M&A (Mergers and Acquisitions) Due Diligence
- Roger Pay
- 1 day ago
- 14 min read
M&A (Mergers and Acquisitions) Due Diligence
M&A (Mergers and Acquisitions) due diligence is the comprehensive, systematic appraisal conducted by a buyer to verify a target company’s financial, legal, operational, and commercial records—validating assumptions, exposing hidden liabilities, and confirming valuation before closing a deal.
Core Pillars of Investigation
Financial: Verify quality of earnings, normalized EBITDA, working capital levels, and real debt obligations.
Legal: Review corporate governance, material customer/vendor contracts, change-of-control clauses, and pending litigation.
📑 Tax: Check historical filings, unrecorded tax exposures, transfer pricing, and compliance standing.
🛒 Commercial: Analyze customer concentration, sales pipeline health, market share, and competitive positioning.
💻 IT & Tech: Inspect tech stacks, source code ownership, technical debt, and cybersecurity or data privacy vulnerabilities.
👥 HR & People: Evaluate key-person dependencies, retention risks, compensation structures, and cultural fit.
Standard Execution Phases
📌 Phase 1: Setup & Access (Days 1–5): Establish the virtual data room (VDR), assemble cross-functional advisory teams, and issue initial information requests.
📌 Phase 2: Deep Investigation (Days 5–30): Core document analysis, management Q&A sessions, expert consultations, and site or asset audits.
📌 Phase 3: Synthesis & Negotiation (Days 30–60): Finalize the findings report, quantify uncovered risks, adjust purchase price adjustments or representations and warranties in the definitive agreement.
Detailed Financial/Legal Checklist for an upcoming Transaction
Here is a comprehensive financial and legal due diligence checklist optimized for evaluating a target company during a corporate acquisition.
1. Financial Due Diligence Checklist
Financial due diligence focuses on verifying the quality of historical earnings, understanding the drivers of cash flow, and assessing the accuracy of the target's accounting policies.
Quality of Earnings & Revenue
Historical Financials: Gather audited financial statements for the past 3 to 5 years, alongside the most recent month-end management accounts.
EBITDA Adjustments: Bridge reported EBITDA to normalized/adjusted EBITDA by identifying one-time, non-recurring, or non-operating income and expenses.
Revenue Recognition: Review accounting policies for revenue recognition to ensure compliance with relevant standards (e.g., SFRS(I) 15 / IFRS 15) and check for aggressive cut-off practices.
Customer Concentration: Analyze revenue breakdown by client to identify dependencies where a single customer accounts for more than 10% of total sales.
Gross & Net Margins: Evaluate margin trends by product line, service category, or geography over the historical period.
Balance Sheet & Cash Flow Audit
Working Capital Trends: Analyze the target’s historical net working capital cycles (inventory days, debtor days, and creditor days) to determine a baseline "working capital peg" for closing.
Quality of Assets: Assess the recoverability of accounts receivable, aging reports, bad debt provisions, and physical inventory obsolescence.
Capex Requirements: Distinguish between maintenance capital expenditure and growth capital expenditure; evaluate upcoming commitments or deferred maintenance.
Debt & Contingent Liabilities: Identify all interest-bearing debt, shareholder loans, off-balance-sheet financing, performance guarantees, and letters of credit.
⚖️ 2. Legal Due Diligence Checklist
Legal due diligence aims to ensure clear ownership of assets, identify contractual restrictions that may disrupt the transaction, and quantify liability exposures.
Corporate Structure & Governance
Constitutive Documents: Examine the target company's constitution, articles of association, certificate of incorporation, and minute books of board and shareholder meetings.
Share Capital Proof: Verify the register of members, share transfer logs, share certificates, and any existing options, warrants, or rights to acquire equity.
Subsidiaries & Joint Ventures: Map the entire corporate structure, including equity ownership percentages in subsidiaries or investments in associated entities.
Material Contracts & Commercial Risk
Change-of-Control Clauses: Review major customer, vendor, and banking agreements for clauses triggered by an ownership change that require consent or allow termination.
Material Agreements: Inspect all active contracts exceeding a specified financial threshold, exclusive distribution agreements, and non-compete covenants.
Related-Party Transactions: Audit all contracts or arrangements between the target company and its directors, shareholders, or their affiliated entities.
Regulatory, Compliance & Litigation
Licenses & Permits: Confirm that all necessary regulatory licenses, environmental permits, and operational approvals are valid and up to date.
Pending & Threatened Claims: Obtain a schedule of active, pending, or threatened litigation, administrative proceedings, or government investigations.
Data Privacy Compliance: Evaluate adherence to relevant data protection frameworks (such as the PDPA or GDPR), security breach logs, and data processing procedures.
📑 3. Core Tax & Employee Benefits (Intersection Framework)
Historical Tax Returns: Review corporate income tax, GST/VAT filings, and tax clearance certificates for the open audit years (typically past 3 to 5 years).
Transfer Pricing Documentation: Evaluate cross-border transactions among group entities to ensure compliance with arms-length principles and local transfer pricing documentation rules.
Key Personnel & Employment Contracts: Audit employment terms for executive management, key-person dependency risks, and any change-of-control bonus or golden parachute provisions.
Post-Retirement & Pension Liabilities: Quantify statutory contributions (e.g., CPF or regional pension obligations) and any underfunded defined-benefit liabilities.
⚙️ Next Steps & Execution
To effectively operationalize this checklist, you should next establish a Materiality Threshold (e.g., reviewing only contracts or adjustments exceeding $50,000) to keep the deal momentum moving smoothly forward.
Would you like to focus on:
Structuring specific Net Working Capital (NWC) and purchase price adjustment mechanisms for the sales and purchase agreement (SPA)?
For advice, consult a professional. Learn more
Drafting the formal Information Request List (IRL) based on these bullet points
🗒️ Materiality Threshold & Guidelines for Submission
Scope: All requests apply to the Target Company and its subsidiaries.
Period: Please provide files for the last 3 financial years (FY2023, FY2024, FY2025) and year-to-date (YTD) 2026.
Materiality: Unless otherwise specified, the financial threshold for "material" contracts or items is S$50,000.
Format: Please upload documents to the designated Virtual Data Room (VDR) folders matching the numbering below.
Folder 1: Financial Information Request
Item ID | Category | Specific Document / Information Requested | VDR Status |
|---|---|---|---|
1.1 | Historical Financials | Audited financial statements, auditors' reports, and statutory filings for FY23, FY24, and FY25. | [ ] |
1.2 | Management Accounts | Detailed monthly management accounts for FY25 and YTD 2026 (including P&L, Balance Sheet, and Trial Balance). | [ ] |
1.3 | Revenue Audit | General ledger extract showing revenue breakdown by customer, product line, and country for the scope period. | [ ] |
1.4 | Customer Concentration | Top 10 customers by revenue for FY25 and YTD 2026, showing the percentage of total sales each represents. | [ ] |
1.5 | EBITDA Adjustments | Company’s internal schedules or calculations identifying non-recurring, one-off, or non-operating items. | [ ] |
1.6 | Working Capital | Monthly breakdown of Accounts Receivable (AR) aging, Accounts Payable (AP) aging, and Inventory schedules. | [ ] |
1.7 | Debt Schedule | Schedule of all outstanding bank loans, credit lines, shareholder loans, leases, and details of assets pledged. | [ ] |
1.8 | Capex Summary | Breakdown of actual capital expenditure for the last 3 years and the current budgeted capex plan for 2026–2027. | [ ] |
⚖️ Folder 2: Legal & Corporate Structure
Item ID | Category | Specific Document / Information Requested | VDR Status |
2.1 | Governance Documents | Certificate of Incorporation, Constitution, Articles of Association, and all amendments. | [ ] |
2.2 | Meeting Minutes | Minutes of all meetings of the Board of Directors, Board Committees, and Shareholders held since Jan 2023. | [ ] |
2.3 | Equity Register | Current register of members, cap table, and details of any options, warrants, or share incentives outstanding. | [ ] |
2.4 | Material Contracts | Copies of all customer and vendor contracts with annual values exceeding S$50,000, or multi-year terms. | [ ] |
2.5 | Change-of-Control | Highlighted clauses in contracts from item 2.4 that require third-party consent or trigger termination upon acquisition. | [ ] |
2.6 | Related Parties | Documentation for all contracts, loans, or transfers between the Target and any Director, shareholder, or affiliate. | [ ] |
2.7 | Litigation Records | A summary statement from legal counsel on any active, pending, or threatened lawsuits, claims, or arbitrations. | [ ] |
2.8 | Regulatory Licenses | Copies of all operational licenses, statutory permits, environmental certifications, and compliance logs. | [ ] |
📑 Folder 3: Tax, HR, & Operations
Item ID | Category | Specific Document / Information Requested | VDR Status |
3.1 | Tax Filings | Corporate income tax returns, GST filings, and assessment notices from IRAS (or global authorities) for open years. | [ ] |
3.2 | Transfer Pricing | Current transfer pricing policy documentation and master files for any intra-group cross-border transactions. | [ ] |
3.3 | Key Management | Employment contracts, remuneration summaries, and performance bonus structures for key executives. | [ ] |
3.4 | Benefit Liabilities | Schedules for CPF contributions, accrued annual leave provisions, and any underfunded retirement or pension schemes. | [ ] |
3.5 | Data Protection | Data protection policy, PDPA/GDPR compliance frameworks, data processing agreements, and log of security incidents. | [ ] |
➡️ Next Steps for Launch
This list can be exported directly into an Excel tracking spreadsheet.
Would you like to focus on:
Creating a formal cover letter/email draft to accompany this list to the target management team?
Setting up the process for managing Q&A sessions once the documents start flowing into the data room?
Structuring IT and Intellectual Property reviews
To evaluate the target company's technology stack and legal ownership of its intellectual assets, you must structure the IT and Intellectual Property (IP) reviews into two distinct tracks. These reviews identify hidden technical debt, security liabilities, and legal barriers that could disrupt your post-acquisition integration or diminish the deal's value.
💻 Track 1: IT & Technology Due Diligence Checklist
This track focuses on the scalability of the software architecture, the health of infrastructure, and data security standards.
Software Architecture & Technical Debt
Code Quality & Technical Debt: Conduct an automated code scan (e.g., using SonarQube) to evaluate code maintainability, bugs, and architectural complexity.
Scalability & Infrastructure: Review cloud infrastructure architecture diagrams (AWS, Azure, or GCP) to check if the systems can support a 2x to 5x increase in transaction volume.
Software Bill of Materials (SBOM): Audit all open-source software (OSS) components used in the product to verify compliance with license types.
Cybersecurity & Business Continuity
Vulnerability Management: Review the results of the target's most recent external penetration tests and vulnerability scans.
Data Privacy & Compliance: Audit data localization practices, encryption states (both at rest and in transit), and compliance with global data standards (e.g., GDPR, PCI-DSS).
Disaster Recovery (DR): Verify the target’s Business Continuity Plan (BCP) and Disaster Recovery setup, including recent backup restoration logs and Recovery Time Objectives (RTO).
⚖️ Track 2: Intellectual Property (IP) Due Diligence Checklist
This track ensures that the target company holds clear, unencumbered ownership of the technology, brands, and proprietary methods it uses to generate revenue.
Registered & Proprietary IP Asset Audit
IP Registry Search: Verify the ownership status, expiration dates, and geographic coverage of all registered patents, trademarks, copyrights, and domain names.
Chain of Title: Audit assignment records filed with patent and trademark offices to ensure clear ownership transfers from original inventors or past corporate owners. [1]
Trade Secrets: Review protocols used to safeguard unpatented proprietary knowledge, source code access controls, and manufacturing formulas.
Third-Party Dependencies & Freedom to Operate
Open-Source Risks: Identify any "copyleft" open-source licenses (e.g., GPL, AGPL) embedded in proprietary code that could legally force the company to publicize its source code.
Freedom to Operate (FTO): Assess any patent infringement risks, third-party claim letters, or ongoing disputes regarding IP boundaries.
In-Licensing Agreements: Review material software licenses, API access agreements, or third-party IP commercialization deals that the company relies on to run its product.
Employee & Contractor IP Protection
Proprietary Information and Inventions Agreements (PIIA): Confirm that 100% of current and former employees have executed valid, comprehensive IP assignment agreements.
Contractor IP Assignments: Review agreements with external software development agencies or independent contractors to guarantee all rights to built code were legally transferred to the target.
📑 IT & IP Information Request List (VDR Folder 4)
Add this technical segment directly to your primary Information Request List (IRL).
Item ID | Category | Specific Document / Information Requested | VDR Status |
4.1 | Infrastructure | High-level system architecture diagrams, deployment topologies, and cloud infrastructure cost breakdowns. | [ ] |
4.2 | Open-Source Scan | Recent Software Bill of Materials (SBOM) or Black Duck/FOSSA scan reports on the primary codebase. | [ ] |
4.3 | Cybersecurity | Last 12 months of third-party penetration test reports and documented remediation actions. | [ ] |
4.4 | IP Portfolio | Comprehensive schedule of all patents, trademarks, copyrights, and domain names (including application numbers). | [ ] |
4.5 | IP Agreements | Standard templates and executed copies of Employee PIIAs and Contractor Assignment Agreements. | [ ] |
⚙️ Next Steps & Execution Strategy
To execute this technical track efficiently, you should engage an independent technical expert or software consulting firm to run the code analysis. Relying solely on management interviews rarely uncovers deep technical debt or open-source license contamination.
Would you like to focus on:
Drafting a remediation framework for common IT/IP red flags (like missing contractor agreements or copyleft open-source code)?
Designing a plan to integrate these technical findings into the Indemnity and Warranty sections of the final acquisition contract?
How Bestar Singapore can Help M&A (Mergers and Acquisitions) due diligence
Bestar Singapore provides specialized, 360-degree M&A due diligence services to protect your transactional value, isolate hidden financial exposures, and ensure total compliance with ACRA, IRAS, and evolving cross-border regulations. As mid-market transaction volumes rise throughout the Asia-Pacific region, executing a deal without rigorous local due diligence leaves buyers exposed to severe corporate pitfalls, unrecorded liabilities, and regulatory blockades.
By partnering with a full-service corporate secretarial, accounting, and business advisory firm like Bestar, private equity firms and strategic corporate acquirers can fast-track the deal cycle from Virtual Data Room (VDR) setup to post-merger execution smoothly.
🔍 How Bestar Singapore Transforms M&A Due Diligence
┌──────────────────────────────────────────────┐
│ Bestar 360° Due Diligence Framework │
└─────────────────────┬───────────────────────┘
│
┌───────────────────────┼─────────────────────┐
▼ ▼ ▼
💰 Financial & Tax ⚖️ Legal & Corporate 💻 IT & Cybersecurity
• Quality of Earnings • ACRA Sign-Offs • Digital Assets
• IRAS Tax Audits • SIRA & FCF Compliance • PDPA Leak Assurances
1. Forensic Financial & Tax Due Diligence
A target company's standard balance sheet rarely displays the complete truth. Bestar’s corporate advisors perform deep-dive Quality of Earnings (QoE) audits to bridge reported figures with normalized EBITDA, ensuring you do not overpay for inflated revenue streams.
IRAS Tax Compliance Audits: Bestar cross-checks historical corporate tax filings, audits open Goods and Services Tax (GST) accounts, and reviews complex cross-border transfer pricing documentation.
Net Working Capital (NWC) Pegging: They analyze historical accounts receivable (AR) and payable (AP) aging parameters to formulate accurate working capital targets for definitive Sale and Purchase Agreements (SPAs).
2. Legal, Corporate Secretarial & Regulatory Safeguards
Singapore's transaction landscape is tightly bound to structural guidelines set by the Accounting and Corporate Regulatory Authority (ACRA). As a registered corporate filing expert, Bestar untangles target risk elements at the ground level:
Foreign Investment & National Security Screening: Bestar provides structural guidance regarding the Significant Investments Review Act (SIRA), verifying whether your acquisition involves entities critical to regional national security.
Employment & Fair Hiring Controls: Advisors systematically audit executive remuneration structures, key-person dependencies, and past adherence to the Fair Consideration Framework (FCF) to rule out workforce non-compliance penalties.
The "JTC Land" & Stamp Duty Traps: Bestar proactively reviews restrictive clauses regarding JTC industrial property transfers and pre-calculates the requisite 0.2% share transfer stamp duty to prevent unexpected transactional cash drains.
3. Technology, Cybersecurity & Data Privacy Audits
In modern data-driven corporate environments, target data can fast become an active liability. Bestar provides targeted IT architecture reviews to protect your intellectual property assets:
PDPA Asset Validation: Bestar examines target tracking systems to confirm the assignment of a dedicated Data Protection Officer (DPO) and reviews corporate systems against historic data breach records.
Intellectual Property Safeguards: They run precise verification checks on patents, trademark registries, and employment-linked Proprietary Information and Inventions Agreements (PIIAs) to guarantee total ownership of the underlying software assets.
Bestar M&A Due Diligence vs. Traditional Auditing Firms
Due Diligence Scope Element | Traditional Auditing Firms | Bestar Singapore Framework |
Audit Methodology | Manual sampling of historic ledgers | Advanced SMART digital workflows |
Regulatory Clearances | General global corporate guidance | Direct local oversight across ACRA, IRAS, SIRA, & FCF |
Operational Scalability | Siloed financial calculations | Consolidated financial, tax, HR, and IT auditing |
Organizational Savings | High billable hourly advisory rates | Up to 60% reduction in standard organizational costs |
Partner with a Trusted Local Corporate Advisor
Executing an asset transfer or corporate buyout requires a balanced mix of domestic operational awareness and regional transaction experience. Bestar delivers a comprehensive suite of solutions to systematically maximize shareholder value while containing legal risk:
❓ Frequently Asked M&A Due Diligence Questions (AI Overview Ready)
What is the timeline for M&A financial due diligence in Singapore?
A standard mid-market due diligence review typically runs 30 to 60 days. Setup and virtual data room initialization consume the first week, followed by 3 weeks of intensive forensic verification, management inquiries, and corporate risk adjustments.
Why should a business use a local corporate services provider like Bestar for M&A?
Local providers understand specific domestic statutory frameworks, such as IRAS transfer pricing rules, JTC land sub-letting conditions, and SIRA investment filings. Navigating these nuances successfully protects cross-border investments from unexpected delays.
What is the typical cost reduction benefit when using Bestar?
Partnering with Bestar for outsourced accounting, tax advisory, and M&A compliance can reduce overall organizational transactional budgets by up to 60% compared to traditional multinational consulting firms.
Would you like us to:
Draft a specific Information Request List (IRL) framework tailored for a Singapore SME acquisition?
Detail how Bestar can structure the Purchase Price Adjustments inside the definitive agreement?
🇸🇬 Singapore SME Acquisition: Materiality & Submission Guidelines
Scope: Applies to the Singapore Target Company, its ACRA-registered branches, and any regional subsidiaries.
Period: Please provide files for the last 3 financial years (FY23, FY24, FY25) and year-to-date (YTD) 2026.
Materiality Threshold: Unless otherwise specified, the financial threshold for "material" items is S$20,000 (adjusted lower for local SME operations).
Currency: All financial values should be presented in Singapore Dollars (SGD).
Folder 1: ACRA Governance & Share Capital
Item ID | Category | Specific Document / Information Requested | VDR Status |
|---|---|---|---|
1.1 | ACRA BizFile | Most recent ACRA Business Profile (BizFile) extract dated within the last 30 days. | [ ] |
1.2 | Constitution | Complete copy of the company's Constitution (or old Memorandum and Articles of Association). | [ ] |
1.3 | Statutory Registers | Registers of Directors, Chief Executive Officers, Secretaries, and Significant Controllers (RORC). | |
1.4 | Cap Table | Current share capital structure, including details of any unpaid/partially paid shares and treasury shares. | [ ] |
1.5 | Board Minutes | Minutes of all Annual General Meetings (AGMs) and Board of Directors meetings from 2023 to present. | [ ] |
Folder 2: Financial Performance & Revenue Quality
Item ID | Category | Specific Document / Information Requested | VDR Status |
|---|---|---|---|
2.1 | Unaudited / Audited | Audited financial statements or compilation reports filed with ACRA for FY23, FY24, and FY25. | [ ] |
2.2 | Management Accounts | Detailed monthly P&L, Balance Sheet, and Trial Balance for YTD 2026. | [ ] |
2.3 | Director Loans | Schedules of all Director's Loan Accounts showing historical drawdowns, repayments, and interest terms. | [ ] |
2.4 | Customer Concentration | Revenue breakdown for the top 5 customers, highlighting any single contract exceeding S$20,000 annually. | [ ] |
2.5 | Cash & Bank | Copies of bank statements for all corporate accounts (DBS, OCBC, UOB, etc.) for the past 6 months. | [ ] |
📑 Folder 3: IRAS Tax & Regulatory Compliance
Item ID | Category | Specific Document / Information Requested | VDR Status |
|---|---|---|---|
3.1 | Corporate Income Tax | Form C-S / Form C filings and Notice of Assessments (NOA) issued by IRAS for the last 3 Years of Assessment (YA). | [ ] |
3.2 | GST Records | Past 4 quarters of GST F5 returns and the corresponding IRAS ledger balance statement. | [ ] |
3.3 | Government Grants | Documentation for received grants (e.g., Enterprise Development Grant (EDG), Productivity Solutions Grant (PSG), or PIC schemes). | [ ] |
3.4 | Stamp Duties | Proof of stamp duty payments for any historical share transfers or material property leases. | [ ] |
👥 Folder 4: MOM Manpower & HR Commitments
Item ID | Category | Specific Document / Information Requested | VDR Status |
|---|---|---|---|
4.1 | Central Provident Fund | CPF statements and submission receipts for the last 6 months to verify statutory payment compliance. | [ ] |
4.2 | Work Passes | A list of all foreign employees holding EP, S Pass, or Work Permits, including expiry dates and MOM quotas. | [ ] |
4.3 | Key Employment Terms | Standard employment contract templates reflecting compliance with the Employment Act and Fair Consideration Framework. | [ ] |
4.4 | Accrued Leave | Current schedule of unutilized annual leave balances and corresponding financial liability estimates. | [ ] |
🏢 Folder 5: Commercial Property & Local Licenses
Item ID | Category | Specific Document / Information Requested | VDR Status |
|---|---|---|---|
5.1 | Tenancy Agreements | Lease agreements for offices, retail outlets, or warehouses (include JTC consent approvals if subleasing). | [ ] |
5.2 | Operational Licenses | Valid sectoral licenses (e.g., SFA licenses for F&B, MAS licenses, or BCA registrations). | [ ] |
5.3 | Data Privacy | Documented PDPA policies and contact details of the appointed Data Protection Officer (DPO). | [ ] |
➡️ Next Steps to Initiate the Process
This tailored list is formatted to catch specific compliance oversights typical of Singapore SMEs (such as missing RORC registers or mixed Director/Company cash accounts) before moving into final price conversations.
Would you like us to:
Provide a Q&A Tracker template to coordinate queries between your deal team and the SME owners?
Draft specific Warranty clauses for the SPA to address typical SME risks like unfiled GST or incorrect CPF payments?
Ready to Execute Your Singapore M&A Transaction Safely?
Don't let hidden liabilities, unfiled GST records, or outdated ACRA registers derail your corporate acquisition. Partner with Bestar Singapore to secure your deal value, fast-track your Virtual Data Room audits, and ensure 100% compliance with local statutory regulations.
Take the Next Step with Bestar
📞 Call the M&A Advisory Desk: +65 6299 4730
🌐 Book an Expert Consultation: Visit Bestar Services
📍 Meet Our Corporate Advisors: 23 New Industrial Rd, #04-08, Singapore 536209
Choose Your Immediate Toolkit
Let me know which asset you need right now to keep your transaction moving forward:
A downloadable Excel Q&A Tracker template to manage information flow with the target SME.
A formal Letter of Intent (LOI) / Term Sheet template containing standard Singapore exclusivity clauses.
For financial advice, consult a professional. Learn more
Comments