Due diligence

By subject matter, due diligence is legal, financial and tax, commercial or technical, and increasingly also integrity or reputational and security-focused. The latter concentrate on ownership and control structures, beneficial owners, links to politically exposed persons, sanctions listings, litigation and enforcement proceedings, insolvency history, adverse media and the past conduct of key individuals.

Sources include public registers and records — in Slovenia, for example, the business register and published annual reports, the land register and insolvency records — financial statements, court records, sanctions lists, media and other open sources, together with documentation obtained directly from the counterparty, interviews and site visits. The quality of the findings depends on corroboration across mutually independent sources: a single database hit is a lead, not a conclusion.

In some areas due diligence is not voluntary. Obliged entities under anti-money-laundering and counter-terrorist-financing rules must carry out customer due diligence, establish the beneficial owner and monitor the business relationship, while European rules extend due diligence duties to business partners in supply chains and to sustainability reporting. Where no duty applies, due diligence functions as evidence that reasonable care was taken should a dispute arise later.

Because due diligence normally involves personal data, it requires a legal basis and must be proportionate and confined to a defined purpose. The report must clearly separate verified facts, unconfirmed indications and analytical judgment. The result is not a guarantee but a documented, time-bounded picture of risk that informs the decision, the price and the contractual protections.