Somebody has sent you a signature page and a deadline. Before it goes out, you want a due diligence checklist — the actual documents to ask for, so the file is not built on whatever the other side happened to feel like sending. That is the right instinct, and the list below is the request set we work from on acquisitions, distribution agreements, large supply commitments, credit exposure and investments. It is not padded and it is not theoretical.
The list, though, is the easy half. In the files we handle, transactions do not go wrong because an item was missing from the request. They go wrong because a document arrived, went into the data room, got a green tick, and nobody ever asked what it actually proves. A certificate, a cap table, a schedule of material contracts — every item on every checklist in existence can be produced, edited or issued by the counterparty. So: the 25 documents, and then the part that decides outcomes. What each group evidences, what it does not, and what it has to be reconciled against before your signature is worth anything.
What a due diligence checklist is for, and where U.S. records actually live
A checklist is a request list. It tells the counterparty what to hand over. It does not tell you whether any of it is true. That reads as obvious written down, and it is still the most common structural failure we see: the request list was excellent, the response was complete, the index was tidy, and not one item was reconciled against a source the counterparty does not control. A document you received is not a fact you verified. A due diligence checklist earns its keep only when each line is paired with the independent record capable of contradicting it.
Settle early which rulebook you are under. People often ask for a «CDD checklist» after reading about the Customer Due Diligence rule at 31 CFR 1010.230. That rule binds covered financial institutions — banks, brokers or dealers in securities, mutual funds, futures commission merchants and introducing brokers. It imposes nothing on an operating company buying a business or appointing a distributor. If you are not a covered institution, your list is driven by commercial risk, contract enforceability and your own sanctions exposure. The rule’s ownership benchmark is still worth borrowing, because your bank will apply it to you: every individual owning 25 percent or more of the equity, plus a single individual with significant responsibility to control, manage or direct the entity.
Then jurisdiction, where generic checklists quietly fail. In the United States there is no national company registry. Formation documents, good standing, annual reports and registered agent data sit with each Secretary of State, one state at a time. Secured creditors appear in UCC filings, also state records. Litigation is split between federal dockets and the courts of each state and county. None of it is unified, and an entity that looks immaculate in its formation state can carry judgments, tax liens or a lapsed foreign qualification where it actually operates. That is why running due diligence on a U.S. company is a research exercise across several record systems rather than a lookup.
The due diligence checklist: 25 documents to request before you sign
Scope should follow the transaction. An asset purchase lives or dies on liens and titles; a distribution agreement turns on authority, licensing and change-of-control clauses; a supply or credit commitment turns on solvency and litigation. Group the request so you can cut what is genuinely irrelevant to your deal, rather than cutting what is merely inconvenient for the other side to produce.
| # | Group | Document to request | What it is meant to evidence |
|---|---|---|---|
| 1 | Corporate existence | Articles of incorporation or organization, as filed and stamped by the state | The entity exists, under that exact name and number |
| 2 | Corporate existence | Certificate of good standing, existence or status, current-dated | Filings and fees are current with the home state |
| 3 | Corporate existence | Bylaws or operating agreement, with every amendment | Governance, quorum, transfer and consent restrictions |
| 4 | Corporate existence | Latest annual report, registered agent details, foreign qualifications | It is registered where it actually does business |
| 5 | Ownership and control | Capitalization table or member and shareholder ledger, certified by an officer | Who holds equity, in what class, at what percentage |
| 6 | Ownership and control | Stock certificates, interest transfer records, subscription and option agreements | How that equity was issued and transferred |
| 7 | Ownership and control | Structure chart to the ultimate individuals, with trusts, holding entities and nominees identified | The path from the signing entity to the humans |
| 8 | Authority to sign | Board, member or shareholder resolution authorizing this transaction and naming the signatory | The entity decided to do the deal and delegated it |
| 9 | Authority to sign | Incumbency or secretary's certificate with current officers and specimen signatures | The named signatory holds that office today |
| 10 | Authority to sign | Powers of attorney, delegation policy, and any investor or lender consent rights | Whether a third party can block or unwind the signature |
| 11 | Financial condition | Audited financial statements for the last three fiscal years, with opinion and notes | Position tested by an independent auditor |
| 12 | Financial condition | Interim management accounts, plus receivables and payables aging | Current trading, collection quality, payment behavior |
| 13 | Financial condition | Debt schedule and loan agreements, including guarantees and off-balance-sheet obligations | What it owes, to whom, on what covenants |
| 14 | Tax | Federal returns for the last three years and IRS EIN confirmation | Filing history and the taxpayer entity's identity |
| 15 | Tax | State tax clearance or status certificate, sales and payroll filings where there is nexus | No open assessment in a state that can enforce one |
| 16 | Contracts | Material customer, supplier, distribution and exclusivity agreements | Where revenue and dependency actually sit |
| 17 | Contracts | Leases, real property documents, and change-of-control or assignment clauses | What survives, transfers or terminates on the deal |
| 18 | Assets and liens | UCC search results in the formation state and principal place of business, with release letters | Which assets are already pledged to a creditor |
| 19 | Assets and liens | Asset register and title documents for material equipment, vehicles and real estate | The company owns what it says it owns |
| 20 | Intellectual property | IP schedule: registrations, applications, assignment chain, licenses, third-party dependencies | Brand and technology transfer with the deal |
| 21 | Litigation | Litigation schedule plus federal and state docket, judgment and tax lien search results | Claims pending, threatened or reduced to judgment |
| 22 | Regulatory | Licenses, permits, inspection reports, consent orders and enforcement correspondence | The right to operate, and any history of losing it |
| 23 | Insurance | Certificates of insurance, full policy schedule and loss runs | Limits, exclusions, additional insureds, claims history |
| 24 | People and licensing | Officer and director list with identity verification, key-person terms, professional licenses | Who runs it, and whether the credentials are active |
| 25 | Sanctions and integrity | Sanctions, PEP and adverse media screening of the entity, its 25 percent owners and its control person | Nobody in the chain is blocked or disqualified |
Existence, ownership and authority are three different questions
These three collapse into one in most data rooms and should never be treated together. Existence is a state record: the filed charter and a current certificate say the entity was created and is administratively current. Ownership is not a state record at all — no Secretary of State validates a cap table, an operating agreement or a structure chart, and after the FinCEN final rule of 11 August 2026 there is no federal ownership record either. Authority is a third question again, answered by resolutions and an incumbency certificate and cross-checked against consent rights buried in shareholder and loan agreements. A strong answer to one tells you nothing about the other two, which is why establishing the real beneficial owner is now a construction exercise rather than a search.
Financial condition and tax: not all numbers are the same evidence
Audited statements carry an independent opinion, a defined scope, and notes that often say more than the balance sheet. Unaudited management accounts carry the counterparty’s own arithmetic and nothing else: useful for trend, worthless as proof. Reviewed and compiled statements sit between the two and are routinely presented as though they were audits. The debt schedule is a self-declaration and belongs next to UCC results and the loan agreements themselves, because undisclosed guarantees rarely appear anywhere the borrower controls. Tax returns show what was filed, not what is owed after an assessment; a clearance certificate is the check, and only for the state that issued it.
Assets, liens and litigation: what survives the closing
Every document here describes a position the counterparty would prefer you accept as final. An asset register says the company owns the equipment; the UCC search says a lender holds a security interest in it. A litigation schedule says three matters are pending; the dockets say whether a fourth was filed in a county nobody mentioned. Registered IP has an assignment chain that either reaches the selling entity or stops at a founder’s personal name. This is where reconciliation pays for itself, because liens, judgments and unassigned IP do not disappear at closing. They follow the asset to you.
Insurance, licensing and sanctions: the group people skip
A certificate of insurance is a summary produced by a broker. It is not the policy, and it does not show exclusions, retroactive dates or limits already eroded by prior claims. Professional licenses expire, get restricted, and belong to individuals rather than to the company relying on them. Sanctions is the group with no tolerance at all: OFAC obligations are strict liability, apply to every U.S. person and business regardless of sector, and reach past named parties through the 50 Percent Rule, under which an entity owned 50 percent or more in the aggregate by blocked persons is itself blocked even when it appears on no list. Screening has to reach the owners, not stop at the entity on the signature page.
What the official guidance does not tell you
A certificate of good standing proves administrative compliance, not health. It means fees were paid and required filings made as of the issue date. It says nothing about solvency, litigation, liens, honesty, or whether payroll cleared last month. Companies file their annual report and pay their franchise tax weeks before they collapse. Read it as a dated snapshot of one narrow question, check the date on it, and never let it stand in for financial or legal condition.
The most important documents are the ones no office verifies. The operating agreement, the cap table, the board minutes, the structure chart and the disclosure schedules are internal instruments, created by the counterparty and countersigned by the counterparty. No state agency reviews them for accuracy. And since the 11 August 2026 final rule permanently exempted U.S. companies and U.S. persons from beneficial ownership reporting — with FinCEN directed to delete information relating to U.S. persons — nobody can hand you a federal ownership record as proof either. That database was never public to begin with. Ownership now gets answered from documents plus verification, triangulated until the story holds.
The person signing may not be the person authorized to sign. Titles in email signatures are not authority. We regularly find a general manager executing an agreement the operating agreement reserves to the members, an officer whose appointment was never ratified, or a resolution authorizing a materially different transaction from the one on the table. That is not a formality. It is a live enforceability problem, and it surfaces at the worst possible moment, which is when you try to enforce.
«We will send it after signing» is itself a finding. So is a document produced in a format that resists checking, a certificate months out of date, an entity name that shifts slightly between documents, or an address that appears on the lease but nowhere in the filings. Pattern matters more than any single item: what was withheld, what arrived late, what changed between versions, what the counterparty argued was unnecessary. Those responses are data, and they predict problems more reliably than the documents that did arrive.
Coverage is not uniform, and neither is quality. Search interfaces, indexing depth, assumed-name records and archive availability vary state by state, and some counties are not searchable online at all. A clean result can mean nothing was filed, or that you searched a system which never held it. Knowing which records are authoritative in a given state, and which are decorative, is a large part of what experience buys here.
The most common mistakes and what they cost
None of the failures below are exotic. They repeat across industries and deal sizes, and each carries a price that is easy to state.
- Signing on a document set nobody reconciled. A complete data room produces the feeling of thoroughness without the substance. The cost lands later: a representation that proves untrue, an indemnity claim against escrow already released, a dispute in which your own file shows you never checked.
- Missing the lien that survives the deal. A UCC-1 you did not search for does not vanish because the seller left it off the schedule. You take the equipment and the secured party keeps its rights, which means paying the same debt twice or losing the asset the deal was built around.
- Accepting a scanned PDF as an original. Scans are altered routinely and convincingly: figures, dates, stamps, signatures. Beyond fraud there is friction, because lenders, escrow agents and registries reject uncertified copies, and closing stalls for weeks while certified documents are ordered from the state that should have been asked at the start.
- Discovering the litigation after closing. Disclosure schedules are drafted by the party with every incentive to keep them short. A judgment or threatened claim found afterward becomes a price adjustment you no longer have leverage to demand, legal spend you did not budget, and sometimes a liability that transferred with the entity.
- Screening the entity but not the people. Sanctions exposure runs through ownership. Clearing the company on the signature page while ignoring who owns it leaves you exposed under the 50 Percent Rule to a blocked counterparty that appears on no list, with frozen funds and a disclosure decision to make.
- Keeping a folder instead of a record. When a board, lender, insurer or regulator asks what you verified, a stack of PDFs is not an answer. A due diligence report stating what was checked, against which source and on what date is the difference between a defensible decision and an expensive argument.
How Compliance Officers resolves it for you
Our clients do not chase Secretaries of State, order certified copies, work out which county holds a docket, or try to judge whether a certificate is current enough to rely on. We run the file end to end: zero paperwork for you, zero errors, zero unnecessary delays. You tell us what you are about to sign and who is on the other side. We tell you what the records say, where the documents and the records disagree, and what that means for the transaction in front of you.
In practice that means building the request list to the transaction rather than to a template, obtaining state records directly at source, running lien, judgment and litigation searches in the jurisdictions that actually matter for this counterparty, screening the entity together with its owners and control person, and reconciling every document received against something the counterparty does not control. Where an item cannot be verified, we say so plainly instead of filling the gap with an assumption. The same discipline applies to a one-off acquisition and to continuous vendor and third-party onboarding across a supplier base.
We run these files continuously, across states and counterparty types, which is why we know where each record system is reliable and where it is not. Timelines are set by the slowest authority in the chain, and we tell you at the outset which parts move fast and which do not. If there is a date on your transaction, contact us to evaluate your case and we will scope it against your deadline.
Frequently Asked Questions
How long does it take to work through a due diligence checklist?
It depends on scope, on how many states and counties are involved, and above all on the counterparty. State record retrieval and screening move quickly. Certified copies, older court files and multi-state lien work take longer, and the real delay is almost always the other side’s response time. We run the independent searches in parallel with the document request, so the file is not held hostage by a slow data room. Send us the deal parameters and we will give you a realistic timeline.
Is a due diligence checklist required by law?
For an ordinary operating company, no. The CDD Rule at 31 CFR 1010.230 binds covered financial institutions, not general businesses. Two things are not optional, however: OFAC sanctions compliance is a strict-liability obligation applying to all U.S. persons and businesses, and directors owe duties that a signed-blind transaction does not satisfy. Contractual representations are not verification either; they only give you someone to sue afterward. We scope what your specific exposure requires.
Can I confirm who owns a U.S. company through a government registry?
No, and this is the misconception we correct most often. There is no national company registry, and the FinCEN beneficial ownership database was never public. The final rule of 11 August 2026 permanently exempted U.S. companies and U.S. persons from reporting and directs FinCEN to delete U.S.-person information; foreign reporting companies still report their foreign individual owners. Ownership has to be established from state filings, corporate documents and direct verification. That reconstruction is work we do routinely.
What should I do if the counterparty refuses to provide some documents?
Treat the refusal as information rather than an obstacle. Note what was withheld, the reason given, and the point in the negotiation where it appeared. Then obtain independently whatever can be obtained, because filings, liens, dockets and screening do not need the counterparty’s cooperation. Price or reject the residual risk consciously. Deals fail on the item nobody insisted on. We can tell you quickly whether a gap is normal or a red flag.
Does a certificate of good standing mean the company is financially sound?
It does not. It confirms that required filings were made and fees paid to that state as of the date it was issued. Solvency, litigation, liens, tax assessments and management integrity all sit outside its scope, and it says nothing about states where the company operates without being qualified. It is a necessary document and a weak one on its own. We pair it with the records that answer what it cannot.
Which documents matter most if the deadline is short?
Prioritize by what is irreversible. Authority to sign, ownership down to the individuals, liens against the assets you are acquiring, open litigation and sanctions screening are the items whose failure cannot be repaired after closing. Financial depth and full contract review can be staged or covered by conditions. Cutting the list is a risk decision, not an administrative one, and it should be made deliberately. Contact us to evaluate your case and we will tell you what is safe to defer.
About to sign with a counterparty you have not actually verified?
Compliance Officers runs the verification end to end: zero paperwork for you, zero errors, zero unnecessary delays.
Phone and WhatsApp: +1 305 647 3000
