Module 1 · Chapter 1

What Due Diligence Is For

Before a buyer signs a contract to pay €42 million for a company, somebody has to find out what is actually inside it. This chapter explains why that job exists, what it can and cannot achieve, and the four things a buyer can do with anything it finds — price it, fix it, cover it, or walk away.

≈ 17 min read 10-question test No prior knowledge assumed

1.1Buyer beware — literally

Start with a fact about English law that surprises almost everyone: when you buy the shares of a private company, the seller generally has no duty to tell you what is wrong with it. The old rule of caveat emptor — “let the buyer beware” — still does most of the work. If the seller stays silent and you fail to ask, silence is usually not misrepresentation, and the law will not imply promises about the state of the business into a share sale. You bought the shares; the shares were exactly as described; the fact that the company behind them owed a regulator an apology and a remediation programme is, on first principles, your problem.

Buyers respond to this rule with a two-part defence, and the two parts of this defence are the two halves of every private M&A deal:

The two halves are not alternatives; they are designed around each other. What diligence finds shapes what the contract says — and what the contract says only works properly when diligence has done its job (Chapter 12).

Key point

Due diligence exists because English law makes buying a company an eyes-open exercise. The seller need not volunteer bad news; protection comes from what you found and what you negotiated, not from any general duty of fairness. Investigation first, contract second — a warranty is your remedy for what you could not find, not an excuse for not looking.

1.2The four doors: price it, fix it, cover it — or walk away

Diligence is not an academic exercise in describing a company. It is a decision machine. Every finding — every discovered fact that matters — leaves through one of four doors:

A finding a fact that matters PRICE IT reduce the price or treat it as leakage FIX IT cure before signing or completion COVER IT warranty, indemnity, condition ACCEPT — OR WALK take the risk with open eyes, or leave EVERY FINDING LEAVES THROUGH ONE DOOR — NONE MAY BE LEFT IN THE HALLWAY
The four possible responses to a diligence finding. The one wrong answer is a finding that is reported and then goes nowhere.

Watch the doors in action on our case study. In the spring of 2026 Atlas Payments Group plc, a London payments group, investigated Solaris Digital Assets Europe Ltd, an Irish crypto-asset service provider supervised by the Central Bank of Ireland. Atlas then agreed to buy it for €42 million in a transaction codenamed Project Sunrise. (The sale agreement that followed is the subject of our M&A course; you do not need it here.) The diligence report its lawyers produced is on this site in full: the Sunrise DD report. Its findings went through all four doors:

FindingDoorWhat happened
Change-of-control bonuses of €350,000 payable to two senior employeesPrice itQuantified, disclosed, and priced into the locked box negotiation (the fixed-price mechanism our M&A course explains) — report §6.2
One former contractor never signed an IP assignment for code still in productionFix itConfirmatory assignment recommended before signing — report §7.2
A regulator's letter about historic anti-money-laundering (AML) monitoring failuresCover itA specific indemnity from the seller, capped at €8m — report §5.1
Customer concentration: five customers = 62% of revenueAccept itUnderstood, priced into the model, accepted with open eyes — report §4.2

Nobody walked away from Sunrise — but buyers do, and a diligence exercise that ends in a polite “no” has succeeded, not failed. The cheapest bad deal is the one you never signed.

1.3What due diligence is not

Juniors sometimes arrive imagining DD as a guarantee that nothing is wrong. Adjust that now, because the limits define the job:

Pitfall

“The seller confirmed it in Q&A, so we can rely on it.” Careful. A Q&A answer is a statement by the seller's team, often drafted quickly, rarely warranted, and sometimes wrong. The Sunrise team discovered as much. The answer “No material correspondence” was quietly supplemented five days after the letter from the Central Bank of Ireland (the CBI) surfaced in the data room (report Appendix B, Q-087). Answers guide the review; they do not replace it. What matters at the end is what the documents show and what the SPA says.

1.4Whose diligence? The workstreams and the variants

“Due diligence” on a live deal is really several parallel investigations, run by different professionals who must talk to each other:

Two variants you will meet by name. Buyer due diligence is the default: the buyer's advisers investigate for the buyer. Vendor due diligence (VDD) flips it: the seller commissions a report on its own company, typically to run a smooth auction. Bidders read the VDD report instead of each running a full review, and the report's authors owe a duty of care to the eventual buyer. And inside the buyer, “the client” includes an in-house legal team: on many deals in-house lawyers run diligence themselves, scope it, or review the external report. Everything in this course applies to them too.

1.5Where diligence sits in the deal

Diligence is the bridge between agreeing a deal in principle and signing it for real. The Sunrise timeline, which this course follows throughout:

NDA 12 Feb 2026 Data room opens 14 Apr 2026 SIGNING 14 Jul 2026 Heads of terms 3 Apr 2026 DD report 26 Jun 2026 Completion after CBI approval the diligence window — ten weeks FINDINGS FLOW FORWARD INTO THE SPA
Diligence lives between the heads of terms and signing, and its findings flow into the SPA — the price, the warranties, the indemnities and the conditions.

Three things about that picture. First, by the time the data room opens the parties have usually signed a confidentiality agreement (NDA) and non-binding heads of terms recording the intended price. So diligence tests a deal already sketched, and its findings ask whether the sketch survives contact with the facts. Second, the window is finite: sellers will not run an open-ended examination, so scoping (Chapter 3) is about spending limited hours where the risk is. Third, the report lands before signing for a reason — every recommendation in it is only usable while the buyer still holds its pen.

1.6What a red-flag report looks like

The Sunrise report is a red-flag report: it reports only what could affect the price, require protection, require action, or delay the deal — not everything reviewed. The alternative, a full-scope report that describes each area in detail, still exists (lenders and regulators sometimes want it), but the red-flag format dominates private M&A because deal teams want decisions, not description. Here is how the Sunrise report summarised itself:

Report §1.2Overall view
The Group is in substantially good legal order for a business of its age and stage. Title to the shares is clean, the corporate records are well kept, and the Target's regulatory authorisation is in good standing. Two findings are rated high and drove changes to the transaction structure…
Read in the DD Report →

Notice the shape of that paragraph, because it is the shape of the whole discipline: an overall judgement first, the exceptions ranked by severity, and every exception tied to a consequence for the transaction. The report's ratings — HIGH, MEDIUM, LOW, CONDITION — are defined in its Appendix C, and Chapter 12 teaches you to write findings that earn them. One more habit to copy from professionals: the report also says what it did not find (§12.2) — a catalogue of problems is only meaningful against the reassurance that the other 1,200 documents were fine.

The find

One document dominates this course's story. On 28 May 2026, six weeks into the review, a letter from the Central Bank of Ireland appeared in the data room at reference 7.4.1. It disclosed historic failures in Solaris's anti-money-laundering transaction monitoring and a live remediation programme. It was spotted in a second-pass review of the compliance folder, and it re-priced the risk of the whole deal. It left through the cover it door: a specific indemnity of up to €8 million that you can read in the SPA at clause 10.2. The full story — how it was found, why the Q&A missed it, and what the regulator's letter meant — runs through Chapters 4 and 8.

1.7Why this is a junior lawyer's course

Here is the open secret of due diligence: it is the part of a deal where the most junior lawyers do the most consequential work. Partners scope the exercise and sign the report. But somebody has to actually read folder 7, keep the issue log honest, chase Q&A answers that do not quite answer, re-triage the late uploads and notice that document 7.4.1 is not routine correspondence. That person is usually in their first years of practice. On Sunrise, the letter that reshaped a €42 million deal was found because somebody did a second pass of a folder everyone else considered finished (report Appendix A). The same is true in-house: a buyer's own legal team may run the whole review. None of this work is glamorous; all of it is the deal. This course teaches you to do it properly — and to understand, every time you record a finding, which of the four doors you are steering it towards.

Ready? Test yourself, then meet the people around the table — the deal team, the advisers and the engagement terms that frame the whole exercise — in Chapter 2.