The Due Diligence Report: What It Is and How to Read It (2026)

Due Diligence Report Structure, Red Flags & Deal Terms
Due Diligence · CFOmatrix Series
AS
Ankit Sarawagi|Founder, CFOmatrix·June 2026·13 min read
Near the end of every diligence process, the investor’s or acquirer’s advisers produce a due diligence report: the document that decides whether the deal happens, at what price, and on what terms. Most founders never see the full report, yet its findings land directly on them as price cuts, indemnities and escrow. This guide explains, in plain English, what a due diligence report is, who prepares it, how a financial, tax and legal DD report is structured, the crucial difference between a red flag and a deal-breaker, how findings turn into deal terms, and how to respond so the findings do not quietly cost you the deal.
✍ Key Takeaways
  • A due diligence (DD) report records what the buyer’s advisers found in your records and translates it into risks, recommendations and deal terms. It belongs to the buyer, not to you.
  • There are usually three separate reports: financial (Big 4 or accounting firm), tax (same firm), and legal (a law firm). Larger deals add commercial, technology and HR reports.
  • Every report follows the same shape: executive summary, scope, key findings, red flags / deal issues, and recommendations. Read the executive summary and the red flags first.
  • A red flag can be priced or papered around; a deal-breaker cannot. Most findings are red flags.
  • Findings turn into price adjustments, indemnities, escrow or holdback, conditions precedent and specific indemnities, all negotiated in the SSA and SHA.
3 reports Core DD reports on most deals: financial, tax and legal 5 sections Summary, scope, findings, red flags, recommendations 5 levers Ways findings hit the deal: price, indemnity, escrow, CP, specific indemnity
One Example Throughout

To keep this concrete we will follow one company: Brewly, a D2C coffee brand raising a ₹40 crore Series B from a growth fund. The fund has appointed a Big 4 firm for financial and tax due diligence and a law firm for legal. We will use Brewly’s DD report to show how each finding is graded and how it lands in the final deal.

What a Due Diligence Report Actually Is

A due diligence report is a written document, prepared by the buyer’s or investor’s advisers, that records what they found when they examined a company’s finance, tax, legal and other records before a deal, and tells the buyer what risks they would be taking on. In an M&A or investment process it is the bridge between investigation and decision: the data room (VDR = virtual data room) holds the documents, the DD report says what those documents mean for the deal.

The report has one practical job: to convert a pile of contracts, ledgers and filings into a short list of risks the buyer needs to price, fix or protect against. It does not just describe the company. It grades problems, quantifies exposures in money terms where it can, and recommends what the buyer should do about each one, from cutting the price to walking away.

Crucially, the report is the buyer’s tool, not yours. It is commissioned by, addressed to, and owned by the investor or acquirer. It almost always carries a reliance restriction saying that no one other than the addressee can rely on it. As a founder you will rarely read the document itself, but you will feel every conclusion in it.

📋 Note

In India a financial DD report is often called a QoE report (QoE = quality of earnings), because its central question is how much of the reported profit is real, recurring and clean. The same idea, “what is the true, sustainable number,” runs through every section of every DD report.

Who Prepares the Due Diligence Report

The buyer or investor appoints and pays the advisers, which is exactly why the report is theirs. Different streams of diligence are handled by different specialists, so a deal of any size produces several reports, not one.

  • Financial and tax due diligence: usually a Big 4 firm (Deloitte, PwC, EY, KPMG) or an independent chartered accountant or accounting firm. They produce the financial DD / QoE report and, often as a separate workstream, the tax DD report.
  • Legal due diligence: a law firm. They review corporate records, contracts, litigation, intellectual property, employment and regulatory compliance and produce the legal DD report.
  • Specialist streams (larger deals): commercial / market DD (a strategy firm), technology DD, HR and people DD, and, for asset-heavy or regulated businesses, environmental and regulatory DD.

There is also a version you commission yourself. Vendor due diligence (VDD) is a DD report prepared on the seller’s side, before the buyer starts, so the seller can find and fix problems first and run a faster, cleaner process. For Brewly, running a light vendor DD before opening the data room would have surfaced its TDS and ESOP issues months earlier, on its own terms.

ReportWho prepares itCore question
Financial (QoE)Big 4 / accounting firmIs the profit, cash and working capital real?
TaxBig 4 / accounting firmWhat unpaid or contingent tax could surface later?
LegalLaw firmDoes the company own what it claims, free of disputes?
Commercial / Tech / HRSpecialist advisersIs the market, product and team as strong as claimed?
📈 CFO Lens

The single best predictor of a clean DD report is how clean your data room was on day one. Use the free DD checklists in our master due diligence checklist post (Finance, Tax and Legal, for India, the US and the UAE) to assemble and pressure-test your own records before any adviser opens them. Most red flags are not fraud, they are missing documents and unexplained numbers.

The Structure of a DD Report: How to Read It

Almost every due diligence report, whatever the stream, follows the same five-part structure. Once you know the shape, you can read any report fast: start at the top, then jump straight to the red flags.

1

Executive summary

The first two or three pages, and the only part many investment committees read in full. It states the headline conclusion, the most important findings, and whether the adviser thinks the deal should proceed, proceed with conditions, or not proceed. If you ever see one section of the report, ask for this one.

2

Scope and basis

What the advisers were asked to look at, the period covered, the documents relied on, and what they did not review. This section also carries the limitations and reliance restrictions. It matters more than founders think: a finding outside scope is not the adviser’s fault, and a narrow scope can leave real risks unexamined.

3

Key findings

The detailed, area-by-area observations: revenue analysis, margins, working capital and debt for financial DD; tax positions and exposures for tax DD; contracts, litigation and compliance for legal DD. Each finding typically states what was found, the evidence, the potential impact, and a grading (high / medium / low, or a similar scale).

4

Red flags and deal issues

The findings that actually affect the deal, pulled out and ranked. This is where a high-rated finding becomes a “deal issue” with a money number attached and a suggested treatment. As a founder, this is the section that determines your price and your indemnities, so it is the one to fight over.

5

Recommendations

What the adviser suggests the buyer do about each issue: adjust the price, take a specific indemnity, hold money in escrow, make the fix a condition precedent, or in rare cases reconsider the deal. The recommendations are a menu, not a verdict. The buyer’s deal team decides which to use and how hard to push.

Financial vs Tax vs Legal DD Reports

The three core reports answer different questions and surface different risks. They overlap (a tax provision shows up in both financial and tax DD), but each has its own focus and its own typical findings. Here is what each one looks for, with the kind of finding it throws up for a company like Brewly.

 Financial DDTax DDLegal DD
AsksAre the numbers real?What tax could surface?Is title and compliance clean?
Looks atRevenue, margins, working capital, debt, cash burnGST, TDS, income tax, transfer pricingCap table, contracts, litigation, IP, employment
Typical findingRevenue recognised early, inflating EBITDAShort TDS deduction with interest exposureESOP grants never approved by the board
Hits the deal asLower valuation (price on a true EBITDA)Specific indemnity / escrowCondition precedent (fix before closing)

Jurisdiction matters: India, US and UAE

The structure of the report is the same everywhere, but the typical findings shift by jurisdiction, which matters for founders running cross-border setups:

  • In India: tax DD is dominated by GST, TDS, and historical income-tax positions, plus FEMA and pricing-rule issues on any foreign investment, and the validity of CCPS (compulsorily convertible preference shares) terms. Legal DD scrutinises ROC (Registrar of Companies) filings and the cap table closely.
  • In the US: financial DD leans on quality of earnings and revenue recognition; tax DD covers federal and state nexus and sales tax; legal DD focuses on stock option (the US equivalent of ESOP) hygiene, 83(b) elections, and IP assignment from every contributor.
  • In the UAE: diligence covers corporate tax (introduced in 2023) and VAT, free-zone versus mainland licensing, Economic Substance and Ultimate Beneficial Owner records, and whether the company’s activities match its trade licence.

Our master checklist post has separate downloadable Finance, Tax and Legal checklists for all three jurisdictions, so you can prepare for the report your specific buyer’s advisers will write.

Red Flag vs Deal-Breaker: The Distinction That Decides Everything

A red flag is a problem the buyer can live with if it is priced or papered correctly. A deal-breaker is a problem so serious that no price and no protection makes the deal worth doing. The whole negotiation after diligence is really an argument about which findings are which, and most findings are red flags, not deal-breakers.

 Red flagDeal-breaker
NatureQuantifiable, contained, fixableFundamental, open-ended, or fatal
Buyer’s reactionPrice it, indemnify it, escrow it, fix itWalk away or renegotiate the whole deal
India example₹60 lakh disputed GST demand; unapproved ESOP grantsCore trademark or IP not owned by the company
WhyLoss is capped and known; can be coveredThreatens the reason for buying the company

What usually turns a finding into a deal-breaker is not the size of the rupee number alone, it is one of three things: the loss is uncapped or unknowable (open-ended litigation, a tax position that could cascade across years), it strikes at the core asset (the company does not actually own the brand, code or licence the buyer is paying for), or it reveals fraud or dishonesty, which destroys trust in everything else in the data room.

⚠️ Watch Out For

A small finding can become a deal-breaker if it suggests a pattern. One missed TDS payment is a red flag; TDS short-deducted across three years on every vendor signals weak controls, and now the buyer doubts every other number too. Diligence findings are judged for what they imply, not just what they cost.

How Findings Turn Into Deal Terms

A finding in a DD report is worthless to the buyer until it changes the deal. There are five standard levers, and almost every red flag is treated with one or a combination of them. These are negotiated and recorded in the share subscription or share purchase agreement (SSA / SPA) and the shareholders agreement (SHA): see our SHA and SSA guide for how each clause is drafted.

1. Price or valuation adjustment

The cleanest lever: the buyer simply pays less. When financial DD finds that Brewly’s true, sustainable EBITDA is ₹2 crore lower than reported (a one-off contract booked as recurring revenue), the buyer applies the agreed multiple to the lower number. At an 8x multiple, that single finding cuts the valuation by ₹16 crore. Quality-of-earnings findings almost always come out of price.

2. Indemnity

The seller agrees to compensate the buyer for specific losses that arise after the deal, usually breaches of the representations and warranties. Indemnities are bounded by a cap (the maximum payable), a basket or threshold (losses must exceed a floor before any claim), and a time limit. A general indemnity covers unknown problems; it is the buyer’s safety net for things diligence did not catch.

3. Escrow or holdback

Part of the consideration is parked, in an escrow account or simply held back, for a set period to cover potential claims. If the risk does not materialise, the founders get the money; if it does, the buyer draws on it first. For Brewly, the fund holds back ₹3 crore for 18 months against the open tax matters, so it does not have to chase the founders for cash later.

4. Conditions precedent (CPs)

Some findings must be fixed before the deal completes. These become conditions precedent: regularise the unapproved ESOP grants by passing the right board and shareholder resolutions, file the overdue ROC forms, or settle a small dispute. No fix, no closing. CPs are how the buyer makes you clean up the contained, fixable problems on your own time and cost.

5. Specific indemnity

For a known, identified issue, the buyer takes a specific indemnity that ring-fences exactly that risk, often outside the general cap and basket, sometimes for a longer period. Brewly’s three-year TDS exposure becomes a specific indemnity: if the tax authority raises a demand, the founders cover it rupee for rupee, separate from everything else. Specific indemnities are how a buyer says “I will do the deal, but this one is on you.”

💡 Memory Hook

Each lever answers a different question. Price = the number was wrong. Indemnity = something unknown might go wrong. Escrow = hold the cash in case it does. Condition precedent = fix it before we close. Specific indemnity = this known problem is yours alone.

One finding can trigger several levers at once. A single tax issue could lead to a small price chip, a specific indemnity for the exposure, and an escrow to back the indemnity. The founder’s job is to keep each finding from being double-counted, paying for the same risk through both a price cut and an indemnity.

How Founders Should Respond to the Findings

Founders rarely get the full report, but they always get the findings, as a findings list, a CP list, or the issues raised in the agreement. How you respond decides how much each finding actually costs you. Respond fast, factually and in writing.

  • Triage every finding into three buckets: correct, partly correct, or wrong. Do not treat the report as gospel. Advisers work from incomplete information and a deadline; some findings are simply a missing document away from disappearing.
  • Fix what you can before completion. Anything that can become a clean condition precedent, pass the resolution, make the filing, get the consent, should be fixed, not priced. A fixed issue costs you effort; a priced issue costs you money.
  • Provide evidence, not arguments. Where a finding is overstated, answer with the document: the board minute, the challan, the signed assignment. A finding backed by your own paper trail shrinks or vanishes.
  • Quantify the real exposure. If the adviser flags a “potential” ₹3 crore liability but the realistic exposure is ₹40 lakh, show the working. Buyers escrow and indemnify against the number on the page, so a vague large number is expensive.
  • Negotiate the treatment, not just the finding. Even where the finding stands, you can argue for a specific indemnity instead of a price cut, a shorter escrow, a lower cap, or a higher basket. The treatment is where most of the money actually moves.
📈 CFO Lens

The best response to a DD report happens months before it is written. Run the buyer’s own checklists against yourself first, close the gaps, and prepare a short disclosure note for the issues you cannot fix. A founder who hands over a clean data room and pre-empts the obvious findings keeps control of the price. Start with the master due diligence checklist.

“A due diligence report does not kill deals. Surprises do. Almost every finding is survivable if it is found early and explained well; what founders lose money to is the issue they did not see coming and could not answer.”

Ankit Sarawagi, CFOmatrix

Facing a diligence process, or want to pre-empt the findings?

CFOmatrix helps Indian and cross-border founders prepare clean data rooms, run vendor due diligence, and read and negotiate DD reports so findings do not quietly erode the deal. Tell us your stage and we will show you what good looks like.

Talk to CFOmatrix

Frequently Asked Questions

What is a due diligence report?

A due diligence report is a written document, prepared by the investor’s or acquirer’s advisers, that records what they found when they examined a company’s finance, tax, legal and other records before a deal. It is organised around an executive summary, the scope of work, key findings, red flags or deal issues, and recommendations. Its main job is to tell the buyer what risks they are taking on and how those risks should be reflected in the price and the legal agreements.

Who prepares a due diligence report?

The buyer or investor appoints the advisers, so they own the report, not the company being examined. Financial and tax due diligence is usually done by a Big 4 firm (Deloitte, PwC, EY, KPMG) or an independent accounting or chartered accountant firm. Legal due diligence is done by a law firm. For larger deals there may also be commercial, technology, HR and environmental DD reports from specialist advisers.

What is the difference between a red flag and a deal-breaker in due diligence?

A red flag is a problem the buyer can live with if it is priced or papered correctly, for example an unpaid tax demand that can be covered by an indemnity or escrow. A deal-breaker is a problem so serious that no price or protection makes the deal worth doing, for example a fundamental defect in title to the core asset, fraud, or a liability larger than the value of the company. Most findings are red flags; true deal-breakers are rare.

What are the main types of due diligence reports?

The three core reports are financial due diligence (quality of earnings, working capital, debt, cash burn), tax due diligence (GST, TDS, income tax, transfer pricing and historical exposures) and legal due diligence (corporate records, contracts, litigation, intellectual property, employment and regulatory compliance). Larger deals add commercial, technology and HR due diligence. Each is usually a separate report from a different adviser.

How do due diligence findings affect the deal terms?

Findings flow into the legal agreements in five main ways: a price or valuation adjustment that lowers what the buyer pays, indemnities where the seller agrees to compensate specific losses, an escrow or holdback where part of the consideration is parked to cover claims, conditions precedent that must be fixed before completion, and specific indemnities that ring-fence a known issue with its own cover. These are negotiated in the share purchase or subscription agreement (SSA) and the shareholders agreement (SHA).

Should a founder get a copy of the due diligence report?

The report belongs to the buyer or investor who commissioned it and is usually addressed only to them, often with a disclaimer that no one else can rely on it. Founders rarely get the full report, but they almost always receive the findings, either as a findings list, a list of conditions precedent, or through the issues the buyer raises in the agreement. Founders can and should run their own vendor due diligence before a sale to find issues first.

How should a founder respond to due diligence findings?

Respond quickly, factually and in writing. For each finding, decide whether it is correct, partly correct, or wrong, and provide evidence. Fix what you can before completion, explain the context for what cannot be fixed, and push back with documents where the finding is overstated. The goal is to move items out of the red flag column so they do not become price cuts, broad indemnities or large escrow amounts.

This is general information, not legal, tax or financial advice. Diligence findings and deal terms vary by deal, jurisdiction and adviser, and Indian deals involve CCPS, FEMA and pricing rules. Have your specific situation reviewed by a qualified lawyer and chartered accountant.

Explore the Due Diligence Series
AS
Founder, CFOmatrix  |  Finance Strategy & Equity Compliance

CFOmatrix is a knowledge platform focused on how finance actually works inside growing companies. Every insight is shaped by real operating experience across startups and growth-stage companies, including cross-border setups.

What do you think?

Leave a Reply

Your email address will not be published. Required fields are marked *

Insights

More Related Articles

Deferred Revenue and Billing: The SaaS Cash Advantage

ARR-Based Financing: Growth Capital Without Dilution

SaaS Company Structure: India, Delaware or the Flip