Financial audits and investigative due diligence answer two completely different questions, and we think the industry conflates them more than it should.
An audit answers: “Do these numbers add up, and are they represented fairly?” It’s a backward-looking, document-driven process, and a good auditor is excellent at it. What an audit does not answer: “Is this person who they claim to be, and is there anything about their history that creates risk this deal isn’t pricing in?”
That second question is where reputational and behavioral risk lives, and it’s almost entirely outside the audit’s scope. A founder can have a spotless set of books and an undisclosed pattern of litigation. A company can have clean financials and a principal who’s quietly been sued multiple times for the exact behavior your deal depends on him not repeating.
We’ve watched deals move forward on the strength of a clean audit alone, and we’ve watched some of those same deals unravel well after close over something that was fully discoverable at the time — it just wasn’t anyone’s job to look. That’s the diligence gap. It’s not that the information doesn’t exist. It’s that nobody on the deal team was assigned to find it.
Reputational risk, in practical terms, is any pattern in a principal’s history that would change how a reasonable investor prices or structures a deal if they knew about it in advance. That includes:
None of this shows up on a balance sheet. Some of it doesn’t show up anywhere unless someone specifically goes looking.
What Does Investigative Due Diligence Actually Check That an Audit Doesn’t?
Investigative due diligence runs a parallel track to the financial audit rather than duplicating it: litigation and court record research across jurisdictions, corporate affiliation mapping to surface entities not disclosed in the data room, media and regulatory history review, and reference and reputational interviews conducted discreetly, without alerting the counterparty that the inquiry is underway. The goal isn’t to catch someone lying — most of the time, nobody is. The goal is to confirm that the picture presented in the data room is the complete picture, not a curated one.
The firms that close this gap treat investigative due diligence as a parallel track to the financial audit, not a redundant or optional add-on. Different questions, different methods, same closing date. In practice, that means scoping the investigative work at the same point the financial and legal diligence teams are engaged — not after the audit report is already in hand and the deal team is deciding whether anything else is worth the time.
On most deal teams we work with, this decision sits with the same partner or principal who owns the go/no-go recommendation to the investment committee — which makes sense, since the findings feed directly into that recommendation. The mistake we see most often isn’t a bad decision about whether to commission the work; it’s no decision at all, because nobody on the team was explicitly responsible for raising the question.