patents – would no longer accept a non-compete clause without appropriate compensation. The renegotiation ultimately accounted for 12% of the purchase price and should have been identified as a significant risk early on. Only an expansion of the scope to IP and key-person risks brought clarity.
2. Corporate Law and Clarification of Ownership
The Chain of Title: Who truly owns the company?
One of the first and most important tasks in due diligence is clarifying ownership. This may sound trivial – but in reality, problems often arise here, especially in established family businesses or companies that are several generations old.
By "Chain of Title," lawyers understand the unbroken chain of ownership transfers. You must check: Who founded the company? How has it been passed on since then? Are there unresolved inheritance disputes? Are all shares held by one owner or several? Were transfers – for consideration or gratuitously – formally executed and properly documented?
A classic scenario: A Mittelstand entrepreneur founds their company with 100% ownership. Later, they transfer 50% to their son. The transfer is more or less documented. But: Was there a notarization? Was the tax office informed? Were the entries in the commercial register updated? Errors in these seemingly administrative points can lead to serious legal complications.
Case Study: Family Business with Holding Structure
A family business was gradually transferred to the next generation over the years – partly through anticipated inheritance, partly through gifts. In parallel, a holding company was established with an external minority shareholder. Some transfers were notarized, others only based on internal agreements. A shareholder passed away – the inheritance settlement was never fully implemented. Additionally, there were restricted shares with consent requirements that were not obtained for individual transfers. Result: Significant legal uncertainty, even regarding whether the sellers could effectively dispose of all shares. The rectification cost EUR 35,000 in notary fees and delayed the transaction by 10 weeks.
Articles of Association and Resolution Documentation
The articles of association (for a stock corporation, the statutes) are the "constitution" of the company. In due diligence, it is checked: Does the current contract correspond to the commercial register entry? Are there unregistered changes? Are voting rights, profit participations, and termination rights clearly defined? Are there clauses that restrict or prohibit the sale? Which resolutions are required?
Incomplete or outdated articles of association are often particularly problematic. A common issue: The contract was drawn up 20 years ago and has not been updated since. New shareholders were added, but the agreements were not adjusted. This leads to legal uncertainty and can cause delays or even failure in a transaction. A clean articles of association is not only legally important – it is also a selling point.
3. Commercial Agreements: Customer and Supplier Contracts Under Scrutiny
A frequently underestimated, but central area of due diligence for valuation is the review of essential business contracts. Customer and supplier contracts form the operational backbone of every company. Their stability, term, and contractual design significantly determine the sustainable company value.
What matters in customer contracts
In due diligence, the essential customer contracts – typically the top 10 to top 20 by sales volume – are reviewed in detail. Key questions are: What terms and notice periods apply? Are there automatic renewal clauses? Are price adjustment mechanisms agreed upon (indexing, annual renegotiation)? Are there exclusivity obligations or minimum purchase commitments? What warranty and liability regulations apply? Are there penalty clauses for delivery delays or quality defects?
Customer concentration is particularly critical: If a single customer accounts for more than 20–30% of total sales, this represents a significant cluster risk. Buyers and financing banks assess this as a material risk that directly impacts the purchase price – typically through a discount or an earn-out component.
Change-of-Control Clauses: The Underestimated Danger
Change-of-control clauses (CoC clauses) are among the most important and yet most frequently overlooked risks in due diligence. A CoC clause gives the contracting party the right to terminate the contract extraordinarily or renegotiate it if the ownership structure of the company changes – precisely when a transaction takes place.
CoC clauses are typically found in customer contracts (especially for long-term framework agreements with major customers), supplier contracts (exclusive supply agreements, license agreements), lease and tenancy agreements, loan agreements and financing agreements, joint venture agreements and cooperation agreements, as well as in insurance policies and public law permits.
The legal consequences vary considerably: from a mere right of information for the contracting party to a requirement for consent, up to an immediate extraordinary right of termination. In the worst case, the company itself loses its most important contracts due to the transaction – and thus the basis of its earning power.
A CoC clause in a contract representing 45% of revenue is not a marginal issue – it is a potential dealbreaker. Timely identification and obtaining consents (waivers) before closing are crucial.
Handling CoC Clauses in Practice
Professional handling of CoC clauses requires a multi-stage approach: First, all essential contracts are systematically reviewed for CoC clauses and categorized by risk relevance. For contracts with a termination right for the contracting party, a "consent strategy" is developed: When and how will the contracting parties be approached? What concessions may be required? For particularly critical contracts, obtaining consent can be agreed upon as a closing condition in the SPA – the transaction will only be completed if consent is obtained.
Important: In a share deal, formally only the ownership structure of the holding company changes, not the contracting party itself. Therefore, some CoC clauses do not apply to a share deal, but they do to an asset deal. The distinction must be carefully examined in each individual case.
Case Study: Industrial Supplier with CoC Risk
An industrial supplier with EUR 25 million in revenue was sold in an auction process. The Legal DD revealed that the largest customer (approx. 40% of revenue) had a framework agreement with a CoC clause that provided for a right of termination in the event of a change of shareholders. The buyer made the transaction dependent on obtaining a waiver from the customer beforehand. The customer used its negotiating position and, in return, demanded price reductions of 8% for the next two years. Ultimately, the purchase price was reduced by EUR 1.2 million to reflect these concessions.
Supplier Contracts and Dependencies
Significant risks can also lurk on the procurement side: Are key components only available from a single supplier (single-source risk)? Are there long-term purchase obligations with minimum quantities? What price adjustment mechanisms apply? Are there exclusivity agreements that restrict the buyer's strategic flexibility? Can supplier contracts be terminated in the event of a change of control?
In practice, it often turns out that Mittelstand companies maintain long-standing, informal supplier relationships that are not or only rudimentarily secured by contract. Such "handshake agreements" may work in ongoing operations – but in the event of a change of ownership, legal protection is lacking.
General Terms and Conditions (GTC)
An often overlooked, but economically relevant, point of review is the company's General Terms and Conditions. Outdated or legally ineffective GTC clauses can lead to liability limitations not applying, warranty regulations being to the detriment of the company, or retention of title clauses being ineffective. Especially after recent case law on GTC control in the B2B sector, regular updates are recommended.
4. Bogus Self-Employment and Labor Law Issues
The Risk of Bogus Self-Employment
Many Mittelstand companies employ "entrepreneurs" or "independent contractors" who are, in fact, working as employees. This is a significant risk – both with regard to social security contributions and taxes. The German Pension Insurance (Deutsche Rentenversicherung) and the tax office analyze whether a genuinely self-employed activity or dependent employment exists.
Key criteria include: instructions (does the person follow specific instructions?), integration into the organization, place of work, use of company equipment, fixed working hours, and bearing one's own entrepreneurial risk. If it turns out retrospectively that supposedly "external" personnel were actually employees, significant back payments of social security contributions are threatened – regularly for several years retroactively, plus late payment surcharges. In addition, there may be labor law claims and reputational risks. Furthermore, the withholding of social security contributions is punishable under § 266a StGB – with personal liability risks for managing directors.
Case Study: Software Company with 15 "Freelancers"
An IT company with 80 permanent employees also employed 15 "freelancers" who had worked exclusively for the company for years, used internal company email addresses, and participated in weekly team meetings. The due diligence identified a back payment risk of approx. EUR 450,000 for social security contributions over the past four years. A specific indemnity for this risk was agreed upon in the SPA, in addition to a purchase price reduction of EUR 200,000.
Employment Contracts and Compliance
As part of due diligence, employment contracts are systematically reviewed. Are all contracts formally valid and do they meet the requirements of the Proof of Employment Act (Nachweisgesetz)? Do the agreements comply with the Minimum Wage Act? Are vacation entitlements correctly documented? Are there implicit promises that are not officially agreed upon?
Typical labor law findings include: unclear or ineffective fixed-term contracts, faulty non-compete clauses, insufficiently documented bonus structures, missing overtime regulations, incorrectly compensated vacation entitlements, and inconsistencies between employment contracts and applicable collective bargaining agreements or works council agreements.
The topic of "company practice" (betriebliche Übung) is particularly relevant: recurring benefits from the employer (e.g., bonus payments, special leave) that have been granted without reservation over a longer period can lead to an enforceable claim by employees – even if they were originally intended to be voluntary.
A critical point: works councils and trade unions. If there is a works council, it has co-determination rights in a sale. The Works Constitution Act (Betriebsverfassungsgesetz) stipulates that the works council must be informed and consulted. Missing or incorrect involvement can lead to significant legal risks and delays.
5. Litigation and Procedural Risks
The review of ongoing, threatened, and concluded legal disputes is a core component of any due diligence. Legal disputes can have significant financial implications, burden ongoing business operations, and – in the worst case – be existential.
What is reviewed?
The scope of review includes all ongoing court proceedings (civil, labor, administrative, tax courts), out-of-court disputes and dunning procedures, arbitration proceedings, administrative proceedings (Federal Cartel Office, data protection authority, trade supervisory office, tax office), threatened legal disputes (e.g., warnings, demand letters, pre-litigation correspondence), and significant concluded proceedings from the last three to five years that allow conclusions about recurring problems.
Special Risk Areas
Product Liability: Companies with physical products are regularly exposed to product liability risks. In due diligence, it is checked whether recall campaigns have taken place, whether insurance coverage exists, and whether claims are threatened. Especially for automotive suppliers or medical technology companies, liability sums can reach an existential level.
Patent Disputes and IP Conflicts: Especially for technology-driven Mittelstand companies, it must be checked whether their own intellectual property rights are being attacked or whether the company itself infringes on third-party intellectual property rights. Ongoing patent infringement proceedings can lead to injunctions and claims for damages amounting to millions.
Labor Law Proceedings: Unfair dismissal claims, equal pay claims for temporary work, claims for company pensions or overtime pay. Disputes with former managing directors over severance payments or non-compete clauses are also common in Mittelstand companies.
Antitrust Risks: Participation in price-fixing, market allocation, or concerted practices can lead to fines of up to 10% of global group turnover. In addition, claims for damages from affected customers (follow-on claims) are threatened.
Tax Proceedings: Ongoing tax audits, objection proceedings against tax assessments, or fiscal court proceedings. Transfer pricing risks in international structures and unconcluded tax audits for several years are particularly problematic.
Assessment and Hedging
Crucial is the careful assessment of each procedure: What is the probability of a negative outcome? What is the potential financial risk (best case / worst case)? Have provisions been made in the balance sheet, and are they adequate? Is there sufficient insurance coverage?
The results directly influence the purchase price structuring and contract negotiation: through provisions deducted from the enterprise value as financial debt, through specific indemnities in the SPA, through tax escrow solutions for tax risks, or through consideration in W&I insurance.
Case Study: Automotive Supplier with Ongoing Antitrust Proceedings
During the review of an automotive supplier, an ongoing antitrust proceeding by the Federal Cartel Office was identified. The company was subject to a sector inquiry and had already received a request for information. The potential fine amount was estimated at EUR 2–5 million. The buyer demanded full indemnity for this risk, in addition to an escrow of EUR 3 million. Negotiations over the indemnity amount and its time limitation alone took four weeks.
Case Study: Medical Technology Company with Product Liability Lawsuit
A medical technology manufacturer was in the sales process when a product liability lawsuit for USD 8 million was served in the USA. Although the lawsuit, according to the assessment of the litigation lawyers, had little chance of success, the circumstance alone represented a significant valuation discount. The W&I insurance excluded the known issue. Ultimately, a specific indemnity with a cap of EUR 5 million and a term of 5 years was agreed upon.
6. Data Protection and Compliance Issues
GDPR Compliance: More Than Just a Technical Question
The General Data Protection Regulation (GDPR) is a complex set of rules that many Mittelstand companies underestimate. In due diligence, it is checked: Does a data protection concept exist? Have data protection impact assessments been carried out? Is there a data protection officer? Are consents available? How is personal data stored? Are there contracts with data processors?
Violations of the GDPR can be expensive: fines of up to 20 million euros or 4% of global annual turnover are possible. For a buyer, this is a significant risk. A company without GDPR compliance is significantly less attractive and less valuable.
Case Study: Service Company Without a Data Protection Officer
A B2B service provider with 60 employees processed extensive customer data but had neither appointed a data protection officer nor created a record of processing activities. The due diligence additionally identified missing data processing agreements with three cloud service providers. The buyer demanded comprehensive remediation before closing (appointment of DPO, creation of RoPA, conclusion of DPAs) as well as an indemnity for any past fines.
Further Compliance Aspects
In addition to data protection, there are other compliance topics: export control (particularly relevant for companies with non-EU exports), anti-money laundering requirements, corruption prevention (especially for government contracts), antitrust law, sanctions, and regulatory approvals. A common surprise: a company has been operating for years with unvalidated permits. "It's always been that way" is not an argument – in due diligence, current, valid permits must be documented.
7. Environmental and Real Estate Issues
Contaminated Sites and Environmental Liability
An underestimated risk: If the company works with chemicals, oils, or other substances or has a production facility, potential environmental damage must be checked. If contaminated waste was improperly disposed of in the past, the current operator can be held responsible for remediation – with significant costs. In due diligence, it is checked: What substances are used and how are they stored? Are there permits? Was waste properly disposed of? Is there documentation of historical uses? Have soil investigations been carried out?
Case Study: Metalworking Company with Soil Contamination
In a metalworking company, the environmental due diligence revealed soil contamination by trichloroethylene from previous use (1960s-1980s). The expert opinion estimated the remediation costs at EUR 750,000. The seller knew nothing about it – the contamination originated from a previous owner. As a result, the purchase price was reduced by the estimated remediation amount, and an environmental indemnity with a cap of EUR 1.5 million was additionally agreed upon.
Real Estate and Land
For rented properties: How long is the lease term? What are the costs? Are there adjustment clauses? Can the landlord terminate? Are there hidden ancillary costs? For owned properties: Is there a current building description? Are all permits available? Are there monument protection requirements? Have inspections been carried out? Are there land register encumbrances? Are environmental requirements met?
Particularly relevant for buyers: Is the property essential for business operations? What happens if the lease expires and is not renewed? What are the costs of relocation? Are there CoC clauses in the lease agreement? These questions can be business-critical for a buyer.
8. The Process: How is Due Diligence Conducted?
Phase 1: Preparation and Scope Definition
Before due diligence begins, it must be clarified: What will be reviewed? How deep will we go? Who will conduct the review? What timeframe is realistic? The scope of work is agreed upon with the client and documented in writing – including materiality thresholds, demarcation from other advisors, and level of detail. A Lead Associate coordinates the team and manages the master due diligence report.
Phase 2: Document Procurement and Analysis
The company is asked to provide documents in a virtual data room. Important: Check the completeness of the data room not only based on the data room index but also using your own checklists. A poorly organized data room is itself a warning sign – it indicates insufficient internal processes. Also check the completeness of individual documents: Are all pages present? Are signature pages complete? Are there newer versions or amendment agreements?
Typical documents: Articles of association and commercial register entries, shareholder lists, financial documents (annual financial statements for the last 3–5 years, tax returns, current BWA), employment contracts and personnel documents, customer contracts and supplier contracts, insurance policies, permits and licenses, IT and data protection documentation, real estate and lease agreements, ongoing and concluded legal disputes.
Phase 3: Management Interviews and On-Site Visit
Due diligence is not purely documentary. Professional auditors conduct expert sessions with management, visit production facilities and offices. The goal is to reconcile written documentation with reality. The books show 50 employees, but significantly fewer workstations are counted during the visit? The documentation lists 5 top customers, but interviews reveal that one customer accounts for 60% of sales? Such discrepancies are crucial.
Phase 4: Q&A Process
Based on the documents and interviews, a list of questions is generated. Important: Questions are asked on a "need to know" basis – not "nice to have" questions. They must be understandable, specific, and user-friendly in their formulation. In auction processes with a limited number of questions, careful prioritization is crucial: valuation-relevant questions first, purely confirmatory questions can be deferred.
Phase 5: Report and Evaluation
At the end, a comprehensive report is created. Modern Due Diligence Reports are "Red Flag Reports" – compressed, analysis-oriented reports with clear risk assessment and concrete recommendations for action. The type of report depends on the recipient: commercial report with risk indicators, legal report with recommendations for action, or bankable report for lenders.
9. The Due Diligence Report as a Bankable Work Product
What makes a report "bankable"?
A bankable report must meet the following requirements: transparency (all assumptions documented), comprehensibility (an external auditor can understand the logic), completeness (all relevant risks addressed), structure (clear, logical organization), and realism (fair, objective assessments).
The structure typically follows: Executive Summary (2–3 pages), Company Overview, Detailed Analysis by Topic Areas, Risk Presentation with Severity Level, Concrete Recommendations, and Appendices.
Recommendations in the Due Diligence Report
Professional reports contain concrete recommendations for action, typically categorized into five areas: consideration in the purchase price (pricing in through purchase price reduction), consideration in the purchase price mechanism (e.g., provision as financial debt), remedial measures to be undertaken by the seller before or after signing (possibly as a closing condition), coverage by indemnities or warranties in the SPA, and further inquiries with the seller.
Banks pay particular attention to the presentation of risks. A realistic report that also discloses problems is more trustworthy than one that only reports positives. Banks know: every company has risks. If the review finds none, it was probably not thorough enough.
10. Common Problems and Red Flags
In our practice as M&A lawyers, we repeatedly see similar problems:
Incomplete or Outdated Documentation: The articles of association are from 1998 and not updated. Employment contracts are partially missing. The tax office is not informed about important ownership changes.
Dependence on Individuals: The company only functions because a specific person is there (often the founder). If this person leaves, the business collapses. Banks are reluctant to finance this.
Hidden Debts: Loans that do not appear on the balance sheet. Private loans from the managing director to the company. Supplier credits that effectively function as financing.
Tax Problems: Unpaid tax debts. Unfiled tax returns. Unconcluded tax audits.
Labor Law Problems: Missing employment contracts. Incorrectly accounted for interns. Bogus self-employment. Incomplete works council involvement.
Customer Concentration: Few customers account for a large part of the revenue. If one is lost, the business is seriously jeopardized.
Missing or Deficient CoC Analysis: Change-of-control clauses in key contracts are overlooked. The transaction itself triggers termination rights of important contracting parties.
Unresolved Legal Disputes: Ongoing proceedings without sufficient provisions. Threatened lawsuits that are not disclosed. Inadequate insurance coverage.
11. Categorization of Due Diligence Findings
Professional due diligence not only identifies risks – it assesses and categorizes them according to their severity and available courses of action. The following system has proven effective in practice and is based on a traffic light logic:
|
Traffic Light |
Category |
Typical Examples |
|
RED |
Showstopper / Dealbreaker |
- Missing or ineffective chain of title – seller cannot effectively dispose of shares - Criminal offenses (§ 266a StGB, corruption, fraud) - Existential environmental liabilities without realistic remediation options - Missing mandatory official permits (e.g., BImSchG, operating license) - Ongoing antitrust proceedings with significant fine risk - Ineffective transfer of essential IP rights or licenses on which the business model relies |
|
DARK RED |
Red Flags with Resolution Potential |
- Bogus self-employment with significant back payment risk → Indemnity + purchase price adjustment - Material CoC clauses in key contracts → Obtain consent before closing - Incomplete GDPR compliance → Remedial measures + indemnity - Tax audits with uncertain outcome → Tax escrow or specific indemnity - Missing works council involvement → Rectify before closing - Customer concentration >40% with one customer → Purchase price adjustment / earn-out component |
|
ORANGE |
Secured by Contract |
- Latent tax risks → specific indemnity in the SPA - Individual ineffective employment contract clauses → Warranty + de minimis threshold - Expiring lease agreements without renewal option → Closing condition or covenant - Missing maintenance records for real estate → Purchase price reduction for estimated CAPEX - Unupdated articles of association → Remediation before or after closing - Open warranty claims from third parties → W&I insurance or specific provision |
|
YELLOW |
Notes – Rectify after Closing |
- Outdated General Terms and Conditions → Update as part of PMI - Missing data protection impact assessments → Conduct after closing - Suboptimal insurance coverage → Renegotiate policies - Incomplete personnel files → Update - Missing or outdated compliance guidelines → Implement new CMS - Optimization potential in IT security → Investment planning |
Category 1 – RED: Showstopper / Dealbreaker
Findings in this category can jeopardize the entire transaction and typically lead to the termination of negotiations or require a fundamental restructuring of the deal. Example: If the seller cannot prove that they can effectively dispose of all shares (broken chain of title), the transaction simply cannot be carried out in the planned form. Similarly, criminally relevant facts – such as systematic withholding of social security contributions or corruption – can cause the deal to fall through because the buyer does not want to assume the reputational risk and successor liability.
Category 2 – DARK RED/ORANGE: Red Flags with Resolution Potential
These findings are serious but generally solvable – albeit with a significant impact on the purchase price and contract design. A typical example is bogus self-employment: the risk can be quantified, accounted for in the purchase price, and secured by a specific indemnity. The same applies to material CoC clauses: obtaining a waiver before closing can be made a closing condition.
Category 3 – ORANGE: Secured by Contractual Design
Findings that can be managed through clever contractual design. Typically, they are addressed through warranties, indemnities with de minimis thresholds and caps, or through purchase price adjustments. The seller can alternatively offer to carry out certain remedial measures before closing – such as updating the articles of association or obtaining missing permits.
Category 4 – YELLOW: Notes and Optimization Potential
These findings do not represent a material transaction risk but should be addressed as part of the post-merger integration. They provide the buyer with a "roadmap" for the first 100 days after closing: Which processes need to be modernized, which documents updated, which guidelines implemented? Yellow findings can also serve as a negotiating argument for moderate purchase price reductions.
Conclusion: Investment in Security
Due diligence costs time and money. This is an investment, not a cost factor. A thorough review before selling or buying a company can save millions and avoid major headaches.
If you, as a seller, have due diligence conducted (yes, sellers also wisely do this – keyword: Vendor Due Diligence), you ensure that the buyer is not faced with unpleasant surprises – and you yourself know what you need to work towards. If you are a buyer, protect your investment: Due diligence is your chance to gain clarity before you sign.
Most importantly: Take due diligence seriously. Work with experienced partners – lawyers, tax advisors, and, if necessary, specialized consultants for environmental, IT, or compliance. And categorize the findings systematically: Not every problem is a dealbreaker – but every problem deserves a clear classification and a well-thought-out solution.
Ultimately, a clean, thoroughly reviewed purchase or sale is significantly less expensive than dealing with surprises afterward. Due diligence is your compass through the complexity of a transaction – use it.
