ESG Due Diligence: Framework, Checklist & Process for M&A Teams

Four in five dealmakers now say ESG factors are firmly on their M&A agenda. Yet many teams still treat environmental, social, and governance review as a compliance formality rather than the value-protection exercise the data shows it has become. As ESG regulations and investor expectations evolve, incorporating ESG factors into transaction analysis is becoming a more important part of assessing deal risk.

BCG’s 2024 survey found that respondents reported preserving or avoiding losses averaging 5.4% of deal value, with some reporting protection of up to 10%. Separately, a KPMG case study reported that a Chinese investor reduced its offered deal price by US$10 million after ESG due diligence identified multiple risks.

Such findings can expose buyers to remediation costs, financial penalties, and reputational damage after closing.

ESG due diligence is the structured review of a target’s environmental, social, and governance practices, risks, and disclosures before a deal closes. It evaluates issues ranging from carbon emissions and climate-related risks to labor practices, human rights violations, and corporate governance controls. 

This article explains the key steps in the review, how to assess each ESG pillar, and how to translate material findings into deal terms that legal and finance teams can act on.

Key Takeaways

• ESG due diligence is a tool for managing financial and legal risk. Its findings now directly move purchase prices, representations and warranties, and indemnities.
• On average, an ESG due diligence engagement can help preserve deal value, especially when the review identifies material risks before closing.
• Environmental, social, and governance reviews require distinct evidence. Environmental diligence may cover emissions, permits, energy efficiency, and renewable energy initiatives; social diligence examines labor and supply-chain practices; governance diligence reviews board structures and anti-corruption controls. 
• CSRD, SFDR, and CSDDD can create relevant ESG requirements for US acquirers with European targets, EU-linked supply chains, or European investors. 
• A defensible ESG due diligence process runs in five stages: screening, scoping and DDQ, document review, management interviews and third-party verification, and risk scoring. Strong data collection throughout these stages improves the reliability of the final assessment.
• Greenwashing due diligence requires cross-referencing a target’s public sustainability goals and stated company commitments against internal emissions data, financial disclosures, and independent ESG audits.
• A virtual data room with a folder structure mapped to the E, S, and G pillars keeps evidence organized and traceable and helps key stakeholders review findings consistently with other due diligence processes. 

What Is ESG Due Diligence?

ESG due diligence is the structured assessment of a target company’s environmental, social, and governance practices, risks, and disclosures before an investment or acquisition closes. Unlike a general compliance checklist, it evaluates material ESG factors that may affect financial performance, regulatory exposure, or long-term enterprise value. This includes the target company’s sustainability practices, ESG controls, and broader ESG management, rather than every disclosure it happens to publish.

An ESG audit is typically a point-in-time, third-party verification of a specific claim, such as a carbon footprint calculation or selected key performance indicators. Sustainability reporting, by contrast, is the target’s own disclosure prepared for stakeholders, regulators, or applicable reporting standards, not specifically for a buyer’s underwriting decision.  

This allows buyers to assess the company’s ESG performance and determine whether disclosed policies and practices are supported by operational evidence.

Buy-side M&A teams, private equity deal teams, in-house ESG specialists, and third-party ESG advisory firms typically conduct this work. For multinational companies, the review may also need to account for different jurisdictional requirements and global standards. 

It usually begins after the letter of intent (LOI) is signed and runs in parallel with financial and legal due diligence, feeding into the same deal-team discussions rather than operating as a separate track

Why ESG Due Diligence Matters in 2026

ESG due diligence carries three distinct forms of risks in today’s deal environment: financial, regulatory, and investor-driven.

Financial risk

ESG liabilities are now priced into deal economics, not treated as post-close surprises. Environmental contamination, supply chain labor violations, and governance failures have each directly reduced acquisition prices or triggered indemnity claims after close. ESG due diligence preserved an average of 5.4% of deal value and protected 10% of deal value on transactions where the review surfaced material findings.

Regulatory exposure

CSRD and SFDR due diligence apply to entities and financial market participants within their respective scopes. The amended CSDDD will impose human rights and environmental due diligence obligations on very large companies within its scope, with the relevant national measures taking effect on July 26, 2029. 

None of these are US regulations, but CSRD or SFDR requirements may affect US acquirers or investment firms where the relevant entity, group, financial market participant, or financial product falls within the applicable regulatory scope. 

On the US side, California’s SB 253 imposes greenhouse gas reporting requirements on covered entities. The SEC’s 2024 climate disclosure rules remain stayed, and the SEC proposed rescinding them in May 2026. Conflating EU and US requirements is the most common error in early-stage ESG due diligence framework design, so it’s better to keep compliance tracks separate, even when they converge on the same target.

LP and investor pressure

Institutional investors are pushing ESG due diligence in M&A further down the pipeline. 73% of asset owners now incorporate sustainability factors into investment decisions. According to the research, 57% of dealmakers expect to run ESG due diligence on most future transactions.

There is the same shift on the LP side. For financial market participants and products within scope, SFDR requires sustainability-related disclosures, including disclosures applicable to products commonly described under Articles 8 and 9.

ESG Due Diligence Checklist: The E, S, and G Pillars

Review each pillar from the buyer’s perspective: what to check, which ESG considerations matter most, and which red flags should trigger deeper review. 

Environmental (E)

Environmental due diligence starts with emissions data and regulatory history, not the sustainability report’s headline commitments. Robust data collection is essential because incomplete environmental records can distort the overall ESG assessment and obscure material exposures. 

• GHG emissions inventory and Scope 1/2/3 disclosure completeness. A target reporting only Scope 1 and 2 while industry peers disclose Scope 3 may indicate a scoping gap that requires further review of its ESG reporting practices.
• Climate-related physical and transition risk exposure. Flood, drought, or heat exposure at key facilities, and transition risk tied to carbon-intensive assets or product lines. These factors can create material ESG risk even where current operations remain compliant.
• Environmental regulatory compliance. Permits, contamination history, and EPA enforcement records tied to current and former operating sites. Gaps may indicate weaknesses in ESG compliance or expose the buyer to post-close liabilities.
• Carbon target credibility. Whether Science Based Targets initiative (SBTi) alignment or net-zero commitments match operational emissions data, not just the language in the sustainability report.
• EU Taxonomy eligibility. Where relevant, determine whether economic activities meet applicable classification criteria and how this affects financing, disclosures, or other ESG requirements connected with the transaction.    

Social (S)

Social due diligence examines labor practices and supply chain accountability with the same rigor environmental review applies to emissions. These factors can reveal weaknesses in ethical practices that may affect compliance, reputation, and the broader business case for the transaction. 

• Labor practices and supply chain audit trail. Documentation against ILO standards and modern slavery compliance requirements, traceable to specific suppliers rather than a general policy statement.
• Employee safety record and regulatory citations. OSHA (or equivalent) citation history at operating facilities, not just a stated safety policy.
• DEI data. Gender pay gap figures, and board and management representation, reported with methodology rather than a single aggregate number.
• Customer data privacy and product liability record. GDPR and CCPA compliance history, including any prior enforcement actions or unresolved complaints. Weaknesses can damage customer loyalty and create legal exposure.  
• Community impact and human rights risk. Exposure tied to the target’s specific operational geographies, weighted toward jurisdictions with documented human rights risk. This can be a significant challenge for businesses with complex international supply chains.

Governance (G)

Governance review is where greenwashing due diligence findings surface, because governance failures are usually what let a gap between public claims and internal reality go unchecked. Strong governance also helps determine whether the target’s ESG efforts are embedded in decision-making. 

• Board independence, diversity, and ESG committee structure. Determine whether ESG oversight resides with a board committee that meets regularly and exercises meaningful oversight, rather than merely existing on an organizational chart.
• Executive compensation alignment with ESG metrics. Assess whether ESG-linked pay components are measurable, clearly defined, and tied to verified outcomes and the company’s performance.
• Anti-corruption and anti-bribery controls. Review FCPA, UK Bribery Act, and other applicable compliance history, including prior investigations, settlements, and internal controls designed to ensure compliance.
• Whistleblowing policy and past enforcement actions. Confirm whether reporting channels exist in practice, whether employees use them, and whether reported issues have resulted in documented investigations and resolutions.
• ESG reporting framework alignment. Compare the target’s disclosures with frameworks such as GRI, SASB, and ISSB/IFRS S1 and S2 to determine whether its stated ESG principles are reflected in actual reporting practices.
• Greenwashing risk. Compare the target’s public ESG narrative with internal disclosures, emissions data, and supplier audit results. This review plays a critical role in identifying unsupported claims that could create regulatory, financial, or reputational exposure.

The ESG Due Diligence Process

A defensible ESG due diligence process can be organized into five stages, each aligned with a specific point in the deal timeline.

• Stage 1: ESG screening. ESG screening runs before the LOI: scan publicly available ESG data, such as sustainability reports, CDP disclosures, regulatory filings, and news coverage, to determine whether ESG risk warrants a deeper review and to shape the scope of everything that follows.
• Stage 2: Scoping and DDQ. After the LOI, define the material ESG issues specific to the target’s industry and geography, then send an ESG due diligence questionnaire (DDQ) tailored to the sector and covering the E, S, and G pillars. A manufacturing target needs heavier environmental emphasis than a SaaS company, where governance and data privacy carry more weight.
• Stage 3: Document review in the data room. Review sustainability reports, audit trails, emissions data, compliance certificates, supply chain records, board governance documents, and ESG policies inside the deal’s virtual data room. Cross-reference the target’s public ESG claims against its internal documentation to flag greenwashing before it reaches the deal terms.
• Stage 4: Management interviews and third-party verification. Interview the target’s sustainability officer, CFO, and legal counsel directly, and commission third-party environmental assessments or social audits where the earlier stages surfaced meaningful risk exposure.
• Stage 5: ESG risk scoring and deal integration. This stage serves as the deal’s core ESG risk assessment: assign a materiality score, High, Medium, or Low, to each identified issue; quantify the financial impact where data supports it; and translate the findings into deal terms.

Translating ESG Findings into Deal Terms

Identifying ESG risk is the easier half of the exercise. Translating it into deal terms is the step most practitioner guidance skips, and the one that determines whether the review protects the buyer, a point EY’s private equity ESG research makes directly.

• Price adjustments for quantified environmental liabilities, such as contamination remediation costs, for example, calculated against a specific estimate rather than a general risk discount.
• ESG-specific representations and warranties covering regulatory compliance, accuracy of emissions disclosures, and supply chain obligations, with survival periods negotiated in the transaction agreement.
• Indemnity provisions for pending ESG-related litigation or regulatory investigations, scoped to the specific matter rather than folded into a general indemnity basket.
• Conditions precedent requiring the seller to obtain specific certifications or remediate identified issues before closing.

Beyond the closing documents, the highest-value output of ESG due diligence is the 100-day ESG integration plan: a prioritized list of the ESG improvements with the clearest financial return, built directly from what the review surfaced. A finding that never reaches this list – or the deal terms above – is a finding that costs time to identify and delivers no protection.

Managing ESG Due Diligence Documents with a Virtual Data Room

ESG due diligence produces a broad and complex set of documents, including sustainability reports, third-party audit certificates, emissions registries, supply chain records, governance filings, and regulatory correspondence. Because findings may be questioned after closing, every document cited in the final report should remain traceable to its source. This makes structured virtual data room due diligence workflows especially important for ESG reviews.

A VDR can support ESG due diligence through the following tools and features:

• Structured folder architecture. Folders can map directly to the environmental, social, and governance pillars, with subfolders for areas such as emissions, supply chains, workforce matters, and governance. This helps each workstream place evidence in the correct category as the review progresses.
• Q&A module. ESG-specific questions about emissions methodology, audit trail completeness, regulatory disclosures, or CSRD readiness can be routed to the appropriate sell-side subject-matter expert. Responses remain recorded within the platform, creating an auditable reference for the final ESG due diligence report.
• Document activity analytics. Review teams can track which ESG documents have been opened or reviewed and by whom. These records can help demonstrate the scope of diligence to internal stakeholders, LPs, or regulators when required.
• Audit trails. Detailed activity logs record document uploads, access, downloads, and other user actions. This makes it easier to trace evidence used in ESG findings back to its source and review history.
• Granular access controls. Permissions can restrict sensitive ESG information to specific users or workstreams, particularly for confidential employee, supplier, compliance, or governance records.

Conclusion

ESG due diligence has moved from a reputational add-on to a core financial risk-management discipline within the M&A process. With expanding regulatory requirements, rising LP expectations, and ESG findings increasingly affecting deal pricing and terms, an incomplete review can expose buyers to financial, operational, and reputational risks after closing.

A structured ESG checklist, a defensible five-stage process, and a well-organized data room provide the foundation for a thorough ESG assessment. Together, they help teams evaluate material ESG considerations, document findings, verify compliance with ESG standards, and support risk mitigation when questions arise later from regulators, investors, or counterparties.

Teams building or refining an ESG due diligence framework can start by mapping their existing document review process against the ESG checklist above. They can then assess whether Ideals data room provides the traceability, access controls, and audit records needed to support informed decisions throughout the transaction.