A vendor due diligence report, or VDD report, is an independent review of a business that the seller commissions before a sale and then shares with prospective buyers. Instead of every bidder hiring accountants and lawyers to examine the same records, one adviser examines them once, writes up the findings, and the buyer whose bid wins can rely on that report under a reliance letter.
What does a VDD report cover?
Scope depends on the business and on what bidders are likely to worry about. Financial and tax modules are almost always present. The others are added where the risk sits.
| Module | Typical content | Usually prepared by |
|---|---|---|
| Financial | Quality of earnings, normalized EBITDA, working capital, net debt and debt-like items | Accounting firm |
| Tax | Historical compliance, open audits, exposures, structure of the sale | Accounting or tax adviser |
| Legal | Corporate records, material contracts, change-of-control clauses, litigation, IP | Law firm |
| Commercial | Market size, competitive position, customer concentration, forecast support | Strategy consultancy |
| IT and cyber | Systems, licensing, security posture, incidents | Technology adviser |
| Environmental | Site contamination, permits, compliance history | Environmental consultant |
| HR and pensions | Headcount, key terms, benefit obligations | Accounting firm or specialist |
Not every module needs a separate report. Some sellers commission a financial and tax VDD and supplement it with a legal fact book, a factual summary of corporate and contract information without opinions. Fact books are cheaper and quicker, but buyers treat them as a starting point rather than a finding.
Why would a seller pay for its own due diligence?
The reasons sound obvious once listed, yet they each carry trade-offs.
Control of the narrative. Issues will surface in any diligence. In VDD they surface first in a report the seller has seen, with context, and with time to prepare an answer or fix the problem before bidders arrive.
Speed. Bidders can make better-informed offers sooner. In a two-round auction that can shorten the timetable by several weeks.
Less disruption. Without VDD, each bidder’s advisers send their own information requests. With it, the finance team answers one adviser in depth and then handles follow-up questions in the data room’s Q&A.
More comparable bids. If every bidder starts from the same normalized earnings, it is easier to compare offers on price and terms rather than on differing interpretations of the numbers.
Support for financing. Lenders backing a bidder often want reliance on diligence too. A reliance letter that extends to lenders can make financing quicker.
The trade-off
VDD costs the seller real money up front, and an unfavorable finding cannot be unwritten. A seller with known problems sometimes prefers to fix them first and commission the report later, rather than hand every bidder a document that leads with the weakness.
When does VDD make sense, and when not?
VDD pays off in some processes and wastes money in others. A rough guide:
| Situation | VDD worth it? | Why |
|---|---|---|
| Competitive auction with five or more bidders | Usually yes | Saves duplicated work and supports comparable bids |
| Private equity exit from a well-run portfolio company | Usually yes | Buyers expect it; lenders want reliance |
| Carve-out of a division | Often yes | The standalone numbers need an independent view |
| Bilateral sale to one strategic buyer | Often no | The buyer will run its own full review anyway |
| Very small business sale | Usually no | Cost is high relative to price |
| Distressed sale on a short timetable | Sometimes | A limited-scope report can still help, if it can be ready in time |
For a carve-out, the financial module does extra work: it is often the first independent look at standalone figures. Our guide to carve-out due diligence covers that case in detail.
What is a reliance letter?
A VDD report is addressed to the seller. Buyers who read it have no contractual relationship with the adviser, so they cannot sue if the report is wrong. That changes at the end of the process.
Advisers usually issue three kinds of letter:
- Non-reliance or hold-harmless letters for first-round readers. The reader accepts that it may not rely on the report and will not claim against the adviser.
- A release letter for second-round readers, giving access to the full report under stricter confidentiality terms but still without reliance.
- A reliance letter for the winning bidder, and often its lenders, giving a right to rely on the report subject to an agreed liability cap.
Liability caps and their terms are negotiated, and the market practice differs between countries and between advisers. The buyer’s counsel reviews them closely, because the cap defines what the report is worth if something goes wrong.
How should a VDD report be staged in the data room?
The report travels through the process with the bidders. Access widens as the field narrows.
How a VDD report is released during a sale
Upload the summary with first-round materials
Place the executive summary in a folder that opens only after the bidder has accepted the access terms and the non-reliance letter.
Hold the full report back
Keep the full report in a separate, restricted folder that stays closed during the first round.
Release the full report to the shortlist
Open the folder to second-round bidders once each signs the release letter, with view-only access and watermarking switched on.
Link findings to source documents
Cross-reference the report's sections to the folders that support them, so reviewers can test conclusions quickly.
Answer questions through Q&A
Route questions about the report to the adviser and the finance team through the data room's Q&A, so answers are recorded and shared consistently.
Add the bring-down and reliance materials
For the preferred bidder, upload any update letter covering events since the report date and the agreed reliance letter.
Two practical points. First, the report should never be the only thing in the room on a topic; reviewers want to see the contracts, ledgers and filings behind each finding. Second, the audit trail matters: it shows which bidders actually opened the report and the supporting folders, which helps the seller judge how seriously each one is engaging. Activity reporting, permission groups and Q&A are standard in full data rooms; the provider directory compares them vendor by vendor.
How do buyers use a VDD report?
Sensible buyers treat VDD as a strong first draft. They read it for three things.
Scope. What did the adviser look at, and just as importantly, what was excluded? A financial VDD that leaves out a subsidiary or a period deserves a question.
Judgments. Normalization adjustments, working capital targets and debt-like items are judgment calls. Buyers often re-run the main adjustments with their own assumptions.
Freshness. A report dated three months before signing may miss recent trading. Buyers ask for current management accounts and a bring-down.
Buyers then commission targeted confirmatory diligence, usually smaller than a full review, and focused on the areas the VDD did not cover or where they disagree. Our due diligence hub sets out the complete set of workstreams, and the investment banking guide explains how sell-side advisers run the process around it.
Does VDD raise privacy or confidentiality issues?
It can. A VDD report on HR or pensions may summarize data about named individuals, and the employee files behind it are personal data. Under the EU General Data Protection Regulation, sharing that data with bidders needs a lawful basis and should be limited to what is necessary, which usually means anonymized or aggregated data in early rounds and named data only for the preferred bidder, if at all.
Commercial sensitivity is the other issue. If a bidder is a competitor, the commercial module may contain pricing or customer information that should go to a clean team only. That is a permissions question for the room as much as a legal one.
For listed targets, there is a further consideration: in a public takeover, information given to one bidder may have to be given to others. The UK Takeover Code is an example of a regime with such equality-of-information rules, which affects how widely the full report can be released.
What makes a VDD report credible?
Bidders are rightly skeptical of a document the seller paid for. Credibility comes from:
- A recognized, independent adviser with no other role in the sale.
- A clear scope statement that lists exclusions plainly.
- Findings that include bad news. A report with no issues reads as a marketing document.
- Full access to source material in the data room, so readers can verify the work.
- Reliance on market terms for the eventual buyer and its lenders.
A seller who gets these right usually sees fewer questions, faster second-round bids and fewer price adjustments late in the process.
Running a sell-side process? See which data room providers suit staged releases and heavy Q&A.
Compare providersFAQ
What is a vendor due diligence report?
An independent review of a business commissioned by the seller before a sale and shared with prospective buyers. The winning bidder can usually rely on it under a reliance letter.
Who pays for vendor due diligence?
The seller commissions and pays for the report. Buyers pay for any confirmatory diligence they run on top of it.
What is a reliance letter in VDD?
A letter from the adviser that gives the winning buyer, and often its lenders, a contractual right to rely on the report, usually subject to an agreed liability cap.
Does a VDD report replace buyer due diligence?
No. Buyers treat it as a tested baseline and run narrower confirmatory work on gaps, judgments they disagree with and events since the report date.
How is a VDD report shared with bidders?
In stages through the data room: an executive summary in the first round under a non-reliance letter, the full report for the shortlist, and reliance materials for the preferred bidder.