What is M&A due diligence?

01What is M&A due diligence?

M&A due diligence is the investigation a buyer runs before closing a transaction, to verify that a target company is what it appears to be — financially, legally, commercially, and operationally — before money changes hands.

In practice, it's a document-heavy exercise: a target discloses records into a data room, the buyer's deal team works through a request list against those records, and every material finding gets traced back to a source document before it's relied on.

02What does the M&A due diligence workflow look like?

Most transactions follow the same broad sequence, whether it's run manually or with AI assistance:

03How is a data room prepared for M&A due diligence?

The target (or its advisors) organises disclosure documents into a structured set of folders — typically financial, legal, corporate, commercial, tax, and HR — before the buyer's team gets access. How well that room is organised has a direct effect on how fast diligence can move: a well-structured room lets reviewers find what a request line is actually asking for; a disorganised one turns diligence into a document hunt before the real review even starts.

04What is the DD request list's role in M&A?

The request list is the buyer's structured statement of what it needs to see — organised by workstream, with each line representing one piece of evidence the deal team is looking for. It's the backbone of the whole exercise: everything else (document review, gap identification, reporting) is really just working through this list systematically. See the full breakdown in what a due diligence request list is and how it's structured.

05What are the main types of M&A due diligence?

Each workstream runs its own review against the same data room but asks different questions of it — which is why a request list is normally organised by workstream rather than as one flat list.

06How is missing information identified during M&A due diligence?

A request-list line has no supporting evidence when nothing in the data room addresses it — a required schedule was never uploaded, a policy document is referenced but not attached, or a disclosure simply wasn't made. Catching these gaps during diligence, rather than after closing, is one of the main reasons the request-list-to-evidence exercise exists at all. Vaultrix's AI Analyst maps each request against the room automatically and marks it no evidence found when nothing supports it, rather than leaving the gap to be found on a manual pass.

07How is conflicting information identified during M&A due diligence?

Conflicts show up when two source documents disagree on the same fact — a financial model assumes one revenue figure while the audited statements show another, or a disclosed agreement's terms don't match what a management summary claims. These are exactly the discrepancies diligence is meant to surface before they become someone else's problem post-close. Vaultrix flags a request as conflicting rather than silently picking one source over the other.

08How is evidence verified in M&A due diligence?

Every material finding should trace back to a specific document, page, or figure — not a summary someone wrote about the document. That's what makes a finding checkable rather than something the deal team has to take on faith. In Vaultrix, every AI-generated answer cites the exact page, slide, or spreadsheet cell it came from, and on high-risk questions a second model independently re-checks the citation before it's shown.

09How are M&A due diligence findings reported?

Workstreams typically consolidate their findings into a report or memo used to inform deal terms, purchase-agreement disclosures, or an investment committee decision. The underlying detail — which requests were satisfied, which are still open, and which surfaced a conflict — matters as much as the summary, since it's what the deal team actually reviews and signs off on before anything is treated as final.

10How does Vaultrix fit into the M&A due diligence workflow?

Vaultrix sits on top of the data room once it's assembled: upload the room as a single ZIP, upload your existing request list, and Vaultrix maps each request to the evidence it finds, flags gaps and conflicts, and cites its sources. Your team reviews and signs off — Vaultrix never closes a request on its own. See the full workflow in the AI due diligence guide, or the interactive demo.