Can this request be signed electronically?

Yes. Electronic signatures are generally enforceable under the ESIGN Act (15 U.S.C. ch. 96) and UETA where adopted. Confirm whether the recipient needs a specific signature type for regulatory or industry reasons.

When is notarization required?

Notarization is only necessary for documents that require notarized attestations or statutory acknowledgements; check state notary rules and the specific exhibit requirements in the request.

What happens if documents are redacted?

Provide a privilege log describing redactions and produce unredacted versions under suitable protective measures if requested by reviewers or ordered by counsel.

How should sensitive healthcare records be handled?

Treat PHI under HIPAA; include required authorizations and BAA arrangements. Retain HIPAA-related records for six years per 45 CFR §164.530(j).

How are identity and attribution proven for signatures?

Use authentication methods such as email verification, SMS OTP, KBA, or stronger ID verification; preserve the audit trail showing intent, attribution, and timestamp to satisfy ESIGN legal tests.

How long should produced materials be kept?

Retain produced diligence files until after the statute of limitations for potential claims and in accordance with regulatory retention rules; consult IRC §6501(a) and applicable state requirements.

Electronic Signature
Templates
Miscellaneous
Business Due Diligence Request

Business Due Diligence Request

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

Business Due Diligence Request

Recitals

Requesting Party:

Target Business: Date of Request:

WHEREAS, Requesting Party seeks to evaluate the legal, financial, operational and regulatory condition of Target Business for purposes of potential acquisition, investment or commercial relationship; and

WHEREAS, Target Business is willing to provide information and limited access to documents and personnel subject to the terms and protections set forth in this Request and any accompanying confidentiality obligations; and

WHEREAS, the parties desire to establish a binding request framework that defines the scope, schedule, fees and confidentiality terms governing the exchange of due diligence information.

Scope of Requested Due Diligence

Scope of Work

Requested completion timeline: . If phased, describe phase milestones:

Requested Documents and Information

The Requesting Party hereby requests delivery of the following categories of documents and information for the periods and subject matters indicated. Check applicable items and provide any specific instructions.

Document Categories (select all that apply)

Corporate records (articles, bylaws, minutes)

Financial statements and ledgers

Tax returns and tax workpapers

Material contracts and amendments

Intellectual property filings and agreements

Litigation, claims and dispute documents

Compliance and regulatory filings

Insurance policies and loss history

Employee agreements, benefit plans, and payroll summaries

Customer and supplier agreements, key lists

Other:

Delivery Instructions

Preferred delivery method: Electronic Hard copy Secure data room

Primary contact for exchange

Payment Terms

Request Fee Amount: . Fee payor:

Payment schedule and invoicing

Late payment fee: . Costs of collection, including reasonable attorneys' fees, shall be borne by the delinquent party.

Term and Termination

Term start date: Term end date:

Either party may terminate this Request and any further exchange of information upon written notice given no fewer than days, provided that termination shall not relieve either party of obligations accrued prior to termination, including payment and confidentiality obligations.

Confidentiality

All information provided in response to this Request constitutes Confidential Information of the disclosing party. The receiving party shall (i) use Confidential Information solely for the stated due diligence purpose, (ii) restrict access to employees, agents and advisors with a need to know and subject to equivalent confidentiality obligations, and (iii) not disclose Confidential Information to third parties except as compelled by law, subject to prior notice and commercially reasonable efforts to obtain protective relief. Confidential Information does not include information that is or becomes publicly known other than by breach of this Request.

Is a separate mutual nondisclosure agreement attached and governing this exchange?

Representations, Use and Limitations

Target Business represents that, to the best of its knowledge, the documents produced are true and authentic copies of the originals described. Requesting Party acknowledges that it may rely on independent verification and the production of documents does not constitute a warranty of completeness or accuracy beyond the stated representations. Neither party shall use obtained information for competitive harm or unlawful purposes.

Data Protection and Handling

Where personal data is exchanged, parties shall comply with applicable data protection laws. The receiving party shall implement reasonable technical and organizational measures to protect personal data and shall promptly notify the disclosing party of any unauthorized access or breach affecting provided materials.

Governing Law; Entire Agreement

Governing law: . The parties agree that the laws of the chosen jurisdiction shall govern all disputes arising from this Request, without regard to conflict of law principles.

Entire agreement: This Request, together with any attached mutual nondisclosure agreement and any written amendments executed by authorized representatives of the parties, constitutes the entire agreement between the parties with respect to the subject matter herein and supersedes all prior proposals, understandings and communications, whether oral or written.

Certifications

The undersigned represent and warrant that they are authorized to submit and act on behalf of the party identified, that the information provided in this Request is true and correct to the best of their knowledge, and that they will comply with the obligations set forth herein.

Requesting Party:

By:

Date:

Target Business:

By:

Date:

What a Business Due Diligence Request Is

A Business Due Diligence Request is a formal checklist or packet used to collect documents, representations, and confirmations necessary to evaluate a company, vendor, or transaction counterparty. Commonly used in M&A, financing, vendor onboarding, and strategic partnerships, the request compiles corporate records, financial statements, contracts, compliance certificates, employee and IP information, and evidence of regulatory status. The objective is to surface risks, validate representations, and inform deal terms or approval decisions. The request can be issued as a single document or as a series of targeted schedules and is often paired with nondisclosure protections.

Why a Structured Due Diligence Request Matters

A clear, comprehensive request standardizes what reviewers need, reduces follow-up cycles, and creates an auditable record of information produced during diligence. It makes risk assessment repeatable and helps allocate review responsibilities across legal, finance, compliance, and operational teams.

Who Typically Prepares and Responds to a Request

External responders include sellers, target companies, vendors, or subsidiaries; responses are typically coordinated by an authorized corporate representative.

Corporate legal and deal teams: Prepare the request and evaluate contracts, IP assignments, and litigation exposure.
Finance and accounting: Provide audited or unaudited financials, tax records, and accounting policies for review.
Compliance and HR: Supply licensing, policy documentation, employee agreements, and benefits records for regulatory vetting.

Core Sections to Include in a Professional Request

A professional Business Due Diligence Request groups items into logical categories so reviewers can assign specialists and track completion.

Corporate Records

Articles of incorporation, bylaws, capitalization table, shareholder agreements, and corporate minutes demonstrating authority and ownership structure.

Financials

Audited statements, management accounts, accounting policies, budgets, forecasts, and material debt or contingent liabilities.

Contracts

Material customer, supplier, lease and licensing agreements, change-of-control clauses, and recent amendments or defaults.

Compliance

Licenses, permits, regulatory filings, data-privacy assessments, and any pending investigations or enforcement actions.

Employment

Employment agreements, benefit plans, independent contractor lists, noncompete/NDAs, and payroll procedures.

IP & Technology

Patents, trademarks, software licenses, source code custody, third-party open-source inventories, and security incident history.

Step-by-Step: Preparing and Issuing the Request

Follow a clear sequence to reduce cycle time and ensure reviewers get consistent data.

01

Define Scope: List objectives, teams involved, deadlines, and confidentiality controls.
02

Assemble Templates: Use a standard request template with numbered exhibits and a document index.
03

Send Request: Deliver via secure portal or eSignature platform and record delivery timestamp.
04

Track Responses: Log received items, note redactions, and escalate missing or incomplete items.

Typical Information Flow During Diligence

A predictable flow reduces rework and preserves auditability across reviewers.

Request Issued: Sender uploads checklist and schedules due dates for each item.
Recipient Reviews: Recipient confirms scope, raises questions, and begins collecting documents.
Documents Delivered: Files are uploaded to a secure repository and logged with timestamps.
Reviewer Confirmation: Reviewers mark items complete, request clarifications, or flag exceptions.

Common Digital Workflow Settings for Online Requests

Configure these settings when using an eDelivery or eSignature platform to manage a due diligence request.

Field	Configuration
Access Control	Role-based permissions; restrict download or print as needed.
Authentication	Email link plus optional SMS or KBA for higher assurance.
Retention	Set automatic retention policy and export formats (PDF/A).
Audit Trail	Enable timestamp, IP, and action logging for each file.

Delivery Options and Technical Requirements

Confirm recipients can access the required tools and specify alternative methods for parties without modern software.

File Formats: PDF/A, DOCX preferred; avoid password-protected archives.
Authentication: Email link or SMS OTP; use stronger KBA for high-risk items.
Encryption: Transport via TLS 1.2/1.3; at-rest AES-256 recommended.

Typical Timelines and Response Deadlines

Set clear deadlines to keep diligence on schedule; allow for staged delivery where voluminous records are involved.

Initial Acknowledgment:

2 business days to confirm receipt and raise scope questions.

Document Delivery Window:

10–14 calendar days for standard packages; extend for voluminous or third-party records.

Follow-up Round:

5 business days to supply supplementary items after initial review.

Final Completeness:

Contractual cut-off date typically tied to closing condition or signing deadline.

Retention Start:

Retention obligations begin on document production date unless otherwise specified.

Common Preparation Pitfalls to Avoid

Unclear scope leads to overproduction of irrelevant documents and increases reviewer time and cost.
Missing authorizations or unsigned attachments create gaps that may delay legal sign-off or closing.
Poor indexing and inconsistent file names slow search and cause duplicate requests across teams.
Redactions applied inconsistently can trigger follow-up demands and questions about withheld information.

Risks and Consequences of an Incomplete or Incorrect Request

Regulatory Fines: Failure to produce required records can lead to enforcement penalties.

Contract Delay: Incomplete responses may push closing dates or trigger termination clauses.

Tax Exposure: Missing tax documentation increases audit risk and potential IRS penalties.

Reputational Harm: Perceived noncooperation can damage relationships with buyers or lenders.

Backup Withholding: Incorrect payee TINs can trigger 24% backup withholding under IRS rules.

Legal Liability: Misrepresentations in responses can lead to indemnity claims or rescission.

Comparison: Typical eSignature Pricing and Capabilities

Vendor pricing and caps influence platform selection for high-volume diligence workflows. signNow is listed first per table convention.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Free trial available	Free trial available	Free trial available	Free trial available
Bulk Send	Yes	Yes	Yes	Yes	Yes
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes (BAA available)	Yes	Yes	No	No
Envelope Cap	No cap	100 envelopes/user/yr	Varies by plan	Varies by plan	Varies by plan

Frequently Asked Questions

Answers to common questions about scope, signatures, authentication, and recordkeeping for Business Due Diligence Requests.

Need help? Contact support

Can this request be signed electronically?
Yes. Electronic signatures are generally enforceable under the ESIGN Act (15 U.S.C. ch. 96) and UETA where adopted. Confirm whether the recipient needs a specific signature type for regulatory or industry reasons.
When is notarization required?
Notarization is only necessary for documents that require notarized attestations or statutory acknowledgements; check state notary rules and the specific exhibit requirements in the request.
What happens if documents are redacted?
Provide a privilege log describing redactions and produce unredacted versions under suitable protective measures if requested by reviewers or ordered by counsel.
How should sensitive healthcare records be handled?
Treat PHI under HIPAA; include required authorizations and BAA arrangements. Retain HIPAA-related records for six years per 45 CFR §164.530(j).
How are identity and attribution proven for signatures?
Use authentication methods such as email verification, SMS OTP, KBA, or stronger ID verification; preserve the audit trail showing intent, attribution, and timestamp to satisfy ESIGN legal tests.
How long should produced materials be kept?
Retain produced diligence files until after the statute of limitations for potential claims and in accordance with regulatory retention rules; consult IRC §6501(a) and applicable state requirements.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now