How to build a due diligence findings and risk tracker for Share Purchase Transactions

Build a buyer-side diligence findings tracker by turning each material concern into a traceable decision record: what the evidence shows, what remains unknown, why it matters to the share acquisition, and who must act. Link findings to target entities, acquired shares, operative contracts, and purchase-agreement provisions. Separate factual verification from negotiated protection and commercial acceptance. The resulting deliverable should identify unresolved acquisition risks, direct targeted follow-up, and explain which issues require evidence, contractual treatment, or an authorized business decision before proceeding.

When to use this workflow

Use this workflow when initial review produces issues that cannot be managed reliably through data-room comments or email. It serves buyer’s counsel, in-house transaction teams, and specialist reviewers coordinating diligence on a share purchase.

The tracker addresses ownership of the acquired shares, the target’s continuing operations, and proposed contractual protection. It is not a document inventory or comprehensive closing checklist. Keep restrictions on transferring the sellers’ shares separate from target-contract provisions triggered by an ownership change.

This is a general US legal-workflow guide. Delaware corporate-law points concern Delaware corporations; other entity jurisdictions, regulated businesses, and cross-border elements require separate analysis. Contractual consequences depend on operative language, governing law, facts, and deal structure. The tracking recommendations are working practices, not legal requirements.

What you need

Start with the acquisition perimeter: target entities, selling holders, share classes, percentage acquired, outstanding equity instruments, excluded subsidiaries, and proposed preclosing restructuring. Obtain the latest share purchase agreement (SPA) and disclosure schedules, even if incomplete.

Collect these materials or record their absence:

• Stock ledger, capitalization table, certificates or uncertificated-share notices, issuance approvals, equity awards, prior transfers, and shareholder agreements.
• Material contracts, amendments, side letters, guarantees, and available consent correspondence.
• Financing and security documents, organizational records, financial diligence findings, and relevant specialist reports.
• Data-room index, unanswered requests, seller responses, and the buyer’s materiality priorities.

Give each source a stable document ID, version, execution status, and location in a separate index. Agree who assigns priority and who may accept business exposure. A reviewer’s authority to identify a risk does not establish authority to accept it.

Use the template

Use the Share Purchase Transactions — Diligence findings tracker below. You can copy this table into your working document or spreadsheet. Maintain one row per distinct decision; split related concerns when owners or resolution requirements differ.

“Evidence / pinpoint” identifies the document ID, reviewed version, and clause, page, or spreadsheet cell. Attribute seller explanations to their author and response record rather than presenting them as documentary proof.

“Gap / confidence” separates unavailable evidence from the reviewer’s assessment. “Exposure / priority” explains the acquisition consequence and escalation rationale, not merely a color. “SPA / response” identifies the affected provision, disclosure schedule, and proposed treatment.

“Decision point” records a review date or transaction event, such as approval of the signing draft. “Status / resolution” distinguishes factual closure, contractual treatment, and accepted residual exposure. Link detailed reasoning to a restricted analysis record where the tracker’s circulation would otherwise disclose sensitive legal advice.

Step by step

1. Fix the acquisition perimeter and decision rules

Confirm which shares and entities the buyer expects to acquire. Identify intended sellers not covered by transaction documents, instruments affecting fully diluted capitalization, and restructuring steps that could change the review perimeter.

Define priorities with the deal lead. “Critical” might identify a concern that could prevent acquisition of the intended shares; “high” might identify material operating exposure requiring a signing decision. These are internal categories, not enforceability conclusions. Do not classify unknown exposure as low merely because supporting documents are absent.

Record: affected entity or shares, priority rationale, and decision point for each preliminary issue.

2. Convert observations into discrete findings

Write the observed fact before the conclusion. “Executed base contract C-014, section 11.3, contains an ownership-change consent requirement” is more precise than “consent risk,” particularly when an amendment remains unavailable.

Check execution status and amendment history. Distinguish “not provided,” “does not exist,” and “not applicable.” Treat oral or emailed assurances as attributed responses requiring assessment.

If access is restricted, identify the reason and request suitable alternative evidence. As a negotiated example, section 7.2(a) of the AMD–ZT Group agreement limits preclosing access for specified confidentiality, legal, and privilege concerns and includes efforts obligations concerning alternative access. It does not create a general buyer inspection entitlement. (sec.gov)

Record: narrowly framed finding, pinpoint evidence, and exact unanswered question.

3. Reconcile ownership evidence before assessing transfer readiness

Compare the ledger with the capitalization table, certificates or notices, issuance approvals, equity awards, and prior transfers. Investigate mismatches by holder, class, and amount. Do not treat a capitalization spreadsheet as sufficient evidence that the proposed sellers can deliver every intended share.

For a Delaware corporation, DGCL section 219(c) defines the stock ledger to include record holders, addresses, registered share amounts, and issuances and transfers recorded under section 224. That definition does not establish clean title or complete beneficial ownership. (delcode.delaware.gov)

Review applicable restrictions and their adoption history. DGCL section 202(a)–(b) addresses certificate or notice disclosure, actual knowledge, and restrictions adopted after issuance. For previously issued securities, holder agreement or a favorable vote matters. A missing legend alone does not establish unrestricted transferability. (delcode.delaware.gov)

Record: discrepancy or restriction, affected shares, source references, and required evidence or specialist analysis.

4. Translate target-level findings into acquisition exposure

Explain how each concern affects the buyer. A customer-contract issue may threaten revenue continuity; a security interest may affect target assets; an equity discrepancy may affect seller coverage or consideration allocation.

For contracts, distinguish assignment language from an express ownership-change trigger. Compare the proposed transaction with the defined trigger, exceptions, notice requirements, and consent wording. Review amendments and side letters before stating that consent is required.

Separate severity from certainty. A potentially serious issue may remain unconfirmed because evidence is missing. Ask the business team to assess customer importance or operational dependency rather than inventing a loss amount. Link overlapping legal and financial findings to avoid counting the same exposure twice.

Record: business consequence, confidence level, priority rationale, and related finding IDs.

5. Map each finding to a proposed transaction response

Select treatment appropriate to the concern: further evidence, remediation, consent, revised representation, specific contractual protection, price discussion, or authorized acceptance. Label protections as buyer requests until agreed. Examine the proposed protection’s scope and limitations before treating it as sufficient.

Map the finding to the current SPA and schedules, preserving knowledge, materiality, and temporal qualifiers. Assess data-room disclosure under the actual draft rather than assuming uploaded documents qualify every representation.

For example, section 10.9 of the Booz Allen Hamilton–PAR agreement allows disclosure against another representation where relevance is reasonably apparent on the disclosure’s face. This is agreement-specific drafting, not a universal disclosure rule. (sec.gov)

Record: affected provision, requested treatment, fallback requiring approval, and unresolved drafting dependency.

6. Assign a question, owner, and decision point

Make requests answerable. Replace “resolve ownership” with “provide the executed instrument supporting ledger entry L-008 and explain the conflicting capitalization-table entry.” Assign one buyer-side reviewer to evaluate the response, even where several specialists contribute.

Tie review dates and decision points to the deal timetable. Distinguish internal targets from contractual deadlines and identify uncertain dependencies. Escalate unanswered high-priority requests by explaining the decision they prevent.

Keep evidence collection and contractual treatment separate within the row. An agreement to revise the SPA is not itself evidence that the underlying defect has been cured.

Record: precise action, responsible reviewer, required response, and escalation date or event.

7. Close findings against an explicit test

Compare the response with the original question before changing status. An uploaded draft consent does not establish effective executed consent. Revised drafting may address exposure without eliminating the underlying uncertainty.

Use distinct outcomes: fact verified, issue cured, contractually addressed with residual risk, risk accepted, or unresolved. For acceptance, record the authorized decision-maker, information considered, and remaining uncertainty. If transferred to a closing or post-closing checklist, retain the receiving record ID and owner; do not label the underlying issue cured merely because tracking moved.

Reopen findings when amendments, schedules, or ownership records contradict the resolution. Preserve earlier references and the decision history.

Record: closure test, resolution evidence, approval where needed, and continuing dependencies.

Worked example

Fictional scenario: Alder Quay Holdings proposes to acquire all shares of Beacon Circuit Services, a Delaware corporation, for $42 million. Every party, document, amount, and provision below is fictional.

The ledger and capitalization table disagree about 800 shares attributed to a former employee. A significant customer’s executed base contract contains an ownership-change consent clause; the seller asserts that an unavailable amendment removed it. An unsigned lender release is also uploaded. The SPA is still under negotiation, and no resolution evidence has been supplied.

The tracker converts “three missing documents” into three distinct decisions. F-01 requires reconciliation before counsel can assess seller coverage. F-02 requires the missing amendment before determining the operative consent obligation; commercial assessment informs priority, not interpretation. F-03 requires a release process and evidence of effectiveness, rather than a revised upload label.

No finding is cured. Protection can be negotiated while evidence is collected, but the signing recommendation must identify the remaining uncertainties and the proposed treatment of each.

Common mistakes

• Treating the cap table as sufficient ownership evidence. Reconcile ledger entries, issuance records, transfers, and restrictions before assessing seller coverage.
• Combining defects with different resolution tests. Separate share-ownership, customer-consent, and lender-release concerns even if one seller contact handles them.
• Calling every assignment clause a change-of-control restriction. Analyze the wording against the proposed share acquisition.
• Recording seller assurances as verified facts. Attribute responses and identify the documentary support still required.
• Closing findings when protection is negotiated. Specify whether the fact was cured, exposure was addressed contractually, or residual risk was accepted.

Final quality check

• Every finding identifies the affected entity, shares, or operating relationship.
• Source IDs and pinpoints resolve to the reviewed versions, including amendments.
• Facts, seller statements, evidence gaps, and legal assessments remain distinguishable.
• Priority ratings explain acquisition consequences and uncertainty.
• SPA and schedule references match the current drafts and relevant qualifiers.
• Every open issue has an owner, action, and review date or decision event.
• Closure includes evidence or authorized acceptance; transferred issues identify their destination and remaining requirements.

Complete the workflow with DecoverAI

DecoverAI is the Legal Intelligence Platform for litigation and transactions. Its due diligence capabilities include bulk document classification to organize materials and prioritize human review; tabular review supports work across documents. For contract review in Word, lawyers can select the represented party, give deal-specific instructions, inspect findings with clause quotations and locations, and edit or insert suggestions as ordinary tracked changes in the signed-in Word user’s name. The tracker remains the team’s work product, with legal judgment and risk acceptance retained by the team. Book a demo to discuss this workflow. (decover.ai)

Frequently asked questions

Should every reviewed document create a tracker row?

No. Record review coverage in the document index. Create findings for material concerns, meaningful evidence gaps, or decisions requiring follow-up. Multiple sources may support one finding.

How should an incomplete response affect priority?

Record uncertainty separately. Missing share-transfer evidence may require urgent review because seller coverage is unresolved, without establishing that a transfer defect exists. Explain the possible consequence and required verification.

Can negotiating an indemnity close a finding?

Use a status that describes contractual treatment, not factual cure. Assess the agreed wording and its limitations, identify remaining uncertainty, and obtain any required acceptance decision before marking the exposure addressed.

What happens to unresolved findings at signing?

Keep them open or transfer them to an identified action record with an owner and evidence requirement. Distinguish agreed preclosing work from accepted exposure. Signing is not resolution evidence.

Sources

• Delaware Code, Title 8, §219(c): statutory stock-ledger definition.
• Delaware Code, Title 8, §202(a)–(b): transfer-restriction notice and adoption provisions.
• AMD–ZT Group stock purchase agreement, §7.2(a): negotiated information-access limitations and alternative-access efforts.
• Booz Allen Hamilton–PAR stock purchase agreement, §10.9: negotiated cross-disclosure wording.

This guide is general information about legal workflows, not legal advice for any matter. It was drafted and reviewed with AI assistance. The worked example is fictional. Contract rights and procedure depend on the governing law, the actual wording, and the facts, so check the cited sources and the rules that apply in your jurisdiction before relying on it.