OpenDD
← All articles

What Is Due Diligence? A Practical Guide for 2026

Fundamentals · Updated July 2026

Ask ten dealmakers to define due diligence and you'll get ten slightly different answers, but they're all circling the same thing: it's the homework you do before you commit. Before you buy the company, hire the executive, wire the deposit, or sign the reseller deal, you want to know who's actually across the table and what you're really getting. Skip it and the surprises still show up — just later, when they're expensive and they're yours.

Here's the part that surprises people new to it: most of what you need is already public. SEC filings, court dockets, patent registers, government watchlists. The hard part was never finding secret information — it's knowing which record answers which question, and reading it without fooling yourself. These are the six kinds of diligence that come up over and over.

Corporate: is this company even real?

The most basic check, and one people skip because it feels too basic. You're confirming the exact legal name (not the brand on the website), where it's incorporated, whether it's actually current on its filings, who the officers and directors are, and where it sits in a family of parents and subsidiaries. For a U.S. public company that all starts at the SEC's EDGAR. For a private one you're usually digging through state Secretary-of-State records and paid databases, and it's slower going.

Financial: do the numbers hold up?

Revenue and profit are the headline, but the story is almost always in the trend. One good year proves nothing; three or four years of statements tells you whether a business is growing, coasting, or quietly sliding downhill. Public companies hand you audited figures in their 10-K and 10-Q, and — usefully — those same filings spell out the risks management is legally on the hook to disclose.

Intellectual property: do they own what they're selling?

This one matters most when the IP is the deal. You're confirming the target genuinely owns its patents, trademarks, copyrights, domains, and the open-source code baked into its product — free and clear. The thing that quietly sinks deals is chain of title: an assignment that was never recorded, an engineer's invention nobody ever got assigned, a registered owner whose name doesn't match the seller. We broke the whole process into an IP due diligence checklist.

Litigation: who's been to court, and why?

Has this party been sued, has it done the suing, and are there judgments or bankruptcies on file? U.S. federal cases live in PACER, and the free RECAP archive over at CourtListener mirrors a huge chunk of it. One shortcut worth knowing: every federal case carries a "nature of suit" code, so you can tell at a glance whether you're looking at a boring contract dispute or something that should give you pause.

Sanctions and export controls: the one you can't skip

In regulated industries this isn't optional, because getting it wrong is a legal problem rather than a business one. You're checking whether a party turns up on a government restricted-party list — OFAC's sanctions lists at Treasury, Commerce's export lists, State's defense-trade debarments. And "we didn't realize" often won't save you; a lot of these rules bite even when the violation was accidental. Our screening guide lays out what each list actually means.

Adverse media: what never made it into a filing

Some of the most important facts about a company never appear in any official record — the fraud investigation, the regulatory fine, the founder's messy lawsuit. Adverse-media screening goes looking for them in the news. Done lazily it's just googling a name. Done properly it's bounded by date, every hit is tied back to a real source, and findings are graded so one furious blog post doesn't carry the same weight as a Reuters story about an indictment.

Run all six in one place. OpenDD turns each of these into a guided module built on primary public records, with Word and PDF reports you can hand to a deal team. Start a search →

Where diligence stops

It's worth being straight about the limits. Public records are only as fresh as their last update, some sources actively block automated tools, and every watchlist "hit" is just a name match until you've proven it's really the same person. So treat an automated report for what it is: a fast, organized first pass that tells you where to dig harder — not the last word. And to state the obvious, none of this is legal advice. When a real deal is on the line, that's what your counsel is for.