A European technology group targeting a Finnish software company discovers, three days before signing, that the target's core codebase is partly owned by a former co-founder who left six years ago. The omission was not deliberate. It simply never appeared in a standard corporate register search. Situations like this arise regularly in Finnish transactions – and they are entirely avoidable with structured legal due diligence. For a foreign acquirer, a law firm in Finland with deep familiarity with local corporate and intellectual property legislation is not a luxury. It is the mechanism that makes a transaction close cleanly.
M&A due diligence in Finland is a structured legal, financial, and commercial investigation conducted before signing a share purchase agreement or asset deal. The process examines the target's corporate records, contracts, intellectual property, employment obligations, regulatory licences, and tax position. A thorough review typically runs four to eight weeks, depending on the target's size and the scope agreed between the parties.
This guide sets out the step-by-step process for conducting M&A due diligence in Finland, the documentary checklist foreign acquirers should apply. The most common errors made by cross-border buyers. Additionally, the decision framework for structuring the review to match your transaction's risk profile.
The Finnish regulatory and corporate setting for M&A transactions
Finland operates a civil law system rooted in Nordic legal tradition. Its corporate legislation – the osakeyhtiölaki (Finnish Companies Act) – governs the formation, governance, and dissolution of limited liability companies. Foreign acquirers accustomed to common law systems will find several structural differences worth noting early in the process.
Finnish companies are registered in the kaupparekisteri (Finnish Trade Register), maintained by the Finnish Patent and Registration Office. The register records share capital, board composition, registered signatories, and certain encumbrances. It is publicly searchable and provides the factual baseline for any corporate due diligence workstream. However, the register does not capture all obligations that bind the target. Shareholders' agreements, for example, are not publicly filed. Their existence – and their content – must be discovered through document requests to the seller.
Finnish tax legislation creates a separate but closely linked workstream. The Finnish Tax Administration (Verohallinto) administers corporate income tax, value added tax, and employer-side payroll obligations. A buyer acquiring shares inherits the target's tax history. Unresolved tax assessments, pending audits, or deferred liabilities can materially affect the purchase price or create post-closing claims. Tax due diligence in Finland therefore runs in parallel with legal due diligence rather than after it.
Finnish employment legislation and collective bargaining agreements add a further layer of complexity. Finland has a high rate of collective agreement coverage across sectors. The terms of applicable collective agreements bind the target even when individual employment contracts are silent on specific points. A foreign acquirer from a jurisdiction with weaker collective bargaining structures will frequently underestimate this exposure. The practical consequence: employment due diligence must include a review of sector-specific collective agreements, not just individual contracts.
Finnish data protection rules under EU legislation and domestic implementing measures impose obligations on the target regarding how personal data is processed, stored, and transferred. For targets operating in digital services, health, or financial sectors, data protection compliance is a dedicated workstream – not a footnote to general corporate review.
For cross-border transactions involving Finnish targets, our team advising on M&A transactions in Finland can guide acquirers through each of these regulatory dimensions from the earliest stages of a deal.
Step-by-step due diligence process and documentary checklist
A well-structured due diligence process in Finland follows a logical sequence. Each step builds on the previous one. Skipping steps to save time is one of the most common and costly errors foreign acquirers make.
Step 1 – Scope and NDA (weeks 1–2). The process begins before the data room opens. The acquirer and its advisers define the scope of review. This depends on transaction size, sector, and the acquirer's specific risk appetite. A technology acquisition will weight intellectual property and employment heavily. A manufacturing target will require environmental licences and real property title to receive deeper attention. The non-disclosure agreement (salassapitosopimus) is executed in this phase and defines the confidentiality obligations governing shared materials.
Step 2 – Data room population and index review (weeks 1–3). The seller populates a virtual data room. The acquirer's legal team reviews the index before reading individual documents. Gaps in the index are as informative as the documents themselves. Missing employment contracts, absent regulatory licences, or undated board resolutions are red flags that warrant immediate written requests to the seller.
Step 3 – Corporate and ownership workstream. This workstream covers the target's constitutional documents, share register, board and shareholder meeting minutes, and any existing shareholders' agreements. The Finnish Trade Register extract confirms registered ownership. However, the share register held by the target itself is the authoritative record of share ownership and any encumbrances over shares. Discrepancies between the two records require resolution before signing.
Step 4 – Commercial contracts workstream. The acquirer reviews material customer contracts, supplier agreements, distribution arrangements, and licence agreements. Change-of-control clauses deserve particular attention. Finnish commercial legislation does not require change-of-control provisions in contracts, but many Finnish commercial agreements include them. A clause that allows a key customer to terminate on a change of control can remove a substantial portion of the target's value overnight.
Step 5 – Intellectual property workstream. Finnish intellectual property legislation protects patents, trade marks, designs, and copyright. Registered IP is searchable through the Finnish Patent and Registration Office and through the European Union Intellectual Property Office for EU-level rights. Unregistered rights – particularly software copyright – require a separate chain-of-title review. The acquirer must confirm that all IP used in the business was created by employees within the scope of their employment, or that written assignment agreements exist for contractor-created work. Absence of either creates a gap in title that the representations and warranties in the share purchase agreement will not fully remedy.
Step 6 – Employment and pensions workstream. This workstream reviews all employment contracts, applicable collective agreements, and the target's obligations under Finnish earnings-related pension legislation. The TyEL (Finnish Employees' Pensions Act) system requires employers to arrange statutory pension cover for all employees. Arrears in pension premium payments are a direct liability of the target and transfer to the buyer on a share acquisition. Pension arrears are rarely disclosed prominently in data rooms and require active verification with the pension insurance provider.
Step 7 – Tax workstream. The tax team reviews VAT registration and filings, corporate income tax returns for the preceding three to five years. Transfer pricing documentation for intra-group transactions. Additionally, any open correspondence with the Finnish Tax Administration. Tax exposures identified here will typically feed directly into the price adjustment or indemnity provisions of the share purchase agreement.
Step 8 – Regulatory and licences workstream. Depending on sector, the target may hold licences from the Finnish Financial Supervisory Authority (Finanssivalvonta), the Finnish Medicines Agency (Fimea), or other sector regulators. The due diligence review must confirm that licences are current, that conditions attached to them are being met, and that a change of control does not trigger a licence review or revocation right.
Step 9 – Litigation and disputes workstream. The acquirer reviews pending and threatened litigation, arbitration, and regulatory investigations. Finnish courts (tuomioistuimet) handle commercial disputes through general district courts at first instance and courts of appeal at second instance. The Korkein oikeus (Supreme Court of Finland) sets precedent on matters of law. Pending litigation should be assessed for materiality, likely outcome, and the adequacy of any provisions in the target's accounts.
Step 10 – Due diligence report and gap analysis. The legal team consolidates findings into a due diligence report. The report identifies material issues, quantifies exposures where possible, and recommends protective mechanisms – typically specific indemnities, price adjustments, or enhanced representations and warranties in the SPA. The gap analysis drives the final negotiation of closing conditions.
To explore how Finnish corporate law interacts with M&A structuring decisions, our detailed overview of corporate law in Finland addresses the key legislative principles that shape every transaction.
Common errors by foreign acquirers in Finnish due diligence
Several patterns of error recur across Finnish transactions involving foreign buyers. Understanding them in advance reduces both deal risk and post-closing disputes.
Underweighting the collective agreement review. A buyer from a jurisdiction where collective agreements cover only a minority of the workforce frequently treats Finnish collective agreements as background information. In practice, they set minimum notice periods, redundancy entitlements, and bonus structures across the entire relevant workforce. Post-closing restructuring plans built on incorrect assumptions about employment costs can fail materially within months of completion.
Treating the Trade Register as a complete ownership record. The Trade Register does not reflect shareholders' agreements, share pledge arrangements, or pre-emption rights created by private contract. A foreign acquirer who relies solely on the register extract may close a transaction without discovering that existing shareholders hold contractual pre-emption rights that the seller failed to waive. Under Finnish corporate legislation, certain pre-emption rights can affect the validity of a share transfer.
Omitting a software copyright chain-of-title review for technology targets. Finnish copyright legislation vests initial copyright in the author. An assignment to the employer is implied for works created within the scope of employment – but this implication has limits. Work created by contractors, part-time employees working on personal projects, or co-founders before the company was incorporated may not have been formally assigned. A brief chain-of-title review at the due diligence stage costs a fraction of the post-closing dispute it prevents.
Underestimating Finnish environmental liability. Finland's environmental legislation imposes cleanup obligations on landowners and operators. For manufacturing or logistics targets, the acquirer must confirm that no environmental assessments are pending and that historical contamination has been properly addressed. Environmental liability is not capped by corporate structure in all circumstances – it can follow the business regardless of how the acquisition is structured.
Failing to verify pension arrears independently. As noted above, TyEL arrears are among the most frequently missed liabilities. A written confirmation from the target's pension insurance provider – not merely a representation from the seller – should be obtained before signing. The cost of that verification is minimal. The cost of inheriting undisclosed arrears is not.
Misreading Finnish SPA representations and warranties. Finnish M&A practice draws on both Nordic legal tradition and international deal practice. Representations and warranties in Finnish SPAs are generally read in light of the disclosure letter and the data room contents. A foreign acquirer accustomed to a different standard of warranty interpretation may find that Finnish courts assess warranty claims differently from how English or US courts would approach equivalent language. Engaging a lawyer in Finland to review warranty language is essential, not optional.
For a comparative perspective on how due diligence obligations and SPA structures differ across European jurisdictions. Our guide to M&A due diligence in Portugal illustrates how civil law tradition shapes transaction practice in a different Nordic-adjacent market.
Self-assessment checklist before proceeding
This checklist helps acquirers determine whether their due diligence scope is calibrated correctly for a Finnish transaction.
Corporate and ownership. Confirm: Trade Register extract obtained. share register reviewed for discrepancies. shareholders' agreements identified and reviewed. pre-emption rights and consent requirements mapped. board and shareholder meeting minutes covering the last three years reviewed for undisclosed resolutions.
Intellectual property. Confirm: registered IP searched at Finnish Patent and Registration Office and EUIPO; software copyright chain-of-title reviewed for employee and contractor contributions; licence agreements reviewed for assignability; no IP encumbrances outstanding.
Employment and pensions. Confirm: all employment contracts reviewed; applicable collective agreements identified and sector confirmed; TyEL arrears verified directly with pension insurance provider; any ongoing redundancy or restructuring processes identified; key employee retention risk assessed.
Tax. Confirm: three to five years of corporate tax returns reviewed; VAT position verified; transfer pricing documentation reviewed for intra-group arrangements; no open tax assessments or audits with Verohallinto.
Regulatory. Confirm: all sector licences identified; licence conditions reviewed; change-of-control provisions in licences checked; Finanssivalvonta or Fimea notifications required assessed.
Contracts. Confirm: material customer and supplier contracts reviewed; change-of-control clauses identified and risk assessed; exclusivity arrangements and minimum purchase obligations noted.
Litigation. Confirm: all pending and threatened claims identified; provisions in accounts assessed for adequacy; regulatory investigation status confirmed.
This checklist is applicable if the transaction is structured as a share acquisition of a Finnish private limited company (osakeyhtiö). Asset acquisitions require a modified scope, particularly regarding the transfer of licences, contracts, and employment relationships under Finnish employment legislation.
To receive an expert assessment of your due diligence scope and risk exposure in a Finnish M&A transaction, contact us at info@ferrazwhitmore.com.
Frequently asked questions
Q: How long does M&A due diligence typically take in Finland?
A: For a mid-sized Finnish target, due diligence typically runs four to eight weeks. Scope and target complexity drive that range. Financial and legal workstreams usually run in parallel to compress the overall timeline. Clean data rooms and co-operative management teams reduce the process to the shorter end of that range.
Q: Can a foreign acquirer complete Finnish M&A due diligence without local counsel?
A: Conducting due diligence without a lawyer in Finland who understands local corporate legislation is a common and costly mistake. Finnish corporate law, employment legislation, and the Finnish Companies Act create target-specific obligations that differ materially from most civil law and common law systems. Foreign counsel should always work alongside a Finland-qualified practitioner. Engaging a law firm in Finland with M&A experience is the single most effective risk-reduction measure available to a cross-border buyer.
Q: What are the most frequently missed issues in Finnish M&A due diligence?
A: The most frequently missed issues are undisclosed pension liabilities under the Finnish earnings-related pension system, unregistered encumbrances on intellectual property, and employment law obligations on workforce transfers. Finnish data protection rules under EU and domestic legislation also generate late-stage surprises for acquirers unfamiliar with the local compliance environment.
About Ferraz & Whitmore
Ferraz & Whitmore is an international law firm based in Lisbon, advising business clients across 46 jurisdictions. Our team combines Portuguese civil law expertise with English common law tradition to deliver cross-border legal solutions in M&A due diligence and transaction advisory, including for Finnish targets and Nordic market entries. We work with international entrepreneurs, institutional investors, and in-house legal teams who need results-oriented counsel across multiple legal systems. The firm's M&A practice covers transactions across Europe, the Americas, and Asia-Pacific, supported by a network of local counsel with jurisdiction-specific expertise. Our attorneys have advised on share acquisitions, asset deals, and joint ventures across both civil law and common law systems – including transactions structured under Finnish corporate legislation and Finnish employment law. Ferraz & Whitmore is a member of leading international legal associations and participates in cross-border practice groups focused on M&A and corporate governance. To discuss your Finnish acquisition or to obtain a preliminary review of your due diligence scope, contact us at info@ferrazwhitmore.com.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.