Most Indian M&A deals do not fail at the negotiating table. They fail four to six weeks later, when someone finally opens the data room and finds what should have surfaced in week one. A due diligence checklist is not a formality before wiring funds — it is the difference between the company you thought you bought and the one you actually got.
A promoter might overstate recurring revenue, or leave a GST notice unresolved since 2023. An ESOP pool might never have been formally board-approved. We have supported due diligence on transactions across sectors from our Bengaluru base since 2008, and the pattern holds regardless of deal size. The checklist rarely fails from missing categories — it fails when items are checked on paper but never checked properly.
Financial Due Diligence
Financial due diligence is where most acquirers spend the bulk of their time. It shows whether the numbers in the pitch deck survive contact with the general ledger.
- Quality of books: audited or merely compiled, backed by the chart of accounts and source documents rather than built retroactively for the deal.
- Revenue recognition: watch for premature recognition, bundled discounts hidden in revenue lines, and related-party sales inflating the topline.
- Working capital trends: trace receivables, payables, and inventory over 12–24 months; a sudden improvement right before a sale round is worth questioning.
- Contingent liabilities: pending litigation, guarantees to group companies, disputed vendor claims, and off-balance-sheet commitments a standard trial balance will not show.
- GST and TDS compliance history: match GSTR-1 and GSTR-3B filings against the books, reconcile input tax credit, and review TDS deposit history for penalty exposure that transfers with the entity.
Legal Due Diligence
Financial diligence tells you what the company earned. Legal diligence tells you what it is exposed to, and that exposure often outlasts the deal itself.
- Corporate structure: cap table accuracy, share transfer history, board resolutions authorising past allotments, and whether MCA records match the structure on paper.
- Litigation history: civil, criminal, labour, and consumer disputes involving the company, its promoters, or its directors, including matters settled without a formal closure on file.
- Material contracts: customer agreements, vendor contracts, lease deeds, and loan documents, read for change-of-control clauses that could trigger termination on closing.
- IP ownership: whether trademarks, patents, and proprietary code are actually assigned to the company, not still sitting with a founder or contractor.
- Employment and ESOP documentation: signed offer letters, board- and shareholder-approved ESOP schemes, vesting schedules, and whether promised equity was ever formally issued.
Tax Due Diligence
Tax exposure in an Indian target rarely shows up as a single number. It shows up as a set of open assessment years nobody closed properly.
- Income tax assessment history: status of returns, scrutiny assessments, appeals pending before CIT(A) or ITAT, and any unresolved demand notices.
- Transfer pricing documentation: for cross-border related-party transactions, review transfer pricing study reports, Form 3CEB filings, and whether pricing policies would survive renewed scrutiny.
- Indirect tax exposure: GST audits, show-cause notices, classification disputes, and any legacy exposure carried over from the pre-GST regime.
Compliance Due Diligence
Acquirers underestimate this category most often, because compliance gaps rarely show up in financial statements. They surface in an MCA search that nobody ran until diligence forced the issue.
- Companies Act 2013 filings: annual returns, financial statement filings, board meeting minutes, and statutory registers maintained as required.
- ROC records: charges registered and satisfied correctly, director appointments and resignations filed on time, and governance that matches what ROC shows on paper.
- FEMA and RBI filings: for entities with foreign shareholding, FC-GPR and FC-TRS filings, annual FLA returns, and investment routed through permitted instruments and sectors.
- Sector-specific licenses: NBFC registration, FSSAI, import-export code, or other approvals the business depends on to legally operate, confirmed current and not lapsed.
Commercial and Operational Due Diligence
Numbers and paperwork can be clean and the business can still be fragile. Commercial diligence tests whether it holds up without its current owner running it.
- Customer concentration: what share of revenue sits with the top five customers, and what happens if a key relationship walks after ownership changes.
- Key-person dependency: whether institutional knowledge, client relationships, or technical capability sits with one or two individuals with no retention agreement in place.
- Supplier contracts: pricing terms, exclusivity clauses, and whether critical supply relationships are formalised or running on informal arrangements that may not survive a change in ownership.
HR Due Diligence
People risk gets less attention than financial risk in most Indian SME deals. It is usually the one that surfaces first after closing.
- Statutory compliance: PF, ESI, gratuity, and bonus payments, checked for current compliance and any historical arrears that transfer with the entity.
- Key employee retention risk: non-compete and non-solicit terms, existing notice periods, and whether critical employees have any incentive to stay past the transition.
- Compensation and benefits liability: undisclosed variable pay commitments, informal bonus promises, and leave encashment liabilities that were never properly accrued.
A checklist tells you what to look for. It does not tell you what a finding means for valuation, deal structure, or whether to walk away. That judgment is where most in-house teams need support they don't have internally. The work that protects a deal is rarely the checklist itself; it is knowing which item on it actually matters for the transaction in front of you.
Red Flags That Kill Deals After the LOI
Some issues surface early and get resolved. Others surface after the letter of intent, once diligence teams are actually inside the data room — and these are the ones that most often unwind an Indian SME transaction.
- Unreconciled related-party transactions never disclosed at term sheet stage — the sharpest concern, since it suggests the promoter either did not understand the exposure or chose not to mention it.
- A cap table that does not match board resolutions, especially when informal equity promises to early employees surface only during legal review.
- GST or income tax notices left unaddressed rather than actively contested — a sign of a governance gap, not a one-off lapse.
- Customer contracts with undisclosed change-of-control clauses that can unravel the commercial logic of a deal overnight.
- Working capital quietly managed upward in the months before the sale process began, even when the number is eventually explained.
None of these are automatic deal-breakers. What kills deals is the promoter's response when they surface: a straight answer with supporting documentation keeps a transaction alive, while a defensive one rarely does.
How Long Should Due Diligence Take
For a straightforward Indian SME acquisition — single entity, domestic operations, no cross-border shareholding — structured due diligence typically runs four to six weeks once the data room is populated. Deals with multiple subsidiaries, foreign investment history requiring FEMA review, or heavier licensing needs usually take eight to twelve weeks. Cross-border transactions, or targets with a history of related-party dealings that need untangling, can extend well beyond that.
The variable that moves the timeline more than deal size is usually the target's own recordkeeping. A company with clean, audited books can move through diligence in half the time of one reconstructing records as questions arrive.
A due diligence checklist rarely fails because a category was missing. It fails when an item is checked on paper but never checked properly — and that gap surfaces only after the deal closes, when it becomes the acquirer's problem.
What Does Indian M&A Due Diligence Cover?
It typically covers six areas: financial, legal, tax, compliance, commercial and operational, and HR — each reviewed for what the numbers and paperwork actually show, not just what they claim.
Who Leads Due Diligence In India?
Due diligence is usually led by a financial and tax advisory firm working alongside legal counsel, with the acquirer's internal teams reviewing findings. Cross-border or complex deals often bring in specialist support for FEMA, transfer pricing, and sector-specific compliance.
Is Due Diligence Necessary For Small Deals?
Yes. Deal size does not reduce risk exposure — it only changes what is proportionate. Compliance, tax, and contract risk still transfer to the acquirer on closing, so even modest deals need a scaled but structured process.
- Start the data room review with financial and legal categories together — they surface the exposures that most often kill deals.
- Treat unresolved GST or tax notices as governance red flags, not routine paperwork.
- A promoter's response to a red flag matters more than the red flag itself.
- Clean, audited books can cut a due diligence timeline in half.
- Budget four to six weeks for a straightforward domestic deal, and eight to twelve for anything involving FEMA or multiple subsidiaries.
Due diligence done properly rarely feels dramatic while it is happening. It feels like a lot of document requests, a lot of reconciliation, and a lot of questions that seem repetitive until the one answer that matters finally surfaces. That is usually how it is supposed to feel. The deals that go wrong are the ones where the process felt easy the whole way through.
