Commercial, Operational & Legal Due Diligence

Financial & Tax Due Diligence examines whether the target's accounting records, revenue recognition, working capital, and tax positions are accurate and sustainable — it is fundamentally a review of the numbers. Commercial, Operational & Legal Due Diligence examines everything that determines whether those numbers will hold up after the deal closes: customer concentration and churn, competitive position, operational capacity, vendor dependency, material contracts, litigation, IP ownership, and labour compliance. A target can have immaculate financials and still be a poor acquisition if its top three customers can walk away, its key contracts terminate on change of control, or its core IP is registered in a departing founder's personal name.

For a mid-market target with an organised data room and cooperative management, 5–8 weeks from data room access to final report is typical. Complexity, sector (regulated sectors like NBFC, pharma, or food processing generally take longer due to licence and compliance depth), the number of material contracts requiring review, and the quality and speed of management's document production are the main variables. Running this diligence in parallel with Financial & Tax Due Diligence, rather than sequentially, is usually the more time-efficient approach for the deal timeline overall.

Revenue that depends heavily on a small number of customers is inherently more fragile than diversified revenue — a single customer's decision to switch suppliers, renegotiate terms, or simply not renew can materially change the target's trajectory, and that decision is often more likely, not less, immediately after an ownership change becomes known. We compute top-5 and top-10 customer revenue concentration, review contract tenure and renewal history, and specifically check whether major customer contracts contain change-of-control or assignment clauses that this specific transaction structure could trigger.

A change-of-control clause in a contract gives the counterparty (a customer, vendor, landlord, or lender) the right to terminate, renegotiate, or require consent before the contract continues if the company's ownership or control changes — which an acquisition, by definition, does. Depending on how the transaction is structured (share purchase, slump sale, or merger), different contracts may or may not technically trigger these clauses. Identifying every material contract with such a clause before signing — not after — allows the deal team to build consent-seeking into the closing timeline or restructure the deal to avoid the trigger.

Both. Litigation, regulatory proceedings, or disputes involving a target's promoters and key managerial personnel — even in their personal capacity — can carry reputational, governance, or in some cases financial exposure (personal guarantees, related-party indemnities, promoter pledge of shares) that affects the transaction. We extend litigation and background review to promoters and key managerial personnel, not just the corporate entity being acquired, as a standard part of scope.

We check the relevant government registers directly — IP India's trademark and patent databases, copyright registries, and domain name registrar records — to confirm registration is in the target company's name, not a founder's personal name, a departed co-founder, or an affiliated group entity. Where IP was created by employees, consultants, or contractors, we review whether formal assignment agreements exist and were properly executed. Trade secrets and unregistered know-how are assessed through confidentiality agreement coverage and internal protection practices rather than a public register.

No. Finding a red flag does not mean the deal cannot proceed — it means the deal team now has the information to decide how to respond: price adjustment, a specific indemnity provision, a condition precedent requiring the issue to be resolved before closing, a post-closing covenant, or, in genuinely serious cases, walking away. We categorise every finding as red, amber, or green and pair each with a specific recommended response, and we communicate serious findings to the client as soon as they are confirmed rather than waiting for the final report.

Yes. Regulated-sector targets require an additional layer of review: licence and registration validity and transferability under the applicable regulator (RBI for NBFCs and payment companies, FSSAI for food businesses, sector-specific approvals for pharma or healthcare), compliance history with that regulator including any show-cause notices or penalty orders, and whether the transaction itself requires prior regulatory approval or intimation (an RBI-regulated NBFC's change in shareholding, for example, has specific approval requirements under RBI's Master Directions). We scope this specifically for the target's sector rather than applying a generic diligence template.

Yes. Under the Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act 2013, every organisation with 10 or more employees must constitute an Internal Complaints Committee and maintain a compliant policy. We review whether the ICC is properly constituted, whether the policy meets statutory requirements, and the history and handling of any complaints. Non-compliance carries statutory penalties, but the more material acquisition risk is reputational and cultural — an organisation with a poorly functioning or absent grievance mechanism carries elevated people-risk that a purely financial review would never surface.

A data room is the organised, typically virtual, repository of documents a target makes available to a buyer's diligence team — corporate records, contracts, financial statements, compliance records, and so on, generally organised by category and indexed for navigation. A well-prepared data room, populated completely and organised logically before diligence begins, is the single biggest lever a seller has to keep the process on schedule and avoid unnecessary buyer suspicion caused by information gaps that are actually just organisational gaps.

Yes, where the deal is at a stage where confidentiality with the target's own staff is manageable — typically once an NDA and, often, some level of employee awareness of the process is in place. Interviews with sales leadership, operations heads, and HR provide operational and cultural insight that documents alone cannot. Where confidentiality to the broader employee base must be preserved (a common concern pre-signing), interviews are limited to a small circle of senior management the target has cleared for disclosure, and we plan the interview schedule around the target's confidentiality constraints, not against them.

A red flag is a finding serious enough that it could materially affect deal viability, valuation, or structure — something that typically needs resolution, a significant price adjustment, or a specific indemnity before the deal should proceed as contemplated. An amber flag is a real but manageable finding — addressable through a standard indemnity clause, a modest price adjustment, or a post-closing covenant — that does not by itself threaten the transaction. We calibrate this categorisation to the specific deal size and buyer's risk appetite, not a one-size-fits-all threshold.

We work alongside — not instead of — the client's transaction counsel. Legal document review (material contracts, litigation records, IP registrations) is typically conducted jointly, with PNPC's role focused on translating legal findings into commercial and financial impact — quantifying litigation exposure, assessing the revenue-at-risk from a change-of-control clause, or costing out a compliance remediation — while counsel handles the formal legal opinion and drafts the resulting contractual protections. This division keeps each professional working in their area of genuine expertise rather than duplicating effort.

Yes, that is one of its primary practical uses. Findings that quantify a real risk — customer concentration that could plausibly reduce forward revenue, a compliance gap requiring remediation spend, an unassigned IP asset requiring legal correction, a litigation exposure with an estimated probability-weighted cost — give the buyer's negotiating team a factual, defensible basis to request a price adjustment, an escrow holdback, or a specific indemnity, rather than a vague "we found some issues" negotiating position that sellers can more easily push back on.

This happens, particularly with highly sensitive commercial information like detailed customer pricing or proprietary technical documentation, especially before signing when there is residual deal risk. We work with the seller to find alternative verification approaches — aggregated data instead of granular detail, third-party confirmation, or access restricted to a smaller "clean team" bound by additional confidentiality undertakings — and we clearly flag to our client any area where diligence access was genuinely limited, rather than silently treating an unverified claim as confirmed.

We assess key-person dependency — which revenue relationships, technical capabilities, or operational processes depend on specific individuals — and review retention-relevant factors like existing employment terms, non-compete coverage, and any retention or earn-out incentive structures already discussed. We do not conduct psychological assessments of individual intent to stay, which is outside our competence and typically outside the scope of a commercial diligence mandate, but we ensure the deal team understands exactly where the dependency risk sits so retention terms can be structured deliberately rather than assumed away.

PNPC generally scopes Commercial, Operational & Legal Due Diligence on a fixed-fee basis once the mandate scope, target size, and sector complexity are understood at the scoping stage, giving the client cost certainty for budgeting purposes. Where scope genuinely cannot be fixed in advance — a target of unknown size or a sector requiring an unusually deep specialist review — we agree a capped fee range with clear triggers for any scope expansion, communicated and agreed with the client before additional work proceeds, not after.

This scenario is best avoided by completing diligence — or at least the highest-risk elements of it — before signing, but where a specific item genuinely cannot be verified pre-signing (a regulatory approval still pending, for instance), it should be addressed through a specific condition precedent to closing or a post-closing indemnity in the definitive agreement, not left unaddressed. If a material issue surfaces after signing but before closing, the definitive agreement's disclosure and bring-down warranty mechanisms typically govern how it is handled — which is exactly why those mechanisms need to be drafted carefully at signing, anticipating this possibility.

Yes. PNPC has operating offices in Chennai, Bangalore, Hyderabad, and Dubai, and we coordinate cross-border diligence — an Indian buyer acquiring a UAE target, or a UAE-based buyer acquiring an Indian company — as a single engagement rather than splitting the work between unconnected correspondent firms in each jurisdiction. UAE-side considerations include UAE Corporate Tax registration and compliance status, Ultimate Beneficial Owner (UBO) and AML/CFT compliance, any legacy Economic Substance Regulations filings and penalty history for pre-2023 financial years (ESR reporting itself was discontinued for financial years commencing on or after 1 January 2023), trade licence validity and transferability, and WPS (Wage Protection System) payroll compliance, alongside the equivalent India-side review.

We structure the final report around a management summary of red/amber/green findings and their recommended deal response first, with detailed supporting analysis and evidence in subsequent sections for those who need to go deeper. The goal is a report an investment committee member can genuinely read and act on in the time they realistically have, not a document that is comprehensive but effectively unusable under deal-timeline pressure.

Yes — this is typically called vendor due diligence, and we recommend it proactively for sell-side clients preparing for a competitive sale process. Running our own commercial, operational, and legal review before going to market lets the seller identify and remediate issues (an unassigned trademark, a missing POSH policy, an ambiguous customer contract) in advance, rather than having a buyer's diligence team find them mid-negotiation and use them as renegotiation leverage.

Fees vary meaningfully with target size, sector complexity, number of material contracts and locations, and whether legal counsel coordination is bundled into the PNPC engagement or run as a parallel workstream by the client's own lawyers. We do not publish a standard fee card because a straightforward single-location target and a multi-location, multi-sector target genuinely require different levels of effort — we provide a specific, written quote after an initial scoping conversation that costs the client nothing.

For most mid-market targets, we conduct a structured assessment covering system inventory and criticality, software licensing compliance, backup and business continuity practices, any history of data breach or security incident, and data privacy compliance relevant to the target's sector. Where a deal's scale or the target's technology dependency (a SaaS or data-heavy business, for instance) warrants a deeper technical security audit, we bring in a specialist cybersecurity firm as part of a coordinated engagement rather than presenting a surface-level review as a full technical audit.

Financial diligence alone tells you the numbers are accurate as of the historical period reviewed — it does not tell you whether those numbers will continue. A target can show three years of clean, growing, audited revenue and still lose 40% of that revenue within a year of new ownership if two customers exit on a change-of-control trigger nobody checked, or if a key technical founder — whose departure was never modelled — leaves within the first six months. Commercial and legal diligence exists specifically to test the forward-looking assumptions embedded in the deal price, which pure financial diligence, by its retrospective nature, cannot do.

No. PNPC is a Chartered Accountancy firm; formal legal opinions on matters like contract enforceability, title, or litigation exposure are issued by qualified legal counsel, either the client's own transaction lawyers or PNPC's empanelled legal partners, working alongside our team. Our role in the legal workstream is to coordinate the review, ensure the right questions are asked and the right documents are examined, and translate legal findings into commercial and financial deal impact — not to substitute for independent legal advice on matters requiring it.

Multi-state targets add a layer of complexity — state-specific labour law variations (Shops and Establishments Act registrations, state-specific professional tax), state stamp duty considerations on any asset or property transfer, and potentially multiple GST registrations that each need independent compliance verification. We map the target's full operational footprint at scoping stage and structure the diligence workplan to cover each material location, rather than reviewing only the headquarters location and assuming other locations mirror it.

Our engagement is scoped to deliver the diligence findings and support negotiation through to signing or the decision not to proceed — the fee and deliverable are not contingent on the deal actually closing. If the client decides, based on our findings, not to proceed with the transaction, that is a legitimate and often highly valuable outcome of the diligence process, not a failed engagement. We are structured this way deliberately, because an advisor whose fee depends on a deal closing has a conflict of interest that a genuine risk-assessment engagement cannot carry.

Yes. We scope the diligence to cover the holding company and each material operating subsidiary, since commercial, operational, and legal risk typically sits at the operating subsidiary level even though the transaction itself may be structured as a purchase of the holding company's shares. Intercompany arrangements, cross-guarantees, and any subsidiary-level litigation, licensing, or compliance issues are reviewed with the same depth as they would be for a standalone target, adjusted for materiality across the group.

PNPC generally offers a materially more cost-effective engagement than a large international consulting or Big Four advisory firm for mid-market Indian and India-UAE transactions, while providing partner-level attention throughout — clients deal directly with senior CAs, not a large team of juniors overseen remotely. For very large, complex, or multi-jurisdictional transactions beyond mid-market scale, a larger firm's broader bench and specific sector practice depth may be the more appropriate fit, and we say so candidly rather than over-promising on engagements better suited elsewhere.

A statutory audit provides an opinion on whether financial statements present a true and fair view under the applicable accounting standards, for a defined historical period, addressed generally to shareholders and regulators. Due diligence — commercial, operational, or legal — is a bespoke, forward-looking risk assessment commissioned by a specific buyer for a specific transaction, addressed only to that client, and is not an audit opinion or any form of assurance report under the Standards on Auditing. It does not certify that the target's financials are correct; it assesses risk to inform a decision.

In a joint venture, a minority stake acquisition, or a structured investment where governance and information rights will be shared between parties post-transaction, an incoming minority investor or JV partner has just as much reason to commission independent commercial and legal diligence as a full acquirer would — the fact that they are not buying full control does not reduce their exposure to the same underlying business risks, particularly where they will not have day-to-day operational visibility after closing.

For manufacturing, chemical, real estate, or other environmentally sensitive targets, we review Consent to Establish and Consent to Operate certificates from the applicable State Pollution Control Board, hazardous waste handling authorisations, any history of environmental show-cause notices or closure orders, and pending environmental litigation. Where the sector or scale of operations warrants deeper technical assessment — soil or groundwater contamination risk on owned industrial land, for instance — we recommend engaging a specialist environmental consultant alongside our review rather than presenting a compliance-document review as a full environmental site assessment.