What Is a Due Diligence Report? Structure, Types & How to Write One

A due diligence report converts weeks of document review into a single decision-ready judgment: proceed, renegotiate, or walk away. Without one, even a thorough due diligence process fails to influence the deal.

Axial’s 2025 Dead Deal Report found that, among 75 unsuccessful Axial-sourced transactions with executed LOIs, non-QoE diligence findings accounted for 25.3% of broken LOIs and QoE EBITDA discrepancies for 21.3%. With global M&A deal value increasing in the first half of 2026, the importance of effective due diligence remains high.

This guide defines the due diligence report and distinguishes its four main types, including the financial and legal due diligence reports. 

It also explains the ten sections a comprehensive report contains, and lays out how to write a due diligence report that a deal committee can act on the same day it lands.

Key Takeaways

• A due diligence report synthesizes findings into risk-rated insights and a recommendation – it is not a document inventory.
• The four main types are financial, legal, commercial, and red-flag due diligence reports, each tailored to a different reader.
• A complete due diligence report structure consists of ten sections, from the executive summary to the appendix.
• The most common mistake is writing the executive summary last, rather than using it to shape the entire report from the start.
• A defined scope and methodology section clarifies the work performed, its limitations, and the basis for the report’s conclusions.
• A well-organized virtual data room shortens the distance between raw evidence and a finished due diligence report.

What Is a Due Diligence Report?

A due diligence report is a structured document that synthesizes the findings of a pre-transaction review into identified risks, transaction implications, and recommendations for decision-makers. LSEG’s Risk Intelligence glossary defines it in similar terms: the formal record of findings, risks, and recommendations produced upon conclusion of a review.

The report is not a catalog of what was reviewed. Analysts who list every contract, invoice, and interview transcript are documenting activity, not producing analysis. A due diligence report earns its place on a deal committee’s desk only when it states what the findings mean for the transaction: which risks change the price, which require an indemnity, and which are severe enough to end the discussion.

Three items get confused with each other during a live deal, and separating them removes real friction. The due diligence checklist lists what to collect. The data room is where that material lives during the review. The due diligence report is what the team produces once the review is complete – the analytical judgment layered on top of both.

Buy-side legal and financial advisors typically produce the report, working alongside the internal corporate development or M&A team that owns the transaction. The audience sits one level above the analysts who wrote it: the investment committee, the CFO or deal sponsor, outside deal counsel, and, on larger transactions, the board.

Types of Due Diligence Reports

Due diligence reports are not interchangeable. The type dictates the depth of financial modeling, the legal scrutiny applied, and how quickly the reader expects an answer.

Financial Due Diligence Report

A financial due diligence report examines the target’s historical financials, quality of earnings, working capital normalization, cash flow sustainability, and capitalization table. It typically includes an adjusted EBITDA bridge separating one-time items from recurring performance, plus a net working capital analysis that helps establish the normalized working capital target, or ‘peg,’ used in the purchase price mechanism. 

The primary reader is the CFO and investment committee, who use it to stress-test the valuation model before the negotiating table.

Legal Due Diligence Report

A legal due diligence report covers corporate governance documentation, material contracts, IP ownership, regulatory compliance, and litigation exposure. It flags change-of-control provisions buried in customer or vendor contracts, confirms that IP assignments actually transferred to the company, and assesses pending litigation and the associated potential exposure. Deal counsel and the board use it to decide what representations, warranties, and indemnities the purchase agreement needs.

Commercial Due Diligence Report

A commercial due diligence report assesses market size, competitive position, customer concentration, revenue sustainability, and management’s growth assumptions. It typically stress-tests top accounts by revenue share, benchmarks pricing against named competitors, and pressure-tests the sales pipeline. An optimistic revenue forecast that collapses under independent review undermines every other number in the model.

Red Flag Due Diligence Report

A red flag due diligence report is typically concise and focuses on deal-critical issues rather than providing a comprehensive review of every workstream. Buyers use this due diligence report format in time-compressed auction processes or during early-stage screening, when a full review is not yet justified.

Due Diligence Report Structure: Essential Sections

A comprehensive due diligence report structure may be organized into the following ten sections, moving from a stand-alone summary to supporting workpapers. Each one earns its place because a different reader stops there.

Executive Summary

The executive summary is a self-contained one-to-two-page overview that answers four questions: what is the deal, what are the three to five deal-critical findings, what is the overall risk assessment, and what is the recommendation. It is the most-read section of the entire due diligence report – often the only section a board member finishes before the meeting – so it has to stand on its own.

Scope and Methodology

The scope and methodology section defines what the review covered and, just as importantly, what it deliberately excluded. Readers need this context to judge whether the due diligence report is complete, and advisors need it to limit their own liability if an excluded area later causes a problem. The virtual data room structure can align with the report’s workstreams, making supporting documents easier to organize and trace.

Company Overview

The company overview is a factual description of the target: legal structure, corporate history, business model, products or services, revenue sources, and organizational chart. This section holds no analysis – that comes later. Its job is to give an unfamiliar reader enough grounding to understand the findings that follow.

Financial Analysis

The financial analysis section presents historical performance, EBITDA quality, working capital trends, the debt schedule, and key ratios. A strong version includes an adjusted earnings bridge reconciling reported EBITDA to a normalized figure, plus a projection assessment testing whether management’s forecast holds up against the data. Corporate Finance Institute treats this as the analytical core of any financial due diligence report.

Legal and Compliance Review

This section covers material contracts, the IP ownership chain, a litigation summary, regulatory standing, and any outstanding consents or third-party approvals required to close. Every finding here should tie to a specific document reference, since deal counsel will need to trace each flagged clause back to its source when drafting the purchase agreement.

Commercial and Market Assessment

The commercial and market assessment covers market sizing, competitive positioning, customer concentration risk, pricing assumptions, and sales pipeline quality. Its purpose is to test the growth assumptions behind the valuation, not simply describe the market. A due diligence report that praises the market without stress-testing customer concentration offers a narrative rather than an analysis.

Operational and HR Review

The operational and HR review covers organizational structure, key-person dependencies, HR compliance, IT systems, and standalone operational readiness. Buyers frequently underweight this section, then discover post-close that the business depended on two or three people who were never contractually locked in.

Risk Register and Findings Summary

The risk register and findings summary consolidates every identified risk into one table, rated by severity – high, medium, or low – and likelihood, with the deal implication and recommended mitigation for each. The recommended-action column should identify an appropriate transaction response, such as a price adjustment, indemnity, contractual protection, pre-closing remediation, or, for severe findings, reconsideration of the transaction.

A short due diligence report example below shows how severity, likelihood, and mitigation come together in one table:

This table format turns a narrative list of due diligence findings into something a committee can scan in under a minute.

Recommendations and Conditions Precedent

This section states the deal-level conclusion: proceed as-is, renegotiate price, require pre-close remediation of specific issues, or decline. Each recommendation should trace directly back to the findings summary – a reader should never encounter a recommendation here that is not supported by a rated risk two sections earlier.

Appendix

The appendix holds supporting data, document references, and workpapers cited from the body but not intended for a full read by the executive audience. It exists so that anyone who wants to verify a specific finding can do so, without forcing every reader through material only a handful of people will ever open.

How to Write a Due Diligence Report

The process matters as much as the template. These six steps cover how to write a due diligence report that withstands committee scrutiny.

Common Mistakes in Due Diligence Reports

• Confusing volume with quality. A 200-page due diligence report that never states what protects the deal’s commercial value has failed, regardless of how much research went into it.
• Organizing by document type instead of risk category. This fragments related findings across sections and forces the reader to reassemble the actual risk picture.
• Drafting the executive summary last. Writing the summary only after the full report is finished means it never shaped what got investigated in the first place.
• Omitting a defined scope section. Without one, readers may not be able to distinguish between areas deliberately excluded from the review and those that were overlooked.

How a Virtual Data Room Supports Due Diligence Report Production

A well-organized virtual data room due diligence setup accelerates the second job: document categories that mirror the report’s sections let analysts pull supporting evidence without having to hunt through an unstructured folder tree, and a complete audit trail gives every cited document a traceable origin.

Ideals VDR supports this process through several features:

• Structured folder organization. Documents can be organized by workstream, such as legal, financial, commercial, and HR, so supporting evidence aligns more closely with the corresponding sections of the due diligence report.
• Q&A management. The Q&A module keeps questions, responses, and follow-ups in one auditable record, making it easier to incorporate clarifications into legal, commercial, and other report sections.
• Document activity analytics. Engagement data can show which files receive the most attention from reviewers, helping teams identify areas that may require closer analysis or additional explanation.
• Audit trails. Detailed activity logs help teams trace document access and other user actions, supporting a clearer record of the evidence reviewed during due diligence.
• Access controls and security. Granular permissions and document protection features help restrict sensitive information to authorized users throughout the review and reporting process.

Conclusion

A due diligence report’s value has never come from its length. A tight executive summary, a risk-rated findings register, and a clear recommendation do more work than three hundred pages of undifferentiated detail. 

Teams preparing their next M&A due diligence report get there faster when the evidence underneath is organized before the writing starts – whether that means adopting a consistent due diligence report template internally or running the review through a structured virtual data room such as Ideals VDR.