In mergers and acquisitions (M&A) transactions, Legal Due Diligence (LDD) is one of the crucial steps to help parties identify and assess legal issues that may affect the transaction structure, enterprise value, ability to complete the transaction, and post-acquisition business operations.
Legal Due Diligence in M&A – Buyer-side & Seller-side Perspectives
In mergers and acquisitions (M&A) transactions, legal due diligence (Legal Due Diligence – LDD) is one of the crucial steps to help parties identify and assess legal issues that may affect the transaction structure, enterprise value, ability to complete the transaction, and post-transfer business operations.
However, Legal Due Diligence is not merely a process of collecting and reviewing legal documents. A company may provide complete business registration certificates, charters, contracts, licenses, and related documents, yet still harbor significant risks regarding ownership, financial obligations, legal compliance, or the ability to continue operations after a change of ownership.
The true value of Legal Due Diligence lies in transforming legal findings into a basis for investment decisions, determining transaction value, and designing appropriate protective mechanisms in M&A contracts. Therefore, the due diligence results should not stop at identifying which regulations the company is complying with or violating, but must clarify the extent of each issue's impact on the transaction and the corresponding resolution plan.
Although both use the same set of legal documents of the target company (Target Company), the due diligence activities of the buyer (Buyer-side Due Diligence) and the seller (Seller-side or Vendor Due Diligence) are carried out with different objectives.
For the buyer, the focus of Legal Due Diligence is to accurately identify the subject being acquired, the legality of ownership, obligations that may continue to exist after the transaction, and factors that may alter the value of the investment. The buyer needs to know whether the seller has full rights to transfer shares or assets, whether there are any legal restrictions preventing the signing or completion of the transaction, whether there are any debts or contingent liabilities not fully reflected, and whether business operations can be maintained stably immediately after the transfer of control.
Conversely, the seller approaches Legal Due Diligence as a transaction preparation tool. Proactively reviewing the legal status before engaging with investors helps the seller identify deficiencies that need to be remedied, obligations that need to be quantified, licenses that need to be renewed, or approvals that must be obtained in advance. This is particularly important because issues discovered late in the negotiation process can force the seller to accept price adjustments, additional indemnification obligations, or extended transaction completion times.
This difference shows that Buyer-side Due Diligence focuses on identifying risks that the investor will assume, while Vendor Due Diligence focuses on preparing for and controlling risks that may affect the seller's ability to execute the transaction. A report for the buyer therefore often emphasizes disadvantages, legal consequences, and investor protection strategies. In contrast, a report for the seller needs to objectively reflect the legal status, progress of remediation, and information that can be provided or disclosed to potential investors.
Regardless of which side performs it, one principle must be agreed upon: Due Diligence only helps detect and assess risks; it does not automatically resolve existing legal issues. Representations and Warranties or Indemnity clauses can allocate responsibilities between parties but cannot replace mandatory licenses, legal ownership, or approvals from competent authorities or third parties.
One of the first requirements when conducting Legal Due Diligence is to correctly define the scope of due diligence (Scope of Due Diligence). Not all M&A transactions need to be assessed using the same method, as the level of legal risk depends significantly on the investment structure, expected ownership percentage, industry of operation, and the level of control the buyer will acquire.
In a full share or capital contribution acquisition (Share Acquisition), the target entity generally continues to exist after a change of ownership. Contracts, debts, tax obligations, labor liabilities, disputes, and other legal obligations of the company do not automatically terminate simply because shareholders change. Therefore, the buyer must pay special attention to the company's formation and operational history, the legality of capital transactions, financial obligations, and liabilities that may arise from events prior to the transfer date.
For controlling share acquisitions or investments to gain control, the scope of due diligence needs to be expanded to governance structure, shareholder group rights, related-party transactions, agreements with founders, and contracts with change-of-control clauses. The buyer not only needs to determine ownership but also must assess the practical ability to operate, restructure, or integrate the company after the transaction.
In minority investments, especially those by Private Equity or Venture Capital funds, the focus shifts to investor protection mechanisms. Without direct operational control of the company, investors must rely on rights designed in the charter and shareholder agreements, such as access to information, veto rights over key matters, participation rights in funding rounds, anti-dilution mechanisms, and exit rights. Therefore, due diligence must simultaneously assess the company's current legal status and the effectiveness of the governance mechanisms the investor intends to negotiate.
For asset purchases or business transfers (Asset Deal/Business Transfer), the core issue is no longer the entire legal history of a legal entity, but rather the ownership, transferability, and continuity of each group of assets or business operations being acquired. The parties need to clearly define which assets are being transferred, which contracts can be assigned, which licenses must be newly issued, which intellectual property rights require transfer procedures, and which obligations may still arise for the buyer under law, regardless of the liability allocation agreement in the contract.
For distressed acquisitions, due diligence must also focus on insolvency status, collateral, creditor rights, the risk of transactions being voided or reviewed under bankruptcy proceedings, and the ability to continue business operations.
Thus, the Scope of Due Diligence must be designed based on the nature of the transaction and investment objectives, rather than applying a fixed checklist of documents for every company. Correctly defining the scope from the outset helps parties focus resources on issues most likely to significantly impact investment decisions and avoid collecting too many documents without identifying critical risks.
A comprehensive Legal Due Diligence typically involves multiple closely related workstreams. Although the specific scope varies by transaction, due diligence should focus on the following key areas.
First, corporate legal matters, capital structure, and ownership (Corporate, Capital & Ownership). This is the foundation for determining whether the company has been legally established and operated, whether the seller has the right to dispose of shares or capital contributions, and whether transaction-related decisions have been duly approved. The review should include formation documents, charter, shareholder structure, history of capital contributions, issuance and transfers, shareholder or member registers, internal resolutions, shareholder agreements, and restrictions on transfer rights. In particular, the ownership structure presented in the capital table (Cap Table) must be cross-referenced with legal records and actual documentation, as ownership percentage information does not always fully reflect the rights, restrictions, or obligations attached to the shares.
Second, material contracts and commercial relationships (Material Contracts). Due diligence aims not only to determine whether contracts are validly executed and in force, but also to assess the ability to maintain important commercial relationships after the transaction. Clauses on contract assignment, change of control, exclusivity, minimum revenue commitments, price adjustments, contract termination, and limitation of liability can significantly impact the value of business operations. For example, a company with stable revenue from strategic customers, but whose contract allows the customer to terminate upon a change of control, poses a direct risk to revenue sustainability and valuation basis.
Third, licenses, business conditions, and specialized legal compliance (Regulatory & Compliance). Legal Due Diligence needs to identify which necessary licenses the company holds, whether those licenses are still valid and meet maintenance conditions, and also review the history of inspections, penalties, remediation requirements, and obligations arising from changes in ownership or control. For companies operating in regulated sectors such as finance, securities, insurance, real estate, or other specialized industries, changes in ownership structure may trigger obligations to seek approval, notify, or perform license adjustment procedures. A signed transaction does not mean the buyer can immediately operate the business if mandatory legal conditions have not been met.
Fourth, assets, real estate, and intellectual property (Property & Intellectual Property). For tangible assets, due diligence focuses on ownership, usage rights, mortgage status or transfer restrictions, intended use, related obligations, and existing disputes. For intellectual property, it is necessary to accurately identify the legal owner of trademarks, patents, software, source code, domain names, technical know-how, and other intangible assets. Especially in technology companies, products may be developed by employees, founders, or outsourced entities but without complete intellectual property transfer agreements. Without fully checking the chain of rights establishment and transfer, the buyer may acquire business operations but not truly own the assets that constitute the core value of those operations.
Fifth, Employment, Litigation & Contingent Liabilities. The due diligence process needs to assess the system of employment contracts, human resource policies, salary and benefits obligations, confidentiality, intellectual property rights arising from employment relationships, ESOP programs, and agreements with key personnel. Concurrently, it is necessary to review lawsuits, disputes, complaints, administrative procedures, investigations, and uncertain obligations. Not only cases already filed but also emerging disputes or violations with the potential to lead to legal liability need to be considered based on materiality.
Sixth, Data Protection & Cybersecurity. As customer data, software platforms, and technology systems play an increasingly critical role in enterprise value, due diligence needs to identify what data is being collected and processed, its purpose of use, legal basis, storage systems, data processing service providers, cross-border data transfers, and security incident history. For the buyer, the crucial question is not only whether the Target complies with data protection laws, but also whether the Target's systems and data can be legally integrated into the buyer's systems after Closing.
Seventh, Foreign Investment, Competition & Related Parties. Transactions with foreign elements need to be scrutinized for market access conditions, ownership ratios, capital contribution and transfer history, payments, registration or approval obligations, and consistency between investment records and actual ownership structure. Concurrently, depending on the scale and structure of the transaction, parties need to assess merger control notification obligations. Transactions with shareholders, founders, or related enterprises also need to be reviewed to identify loans, guarantees, service contracts, asset use rights, or commercial dependencies that could affect post-transfer operations.
The above work streams should not be conducted entirely independently. A finding in corporate records can affect a contract; a contract clause can affect revenue; and a license restriction can alter the entire transaction structure. Therefore, Legal Due Diligence requires a mechanism for synthesis, cross-referencing, and interdisciplinary assessment, rather than merely compiling review results from each document group.
A valuable legal due diligence report should not merely list identified issues and label them as high, medium, or low risk. The assessment must go a step further: identifying which stage of the transaction the issue affects and what mechanism is needed to address it.
First, Signing Blockers are issues that could prevent the transaction from being legally signed under the proposed structure, such as when the seller lacks the right to transfer or the signing entity lacks the necessary authority. For this risk group, the solution is often to resolve the issue before signing or adjust the transaction structure.
Next, Closing Conditions are issues that may allow the parties to sign the contract first but only complete the transaction after a specific condition is met. These conditions may include obtaining regulatory approvals, third-party consents, releasing collateral, renewing licenses, or completing mandatory legal procedures. In such cases, the contract needs to clearly stipulate Conditions Precedent, responsibility for performance, a Long-stop Date, and consequences if the conditions are not met.
For issues that do not prevent the transaction but affect the enterprise's value, Due Diligence results need to be translated into Price Adjustments or Valuation Items. Undisclosed liabilities, contingent tax obligations, additional investment needs, the risk of losing key customers, or remediation costs for violations can alter the basis for determining the purchase price. Quantifying these items requires coordination among legal, financial, and investment teams.
Meanwhile, specific risks that have been identified but cannot be fully resolved before Closing can be allocated through Specific Indemnities, combined with a Holdback mechanism, Escrow account, or appropriate security measures. Ordinary business risks or those not specifically identified are typically addressed through Representations and Warranties, while non-material tasks that can be legally performed after the transaction may be included in Post-closing Covenants.
This classification has significant practical implications. Not every deficiency should halt a deal, but not every risk can be resolved by representations and indemnities. The important thing is to correctly identify the consequences of each Red Flag and select the corresponding legal tool, appropriate to the level of risk, remediability, and the parties' investment objectives.
For the seller, conducting Vendor Due Diligence before initiating the investor search process can significantly improve their negotiating position. Instead of waiting for the buyer to discover issues during due diligence, the seller has the opportunity to proactively assess legal deficiencies, choose remediation options, quantify financial obligations, and prepare explanatory documents.
Priority tasks should include cross-referencing the ownership structure with corporate records, finalizing resolutions and governance procedures, reviewing the validity of key contracts, renewing licenses, fully establishing intellectual property rights, updating personnel records, and compiling a list of existing disputes or legal obligations. For transactions with foreign elements, cross-referencing capital contribution history, transfers, remittances, and investment procedures also needs to be done before the Data Room is opened to investors.
Concurrently, the organization of a Virtual Data Room (VDR) should be viewed as a legal control measure, not just a document storage tool. The Data Room needs a consistent structure, clear numbering and classification system, differentiation between draft and signed/registered documents, and storage of superseded versions to ensure traceability. Information provision should also be managed through access permissions, disclosure history, and a Q&A Log to limit inconsistencies among departments or different investors.
For commercially or competitively sensitive information, the seller needs to consider limiting access, using a Clean Team mechanism where appropriate, and controlling the timing of disclosure. Confidential legal advice should not be shared by default but requires a separate management strategy. Additionally, documents added after the due diligence scope cut-off date must be tracked and re-evaluated to ensure the report is not based on outdated data.
A notable principle is that disclosure of information does not equate to remediation of violations. If asset ownership is not valid, a license has expired, or a mandatory procedure has not been completed, the seller still needs to address those issues in practice. Disclosure only helps the buyer recognize and allocate risk; it does not legitimize non-compliance.
Therefore, a good Vendor Due Diligence Report must be built on verified facts, verifiable documents, and actual remediation status. The report should not be presented as a promotional document for the business, as the consistency and provability of information are the factors that build trust with the buyer and financing parties.
The link between Legal Due Diligence and the transaction agreement is one of the decisive factors in the quality of M&A advisory services. A report may accurately identify dozens of legal issues, but if critical findings are not reflected in the transaction structure or the Share Purchase Agreement (SPA), the buyer may still assume risks they were aware of but not adequately protected against.
In principle, each material finding in Due Diligence needs to be linked to one or more specific resolution mechanisms. If the transaction lacks mandatory approvals, the contract needs to stipulate conditions precedent and a mechanism for resolution if approval is not obtained. If the company has unidentified tax obligations or ongoing disputes, the parties may consider specific indemnification mechanisms, liability limits, claim periods, and payment security measures. If a key commercial contract has a clause allowing termination upon change of control, the buyer must assess the possibility of obtaining consent before Closing or adjusting the price based on the risk of losing the contract.
For intellectual property not fully transferred from founders or third parties, adding a warranty of ownership may be necessary but cannot replace the legal transfer procedure. Similarly, deducting a financial obligation from the purchase price may help allocate costs between the parties but does not terminate the payment obligation to the state agency or relevant creditor.
In practice, commonly used mechanisms include Conditions Precedent, Representations and Warranties, Specific Indemnities, Disclosure Letter, Purchase Price Adjustment, Escrow/Holdback, and Post-closing Covenants. However, the effectiveness of each tool also depends on its scope of application, enforceability, liability limits, claim periods, and the financial capacity of the obligor.
An Indemnity clause, even if tightly drafted, may not be practically effective if the seller no longer has the ability to pay when the obligation arises. Therefore, the buyer needs to consider not only the content of the commitment but also the recoverability of the compensation through appropriate security mechanisms.
Legal Due Diligence can be seen as the process of identifying and quantifying risks, while the SPA is the tool for translating those results into rights, obligations, and responsibility allocation mechanisms between the parties. These two processes must be implemented with continuous coordination, rather than completing the Due Diligence Report and then only beginning to consider the contract's content.
Legal Due Diligence should not be viewed as a task that concludes at the time the report is issued. In M&A transactions, the period from the completion of due diligence to contract signing, and especially from Signing to Closing, can extend for many weeks or months. During this period, the legal status of the target company may change due to emerging disputes, expired licenses, changes in key contracts, fluctuations in ownership structure, or the appearance of new legal obligations.
Therefore, prior to Signing or Closing, the parties need to conduct a bring-down due diligence on critical matters. This update may include re-examining the business registration status, ownership structure, disputes, licenses, financial obligations, key contracts, and the progress of fulfilling conditions precedent. Concurrently, any newly arising information must be cross-referenced with the seller's representations, warranties, and disclosures to determine whether adjustments to the transaction documents are necessary.
At Closing, the buyer needs to confirm that all required consents have indeed been granted, transfer documents have been finalized, payment and handover obligations have been fulfilled as agreed, and critical conditions in the SPA have been met or properly addressed. One should not automatically assume that a party's commitment to complete a procedure in the future is equivalent to the procedure being completed.
Post-Closing, accepted risks need to be managed through a specific Post-closing Remediation Tracker. This plan should clearly identify each issue, the responsible department, the completion deadline, and documentation proving the outcome. For transactions involving business integration, continued review of contracts, personnel, intellectual property, licenses, data, and technology systems is essential to ensure the buyer can operate the business as anticipated.
Thus, Legal Due Diligence must be seamlessly linked from the transaction preparation phase, Signing, Closing, to Post-closing, ensuring that risks are not only identified but also monitored, addressed, and controlled throughout the entire transaction lifecycle.
A target company almost always has certain legal issues, albeit to varying degrees. Therefore, the goal of Legal Due Diligence is not to prove that the company is completely risk-free or to demand that all issues be resolved before the transaction is executed.
More importantly, it helps the parties understand the nature and consequences of existing issues, identify which risks are acceptable, which risks need to be remedied before Closing, and which risks must be reflected in the purchase price or allocated through contractual mechanisms.
From a legal advisory perspective, the quality of a Legal Due Diligence should not be judged solely by the number of documents reviewed, the number of pages in the report, or the number of Red Flags identified. A good report needs to provide sufficient information and arguments for the investment team, management, and authorized decision-makers to understand whether the transaction can be executed, what conditions need to be met, how the economic structure needs to be adjusted, and how the parties will be responsible for the remaining risks.
Legal Due Diligence truly creates value when legal findings are translated into actionable investment decisions, negotiation strategies, transaction conditions, and risk management mechanisms.
That is the difference between merely checking the completeness of records and using legal expertise as a tool to protect value in M&A transactions.
OPLAW | Corporate Law – Investment – M&A – Legal Advisory
Note: This article is compiled and systematized from professional materials on Legal Due Diligence in M&A, from a transactional practice perspective. The terms and transaction mechanisms are for general reference; their application in each deal needs to be cross-referenced with Vietnamese law, relevant foreign laws, business sectors, and specific transaction structures. This article does not substitute for legal advice regarding a specific transaction.
In mergers and acquisitions (M&A) transactions, Legal Due Diligence (LDD) is one of the crucial steps to help parties identify and assess legal issues that may affect the transaction structure, enterprise value, ability to complete the transaction, and post-acquisition business operations.
Get legal advice tailored to your needs.
In M&A, the choice between a share deal and an asset deal presents significant differences in terms of tax, procedures, and risks. This article provides a detailed analysis of these two forms.
Kicking off the Investment Banking Explained series, OPLAW will explore fundamental concepts in Investment Banking from legal, financial, and corporate transaction perspectives, starting with Mergers & Acquisitions (M&A).
This article analyzes the difficulties faced by a construction materials manufacturing enterprise with its current system structure, including directly managed units and a legally independent subsidiary. From there, it proposes a solution to merge the subsidiary into the parent company to unify management, reduce costs
Leave your details and our expert will get in touch with you.
