M&A Due Diligence Checklist for Deal Teams

Why Due Diligence Makes or Breaks M&A Deals

Due diligence is the single most consequential phase of any M&A transaction. It determines whether a deal closes, at what price, and on what terms. It is the process by which buyers validate — or invalidate — the assumptions that underpin their valuation, and it is where the information asymmetry between buyer and seller narrows to the point where both sides can agree on a transaction structure that reflects reality rather than aspiration.

The stakes are substantial. Studies consistently show that 50-70% of acquisitions fail to deliver the value projected at the time of investment. While not all failures are attributable to inadequate due diligence, a significant proportion are. The most common post-mortem finding is that the acquirer either missed a material risk, overestimated synergies, or failed to understand operational complexity that surfaced only after closing. These are due diligence failures, not market failures.

In Asia Pacific, the due diligence challenge is compounded by factors that are less prevalent in Western markets. Multi-jurisdictional operations mean that a single target may require regulatory, tax, and legal analysis across five or more countries. Documentation standards vary — a well-organised Australian target with audited financials under IFRS presents a very different DD challenge than a privately-held Southeast Asian business with unaudited accounts under local GAAP. Language barriers, related-party transaction structures common in family businesses, and varying corporate governance standards all add layers of complexity that deal teams must navigate.

Due diligence is not a checkbox exercise. It is an analytical process that, when executed rigorously, gives the deal team confidence in their investment thesis and the information needed to negotiate appropriate protections. When executed poorly, it creates a false sense of security that unravels post-closing.

This article provides a comprehensive DD checklist across all major workstreams, identifies the key focus areas within each, and examines how AI is changing the way deal teams approach this critical phase.

The Complete Due Diligence Checklist

The scope of due diligence depends on the transaction — sector, deal size, geography, and the buyer’s specific risk profile all shape the workstreams and depth of review. However, every M&A transaction requires coverage across eight core categories. The following table provides a high-level checklist that deal teams should use as a starting framework and adapt to the specifics of each deal.

Category	Key Focus Areas	Priority Level
Financial	Quality of earnings, working capital, revenue quality, EBITDA adjustments, debt and debt-like items, cash flow analysis	Critical
Commercial	Market size and growth, customer concentration, competitive positioning, pricing dynamics, pipeline quality	Critical
Legal	Contracts review, litigation and disputes, corporate structure, regulatory compliance, change-of-control provisions	Critical
Operational	Supply chain, key processes, technology infrastructure, capacity utilisation, management and key personnel	High
Tax	Tax compliance, transfer pricing, tax attributes, structuring implications, historical exposures	High
IT and IP	Technology stack, IP ownership, cybersecurity posture, data privacy compliance, technical debt	High
HR and People	Key personnel retention, compensation structures, employment liabilities, cultural assessment, org structure	Medium-High
Environmental	Environmental compliance, remediation liabilities, ESG risks, climate-related exposures	Medium

Each of these categories warrants its own detailed checklist. The sections below unpack the most critical workstreams in depth.

Financial Due Diligence: Key Focus Areas

Financial DD is the foundation of every transaction. Its purpose is to provide the buyer with an independent, verified understanding of the target’s historical financial performance and the sustainability of its earnings. Without reliable financial DD, every other workstream is built on uncertain ground.

Quality of Earnings

The quality of earnings analysis is the centrepiece of financial due diligence. It moves beyond reported revenue and profit to assess the quality, sustainability, and predictability of the target’s earnings. This involves identifying and quantifying adjustments to arrive at a normalised earnings figure that reflects the business’s true recurring performance.

Key QoE questions include: Is revenue recognition aggressive or conservative? Are there significant one-time items inflating or depressing reported earnings? How do management’s adjustments compare with the auditor’s view? Are there related-party transactions that distort the economics? Does the business have genuine recurring revenue, or is it dependent on lumpy project-based income?

In APAC mid-market transactions, QoE analysis is particularly critical because many targets are founder-led businesses where personal expenses, related-party arrangements, and discretionary spending are embedded in the financials. A business that reports $3 million in EBITDA may have a normalised EBITDA of $4.5 million — or $2 million — depending on the adjustments.

Working Capital Analysis

The working capital peg is one of the most frequently negotiated elements of an M&A transaction, and getting it wrong costs real money. Financial DD must establish the target’s normalised working capital requirement — the level of working capital the business needs to operate at its current scale — and identify any seasonal, cyclical, or one-time factors that distort the historical trend.

Common working capital issues in APAC transactions include:

• Seasonality effects — businesses with concentrated revenue periods (fiscal year-end in Japan, festive seasons in Southeast Asia) can show misleading working capital snapshots
• Inventory valuation — manufacturing and distribution businesses may carry excess or obsolete inventory that inflates working capital
• Receivables quality — extended payment terms common in certain APAC markets (90-120 days in Greater China, for instance) mean that receivables require ageing analysis and collectability assessment
• Related-party balances — intercompany loans, receivables, and payables that need to be unwound or addressed at closing

Revenue Quality and Sustainability

Beyond the headline revenue figure, financial DD must assess whether the target’s revenue is sustainable. This means analysing customer retention rates, contract renewal patterns, pipeline quality, and the degree to which revenue is recurring versus one-time. For businesses with subscription or SaaS revenue models, this includes cohort analysis, churn rates, and net revenue retention.

For businesses with project-based revenue — common in professional services, construction, and infrastructure sectors across APAC — revenue quality analysis focuses on backlog verification, conversion rates, and concentration risk.

EBITDA Adjustments and Normalisation

The normalised EBITDA is the earnings figure that drives valuation. Every adjustment matters because it flows directly through the valuation multiple. A $200,000 EBITDA adjustment on a business valued at 8x EBITDA equals $1.6 million of enterprise value.

Standard adjustments include: owner compensation above market rate, one-time professional fees (litigation, restructuring), non-recurring revenue or costs, run-rate impact of recent hires or cost savings, above-market rent on related-party properties, and non-operating income or expenses.

The negotiation of EBITDA adjustments is often the most contentious part of a transaction. Buyers and sellers rarely agree on which adjustments are legitimate, making independent financial DD essential for establishing a defensible baseline.

Commercial and Operational Due Diligence

Commercial DD validates the market thesis behind the acquisition. It answers the question: does the target operate in an attractive market, and does it have a defensible position within that market? Operational DD assesses the target’s ability to deliver on its commercial potential — whether its operations, processes, and infrastructure can support growth or whether they represent constraints.

Market Sizing and Growth

Commercial DD begins with a rigorous assessment of the target’s addressable market. This includes total market size, growth rate, and the specific segments the target serves. In APAC, market sizing is complicated by data availability — reliable market research covering niche segments in Southeast Asia or South Asia may be limited, requiring primary research or proxy-based estimation.

Key questions: Is the market growing organically, or is growth dependent on favourable regulatory or macroeconomic conditions? What is the risk of market disruption — from technology, regulation, or new entrants? How fragmented is the market, and what are the consolidation dynamics?

Customer Concentration

Customer concentration is one of the most common risks identified during commercial DD. A business that derives 40% or more of revenue from a single customer carries meaningful concentration risk, regardless of how long that relationship has existed. The loss of a single major customer can fundamentally impair the business.

DD should quantify concentration across multiple dimensions: revenue concentration (top 5 and top 10 customers as a percentage of total), margin concentration (are the largest customers also the most profitable?), and contractual protection (what are the contract terms, renewal rates, and switching costs?).

In APAC, customer concentration risk often intersects with relationship dependency. A business that relies on a personal relationship between the founder and a key customer may see that relationship weaken following an acquisition.

Supply Chain and Operational Resilience

Operational DD examines the target’s supply chain for concentration, dependency, and disruption risk. This includes sole-source supplier relationships, geographic concentration of manufacturing or sourcing, inventory management practices, and logistics infrastructure.

Post-pandemic, supply chain resilience has moved from a secondary DD consideration to a primary one. Deal teams now routinely assess not just current supply chain performance but the target’s ability to withstand disruptions — whether from geopolitical events, natural disasters, or shifts in trade policy.

Competitive Positioning

Understanding the target’s competitive position requires analysing its market share, pricing power, differentiation, and barriers to entry. Strong competitive positioning typically manifests as pricing stability, customer loyalty, and the ability to grow market share. Weak positioning shows up as margin pressure, customer churn, and reliance on price competition.

In APAC markets with rapidly evolving competitive landscapes — particularly technology, healthcare, and consumer sectors — competitive positioning analysis must account for emerging competitors that may not yet be visible in historical data.

Legal and Regulatory Due Diligence

Legal DD is the largest workstream by document volume in most transactions. Its purpose is to identify legal risks, confirm the enforceability of the target’s contracts and rights, and ensure that the transaction itself can be executed without regulatory impediment.

Contract Review

Contract review involves analysing the target’s material agreements — customer contracts, supplier agreements, leases, employment agreements, licensing arrangements, and joint venture agreements. The focus is on identifying terms that could adversely affect the business post-acquisition.

Priority items include:

• Change-of-control provisions — contracts that require consent, trigger termination rights, or modify terms upon a change in ownership
• Exclusivity and non-compete clauses — restrictions that limit the target’s commercial flexibility
• Pricing and renewal terms — whether customer contracts are at market rates and have favourable renewal terms
• Limitation of liability — the extent of the target’s exposure under its contracts
• Termination provisions — notice periods, cure rights, and termination for convenience clauses

Litigation and Disputes

Litigation DD identifies all pending, threatened, or potential legal disputes and estimates the financial exposure associated with each. Beyond current litigation, the review examines historical dispute patterns — a business with a history of employment claims or customer disputes signals underlying operational issues.

In APAC, litigation DD must account for the different legal systems and dispute resolution mechanisms across jurisdictions. Arbitration is common in cross-border transactions, and the enforceability of arbitral awards varies by jurisdiction.

Regulatory Compliance in APAC

Regulatory DD in Asia Pacific is exceptionally complex. A target operating across multiple APAC jurisdictions may need to comply with:

• Foreign investment restrictions — FIRB (Australia), FDI screening (Japan, India), negative investment lists (Indonesia, Philippines, Thailand)
• Competition and antitrust clearance — ACCC (Australia), JFTC (Japan), KPPU (Indonesia), CCCS (Singapore)
• Sector-specific regulation — financial services licensing, healthcare approvals, telecommunications permits, data localisation requirements
• Environmental and labour compliance — standards that vary significantly by market

Each jurisdiction has its own timeline, process, and potential for regulatory conditions or rejection. Deal teams must map the regulatory approval pathway early in the process and build realistic timelines into the transaction schedule.

The variation in regulatory regimes across APAC is substantial. What constitutes a straightforward regulatory approval in Singapore may require months of engagement with multiple government agencies in Indonesia or the Philippines. Experienced legal counsel with jurisdiction-specific expertise is essential — not advisable, but essential.

How AI Is Transforming Due Diligence

The due diligence process has been ripe for technological disruption for decades. The traditional approach — teams of analysts, lawyers, and accountants manually reviewing thousands of documents in a data room — is labour-intensive, expensive, and inherently limited by human bandwidth. AI is changing this equation fundamentally, not by replacing human judgement, but by handling the volume problem so that human expertise can focus where it adds the most value.

Document Review and Classification

The most immediate AI application in due diligence is automated document review. Modern AI systems can ingest an entire data room — thousands of PDFs, spreadsheets, contracts, and correspondence files — and classify, index, and summarise the contents in hours rather than days. This creates a structured, searchable knowledge base from which deal teams can extract specific information rather than hunting through folders.

For a deeper analysis of AI’s role in data room management, see our article on AI-powered data rooms.

Pattern Detection and Anomaly Flagging

AI excels at identifying patterns across large datasets that human reviewers would miss — not because humans lack analytical capability, but because the volume of data in a typical mid-market DD process exceeds what any team can review comprehensively within deal timelines. AI can scan financial data across multiple periods and identify anomalies in revenue recognition, unusual expense patterns, or inconsistencies between management representations and the underlying data.

In contract review, AI identifies non-standard clauses, missing protections, and terms that deviate from market norms by comparing the target’s contracts against trained benchmarks. This is particularly valuable in APAC transactions where contract quality varies significantly — a well-documented contract suite in Australia differs markedly from the informal arrangements common in some Southeast Asian markets.

Risk Scoring and Prioritisation

Perhaps the highest-value AI application is risk-based prioritisation. Rather than reviewing every document with equal intensity, AI assigns risk scores to individual items based on their likely materiality and flags the highest-risk items for immediate human attention. This means deal teams spend their limited time on the issues that matter most, rather than working through documents sequentially.

For a comprehensive overview of how AI is being applied across the entire DD process, see our article on AI due diligence.

Limitations of AI in DD

AI in due diligence has real boundaries. It cannot assess the commercial significance of a contractual provision in the context of a specific deal. It cannot evaluate whether a financial anomaly represents a genuine risk or a benign data artefact. It cannot understand the cultural nuances that affect deal dynamics in APAC markets — why a Japanese target structures transactions a certain way, or why a Thai family business has specific related-party arrangements. AI accelerates the process and expands coverage, but human judgement on materiality, strategy, and context remains irreplaceable.

Common Due Diligence Pitfalls

Even experienced deal teams make predictable DD mistakes. Recognising these patterns helps avoid them.

Rushing the Process

Time pressure kills deal quality. Sellers and intermediaries often push for compressed timelines to maintain deal momentum and limit business disruption. Buyers who accommodate these pressures without adjusting scope or resources end up with incomplete DD and post-closing surprises. The cost of extending a timeline by two to four weeks is almost always less than the cost of a material issue discovered after closing.

This is particularly true in cross-border APAC transactions where regulatory approvals, multi-language document review, and multi-jurisdictional legal analysis inherently require more time than domestic deals.

Over-Reliance on Management Data

Management teams present their business in the best light — this is expected and rational behaviour. DD that relies heavily on management-prepared materials without independent verification is not DD; it is management due diligence. Rigorous DD validates management representations against independent sources: audited financials, third-party data, customer references, regulatory filings, and on-the-ground operational observation.

In APAC founder-led businesses, the risk of management data bias is heightened because the founder’s identity is often deeply intertwined with the business. Founders may genuinely believe their business is worth more than it is, or may not distinguish between personal and business assets and liabilities with the precision that institutional acquirers require.

Ignoring Cultural Due Diligence

Cultural DD is consistently underweighted relative to its impact on deal outcomes. This applies at two levels. First, the internal culture of the target — management style, decision-making processes, employee expectations, and organisational norms — determines integration difficulty and talent retention risk. Second, in cross-border APAC transactions, national cultural differences affect everything from negotiation dynamics to post-merger integration.

A Japanese acquirer buying a fast-moving Australian tech company will face cultural integration challenges that no financial model captures. A Western PE firm acquiring a family-controlled Southeast Asian business will encounter governance expectations that differ fundamentally from those in their home market. These are not soft issues — they are among the most common reasons acquisitions fail to deliver projected returns.

Neglecting IT and Cybersecurity

Technology and cybersecurity DD has evolved from a specialist workstream to a core requirement. Every business is now a technology business to some degree, and cybersecurity incidents can destroy value overnight. DD must assess the target’s technology infrastructure, data protection practices, compliance with privacy regulations (which vary significantly across APAC), and the maturity of its cybersecurity posture. For technology-centric acquisitions, this extends to code quality, technical debt, architecture scalability, and IP ownership verification.

Failing to Connect DD Findings to Valuation

DD findings have value only if they translate into actionable deal terms. A contractual risk identified during legal DD should flow into reps and warranties protection or a price adjustment. A working capital volatility finding should inform the working capital peg mechanism. A customer concentration risk should be reflected in an earnout structure or a specific indemnity.

Too often, DD reports are produced in isolation by individual workstreams without a unified view of how findings affect deal value and risk allocation. The deal team must synthesise findings across all workstreams and translate them into negotiating positions.

Underestimating Integration Complexity

Due diligence should not end at signing. The findings from DD directly inform the post-merger integration plan, and deal teams that treat DD and integration planning as separate processes lose valuable time and institutional knowledge. The issues identified during DD — system incompatibilities, cultural differences, operational gaps, key-person dependencies — are the same issues that will dominate the first 100 days post-closing. Teams that begin integration planning during DD, informed by DD findings, achieve faster and more successful integrations.

---

Building a due diligence process for your next deal? Amafi gives advisory and deal teams AI-powered document analysis, risk flagging, and cross-border intelligence built for Asia Pacific M&A. Get in touch.