Meta Due Diligence

Due Diligence Meta-Skill

Use When

• Use before presenting a plan to investors, lenders, DFIs, or strategic partners.
• Use when auditing whether claims, numbers, and credentials can survive scrutiny.
• Use for outbound diligence on counterparties where the business itself must verify another party.

Do Not Use When

• Do not use as a substitute for basic drafting or market research.

• Do not assume DD is complete because the plan sounds polished.

• Do not certify claims that have not been checked against documents or verifiable evidence.

• For meta-due-diligence, route to the relevant plan-section skill instead when the request is section drafting rather than cross-section analysis.

Required Inputs

• Completed or near-complete plan sections
• All available supporting documents and source files
• Audience type and DD intensity expected
• Any known risk areas, unsupported claims, or counterparties requiring review

Workflow

1. Choose the DD mode: inbound readiness, outbound DD, or plan DD audit.
2. Identify the claims and evidence that matter most to the transaction or submission.
3. Check supportability section by section and document by document.
4. Classify issues by severity, missing evidence, and likely investor or lender reaction.
5. Build the DD action list or counterparty findings pack.
6. Hand unresolved items back to the relevant skills for correction.

Decision, stop, and recovery controls

• Decision point: confirm that the requested output is the due-diligence findings register and that the decision concerns which red flags block, condition, or permit the transaction.
• Stop condition: halt the affected conclusion if required evidence is missing (data room, scope, source provenance, and materiality threshold) or if the work could lead to this identified risk: treating a missing document as satisfactory evidence.
• Recovery: obtain the missing record or reviewer, repeat the affected check, and update the exception record before release.

Quality Bar

• Every major claim is either verified, caveated, or flagged.
• The DD output distinguishes missing proof from genuine red flags.
• The result is practical for submission readiness, not just theoretical.
• The work improves survival under real scrutiny.

Anti-Patterns

• Assuming data quality because the narrative sounds confident.

• Leaving unsupported claims in place because they are strategically useful.

• Mixing minor admin gaps with deal-breaking issues.

• Treating DD as formatting rather than verification.

• Treating a generic due diligence template as a conclusion. Correction: tie each choice to the named audience, evidence, and operating constraint.

• Applying the wrong neighbouring route to meta due diligence. Correction: confirm the decision and route to the named neighbour before analysis.

• Treating an assumption as verified evidence. Correction: label it, cite its source or owner, and assign a verification action.

• Recommending action without a decision threshold. Correction: state the measurable acceptance condition and review trigger.

• Recording an unavailable check as passed. Correction: mark it not assessed and state the consequence for the decision.

• Mutating or publishing during an analysis-only task. Correction: remain read-only until the owner gives explicit authority.

Outputs

• DD readiness assessment or counterparty DD findings
• Verified and unsupported claim list
• Severity-ranked issue log
• Recommended remediation actions before submission or deal progression

Core Principle

A business plan is a collection of claims. Due diligence is the process of verifying whether those claims are true. Every number, every market assertion, every competitive advantage statement, and every management credential in a business plan is a potential DD investigation target.

Two directions of DD in business planning:

• Inbound DD What investors, banks, and DFIs will do to you. Prepare for it.
• Outbound DD What you must do on partners, suppliers, customers, and acquisition targets before committing.

A plan that has been through rigorous internal DD before submission is a fundamentally different document from one that hasn't.

When to Use

Mode A DD Readiness Preparation: Before submitting a business plan to any investor, bank, DFI, or grant committee. Use to identify what documentation is missing, what claims are unsupported, and what red flags must be addressed.

Mode B Outbound Due Diligence: Before entering a material business relationship a major supplier contract, joint venture, partnership, acquisition, or key hire. Use the OSINT and DD frameworks to systematically investigate the counterparty.

Mode C Business Plan DD Audit: Review a completed business plan section-by-section for claim supportability, documentation gaps, and investment-readiness. Produces a scored DD audit with priority action list.

Mode A: DD Readiness Prepare for Investor Scrutiny

The Investor's Investigation Map

When a professional investor, bank credit officer, or DFI analyst receives a business plan, their DD process follows a predictable sequence. Knowing what they investigate lets you prepare before they ask.

1. Commercial Due Diligence

What they verify:

• Market size: Is the TAM/SAM/SOM calculation methodology credible? Are the data sources reputable and current?
• Growth claims: Is the cited CAGR from a verifiable source? Does historical data support the forward projections?
• Customer claims: Do named customers exist? Are contracts signed or verbal? What is the concentration does one customer represent >20% of revenue?
• Competitive position: Is the stated competitive advantage real and durable, or asserted without evidence?
• Revenue quality: Is revenue recurring/contracted, or one-off? Is the pipeline real?

Preparation actions:

• All market size figures cite named sources with date and URL
• Customer list prepared with: name, contract status, revenue contribution, tenure
• No single customer >30% of revenue (or concentration risk explicitly addressed)
• Competitive advantages supported by evidence (patents, certifications, price comparisons, win/loss data)
• Sales pipeline documented with stage, value, probability, and contact name

2. Financial Due Diligence

What they verify:

• Financial statements: Are the last 2-3 years of financials available and internally consistent?
• Quality of earnings (QoE): Have one-off items been excluded from normalised EBITDA?
• Working capital: What is the normal working capital requirement? Is it stable or deteriorating?
• Cash flow: Does cash flow match reported profit? Large divergences indicate accounting issues.
• Tax compliance: Are all tax returns filed and paid? Are there outstanding assessments?
• Revenue recognition: Is revenue booked when earned or when received? Are policies consistent?

Preparation actions:

• 3 years of audited or reviewed financial statements prepared (or management accounts if pre-audit stage)
• Normalised EBITDA calculated with adjustments listed and explained
• Tax compliance certificates (TCC) obtained from URA (or relevant authority)
• Working capital analysis prepared: debtors, creditors, inventory, cash cycle
• Any related-party transactions disclosed and at arms-length pricing
• Financial projections include a detailed assumptions page (not just numbers)

3. Legal and Compliance Due Diligence

What they verify:

• Business registration: Is the entity properly registered and in good standing?
• Licences and permits: Are all operating licences current and applicable?
• Contracts: Are key commercial contracts in writing, signed, and favourable?
• IP: Is intellectual property owned by the business (not the founder personally)?
• Litigation: Are there pending or threatened legal claims?
• Land/property: If land is an asset or is used operationally, is title clear and registered?

Preparation actions:

• Certificate of Incorporation / Business Registration Certificate available
• All trading licences current (KCCA/district, sector-specific)
• Key supplier and customer contracts in writing with signed copies
• IP transferred to company name (not founder) trademarks, software, brand assets
• Statutory compliance: NSSF, PAYE remittances up to date
• Land titles or lease agreements in order no encumbrances undisclosed

4. Operational Due Diligence

What they verify:

• Processes: Are core business processes documented or entirely in the founder's head?
• Systems: What accounting, ERP, or management information systems are in use?
• Key person dependency: Would the business survive if the founder was unavailable for 3 months?
• Scalability: Can operations scale to meet the projected growth in the plan?
• Supply chain: How many suppliers for critical inputs? What is the switching cost?

Preparation actions:

• SOPs (Standard Operating Procedures) exist for core processes
• Accounting software in use not Excel spreadsheets for a going-concern business
• Succession plan or key person mitigation addressed in management section
• Capacity analysis in operations plan: current capacity vs. projected demand
• Supply chain risk addressed minimum two suppliers for any critical input

5. Management and People Due Diligence

What they verify:

• Founder background: Are the credentials stated in the plan accurate and verifiable?
• Track record: Do prior business successes check out?
• References: What do former employers, clients, and associates say?
• Character: Any adverse history fraud, criminal records, regulatory sanctions?
• Team completeness: Are the skill gaps in the leadership team addressed?

Preparation actions:

• All CVs in the plan are accurate (dates, qualifications, titles)
• Professional references prepared 2-3 people who can vouch for each key executive
• Academic and professional certificates available for inspection
• No undisclosed conflicts of interest (related-party suppliers, family members in key roles undisclosed)

The Data Room

For any equity investment or major DFI financing, build a data room an organised, secure, digital folder of all DD materials.

Minimum data room structure:

/data-room/
 1-corporate/
    certificate-of-incorporation.pdf
    memorandum-and-articles.pdf
    shareholders-register.pdf
    board-resolutions.pdf
 2-financial/
    financial-statements-FY2023.pdf
    financial-statements-FY2024.pdf
    management-accounts-current-year.pdf
    tax-compliance-certificate.pdf
    projections-with-assumptions.xlsx
 3-commercial/
    customer-list-and-contracts.pdf
    supplier-agreements.pdf
    sales-pipeline.xlsx
    market-research-sources.pdf
 4-legal/
    operating-licences.pdf
    land-title-or-lease.pdf
    ip-registrations.pdf
    litigation-disclosure.pdf
 5-operations/
    org-chart.pdf
    key-process-sops.pdf
    asset-register.pdf
 6-people/
     management-cvs.pdf
     key-employment-contracts.pdf

Mode B: Outbound Due Diligence (Investigating Others)

When Outbound DD is Required

Before any material business commitment:

• Major supplier or subcontractor (>20% of COGS from one source)
• Joint venture or partnership
• Key hire (C-suite, technical lead, financial controller)
• Business acquisition or asset purchase
• Major customer (extending credit or entering long-term contract)
• Investor or lender (reverse DD vetting who your capital partners are)

OSINT Investigation Framework (Hetherington)

Open-source intelligence (OSINT) is the systematic collection and analysis of publicly available information. For business due diligence, it is the first layer of investigation fast, low-cost, and often revealing.

Layer 1 Identity and Registration Verification

• Business registration: confirm legal name, registration number, incorporation date, directors/shareholders use URSB (Uganda Registration Services Bureau) portal or equivalent national registry
• Verify that the business is in good standing (not struck off, not under administration)
• Cross-check trading name against registered name discrepancies are a red flag

Layer 2 Financial and Credit Signals

• Credit bureau checks (Uganda: CRB Africa, Compuscan) payment history, defaults, judgements
• Court records: civil judgements, winding-up petitions, bankruptcy records
• Regulatory enforcement actions: check sector regulator databases (Bank of Uganda, URA, NEMA)
• Annual returns: filed on time? Financials filed? Gaps in filing history are signals

Layer 3 Digital Footprint Assessment

• Website: domain registration date, hosting country, HTTPS, contact details verifiable?
• Social media: account age, follower quality, engagement consistency new accounts with no history are high-risk for new suppliers
• Adverse media search: [company name] + fraud, scam, dispute, lawsuit, complaint across Google, local news, social media
• LinkedIn: do stated employees actually exist and have credible histories?
• Google Maps / satellite: does the stated physical address match a real business location?

Layer 4 People Verification (Key Principals)

• Director background: search [name] + company names + past roles
• Professional credentials: verify via licensing boards, professional associations (e.g., ICPAU for accountants, LSB for lawyers in Uganda)
• Sanctions and PEP screening: check UN Sanctions List, OFAC SDN list, EU Consolidated List
• Court records: civil and criminal history where public records permit

Layer 5 Reputation Intelligence

• Industry references: ask peers in your industry about their experience with this counterparty
• Customer references: request and actually call 2-3 customer references; ask hard questions
• Supplier references: ask the target's own suppliers about payment behaviour
• Association and chamber of commerce membership: members face peer accountability

Outbound DD Red Flag Register

Mode C: Business Plan DD Audit

Use this section after all plan sections (0115) are drafted, before submission to any funder.

Audit by Plan Section

For each section, the audit asks: Is every material claim in this section verified, sourced, and defensible?

DD Readiness Score

After auditing each section:

Minimum for bank submission: Average score 3.5, no section below 3. Minimum for DFI / equity: Average score 4.0, no section below 3.5.

Execution Readiness Dimension

Due diligence also tests whether a plan can actually be executed. A well-written plan that the management team cannot execute is worthless investors call this the "implementation gap."

Execution Readiness Checklist

• Every milestone in Section 13 has a named responsible person, not just "management"
• Pre-launch regulatory steps (licences, permits, registrations) are in the timeline with realistic lead times
• Every financial assumption in Section 10 can be traced to a specific action in Section 13
• The team in Section 09 has the skills to execute every phase of the Section 13 plan
• Cash flow projections account for the time lag between investment, operations launch, and revenue generation
• Section 12 risk mitigations are built into the Section 13 timeline, not left as promises
• Key supplier relationships have been initiated (quotes obtained, samples tested, agreements in principle)
• The operations plan (Section 08) is consistent with the budget space, equipment, staffing match the numbers
• Board governance or advisory structure is in place to hold management accountable post-funding

Generation Process

1. Identify the mode (A, B, or C) and the purpose (what funder? what counterparty?)
2. Mode A: Work through the 5 DD categories; produce a gaps list with priority actions and data room requirements
3. Mode B: Apply the 5-layer OSINT framework; produce a red flag report with recommendations
4. Mode C: Audit each of the 15 plan sections against the verification table; produce a DD Readiness Score with a priority action list
5. In all modes, check execution readiness using the checklist above

Quality Criteria

• Every material claim in the plan has an identified evidence source
• Data room structure is complete (Mode A) or red flags are documented (Mode B)
• DD Readiness Score 3.5 (bank) or 4.0 (equity/DFI) before submission
• Execution readiness checklist passes plan is executable, not just presentable
• No section of the plan makes claims that contradict evidence elsewhere in the plan

References

• references/osint-business-intelligence.md OSINT methodology; 5-layer investigation framework; competitor intelligence checklist; digital footprint assessment; red flag signals; Uganda/East Africa limitations with workarounds Source: Hetherington. Read for any outbound DD investigation, competitor research, or partner vetting.
• references/due-diligence-ma-howson.md Full DD taxonomy (commercial, financial, legal, operational, tax, HR); quality of earnings; working capital analysis; data room requirements; management presentation standards; sell-side VDD; full DD checklists by type; investment readiness framework Source: Howson. Read for any equity investment, DFI funding, or business sale preparation.
• references/operational-due-diligence-pe.md Operational DD standards for PE/impact investors; valuation scrutiny and defence; liquidity analysis; financial controls adequacy; documentation standards; governance requirements; PE-ready operations standard Source: Scharfman. Read when preparing for PE, impact investor, or DFI operational due diligence.
• references/due-diligence-transactions-berkman.md Transaction DD checklists (financial, legal, commercial, people); pre-transaction preparation timeline; business plan verification table (claims to evidence map); execution readiness framework; 20 common DD deal-breakers Source: Berkman. Read for any business transaction requiring DD investment, acquisition, partnership, or major contract.
• meta-bankability-scoring/SKILL.md CAMPARI 28-item checklist. Run alongside Mode A (DD Readiness) for bank submissions.
• meta-market-validation/SKILL.md Mode B (Post-Plan Claim Auditing) complements Mode C of this skill. Run both for comprehensive pre-submission review.
• 11-funding-request/references/business-valuation-methods.md Valuation methodology defence (cross-reference with Scharfman's valuation scrutiny section).
• 12-risk-analysis/SKILL.md Risk register. Every DD finding that cannot be resolved before submission must appear in the risk register with a mitigation.
• references/esmp-template.md Environmental and Social Management Plan (ESMP) template and reference guide for DFI-funded projects. Contains: full 14-section document structure; AfDB 14 Material Actions with KPIs and deadlines; impact/mitigation matrix template; representative mitigation measures by impact type (dust, noise, waste, OHS, community safety, asbestos); environmental monitoring plan; 5-step GRM procedure with SEAH protocols; stakeholder engagement timeline; ESMP budget structure; Uganda NEMA/KCCA/DOSH regulatory requirements; 20-term glossary. Sources: AfDB, FAO/WB, UNDP, World Bank (2025). Read when any section of the plan involves construction, land use, natural resources, or DFI/development bank financing any funder following AfDB OS or IFC Performance Standards will require an ESMP.

Evidence Produced

Capability and Permission Boundaries

Default to read-only inspection while producing the due-diligence findings register. Read supplied records and run non-mutating checks; writing findings only; remediation needs separate authority is permitted only when requested. Do not publish, contact third parties, alter live systems, commit funds, or claim legal, tax, audit, valuation, ESG, or investment assurance without the owner's explicit authorisation and the appropriate reviewer.

Degraded Mode

If data room, scope, source provenance, and materiality threshold cannot be obtained, return a qualified due-diligence findings register covering only the checks that remain supportable. Leave this decision unresolved: which red flags block, condition, or permit the transaction. Record the evidence owner and next check; an inaccessible source, tool, or reviewer is never a pass.

Decision Rules

Quality Standards

Accept the due-diligence findings register only when evidence is sufficient for this decision: which red flags block, condition, or permit the transaction. Assumptions and countercases remain visible, calculations and cross-references reconcile, and the reviewer can see how the recommendation addresses the risk of treating a missing document as satisfactory evidence.

Worked Example

A target reports a major customer as recurring revenue but supplies only unsigned purchase orders. Flag revenue quality, quantify materiality, and keep the finding open until contracts, invoices, and collections reconcile.