What Is Included in a Business Due Diligence Report?

Define scope, identity and ownership before fieldwork

The foundation: legal name, registration number, incorporation date, current status, registered office and share capital, together with the ownership structure traced through to ultimate beneficial owners. Where a holding company sits offshore, that chain should be followed rather than stopped at the first corporate shareholder.

Identity verification of directors and controlling shareholders, their other directorships, and whether any are disqualified, bankrupt or connected to failed entities. A director with a trail of dissolved companies in the same sector is a material finding.

The report should identify the subject entity precisely and explain which subsidiaries, jurisdictions, facilities and time periods are included. State the proposed transaction and the questions being tested. If a related company is excluded, make that visible where its role could affect the deal. A report on the registered parent is not automatically a review of the factory or company that will receive payment.

Ownership work should explain the evidence for control and authority, including where the chain could not be completed. Distinguish an official record from a management declaration and note the date of each. A person’s connection to a failed entity can warrant further examination, but context matters; adverse findings should be checked for identity and relevance before being presented as conclusions about conduct.

Assess financial, legal and operating capability

Filed or audited accounts covering several years where available, with commentary on revenue trend, profitability, liabilities and whether the balance sheet supports the transaction being contemplated. Where accounts are unavailable or unaudited, the report should say so plainly rather than presenting an incomplete picture as a complete one.

This section covers:

• Litigation searches and any judgments outstanding
• Insolvency and winding-up proceedings
• Tax compliance standing
• Sector licences verified with the issuing regulator
• Sanctions, politically exposed person and adverse media screening

A physical inspection confirming the premises exist, are occupied by the company, and house operations at the scale claimed. Photographs, an assessment of equipment and capacity, and staffing observations turn an abstract file into evidence about whether they can actually deliver.

Explain what each workstream means for the proposed exposure. A profitable company can still have insufficient cash for a large order, and an active licence may cover only certain activities. Where specialist legal, tax, environmental or technical work is needed, identify the adviser and scope. The lead report should reconcile those findings rather than treating separate reports as automatically consistent.

For operational evidence, state what was observed, when and under what access conditions. Distinguish management’s claimed capacity from records or observations supporting it. Where information is incomplete, describe the consequence: inability to assess a debt, uncertain title or insufficient evidence of available production. The reader needs to understand the limitation’s effect on the transaction, not just see a list of unavailable documents.

Turn findings into conditions and commercial responses

A strong report separates verified fact, management statement, inference and unavailable information. Each material finding should show its source and date, explain why it matters to the proposed transaction, assign a risk level and recommend a control. The executive summary should answer proceed, proceed with conditions, renegotiate or stop.

Scope must match the decision. Supplier diligence emphasizes capacity, quality, licences and delivery; distributor diligence adds market reach, conflicts and credit; investment diligence adds ownership, financial, tax, legal, employment, environmental and asset work. Duara’s due diligence service can combine records with physical verification.

Each material finding should explain the source, impact and proposed response. For example, an approval awaiting renewal may require confirmation before shipment; uncertain liabilities may call for specialist review or a contractual remedy. A critical defect should not disappear inside an overall medium-risk score. Describe why it matters and which decision cannot safely be made until it is resolved.

Separate factual findings from professional judgment and management’s eventual risk acceptance. The investigator can recommend a response, but the client should know who is responsible for approving residual exposure. Where a recommendation depends on an assumption, identify what evidence would confirm or overturn it. The result should support negotiation and implementation rather than merely label the company good or bad.

Check sources, limitations and the final handover

A risk assessment in plain language, identifying what was verified, what could not be verified and why, the specific risks identified, and a clear recommendation. If a report does not distinguish between "we checked this and it is fine" and "we could not check this", it is not giving you what you paid for.

Require a source log with dates and enough detail to locate the supporting records. Sensitive information can be handled through controlled access rather than reproduced unnecessarily in every copy. The report should state its evidence cutoff, unresolved requests and any limits on searches or access. “No adverse result found” is different from confirmation that no adverse matter exists.

At handover, review the conditions for proceeding and assign each one an owner and deadline. Decide which facts need updating immediately before completion, including material ownership, licence or bank information. Keep the final decision alongside the report so future reviewers understand how gaps were addressed. The verification timeline guide explains why third-party dependencies should be considered before a transaction deadline.

For an ongoing relationship, specify review triggers rather than assuming the report remains current indefinitely. A larger credit line, new manufacturing site or change of control can justify further checks. A concise report with traceable evidence and clear conditions is more useful than extensive descriptive material that leaves the next decision unclear.

An illustrative report structure and finding

A practical report can use the outline below. It is a structure to adapt to the agreed scope, not a claim that every jurisdiction makes every record available. Mark an excluded or unavailable area explicitly. Keep the executive conclusion traceable to the detailed findings, and avoid silently treating an unanswered question as an acceptable result.

1. Executive summary: the decision, scope and major conditions.
2. Corporate identity: legal name, registration details and status evidence.
3. Ownership: available shareholders and beneficial-ownership information.
4. Directors: identified people, roles and matching uncertainties.
5. Licences: relevant permissions, dates and verification method.
6. Financial indicators: available records, period covered and review limitations.
7. Litigation: jurisdictions searched, accessible records and unresolved matches.
8. Operational evidence: facilities, capacity and what was observed.
9. References: who responded, relationship and corroboration.
10. Adverse findings: material issues distinguished from unverified allegations.
11. Source log: record, origin, access date and relevant extract or reference.
12. Information limitations: unavailable, excluded or incomplete evidence.
13. Risk flags: significance for this transaction, with supporting rationale.
14. Recommended next checks: owner, required evidence and decision dependency.

Fictional illustration — not a real company assessment: a prospective supplier states that it can store temperature-sensitive goods. The reviewer receives a warehouse brochure but no temperature records or independent inspection evidence. The finding is “storage capability not corroborated,” not “supplier fraudulent” and not “cold-chain capacity verified.” Its significance depends on whether the proposed goods require that capability.

The next step could be to obtain current monitoring records and agree an appropriate inspection before approving temperature-sensitive orders. Record the source, date, unanswered question and responsible party. This illustrates how an evidence gap becomes an actionable condition without inventing a conclusion. Duara’s commercial verification scope should identify which of these checks and outputs are actually included in an engagement.

Frequently asked questions