A European industrial group signs a non-binding letter of intent to acquire a mid-sized UK software company. The deal looks clean on the surface. Three weeks into due diligence, the team discovers that the target's principal revenue contract contains a change-of-control clause requiring counterparty consent – and that consent is not guaranteed. Without specialist legal support, this risk would have remained invisible until after signing.
M&A due diligence in the United Kingdom is a structured legal, financial, and commercial investigation conducted before a buyer commits to an acquisition. Under English commercial law and corporate legislation, the process typically spans four to eight weeks and culminates in a due diligence report that informs the representations and warranties in the share purchase agreement. The buyer bears primary responsibility for identifying risks, as English law gives limited post-completion recourse where risks were discoverable during the process.
This guide sets out the step-by-step due diligence process for foreign acquirers in the UK, covering the documentary checklist. Key legal workstreams, timeline, cost expectations. Additionally, the most consequential errors made by buyers unfamiliar with English practice.
How the UK due diligence process is structured
English M&A practice is built on the principle of caveat emptor (buyer beware). Unlike civil law systems, English law does not impose a general obligation on a seller to disclose all material information. A foreign buyer entering the UK market for the first time often underestimates this distinction. The consequence is significant: risks not uncovered during due diligence are generally not recoverable post-completion, unless they are specifically addressed in the share purchase agreement (SPA).
Due diligence in a UK transaction typically covers five parallel workstreams. Each runs simultaneously during the investigation window to make efficient use of time.
Legal due diligence examines the corporate structure, constitutional documents, material contracts, intellectual property ownership, employment arrangements, and pending or threatened litigation. Counsel will request and review the target's register of members, board minutes, and any shareholders' agreements.
Financial due diligence analyses historical accounts, management accounts, working capital levels, debt structure, and normalised earnings. Buyers should verify filings at Companies House (the UK's official register of companies and their statutory filings) but should treat those filings as a starting point, not a conclusion.
Tax due diligence focuses on compliance with HMRC (His Majesty's Revenue and Customs) obligations, the status of any open enquiries, the availability of carried-forward losses, and VAT registration. Under UK tax legislation, unpaid tax liabilities follow the company – not the seller – in a share acquisition. This makes HMRC compliance a high-priority item for any foreign acquirer.
Regulatory due diligence applies where the target holds licences or operates in a supervised sector. The FCA (Financial Conduct Authority) and, historically, the FSA (Financial Services Authority, its predecessor body) have regulated financial services firms. A change of control in an FCA-regulated entity requires regulatory approval before completion. Missing this step can invalidate the transaction or trigger enforcement action.
Employment due diligence covers TUPE (Transfer of Undertakings) implications where applicable, key employee contracts, bonus arrangements, pension commitments, and any outstanding employment tribunal claims. Employment liabilities in the UK can be material, and their structure differs considerably from civil law systems.
For foreign acquirers managing a cross-border deal, a detailed overview of the M&A process in the UK is available through our M&A services in the United Kingdom practice page.
Step-by-step timeline and documentary checklist
Most UK due diligence exercises follow a defined sequence. The timeline below reflects a mid-market transaction. Larger or regulated targets extend each phase.
Week 1 – Preparation and data room access. The buyer's legal and financial advisers submit a due diligence request list to the seller. The seller populates a virtual data room. At this stage, the buyer's counsel should verify the target's corporate structure at Companies House, review the register of charges for any outstanding security interests, and confirm the identity of all registered shareholders.
Weeks 2 and 3 – Document review. Legal counsel reviews constitutional documents, material contracts, intellectual property registrations, and employment agreements. Tax advisers examine statutory accounts, HMRC correspondence, and payroll records. Red flags are logged as they arise – they are not reserved for the final report.
Weeks 3 and 4 – Management meetings and follow-up queries. The buyer's team meets with the target's management to address gaps identified in the data room. Follow-up questions are submitted formally to preserve a clear record. This is also the stage at which closing conditions – the conditions that must be satisfied before the SPA completes – begin to take shape based on what has been found.
Weeks 5 to 8 – Reporting and SPA negotiation. Due diligence findings are consolidated into a written report. The SPA is negotiated in parallel. Representations and warranties are drafted to address identified risks. Indemnities are negotiated for specific liabilities that cannot be warranted away. Disclosure letters are prepared by the seller to qualify the warranties.
The documentary checklist for a standard UK share acquisition includes:
- Certificate of incorporation and constitutional documents (articles of association, shareholders' agreement)
- Register of members, register of directors, and register of persons with significant control
- Material commercial contracts, including any change-of-control and assignment provisions
- All intellectual property registrations, licences, and pending applications
- Employment contracts for senior personnel, bonus schemes, and pension arrangements
Additional items required for regulated targets include FCA authorisation records, regulatory correspondence, and any notices of investigation or enforcement action. Where the target operates internationally, counsel should also request copies of foreign subsidiary corporate documents and any cross-border intercompany agreements.
For foreign acquirers whose transactions also involve UK corporate governance or group restructuring questions, our corporate law services in the United Kingdom page provides further context on the applicable legislative regime.
Common errors by foreign acquirers – and their consequences
Foreign buyers approaching the UK market for the first time frequently encounter the same set of avoidable problems. Understanding them in advance allows a buyer to allocate time and resources appropriately.
Treating Companies House as a complete picture. Companies House records are publicly accessible and useful. They show registered charges, filing history, and basic corporate information. They do not reveal contractual risks, off-balance-sheet liabilities, HMRC enquiries, or employment tribunal claims. Buyers who rely on public records alone miss the most commercially significant risks.
Underestimating TUPE exposure. Where the transaction involves the transfer of a business or part of a business – rather than a pure share acquisition – the Transfer of Undertakings (Protection of Employment) Regulations may apply. TUPE requires the transferring employer to inform and, in some cases, consult affected employees. Non-compliance exposes the buyer to employment tribunal claims. Civil law buyers from jurisdictions with different employment legislation often fail to identify TUPE triggers early enough.
Missing change-of-control provisions in commercial contracts. Many UK commercial contracts – particularly in technology, professional services, and distribution – contain clauses requiring consent from the counterparty before a change of ownership. A buyer who closes without obtaining required consents may find key contracts automatically terminated or voidable. Identifying these provisions is a core task of legal due diligence, but it requires a full contract review rather than a summary scan.
Failing to scope regulatory approvals correctly. Where the target is FCA-authorised, the buyer must apply for change-of-control approval before completing the acquisition. This process can take several months. Buyers who do not identify the regulatory requirement early will face a closing conditions problem – the deal cannot legally complete until approval is granted. In some cases, buyers have had to unwind transactions that completed without proper authorisation.
Accepting seller warranties without negotiating specific indemnities. Representations and warranties in an SPA provide a contractual remedy if the seller's statements prove inaccurate. However, warranty claims in English law require the buyer to prove loss, and recovery is subject to financial caps and time limits. Where due diligence reveals a specific known risk – a pending tax dispute or a disputed intellectual property right, for example – a negotiated indemnity provides more direct protection than a general warranty. Many foreign buyers accept the seller's initial draft without pushing for indemnities on identified risks, leaving recoverable losses uncovered.
In practice, buyers who engage experienced legal counsel early in the process. before the data room opens. recover substantially more value from the due diligence exercise than those who engage counsel only for SPA review. The investigation phase sets the foundation for every warranty, indemnity, and closing condition that follows.
For teams managing parallel transactions in different jurisdictions, our guide to M&A due diligence in Portugal sets out how the process differs under a civil law system.
To discuss how to structure due diligence for your specific UK acquisition, contact us at info@ferrazwhitmore.com.
Cost expectations and when to invest more heavily
Legal fees for due diligence in a UK transaction scale with the size and complexity of the target. For a straightforward mid-market share acquisition with a well-organised data room, legal fees typically start in the range of tens of thousands of pounds. Regulated targets, multi-jurisdictional groups, or targets with significant IP portfolios generate higher costs.
Tax due diligence fees are typically charged separately from legal fees and depend on the complexity of the target's HMRC history and the number of open enquiries. Financial due diligence is charged by the financial advisory firm and is usually scoped separately.
Warranty and indemnity insurance – a product that covers losses arising from breaches of the representations and warranties in the SPA – has become standard in mid-market UK deals. Premium levels vary with deal size and the scope of coverage. The policy does not eliminate the need for rigorous due diligence. Insurers conduct their own review and will not cover risks that were known or knowable during the process. A buyer who skimps on due diligence will find that the insurer declines claims on the most significant risks.
The economics of due diligence are straightforward. A thorough investigation costs a fraction of the deal price. A missed liability – particularly a tax liability that follows the company under UK tax legislation. Alternatively. An employment claim triggered by a TUPE breach – can equal or exceed the cost of the entire legal process. The High Court of England and Wales regularly adjudicates post-completion warranty disputes, many of which could have been resolved at the due diligence stage through a properly negotiated indemnity.
Buyers entering the UK from civil law systems should also budget additional time for the disclosure letter process. Under English M&A practice, a seller qualifies the warranties in the SPA by delivering a disclosure letter, which sets out specific matters that contradict or limit the warranties given. Reviewing and negotiating the disclosure letter is a distinct phase that requires careful attention. Buyers unfamiliar with this mechanism sometimes treat the disclosure letter as a formality – it is not.
Decision framework: which due diligence scope fits your transaction
Not every UK acquisition requires the same depth of investigation. The following framework helps a foreign acquirer calibrate the scope of due diligence to the specific characteristics of the deal.
Full-scope due diligence is appropriate where: the target is a regulated entity requiring FCA approval. the acquisition involves a complex group structure with foreign subsidiaries. the target holds significant intellectual property. or the buyer is entering the UK market for the first time and has limited familiarity with English commercial law.
Focused due diligence – covering only specific workstreams identified as high-risk – may be appropriate where: the buyer has previously acquired similar UK businesses. the target is a simple trading company with few employees and no regulated activities. or the timeline is compressed and the parties agree to price-adjust or insure specific identified risks.
Confirmatory due diligence – a limited review conducted after exclusivity and price agreement – is used where the buyer has strong prior knowledge of the target (for example. Through a pre-existing commercial relationship) and the parties wish to confirm specific items only.
Before initiating due diligence in a UK transaction, verify the following:
- Whether the target holds any FCA or other regulatory licences that require pre-completion approval
- Whether any material contracts contain change-of-control provisions requiring third-party consent
- Whether the transaction structure is a share acquisition or a business acquisition – this determines whether TUPE applies
- Whether the target has any open HMRC enquiries or disputed tax positions
- Whether the data room is complete and organised before the investigation clock starts
When a due diligence finding is sufficiently serious. for example, where a key contract cannot be assigned and cannot be replaced – the matter may shift from a due diligence issue to a renegotiation trigger. In that scenario, the buyer faces a choice: renegotiate the price to reflect the risk, obtain a specific indemnity, or walk away under a termination right in the heads of terms. Experienced counsel will identify the threshold at which a finding crosses from manageable risk into deal-breaker territory.
The Supreme Court of the United Kingdom and the High Court have both addressed the interpretation of SPA warranties and the scope of buyer knowledge in post-completion disputes. Courts consistently hold that a buyer who conducted due diligence and received relevant information. even where that information was buried in the data room. may face difficulty in establishing that a warranty was breached. If the disclosed information was accessible and a reasonable buyer would have identified it. This is the practical reason why a thorough, documented due diligence process protects the buyer's legal position, not just its commercial position.
Frequently asked questions
Q: How long does M&A due diligence typically take in the United Kingdom?
A: A standard due diligence exercise in the UK takes between four and eight weeks, depending on the size and complexity of the target. Regulated businesses – those subject to FCA oversight or holding licences – typically require additional time. Vendors who prepare a well-organised data room in advance can meaningfully shorten this window.
Q: Can a foreign acquirer rely solely on public Companies House filings for due diligence?
A: No. Companies House records provide useful baseline information on corporate structure, registered charges, and filing history, but they do not reveal contractual change-of-control provisions, employment liabilities, pending litigation, or HMRC compliance status. Relying exclusively on public records is one of the most common and costly errors foreign acquirers make in UK transactions.
Q: What is a warranty and indemnity insurance policy, and when is it worth using in a UK deal?
A: Warranty and indemnity insurance covers losses arising from a breach of the representations and warranties in a share purchase agreement. It is most useful when a seller insists on a clean exit with limited post-completion liability, or when the buyer cannot fully verify a specific area of risk during due diligence. Premiums vary with deal size and risk profile, and the policy does not replace a rigorous due diligence process – it supplements it.
About Ferraz & Whitmore
Ferraz & Whitmore is an international law firm based in Lisbon, advising business clients across 46 jurisdictions. Our team combines Portuguese civil law expertise with English common law tradition to deliver cross-border legal solutions in M&A transactions and due diligence advisory. We work with international acquirers, institutional investors, and in-house legal teams who require experienced co-counsel for UK transactions. The firm's M&A practice covers due diligence, SPA negotiation, closing conditions, and post-completion integration across both civil and common law systems. Our attorneys have advised on share acquisitions and business transfers in regulated and unregulated sectors. Additionally, the firm's Lisbon base provides direct access to Portuguese and EU regulatory systems. While our English common law expertise supports transactions and enforcement strategies across UK and international markets. Engaging a lawyer in the United Kingdom with cross-border M&A experience is essential when the acquirer's home system differs fundamentally from English commercial law. As an international law firm advising on United Kingdom transactions, Ferraz & Whitmore provides the dual-tradition perspective that civil law buyers need when entering the UK market. To discuss your UK acquisition and how we can support the due diligence process, contact us at info@ferrazwhitmore.com.
Disclaimer: This publication is provided for informational purposes only and does not constitute legal advice. The information herein should not be relied upon as a substitute for professional legal counsel tailored to your specific circumstances. Ferraz & Whitmore assumes no liability for actions taken or not taken based on the contents of this material. For advice regarding your particular situation, please contact info@ferrazwhitmore.com.