A foreign acquirer approaches a Luxembourg target expecting a clean, well-documented holding structure. Four weeks into due diligence, the team uncovers a chain of undisclosed participations. A pending regulatory query from the Commission de Surveillance du Secteur Financier (CSSF. Luxembourg's financial sector supervisory authority). Additionally, a share pledge that was never formally released. The deal slips by two months. Legal costs double. The lesson is familiar to practitioners: Luxembourg's reputation for legal certainty does not eliminate due diligence risk. It relocates it.
M&A due diligence in Luxembourg involves a structured review of a target entity's legal, regulatory, financial, and tax position under Luxembourg corporate legislation and, where applicable, fund or banking law. The process typically spans four to ten weeks, depending on entity type and complexity. A thorough due diligence exercise is the primary mechanism by which representations and warranties in the share purchase agreement are tested and closing conditions are verified.
This guide walks through each stage of the Luxembourg due diligence process – from scoping the review through to drafting the due diligence report and negotiating SPA protections. It covers the documentary checklist, common errors by foreign acquirers, cost considerations, and a decision framework for different transaction scenarios.
Why Luxembourg due diligence has its own logic
Luxembourg sits at the intersection of EU law, civil law tradition, and a highly specialised investment vehicle regime. Foreign acquirers – particularly those from common law jurisdictions – often underestimate how much this combination shapes the due diligence process.
Under Luxembourg corporate legislation, the two dominant acquisition targets are the Société à responsabilité limitée (Sàrl – private limited liability company) and the Société anonyme (SA – public limited company). Both are regulated under company law administered through the Tribunal d'arrondissement (District Court of Luxembourg), which handles first-instance commercial and civil matters. Appeals proceed to the Cour d'appel (Court of Appeal), with final review available before the Cour de cassation (Luxembourg Supreme Court of Cassation) on points of law.
A significant share of Luxembourg transactions involve specialised investment vehicles. The Société de participations financières (SOPARFI – Luxembourg financial holding company) is the most common holding structure for cross-border investments. It benefits from the EU participation exemption regime and treaty networks. The Société d'investissement en capital à risque (SICAR – investment company in risk capital) targets private equity and venture capital strategies and operates under a separate regulatory regime supervised by the CSSF.
Each vehicle type requires a tailored due diligence scope. Treating a SOPARFI review identically to a SICAR review is one of the most frequent methodological errors by foreign counsel unfamiliar with Luxembourg's investment vehicle architecture. The CSSF authorisation status of a SICAR, for example, is a threshold closing condition – not a background item.
Luxembourg's corporate register, the Registre de Commerce et des Sociétés (RCS – Luxembourg Trade and Companies Register), is publicly accessible and provides the foundational layer for any due diligence exercise. However, the RCS does not capture beneficial ownership arrangements, pledge agreements registered under notarial deed, or intra-group loan agreements. These require direct document request from the target.
For acquirers active in multiple European jurisdictions, the comparison with other civil law systems is instructive. A review of M&A due diligence procedures in Portugal illustrates how civil law documentation requirements and notarial deed obligations differ across Member States – a relevant reference point when structuring a dual-jurisdiction acquisition.
Step-by-step timeline and procedural requirements
The Luxembourg M&A due diligence process follows a predictable sequence. Deviating from it – or compressing stages – is consistently the cause of incomplete reports and renegotiated SPA terms at signing.
Step 1 – Scoping and NDA execution (Days 1–5). Before any document is shared, the parties execute a non-disclosure agreement governed by Luxembourg law or the acquirer's home jurisdiction law. The due diligence scope is agreed in the letter of intent or a separate scope letter. The scope must specify whether the review covers only the Luxembourg entity, the full group structure, or underlying assets held through the entity. Scoping errors at this stage cause the most expensive expansions later.
Step 2 – Virtual data room setup and document request list (Days 5–12). The acquirer's counsel submits a document request list. A comprehensive request covers constitutional documents, shareholder register, share ledger, board resolutions, existing shareholders' agreements, loan agreements, pledge registers, regulatory correspondence, tax filings, employment contracts, and IP assignments. For CSSF-supervised entities, the request must include all authorisation letters, regulatory filings, and any compliance notices received.
Step 3 – Desk review and gap analysis (Days 12–28). Counsel reviews uploaded documents and issues gap notices for missing items. In Luxembourg practice, sellers frequently upload only the most recent version of constitutional documents without providing the full amendment history. Acquirers must specifically request all successive amendments to the articles of association – each notarially filed with the RCS – to reconstruct the entity's authorised share capital history accurately.
Step 4 – Management Q&A and site visits (Days 20–35). Written questions are submitted to management. The answers form part of the disclosure record and directly inform the representations and warranties in the share purchase agreement. Oral representations made during site visits carry no contractual weight unless reduced to writing – a procedural point that common law acquirers sometimes overlook in civil law transaction contexts.
Step 5 – Due diligence report and red flag summary (Days 30–45). Counsel prepares a full due diligence report and a separate red flag summary. The red flag summary drives the SPA negotiation. Each identified risk translates into either a specific indemnity, an escrow arrangement, a price adjustment mechanism, or a pre-closing condition in the SPA closing conditions schedule.
Step 6 – SPA negotiation informed by findings (Days 40–65). The share purchase agreement is negotiated with reference to the due diligence report. Luxembourg law governs most Luxembourg target acquisitions, although parties sometimes elect English law for the SPA where the acquirer is an Anglo-American entity. The representations and warranties schedule must be calibrated to Luxembourg corporate legislation – general warranties adequate in other jurisdictions may be insufficient to capture Luxembourg-specific risks such as CSSF compliance status or RCS filing gaps.
For a comprehensive view of M&A legal support across the full transaction lifecycle in Luxembourg, the firm's dedicated M&A practice in Luxembourg covers both the acquisition and post-closing integration phases.
Documentary checklist: what to request and why it matters
The following categories represent the core documentary scope for a Luxembourg target due diligence. Each category is paired with the specific risk it addresses.
Corporate constitution and governance. Request the full articles of association with all notarial amendments, the shareholder register, and all board and shareholder meeting minutes from the past five years. Missing resolutions may indicate that material decisions – asset disposals, pledge grants, or capital increases – were taken without proper corporate authority. Courts in Luxembourg have consistently held that acts taken without the required corporate authorisation are potentially voidable.
Share capital and ownership structure. Verify the issued and fully paid share capital, the beneficial ownership register maintained under Luxembourg anti-money laundering legislation, and any existing shareholders' agreements. Undisclosed drag-along, tag-along, or pre-emption rights in a shareholders' agreement can invalidate a contemplated share transfer if not properly waived before closing.
Financing and security interests. Request all loan agreements, facility letters, and security documents. Under Luxembourg law, pledges over shares or receivables are governed by financial collateral legislation and must be properly constituted to be enforceable. A pledge that was not correctly perfected under this regime may not be released at closing in the manner the parties assume.
Regulatory status. For any CSSF-supervised entity. including a SICAR, Société d'investissement à capital variable (SICAV. open-ended investment company). Alternatively. Licensed fund manager. confirm current authorisation status, review all CSSF correspondence from the past three years. Additionally, verify that required periodic filings are current. A lapse in CSSF authorisation is a material adverse change event under most SPA closing conditions.
Tax position. Request tax returns for the past five years, any outstanding tax assessments, transfer pricing documentation, and VAT registration status. Luxembourg tax legislation provides significant benefits for SOPARFI structures through participation exemption and treaty networks – but these benefits depend on substance requirements being met. An underdocumented substance position creates post-acquisition tax risk that representations and warranties alone cannot adequately cover.
Employment and labour. Identify all employment contracts, collective agreements applicable to the target, and any pending employment tribunal proceedings. Luxembourg employment legislation provides strong employee protections, and undisclosed redundancy obligations or profit-sharing arrangements can materially affect deal economics.
Intellectual property and data protection. Confirm ownership of registered trademarks, patents, and software licences. Luxembourg operates within the EU data protection regime; any non-compliant data processing arrangements require remediation as a pre-closing condition or specific indemnity in the SPA.
To ensure the corporate law dimension of these items is properly addressed alongside the M&A review, acquirers should coordinate with counsel covering corporate law matters in Luxembourg, particularly where post-closing restructuring is anticipated.
For a tailored strategy on M&A due diligence scoping in Luxembourg, reach out to info@ferrazwhitmore.com.
Common errors by foreign acquirers – and their consequences
Foreign acquirers make predictable errors in Luxembourg due diligence. Understanding them in advance reduces both cost and transaction risk.
Treating the Luxembourg entity in isolation. A SOPARFI may hold participations in fifteen subsidiaries across eight jurisdictions. Due diligence limited to the Luxembourg entity misses the underlying asset risk entirely. The Luxembourg shell is clean; the problem sits two layers below. Acquirers must agree with counsel upfront which layers of the ownership chain fall within scope.
Assuming RCS filings are complete and current. The RCS reflects what was filed – not necessarily what was executed. A share transfer may have occurred without prompt RCS notification. A capital reduction may not yet appear in the register. Practitioners in Luxembourg advise cross-checking RCS records against the target's internal shareholder register and notarised deed copies held by the company's notary.
Relying on seller warranty coverage instead of document review. Some acquirers shorten due diligence to reduce costs, relying instead on extensive representations and warranties in the SPA. This approach underestimates two risks. First, enforcing SPA warranties requires litigation before Luxembourg courts or arbitration – a process measured in months or years, not weeks. Second, the Tribunal d'arrondissement applies Luxembourg civil procedure rules to warranty claims, which differ significantly from common law disclosure obligations. A warranty claim is not a substitute for a thorough review.
Underestimating CSSF-related timelines. Where CSSF approval or notification is required as a closing condition. for example, on a change of control of a licensed fund manager. the regulatory timeline runs independently of the commercial negotiation. CSSF review periods are not subject to party agreement. Failing to file for CSSF approval promptly after signing routinely extends deal timelines by six to twelve weeks beyond what deal teams anticipate.
Omitting anti-money laundering and beneficial ownership verification. Luxembourg anti-money laundering legislation requires entities to maintain an accurate beneficial ownership register and to file beneficial ownership data with the national register. Gaps in this record are both a regulatory exposure and a red flag for reputational risk assessment. Acquirers should verify the register independently rather than accepting seller confirmation alone.
Missing the substance documentation gap in SOPARFI structures. Luxembourg tax legislation conditions participation exemption benefits on the target meeting economic substance requirements. Many SOPARFI structures meet substance requirements in form but lack adequate contemporaneous documentation – board minutes recording substantive decisions, evidence of director presence in Luxembourg for key meetings, and records of local operational activity. Without this documentation, the acquirer inherits a tax position that is technically defensible but practically difficult to sustain under challenge.
Self-assessment checklist before initiating due diligence
This checklist applies to foreign acquirers preparing to conduct M&A due diligence on a Luxembourg target. Verify each item before instructing local counsel and opening the data room.
- The due diligence scope has been agreed in writing and specifies which legal entities and asset layers are included.
- Counsel experienced in Luxembourg corporate legislation and, where applicable, CSSF regulatory requirements has been instructed.
- The NDA and data room access protocols are executed and consistent with Luxembourg data protection obligations.
- The document request list covers all seven documentary categories: corporate, share capital, financing, regulatory, tax, employment, and IP/data protection.
- The timeline allocates sufficient time for management Q&A, gap notices, and a full written due diligence report before SPA signing.
This approach applies if: the target is incorporated in Luxembourg; the acquisition involves a transfer of shares rather than assets; and the target holds assets or participations beyond its own balance sheet. If the transaction is structured as an asset deal rather than a share deal, the due diligence scope shifts materially – particularly regarding the treatment of liabilities and employee transfer obligations under Luxembourg employment legislation.
A triggered shift from share deal to asset deal structure typically occurs when due diligence uncovers undisclosed or unquantifiable liabilities in the target entity. The indicator is a red flag category that cannot be addressed by specific indemnity or price adjustment alone. At that point, restructuring the transaction as an asset acquisition eliminates the inherited liability exposure. but requires a separate analysis of asset transfer formalities under Luxembourg commercial legislation and tax consequences under Luxembourg tax legislation.
To receive an expert assessment of your M&A due diligence position in Luxembourg, contact us at info@ferrazwhitmore.com.
Frequently asked questions
Q: How long does M&A due diligence typically take in Luxembourg?
A: A standard due diligence process for a Luxembourg holding company or operating entity takes between four and ten weeks, depending on the complexity of the target's structure. Regulated entities supervised by the CSSF require additional review time. Starting the process before signing a letter of intent allows acquirers to reduce delays at the closing conditions stage.
Q: Is it a common misconception that Luxembourg due diligence is simpler because the target is a holding company?
A: Yes, this is one of the most frequent misunderstandings. A SOPARFI or SICAR structure may appear straightforward on paper, but the due diligence scope must cover the full chain of underlying assets, participations, and liabilities. Reviewing only the Luxembourg entity without examining what it holds is the single most costly error foreign acquirers make.
Q: What are the typical legal costs for M&A due diligence in Luxembourg?
A: Legal fees for due diligence in Luxembourg depend on transaction size, entity type, and scope. For a straightforward holding structure, fees start in the range of several thousand euros. Complex fund or regulated-entity reviews can cost significantly more. Engaging a lawyer in Luxembourg with cross-border M&A experience at the outset helps control scope and avoid duplication between local and foreign counsel.
About Ferraz & Whitmore
Ferraz & Whitmore is an international law firm based in Lisbon, advising business clients across 46 jurisdictions. Our M&A practice covers the full transaction lifecycle in Luxembourg – from initial due diligence scoping through SPA negotiation, regulatory clearance, and post-closing integration. We combine Portuguese civil law expertise with English common law tradition to support cross-border acquirers who need counsel that understands both the Luxembourg regulatory environment and the common law transaction structures their counterparties use. As a law firm with Luxembourg market experience, we advise international entrepreneurs, institutional investors, and in-house legal teams on SOPARFI and SICAR acquisitions, CSSF-regulated transactions, and multi-jurisdictional M&A processes across Europe. Our attorneys have advised on share purchase agreement negotiations and due diligence processes across civil law and common law systems, with direct access to EU regulatory frameworks from our Lisbon base. To discuss your Luxembourg acquisition, contact us at info@ferrazwhitmore.com.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.