Due Diligence in India: Financial, Legal, Commercial, and Promoter Checks That Matter

Due diligence is the structured process through which a buyer, investor, or lender independently verifies the information presented by a target company before committing capital. In India, the term is widely used but often narrowly understood. Many founders believe due diligence means sharing three years of audited financials and an MCA extract. Many PE investors have seen the inside of a transaction and know it is far more complex.

In an Indian M&A or private equity context, due diligence is not a box-ticking formality. It is the foundation on which deal pricing, representations and warranties, indemnity clauses, and post-closing integration are built. A well-executed diligence process protects the acquirer from contingent liabilities, helps a seller command a better valuation by demonstrating quality, and gives both sides a common factual basis for negotiation.

The regulatory landscape in India makes this particularly important. The Companies Act 2013, the SEBI (Substantial Acquisition of Shares and Takeovers) Regulations 2011, the Foreign Exchange Management Act 1999, and the Income-tax Act 1961 all create compliance obligations that may be invisible on the surface but become significant when a change in ownership is contemplated. Unresolved liabilities do not disappear on closing. They transfer.

This article is written for Indian founders preparing for fundraising or an exit, CFOs who will sit across from a diligence team, and PE or VC investors who want a structured framework for what to review and why. It covers all major workstreams, tells you what the diligence team is actually looking for inside each one, and explains where Indian SME and mid-market deals most commonly go wrong.

Due diligence is not one exercise. It is a family of parallel workstreams conducted simultaneously by different specialists. Understanding the map before entering the room saves time, money, and confusion.

The primary workstreams in an Indian deal are: financial due diligence, legal due diligence, tax due diligence, commercial due diligence, operational due diligence, technical or IT due diligence, human resources and management due diligence, and environmental and regulatory compliance due diligence. In smaller transactions, several of these are collapsed into fewer workstreams, but none are truly optional. Each one can surface a deal-breaking issue.

In a mid-market Indian transaction, financial, legal, and tax DD run concurrently and produce separate reports that are then consolidated into a single findings matrix by the transaction advisor. Commercial DD is often run separately and earlier, to confirm the investment thesis before the data room opens. Operational and HR DD are sometimes compressed into the legal or financial exercise in smaller deals.

The scope of each workstream is governed by a due diligence checklist shared with the target at the start of the process. The quality of the checklist reflects the experience of the diligence team. A weak checklist means the process is incomplete, and incomplete diligence is not protected diligence.

Financial due diligence is the anchor workstream. Its purpose is not to reproduce the audit — the statutory audit already exists. Its purpose is to assess the quality, sustainability, and predictability of the earnings and the balance sheet, and to identify adjustments that should affect enterprise value or deal structure.

The most important concept in financial DD is quality of earnings, often abbreviated as QoE. The question is simple: of the EBITDA or profit reported by the company, how much is real, recurring, and supported by cash? Indian SME financials routinely contain revenue that was pulled forward, costs that were deferred, one-off items that recur every year, and accounting choices that are technically compliant but economically misleading.

Common financial DD findings in Indian deals include revenue recognition that does not match delivery milestones, customer advances treated as revenue before the obligation is fulfilled, inventory valued at cost despite obsolescence, related-party transactions that inflate revenue or depress costs, depreciation policies that understate asset wear, and working-capital swings that reflect management timing rather than business performance.

The financial DD team will also normalise EBITDA by adding back non-recurring charges and adjusting for below-market owner compensation, related-party rent or service fees, and personal expenses charged to the company. This normalised EBITDA becomes the basis for the final enterprise value calculation.

One area that deserves special attention in Indian deals is off-balance-sheet exposure. This includes guarantees given on behalf of promoter group entities, undisclosed borrowings from money lenders or bill discounting facilities, and letters of credit that are contingent but not reflected in the accounts. These exposures do not appear in the statutory audit unless they are captured in the notes to accounts, and even then they may be disclosed at a level that obscures their true character.

Legal due diligence in India covers corporate structure, ownership, contracts, intellectual property, litigation, real estate, and regulatory approvals. In an Indian context, the legal workstream is often the most time-consuming because documentation standards across Indian SMEs vary dramatically, and many older companies carry structural issues that accumulated before management understood the implications.

The starting point is corporate structure. The diligence team reviews the MCA filings for the target company under the Companies Act 2013 — incorporation certificate, memorandum and articles of association, all annual returns, financial statements filed with the Registrar of Companies, board and shareholder resolutions, and the current shareholding pattern. This establishes who actually owns what, whether the stated shareholding matches the beneficial ownership, and whether all changes in capital or ownership were properly documented and filed.

Shares held by promoters are examined for restrictions. If any promoter shares are pledged to a lender, this is captured through filings with the depository participants and reported in the shareholding pattern. Undisclosed pledges on private company shares can be harder to detect and require direct confirmation from lenders. In family-owned businesses, the diligence team also looks for shares held in the name of relatives without proper documentation of how those shares were acquired or whether they belong to the company in an economic sense.

The SEBI (Substantial Acquisition of Shares and Takeovers) Regulations 2011 become relevant when the target is a listed company or when the acquisition will trigger public announcement obligations. Even in unlisted transactions, SEBI's insider trading regulations and the general framework for related-party transactions under SEBI's Listing Obligations and Disclosure Requirements Regulations create standards that are often used as a reference benchmark by sophisticated buyers.

Material contracts are reviewed in full. This includes customer contracts, supplier agreements, distributor and dealer agreements, technology licences, joint venture agreements, and any exclusivity or non-compete arrangements. The key questions are: do these contracts survive a change in ownership? Are there change-of-control clauses that allow counterparties to terminate or renegotiate? Are any contracts verbal rather than written? Are there side letters that modify the formal terms?

Litigation is one of the most sensitive areas. Indian companies often carry a portfolio of tax disputes, labour disputes, consumer complaints, regulatory show-cause notices, and commercial arbitrations. Not all of these are material, but the aggregate picture matters. The diligence team categorises litigation by type, quantum at risk, stage of proceedings, and probability of adverse outcome. Provisions in the accounts for litigation are compared against the actual risk identified.

Real estate title is examined whenever the target owns land or buildings. This is an area of particular sensitivity in India because title chains are often incomplete, encumbrances may not be reflected in public records, and conversion from agricultural to commercial or industrial use may be incomplete or challenged. Even leased premises require review: is the lease registered? Is it in the company's name? Can it be transferred?

Tax due diligence in India is a workstream in its own right, not a subset of financial DD. The Indian tax environment is complex and multi-layered. A company operating for ten or fifteen years will typically carry open assessment years, pending demands, show-cause notices, TDS mismatches, and GST reconciliation gaps that can individually appear manageable but collectively create a material contingent liability.

Under the Income-tax Act 1961, the key areas reviewed are: assessment status for all open years, pending demands and appeals, TDS compliance across all payment categories, deemed dividend under section 2(22)(e) arising from loans or advances to shareholders or related entities, disallowances of business expenditure that may be upheld in future assessments, capital gains characterisation disputes, and brought-forward losses and their eligibility for carry-forward post the acquisition.

Deemed dividend is a particularly common issue in Indian SME deals. Section 2(22)(e) of the Income-tax Act deems as dividend any loan or advance given by a closely held company to a shareholder who holds 10% or more of the voting power, or to any concern in which such a shareholder has a substantial interest, to the extent the company has accumulated profits. These amounts are taxable as dividend in the hands of the shareholder. When a buyer reviews a company and finds that the promoter has been drawing significant loans from the company, the tax implications can be significant.

GST compliance is reviewed through GSTR-2A and GSTR-3B reconciliation, classification disputes, input tax credit reversals, export refund status, and e-way bill compliance. Many Indian companies carry ITC that was claimed but is now in dispute, or have taken credit on purchases from vendors who subsequently defaulted on their own GST filings. These mismatches surface in assessments and can result in demands with interest and penalties.

Transfer pricing is relevant when the target has related-party transactions with overseas affiliates. Under sections 92 to 92F of the Income-tax Act, international transactions and certain domestic transactions between related parties must be at arm's length. Transfer pricing adjustments are a common source of tax demands in India, particularly in sectors like IT services, pharmaceuticals, and manufacturing. The diligence team reviews whether the company has maintained contemporaneous documentation, whether its pricing methodology is defensible, and what the quantum of open transfer pricing exposures is.

Commercial due diligence answers the question that financial DD cannot: is this business positioned to sustain and grow its earnings going forward? Financial DD looks backward at what happened. Commercial DD looks forward at whether the story holds.

The core of commercial DD is understanding the addressable market, the company's competitive position within it, the durability of customer relationships, and the sustainability of pricing. In an Indian mid-market context, this often reveals significant concentration risk that the management presentation does not emphasise. A company reporting 30% revenue growth may be growing because of one customer who represents 60% of the revenue base. That is a fundamentally different risk than 30% growth spread across a diversified customer base.

Customer concentration is examined through a Pareto analysis. The top 10 customers are reviewed individually: contract terms, contract duration, exclusivity provisions, switching costs, historical spend trajectory, and credit quality. In B2B services businesses, a buyer will also conduct reference calls with key customers where possible, to independently validate satisfaction, renewal likelihood, and pricing sustainability.

Operational due diligence goes deeper into the mechanics of how the company delivers its product or service. For a manufacturing business, this means reviewing capacity utilisation, maintenance standards, raw material sourcing, vendor concentration, and the gap between installed capacity and the capex required to achieve management's revenue projections. For a services business, it means understanding utilisation rates, headcount ramp-up costs, and process maturity.

The diligence team also reviews management's revenue projections against historical performance. In India, management projections for fundraising rounds often assume growth rates that have no basis in past performance or market dynamics. The commercial DD exercise stress-tests these projections against the identified market size, competitive dynamics, and customer interview findings.

Promoter background checks are not optional in Indian deals. The Indian corporate ecosystem has a long history of transactions where the promoter's undisclosed background — criminal proceedings, directorship in failed or blacklisted companies, exposure to regulatory action — created post-closing problems for investors. Sophisticated PE funds in India now treat promoter background checks as a prerequisite, not an afterthought.

The check covers several dimensions. The first is litigation and criminal records. This means searching court records at the High Court and district court level, reviewing National Company Law Tribunal and Debt Recovery Tribunal records, and checking for any proceedings under the Prevention of Money Laundering Act 2002, the Insolvency and Bankruptcy Code 2016, or the Companies Act 2013. It also means reviewing whether the promoter or any connected entity appears on the SEBI enforcement database, the Reserve Bank of India's willful defaulter list, or the CIBIL commercial bureau database.

The second is directorship history. MCA21 maintains a Director Identification Number database that records every company in which a person has been or is currently a director. This allows the diligence team to map the promoter's full corporate history, identify associated entities, and check whether any of those entities carry penalties, defaults, or strike-off orders. A promoter who has been a director in twenty companies, of which ten have been struck off by the Registrar of Companies, tells a very different story than one whose directorship history is clean and focused.

Related-party transactions are the other major promoter concern. In closely held Indian companies, it is common for the promoter family to transact with the company in multiple ways: rent payments for premises owned by the promoter or family trust, professional fees paid to family members or their firms, inter-company loans to group entities, purchases from or sales to promoter-linked suppliers, and corporate guarantees given in favour of promoter personal borrowings.

None of these are automatically problematic. But each one needs to be understood in terms of whether the pricing was at arm's length, whether the transactions were disclosed and approved as required under the Companies Act 2013, and whether the net economic effect was to transfer value out of the target company and into the promoter's personal estate at the expense of other shareholders.

Section 188 of the Companies Act 2013 requires shareholder approval for related-party transactions above certain thresholds. For listed companies, SEBI's related-party transaction regulations under the LODR framework impose additional requirements, including audit committee approval and independent director scrutiny. Many Indian SMEs have not complied with these requirements, which creates compliance risk that the diligence team must quantify.

Statutory compliance is not a glamorous part of due diligence, but it is one of the most consequential. Indian companies operate under a dense web of central and state regulations, and non-compliance in any one of them can create liability that either survives the transaction or becomes a post-closing indemnity claim.

Under the Foreign Exchange Management Act 1999, the diligence team reviews the target's compliance with all inbound and outbound foreign investment regulations. This includes whether foreign direct investment was received with proper documentation and at the correct valuation, whether the required filings with the Reserve Bank of India — including the FC-GPR, FC-TRS, and downstream investment declarations — were made within stipulated timelines, whether the pricing of any overseas transactions was in compliance with FEMA's arm's-length requirements, and whether external commercial borrowings were structured and reported correctly.

FEMA violations in Indian deals are more common than most sellers realise. A company that received FDI five years ago may have filed the FC-GPR late, issued shares at a price that was not properly supported by a valuation report, or failed to report downstream investment into a subsidiary. These violations do not affect the underlying business, but they create compounding penalties and a regulatory approval burden that can delay closing or require pre-closing remediation.

Labour and employment compliance covers provident fund, employee state insurance, professional tax, gratuity provisioning, shops and establishments registration, and contract labour compliance. In manufacturing businesses, factory licences, pollution consent from State Pollution Control Boards, fire NOC, and building approvals are also reviewed. Many Indian MSMEs are chronically under-compliant with these requirements and have never faced scrutiny simply because they have not been inspected. When a transaction brings regulatory attention, these gaps surface quickly.

Sector-specific licences are reviewed in detail. A financial services company must have the right SEBI, RBI, or IRDAI registrations. A pharmaceutical company must have valid drug licences under the Drugs and Cosmetics Act. A telecom company must have the correct DOT licences. A school or educational institution must have the right NCTE or university affiliation. When licences are missing, expired, or held in the name of a promoter rather than the company, the buyer faces the risk that the business cannot legally continue operating without remediation.

Buyer-side due diligence and vendor due diligence are structurally the same exercise but serve different purposes and operate under different incentive structures.

Buyer-side due diligence is commissioned and controlled by the acquirer or investor. The diligence team's mandate is to find problems, quantify exposures, and give the buyer the information needed to adjust pricing, restructure the deal, require representations and warranties, or walk away. The findings are not shared with the seller unless there is a specific negotiating purpose in doing so. The buyer-side report is a confidential document that becomes the basis for internal investment committee approval.

Vendor due diligence, also called a sell-side or vendor DD, is commissioned by the seller before going to market. The seller appoints an independent advisor to conduct the same exercise that a buyer would conduct, with the explicit intention of making the report available to prospective buyers. The logic is that a pre-prepared, credible report reduces the time and cost of buyer-side DD, narrows the information asymmetry between seller and buyer, allows the seller to identify and remediate issues before they affect price, and reduces deal uncertainty by providing a common factual baseline.

Vendor DD is more common in competitive auction processes managed by investment banks, where multiple bidders are reviewing the same company simultaneously. In bilateral deals or early-stage PE investments, buyer-side DD is the norm.

The key risk with vendor DD is the reliance question. A buyer who receives a vendor DD report commissioned by the seller will typically want to place reliance on that report, which requires the advisors who prepared it to enter into a reliance letter with the buyer. This creates professional liability for the advisor and is not always straightforward to negotiate.

For Indian sellers, vendor DD has a secondary benefit: it forces a process of internal discovery that often reveals problems the management was unaware of or had not quantified. Discovering those problems before a buyer does gives the seller time to remediate, rather than receiving a purchase price adjustment demand in the middle of exclusivity.

Indian SME and mid-market deals have a specific set of red flags that experienced diligence teams have learned to expect. Understanding these in advance helps sellers remediate before the process begins and helps buyers know where to focus.

The single most common red flag is a gap between reported profits and cash in the bank. A business reporting strong EBITDA for three consecutive years that consistently has minimal cash, high working capital, and increasing borrowings is displaying a pattern that almost always has an explanation — and the explanation is rarely flattering. It may mean that profits are partially fictional, that cash is being extracted through related-party transactions, or that the business is consuming more capital than the accounting shows.

The second common red flag is customer concentration combined with related-party customers. A company that derives 70% of its revenue from three customers, one of which is a company linked to the promoter, is not a growth business with a concentrated customer base. It is a business where the promoter is manufacturing revenue by transacting with himself.

Undisclosed borrowings appear frequently in Indian mid-market deals. These include loans from money lenders, informal chit fund borrowings, loans from family members or group entities that do not appear in the formal accounts, and bill discounting or invoice financing facilities that are off the main banking relationship. These borrowings often carry high interest rates, have informal documentation, and may be secured by personal guarantees or asset pledges that the company is not aware of.

Litigation that is not in the accounts is another common issue. Many Indian business owners classify pending litigation as remote or theoretical and do not disclose it, either because they believe they will win or because disclosure feels like admitting weakness. A diligence team that searches court records independently will often find cases that the management had not mentioned.

A typical due diligence exercise in an Indian mid-market deal runs from four to twelve weeks, depending on the size and complexity of the target, the quality of the data room, and the number of workstreams running in parallel. A clean, well-prepared company with a competent management team and an organised data room can be diligenced in four to six weeks. A company with poor records, multiple subsidiaries, complex related-party structures, and pending litigation can take three months or more.

The cost of due diligence varies by the scope engaged and the calibre of advisors. For a mid-market Indian transaction in the INR 50 crore to INR 500 crore enterprise value range, a buyer-side DD engagement covering financial, legal, and tax workstreams from a reputable advisory firm would typically cost between INR 25 lakh and INR 75 lakh, depending on scope, firm, and complexity. Adding commercial DD with market research and customer interviews adds another INR 15 to 30 lakh. Technical DD, HR DD, and environmental DD are additional.

For sellers contemplating vendor DD, the cost is comparable but is typically viewed as an investment that narrows bid spreads, accelerates the process, and reduces the risk of price chips during exclusivity.

The due diligence team on the buyer side typically includes: a transaction services partner and team from a CA firm for financial and tax DD; a partner and team from an M&A law firm for legal DD; and a sector specialist or strategy consultant for commercial DD. On the seller side, the same disciplines are engaged but the mandate is different — prepare, not just review.

Preparation for due diligence as a seller is one of the highest-value activities a management team can undertake before entering a transaction process. It reduces deal timeline, improves price discovery, gives the seller more control over how findings are framed, and prevents the embarrassment of discoverable problems coming out at the worst possible moment.

The first step is a self-diligence exercise. Before approaching any investor or buyer, the company should conduct an internal review across financial, legal, tax, and compliance dimensions — ideally with an external advisor who can assess objectively. The purpose is to find what a buyer would find, so that the seller can either remediate the issue or prepare a clear and credible explanation.

Remediation takes time. If the statutory filings with RBI under FEMA are incomplete, they need to be filed with compounding applications where timelines have been missed. If the related-party transaction approvals under section 188 of the Companies Act are missing, retrospective approvals need to be obtained where possible. If audit qualifications exist, the underlying issues need to be resolved or at least addressed in a structured way. None of these things can be done in a week.

The data room should be organised before the process begins, not assembled in response to buyer queries. A well-structured data room sends a signal about the quality of the management team. A chaotic data room where documents are mislabelled, incomplete, or contradictory sends the opposite signal.

The following categories should be complete and current before the data room opens: incorporation documents, all RoC filings for the last five years, audited financial statements for the last five years, tax returns and assessment orders, GST returns and reconciliation, material contracts with key customers and suppliers, employment contracts for senior management, ESOP scheme and grant records, IP registrations and licences, real estate documents, insurance policies, regulatory licences, board and shareholder resolutions for all significant decisions, and a schedule of all litigation and regulatory proceedings.

Promoter disclosure is also a seller-side preparation task. Promoters who have related-party transactions with the company should prepare a clear and complete schedule of those transactions, including pricing rationale and board approvals. Undisclosed borrowings that the company has given or received should be surfaced and documented. A promoter who surprises a buyer with information that should have been disclosed upfront has damaged trust in a way that is difficult to recover.

Most due diligence failures fall into one of five categories. Understanding them helps both buyers and sellers avoid the patterns that most commonly derail transactions.

The first is scope inadequacy. A diligence team that reviews financial statements without looking at bank statements, that reviews contracts without checking whether they contain change-of-control clauses, or that accepts management representations without independent verification has conducted an incomplete exercise. The buyer may have paid for due diligence and received the appearance of it rather than the substance.

The second is data room quality failure. When the seller provides incomplete, inconsistent, or poorly organised information, the buyer's diligence team spends most of its time chasing documents rather than analysing them. This creates pressure to conclude the exercise before all material information has been reviewed. Conclusions drawn from incomplete information are unreliable, and the buyer bears the risk.

The third is timeline compression. Deals often run on artificial timelines created by competitive pressure, board approval deadlines, or year-end financial constraints. When the timeline is compressed, the diligence workstreams are forced to prioritise, and less prominent issues may not receive the attention they deserve. The most commonly missed issues in compressed timelines are tax contingencies, labour compliance, environmental licences, and FEMA filings — none of which are dramatic enough to attract priority attention but all of which can become significant post-closing.

The fourth is over-reliance on management representations. In any transaction, the management team is motivated to present the company in the best possible light. A diligence team that accepts representations without independent verification is not conducting due diligence. It is conducting an interview. The value of DD comes from the independence of the finding, not from the quality of the explanation.

The fifth is failure to reflect findings in deal terms. The best diligence process in the world has no value if the findings are not used to adjust price, restructure the deal, require representations and warranties, or negotiate indemnity clauses. Diligence findings are inputs to the negotiation, not conclusions that sit in a report and are forgotten. Buyers who conduct thorough DD and then do not use the findings have wasted their time and money.

Post-closing surprises in Indian deals most commonly involve undisclosed tax demands that become payable after the assessment is finalised, related-party transactions that were not disclosed and cannot be reversed, regulatory non-compliance that attracts scrutiny after the change of ownership draws attention, and key employee departures that were anticipated by management but not disclosed. These are not random events. They are predictable consequences of inadequate diligence or inadequate deal structuring.