Corporate

Legal due diligence when buying a business

10 min read · 2,194 words · Published · Last reviewed

Due diligence is the process of verifying what you are actually buying. On a UK business acquisition it runs alongside financial and commercial diligence and feeds directly into three things: whether to proceed, what to pay, and what protection the sale agreement must contain.

This guide sets out how legal due diligence works in England and Wales in 2026: how it differs between share and asset purchases, the workstreams a buyer's solicitors run, the red flags that most often change deals, how findings translate into price adjustments, warranties, indemnities and retentions, and how to run the process efficiently.

It is written for buyers of owner-managed and mid-market businesses. It is general information, not advice on a specific transaction.

Key takeaways

  • In a share purchase you inherit the company's history and liabilities; in an asset purchase you generally select what you take, though employees usually transfer under TUPE.
  • Caveat emptor applies - the seller has no general duty to volunteer bad news, so protection comes from diligence and the contract.
  • Change-of-control clauses in key contracts are among the most common deal-changing findings.
  • The disclosure letter qualifies the warranties; a fully disclosed problem is usually a problem you have accepted.
  • Findings translate into price adjustments, specific indemnities, retentions, escrow or conditions to completion.
  • Scope diligence proportionately: a materiality threshold keeps cost and timetable under control.

What legal due diligence is for

Legal due diligence answers three questions. Does the seller own what it is selling? What liabilities and obligations come with it? And what could stop the business operating as expected after completion?

English law gives the buyer little help by default. The principle of caveat emptor - buyer beware - means the seller is generally not obliged to volunteer adverse information, though it must not make misrepresentations. Everything the buyer relies on has to be discovered through diligence or protected through the contract.

  • Verify title to shares or assets, and the corporate history behind them
  • Identify liabilities, contingent claims and regulatory exposure
  • Test the durability of key contracts, customers and licences
  • Confirm ownership of the intellectual property the business runs on
  • Understand employment terms, pension exposure and consultation obligations
  • Identify anything that requires third-party consent to complete
  • Generate the factual basis for warranties, indemnities and price

Share purchase or asset purchase: why the structure changes everything

The deal structure determines the scope and risk profile of diligence. In a share purchase the buyer acquires the company itself, and with it every liability the company has ever incurred, known or unknown. In an asset purchase the buyer generally selects the assets and contracts it wants, leaving the rest behind.

Scroll the table sideways to see all columns.

Share purchase versus asset purchase from a diligence perspective
IssueShare purchaseAsset purchase
What transfersThe whole company, including history and unknown liabilitiesOnly the identified assets and assumed liabilities
Diligence scopeBroad and deep - corporate history, tax, litigation, everythingNarrower, focused on title to the assets being acquired
ContractsUsually continue automatically, subject to change-of-control clausesRequire novation or assignment, often needing counterparty consent
EmployeesRemain employed by the companyUsually transfer automatically under TUPE, with consultation obligations
Licences and consentsMay continue, subject to change-of-control conditionsFrequently need to be reapplied for
Typical protectionExtensive warranties, tax covenant, indemnitiesNarrower warranty set, but more completion mechanics

The workstreams: what buyers actually review

A legal diligence exercise is normally broken into workstreams, each producing findings that are reported by exception - that is, the report highlights problems rather than describing everything reviewed.

Corporate and constitutional

  • Statutory books, share capital history, share transfers and allotments
  • Articles of association and any shareholders' agreement
  • Options, warrants, convertible instruments and EMI schemes
  • Board and shareholder minutes
  • Group structure, dormant subsidiaries and intra-group arrangements
  • Persons with significant control and Companies House filing history

Commercial contracts

  • Top customer and supplier contracts by value and dependency
  • Change-of-control, assignment and termination provisions
  • Exclusivity, minimum volume and most-favoured-nation terms
  • Liability caps, indemnities and unusual warranty exposure
  • Contracts running on expired terms or on the counterparty's standard terms
  • Agency and distribution arrangements, and termination compensation risk

Employment and pensions

  • Contracts for senior staff, notice periods and post-termination restrictions
  • Consultants and contractors, and employment status risk
  • Bonus, commission and incentive arrangements, including on a change of control
  • Grievances, disciplinaries, tribunal claims and settlement agreements
  • Pension arrangements and auto-enrolment compliance
  • TUPE analysis and consultation obligations on an asset deal

Property

  • Titles, leases, rent, break clauses and reinstatement obligations
  • Landlord consent to assignment or change of control
  • Repair liabilities, dilapidations and service charge arrears
  • Planning permissions and use classes
  • Environmental issues and contamination risk

Intellectual property and IT

  • Registered trade marks, patents and designs, and renewal status
  • Ownership of software, code and designs created by contractors
  • Licences in and out, and open-source usage
  • Domain names, brand assets and social accounts
  • Key IT systems, hosting arrangements and reliance on single suppliers
  • Confidentiality and IP assignment in employment contracts

Regulatory, data and compliance

  • Sector licences and authorisations, and their transferability
  • UK GDPR and Data Protection Act 2018 compliance, and any ICO correspondence
  • Personal data breaches and records of processing
  • Anti-bribery, sanctions and modern slavery compliance
  • Health and safety records and enforcement history
  • Insurance cover, claims history and any gaps

Disputes and tax

  • Live litigation, arbitration and threatened claims
  • Historic settlements with continuing obligations
  • HMRC enquiries, disputes and outstanding liabilities
  • R&D claims, VAT treatment and employment status determinations
  • Group relief and historic reorganisations

The findings that most often change a deal

A minority of diligence findings actually move price or structure. In owner-managed acquisitions the same issues recur.

Scroll the table sideways to see all columns.

Common red flags and how they are usually resolved
FindingWhy it mattersTypical resolution
Change-of-control clause in a key customer contractThe largest revenue line can walk away on completionConsent as a condition to completion, price adjustment, or an earn-out
IP created by contractors without assignmentThe business may not own the product it sellsAssignments obtained pre-completion, or a specific indemnity
Employment status misclassificationBack tax, holiday pay and employment rights exposureSpecific indemnity, retention, or price reduction
Gaps in the statutory books or unrecorded share transfersTitle to the shares being sold may be defectiveRectification pre-completion, supported by warranties
Undisclosed litigation or a threatened claimDirect financial exposure and management distractionSpecific indemnity, escrow, or exclusion from the deal
Owner dependency with no restrictive covenantsValue evaporates if the founder leaves and competesService agreements, restrictive covenants, deferred consideration
Data protection non-complianceRegulatory exposure and remediation costWarranty, indemnity, or a remediation condition

How the process runs in practice

Diligence starts once heads of terms are agreed and exclusivity and confidentiality are in place. The buyer's solicitors issue a legal due diligence questionnaire, the seller populates a data room, and questions are raised and answered iteratively until the buyer's team can report.

A typical sequence

  • Heads of terms, NDA and exclusivity agreed
  • Diligence questionnaire issued and data room opened
  • First-pass review, follow-up questions and management meetings
  • Red flag report to the buyer, informing price and structure
  • Full report and, in parallel, negotiation of the sale agreement
  • Disclosure letter negotiated against the warranties
  • Conditions satisfied, then exchange and completion
  • Post-completion filings and integration steps

Timescales

For an owner-managed business with a well-prepared data room, legal diligence commonly takes four to eight weeks, running alongside financial diligence and contract negotiation. Poor seller preparation is the most common cause of delay, and delay is the most common cause of deals failing.

Scope it proportionately

Agree a materiality threshold with your solicitors at the outset - for example only reviewing contracts above a stated annual value. Unbounded diligence costs more than the risks it finds on smaller deals.

How findings translate into deal protection

Diligence output is not an end in itself; it is the input to the sale agreement. Each material finding should be traceable to a specific protection.

The disclosure letter

The disclosure letter qualifies the warranties by setting out matters that are true despite what the warranty says. Anything fairly disclosed is generally something the buyer cannot later claim for. This is why diligence findings must be read against the disclosure letter and why late, voluminous disclosure immediately before exchange deserves close scrutiny.

Warranty limitations

Warranty claims are typically constrained by financial caps, de minimis and basket thresholds, and time limits - commonly shorter for commercial warranties and longer for tax. Check these limits carefully: generous warranties with a low cap and a twelve-month claim window may offer less protection than they appear to.

Scroll the table sideways to see all columns.

Protection mechanisms and when each is used
MechanismWhat it doesUsed when
Price adjustmentReduces consideration to reflect a quantified issueThe exposure is known and can be valued
WarrantySeller statement of fact; breach gives a damages claimRisk is unknown and the buyer wants disclosure pressure
Specific indemnityPound-for-pound recovery for an identified riskA specific problem has been found in diligence
Retention or escrowPart of the price held back to meet claimsSeller covenant strength is uncertain
Condition precedentCompletion depends on something happening firstConsents, licences or remediation are needed
Earn-outDeferred consideration tied to performanceValue depends on retention of customers or founders
W&I insuranceInsurer covers warranty claims instead of the sellerSellers want a clean exit, common in mid-market deals

Running a good process as a buyer

  • Agree scope and materiality thresholds before the questionnaire is issued
  • Prioritise workstreams by where value actually sits in the business
  • Insist on a structured, indexed data room rather than ad hoc email disclosure
  • Ask for report by exception, with a red flag report early
  • Keep the sale agreement negotiation moving in parallel, not after diligence closes
  • Track every material finding through to a contractual protection
  • Involve tax advisers early on structure, not at the end
  • Plan post-completion integration steps during diligence, not after

Buyer's due diligence checklist

  • Corporate records and title to shares verified
  • Top contracts reviewed for change of control and termination
  • Employment terms, incentives and TUPE position understood
  • Property titles, leases and consents checked
  • IP ownership chain confirmed, including contractor-created work
  • Data protection and sector regulatory compliance assessed
  • Litigation and tax exposure identified
  • Insurance cover and claims history reviewed
  • Each material finding mapped to price, warranty, indemnity or condition
  • Disclosure letter reviewed against every warranty

Frequently asked questions

What is legal due diligence when buying a business?
It is the buyer's investigation of the target's legal position: title to shares or assets, contracts, employees, property, intellectual property, regulatory compliance, litigation and tax. The findings determine whether to proceed, what to pay and what protection the sale agreement needs.
How long does legal due diligence take?
For an owner-managed business with a well-prepared data room, typically four to eight weeks alongside financial diligence and contract negotiation. Poor seller preparation is the most common cause of delay.
What is the difference between a share purchase and an asset purchase?
In a share purchase you buy the company and inherit its liabilities and history. In an asset purchase you buy selected assets and assume only agreed liabilities, though employees generally transfer automatically under TUPE and contracts usually need consent to novate.
What are the biggest red flags in due diligence?
Change-of-control clauses in key customer contracts, intellectual property created by contractors without written assignment, employment status misclassification, gaps in statutory books, undisclosed litigation, and heavy dependence on an owner with no restrictive covenants.
What is a disclosure letter?
A document from the seller qualifying the warranties by disclosing matters that make them untrue. Anything fairly disclosed is generally something the buyer accepts and cannot later claim for, which is why it must be reviewed against every warranty.
What is the difference between a warranty and an indemnity?
A warranty is a statement of fact; breach gives rise to a damages claim subject to proving loss and mitigation. An indemnity is a promise to reimburse pound for pound for an identified risk, and is generally the stronger protection where diligence has found a specific problem.
What is warranty and indemnity insurance?
An insurance policy under which an insurer, rather than the seller, meets warranty claims. It is common in mid-market deals where sellers want a clean exit and buyers still want protection, though known issues found in diligence are usually excluded.
Can I reduce the price after due diligence?
Findings frequently lead to price adjustments, but only if identified before the price is contractually fixed. That is why the red flag report should come early and why sale agreement negotiation runs alongside diligence rather than after it.
Does the seller have to tell me about problems?
Not generally. English law applies caveat emptor: the seller must not misrepresent, but has no broad duty to volunteer bad news. Protection comes from thorough diligence and from warranties and indemnities in the sale agreement.
Can I skip due diligence on a small acquisition?
It is rarely wise, but it should be scaled. Set a materiality threshold and focus on where value and risk actually sit - usually title, key contracts, employees and IP ownership - rather than reviewing everything at full depth.

Sources and further reading

Related guides