When is due diligence required?

Due diligence is prudent before any significant business decision: mergers and acquisitions, major vendor engagements, entering new markets, onboarding high-value customers, and making significant investments. In some regulatory contexts (AML, modern slavery), specific due diligence is legally required.

What does customer due diligence involve for AML purposes?

AML customer due diligence includes verifying the customer's identity, understanding the nature of their business, assessing the purpose and intended nature of the business relationship, and determining whether the customer is a politically exposed person. Enhanced due diligence is required for higher-risk customers.

How long does due diligence typically take?

The duration varies widely depending on the complexity and type. A standard vendor due diligence may take 2-4 weeks, while M&A due diligence can take 4-12 weeks or longer. Technology due diligence alone can take 2-6 weeks depending on the complexity of the target's systems.

Book Free Assessment Calculator

Due Diligence

Also known as:DDinvestigationpre-transaction review

The comprehensive investigation and analysis undertaken before entering into a business transaction, agreement, or relationship to assess risks, verify facts, and ensure informed decision-making.

In-Depth Explanation

Due diligence is the process of thorough investigation and assessment conducted to evaluate the merits and risks of a prospective business decision. While commonly associated with mergers and acquisitions, due diligence applies broadly across business relationships, vendor selection, and compliance obligations.

Types of due diligence:

Financial due diligence: Reviewing financial statements, cash flows, liabilities, and projections
Legal due diligence: Examining contracts, litigation history, intellectual property, and regulatory compliance
Operational due diligence: Assessing processes, systems, workforce capabilities, and operational risks
Technology due diligence: Evaluating IT infrastructure, software, cybersecurity, and technical debt
Commercial due diligence: Analysing market position, customer relationships, and competitive landscape
ESG due diligence: Reviewing environmental, social, and governance practices

Due diligence in regulatory contexts:

AML/CTF: Customer due diligence (CDD) and enhanced due diligence (EDD) for higher-risk customers
Modern slavery: Supply chain due diligence to identify and address modern slavery risks
Privacy: Assessing vendor data handling practices before sharing personal information
Director obligations: Directors must exercise due diligence in fulfilling their duties

Key principles:

Proportionality - the level of investigation should match the risk
Documentation - maintain records of the due diligence process
Independence - use independent advisers where appropriate
Timeliness - conduct due diligence before committing to the transaction

Business Context

Thorough due diligence protects businesses from hidden risks in transactions, vendor relationships, and regulatory obligations, enabling informed decisions and demonstrating reasonable care.

How Clever Ops Uses This

Clever Ops assists Australian businesses with technology and operational due diligence by creating automated assessment frameworks. We build checklists, data-gathering workflows, and analysis tools that streamline the due diligence process while ensuring nothing critical is overlooked.

Example Use Case

"A business acquiring a smaller competitor uses a structured technology due diligence checklist to evaluate their software systems, data practices, and cybersecurity posture before finalising the deal."