Buy-Side Legal DD Checklist for Startup Acquisitions: Definition, Importance, and Risks by Position
Hello, I'm Noriaki Asato, Representative Attorney at LegalAgent.
When acquiring a startup, you go beyond verifying financial figures and the business plan and carry out a wide range of legal checks, covering the shareholder structure, intellectual property, the labor environment, the data held, and key contracts, within a short period of time. The purposes and forms vary, including acquisitions by large companies, acqui-hires aimed primarily at acquiring talent, and integrations with competitors, but for the buyer, legal due diligence (DD) is the work of determining whether it can take over the target company and continue the business.
In legal DD of a startup, it is essential to distinguish calmly between matters that can be remedied as minor procedural lapses arising from the growth process and serious risks that, if overlooked, would threaten the continuation of the business after the acquisition. Uniformly demanding large-company management standards for every item will stall the deal itself, but issues concerning ownership of the shares, the intellectual property in the core technology, and the contractual foundation with key customers are directly linked to the acquisition price, the conditions precedent, and the design of representations and warranties and indemnities.
The Purpose and Position of Buy-Side Legal DD
Buy-side legal DD is an investigation conducted before an M&A transaction to identify the legal risks of the target company and to determine whether to proceed with the acquisition, the acquisition consideration, the closing conditions (conditions precedent), and so on. It proceeds in coordination with financial DD and tax DD, and it goes beyond formally checking contracts and the commercial register to evaluate whether the business can be continued safely after the acquisition and to what extent risks of damages claims and disputes arising from past legal violations or management deficiencies are lurking.
Investigations targeting startups tend to place their emphasis differently from M&A of mid-sized and large companies. Items such as the history of past capital increases, the issuance procedures for stock options, and the ownership of rights in the core product tend to become priority issues, while cases are also seen where shareholders' meeting and board meeting minutes have not been properly organized, or business accounts remain in the founder's personal name. The practical focus of legal DD is not merely to point out deficiencies but to evaluate how much they affect the continuation of the business and the acquisition decision.
Why Legal Risks Are Directly Linked to Business Value
The enterprise value of a startup is often supported by legal rights and the validity of its contracts. This is because proprietary source code and technology, and the customer base itself, are the sources of value.
For example, when acquiring a SaaS business, even in a share acquisition, if key customer contracts contain change of control (CoC) provisions, the acquisition may require the counterparty's consent or may constitute grounds for termination. In a business transfer scheme, individual consents to the transfer of contracts are required, and failing to carry out checks appropriate to the scheme may lead to customers leaving immediately after the acquisition.
The history of capital policy also affects business value. If preferred shares or share options were issued in past rounds and a shareholders' agreement has been concluded, identify early whose consent is required for this acquisition and how the total payment and distributions will change through the application of drag-along provisions and deemed liquidation provisions.
The same applies to intellectual property rights. For early code developed personally during the founding period and programs created by outside contractors and joint development partners, confirm whether the copyrights and patent rights reliably belong to the target company, or whether sufficient licenses necessary for operating the business have been secured. If the transfer of rights or the licensing of the core components is insufficient, the buyer may be unable to freely provide or modify the product after the acquisition.
In the labor area, unpaid overtime, the method of calculating fixed overtime pay, and the boundary between service agreements and substantive employment relationships become issues. If there are violations such as of statutory payment obligations, confirm those existing liabilities. Evaluate them separately from the cost of changing operations to align with the buyer's internal standards after the acquisition. In addition, whether the necessary licenses and permits for the business are held, whether customer data and personal information were lawfully obtained and can continue to be used, and complaints that have not yet developed into formal disputes and the risk of key persons leaving are also factors that affect business value.
Three Priority Areas for Investigation and the Approach to Remediation
The following three are the main areas to be checked as a priority within a limited investigation period:
- Shares and capital policy (shareholder register, investment agreements, terms of preferred shares and share options, whether there are deemed liquidation provisions, and organizing the approvals required for the acquisition)
- Ownership of intellectual property and rights to use it (transfers of rights from founders, contractors, and joint development partners, and compliance with the terms of use of OSS and AI models)
- Key contracts and transaction terms (major customer contracts, termination provisions in terms of use, transfer restrictions, CoC provisions, and limitation of liability provisions)
While prioritizing these three areas, also check licenses and permits, data management, and whether there are potential complaints in parallel. Especially at a company where the data itself is the core of the business, pay close attention to whether it was lawfully obtained and whether it can be used without hindrance after the acquisition.
If deficiencies are found in the investigation, consider remedial measures before closing and how to reflect them in the contract terms. For missing minutes, take appropriate corrective action, such as supplementing the records after confirming the actual content of the resolutions at the time and objective documentary evidence, or adopting a lawful new resolution where necessary. Improper responses such as preparing minutes after the fact for meetings that were never held must be avoided. Also consider, in order of priority, responses such as obtaining contractual consents, concluding IP assignment agreements, or incorporating matters into the definitive agreement (SPA) as representations and warranties, special indemnities, price adjustments, and covenants.
How Risks Differ Between the Buyer and the Seller
For the buyer, the risk is being unable, after the acquisition is completed, to make use of the rights and assets that support the target company's value as expected. Termination by key customers, defects in the rights to the source code, and the departure of officers or core members can significantly affect the business plan. Trying to address every identified risk through indemnity provisions tends to make negotiations difficult, while handling serious defects only through general representation and warranty provisions creates the risk that effective recovery will be difficult due to, for example, the seller's lack of financial resources. It is important to design the provisions after assessing the likelihood and impact of damage and the seller's financial resources.
From the seller's perspective, the concern is that deficiencies pointed out in DD will be used as an occasion to demand a reduction in the consideration or to tighten the closing conditions. Since it is not unusual for the early management structure to be incomplete, it is important for the seller not to hide deficiencies but to be prepared to explain honestly how they arose, the path to remediation, and their actual impact on the business. In addition, when disclosing technical information and financial data to prospective buyers, concluding a non-disclosure agreement (NDA) and properly managing access rights and viewing histories in the data room helps protect your own company.
What both sides should keep in mind is separating fatal problems from procedural defects that can be repaired in practice, based on the reality of a startup's growth. Rather than listing minor findings, organizing them in order of their impact on business continuity and enterprise value before entering negotiations is the shortcut to smooth agreement on the transaction.
How the target company can keep contract registers and records of decisions to explain business continuity is explained in detail in Legal DD Preparation Sellers Should Make in Ordinary Times.
Checking Related Practice
The procedures and overall picture of legal DD, and how to think about contract drafting and fees, are also explained in detail in What Is Legal Due Diligence? Purpose, Process, Required Materials, and Fees, M&A Attorney Fees: Charges for Legal DD, SPA, and Closing, and Indemnities, Price Adjustments, and Closing in an SPA (Share Purchase Agreement).
Information on Legal DD for Startup Acquisitions
In buy-side legal DD for startup acquisitions, LegalAgent does not stop at a formal report of the findings; we support translating them into the representations and warranties and indemnity provisions of the definitive agreement (SPA), price adjustments, and the execution issues of PMI (post-merger integration).
Services connected to this topic