Legal Due Diligence for a Startup Acquisition: What Buyers Look For


When a larger company, a strategic acquirer, a PE fund, or an established tech company, decides to acquire a startup, it conducts legal due diligence to validate the acquisition before signing and closing. This diligence is not a formality. Significant acquisitions have been delayed, repriced, or called off because of issues uncovered during due diligence. This article describes the six areas that buyers examine most carefully in startup acquisitions, and the specific issues that most often emerge.

The most critical area. A buyer is acquiring ownership of the company, if the ownership is unclear, disputed, or different from what was represented, the acquisition is fundamentally flawed.

What buyers check:

Share register consistency: Every share issuance in the company’s history must be traceable to a board resolution, a shareholders’ resolution (where required), and a shareholders’ agreement or side letter. The share register must be consistent with MCA21 records (Form MGT-7 filings, PAS-3 filings for allotments). Discrepancies between the cap table presented by the founders and the MCA records are a serious red flag.

Convertible instruments: All convertible notes, CCDs, CCPS, SAFEs, and any other instruments convertible into equity must be identified, and their dilution effect at various valuations must be modelled. Buyers need to know the fully diluted cap table, not just the current equity cap table.

ESOP grants and vesting: The number of options granted under the ESOP scheme, the vesting status of each grant, how many options have been exercised (and what equity has resulted), and how many are unvested (which represent future dilution) must be documented and reconciled.

Undocumented equity promises: A common startup problem, founders have made verbal equity commitments to early advisors, employees, or contributors without documentation. These create claims against the company that may surface post-acquisition. Buyers require a representation from founders that there are no undocumented equity obligations.

2. IP Due Diligence: Does the Company Own What It Sells?

The company’s intellectual property is typically its most valuable asset. If the company does not clearly own its IP, the acquisition loses its fundamental rationale.

IP assignment completeness:

  • Founder IP assignment agreements: were they signed before or contemporaneously with incorporation? Do they cover all pre-incorporation work (including code written on personal computers, at university, or during prior employment)?
  • Employee IP assignment clauses: are these in every employment agreement, and do they cover work done outside office hours on company-related projects?
  • Contractor IP assignment agreements: every contractor, freelancer, or agency that contributed to the product must have signed an IP assignment. Under Section 17 of the Copyright Act, 1957, contractors own their work by default, without a signed assignment, the company may not own the code it paid to have built.

Trademark registrations:

  • Are trademarks registered in the company’s name (not the founders’ personal names or a different entity)?
  • What is the scope of registration (classes of goods/services, territories)?
  • Are there any pending oppositions or infringement notices?

Open source software:

Buyers conduct an open source licence audit. Code repositories are analysed for components licensed under “copyleft” licences (GNU GPL, LGPL, AGPL). If a copyleft-licensed component is incorporated into the core product, the copyleft obligation may require the entire product to be made available under the same open source licence, potentially destroying the product’s commercial value. This is a common and serious issue in startup acquisitions.

Prior employer IP claims:

Where founders or key engineers left previous employment to build the startup, buyers check whether any prior employment agreement could give the former employer a claim over IP developed by those individuals after leaving. This is particularly relevant for founders from IP-intensive industries (pharma, technology, defence).

3. Customer Contracts: Revenue Is Only as Good as the Contracts Behind It

Change of control provisions: Many commercial contracts include a clause providing that the contract terminates, or requires the counterparty’s consent, upon a change of control of one of the parties. In a startup acquisition, the target company changes control, if key customer contracts have change of control clauses, the buyer may find that revenues disappear post-acquisition unless consents are obtained.

Revenue recognition accuracy: Buyers verify that the revenue figures in the financial statements accurately reflect the contractual terms. Milestone-based revenue (payable upon achievement of specific deliverables) may have been recognized before the milestone was met. Subscription revenue must be recognized ratably. Mischaracterized revenue recognition is a financial statement issue that creates repricing or walk-away scenarios.

Exclusivity obligations: Does the company have exclusivity obligations to any customer that would prevent it from serving competing customers post-acquisition? These can significantly constrain the business.

4. Employment and HR Due Diligence

Contract status: Are all employees on formal employment agreements? Casual or informal employment arrangements create regulatory risk (unpaid PF/ESIC, claim of employment status by contractors) and legal uncertainty about post-acquisition team continuity.

PF/ESIC compliance: All eligible employees must be registered with EPFO and ESIC, and contributions must be current. Outstanding PF/ESIC dues are a common finding in startup diligence and must be quantified as a liability.

POSH compliance: Is there a functional Internal Complaints Committee? Are there any pending complaints? Prior unresolved POSH complaints are a significant risk, both for ongoing liability and for post-acquisition workplace culture.

Key person dependencies: Buyers assess the risk of key employees leaving post-acquisition. Employment agreements for key engineers, sales leads, and management should have appropriate retention terms. Unvested ESOP is often a natural retention mechanism, but buyers may also require key persons to sign retention agreements as a closing condition.

5. Regulatory Compliance

DPIIT recognition status: If the company has DPIIT recognition, this affects the tax structuring of the acquisition (angel tax implications for investors who are selling).

ROC filings: Annual returns (MGT-7), financial statements (AOC-4), and all event-based filings (Form MGT-14, SH-7, PAS-3) must be current with the ROC. Non-compliance with MCA filing requirements results in penalties and can create complications in completing the acquisition.

GST compliance: GST returns must be filed and all GST dues current. Any pending notices or assessments from GST authorities must be disclosed and quantified.

Sector-specific licences: All licences required for the company’s operations must be in place, valid, and transferable (or capable of re-application post-acquisition).

6. Litigation Exposure

Court portal search: A comprehensive litigation search on court portals (eCourts, Delhi HC, Bombay HC, etc.) and arbitral tribunal records identifies any pending cases against the company or its founders.

Outstanding notices: Buyers ask for copies of all legal notices received and not responded to. Pending legal notices that have not been responded to and could result in proceedings are a disclosure issue.

IP infringement claims: Cease-and-desist letters from third parties claiming that the startup’s product infringes their IP are particularly serious, they could result in injunctions that disrupt the acquired business.

Data protection: DPDP Act, 2023 compliance, has the company received any complaints from data principals? Any data breaches that have not been notified? Post-acquisition exposure for pre-acquisition data practices falls on the acquirer.

Key Takeaways

  • IP due diligence, specifically, confirmation that all IP is assigned to the company through written agreements with every founder, employee, and contractor, is the single most deal-critical area of startup acquisition diligence; missing assignments are the most common cause of repricing or delay.
  • Cap table diligence must cover the fully diluted table including all convertible instruments, ESOP grants, and undocumented equity promises, any disconnect between the founders’ representation and the MCA records or shareholder documentation is a material diligence finding.
  • Open source licence audits are essential for any software-based startup acquisition: copyleft-licensed components in the core product can create obligations that fundamentally affect the commercial value and freedom to operate of the acquired business.

This article is for informational purposes only and does not constitute legal advice. Readers should seek appropriate professional counsel for their specific circumstances.

META TITLE: Legal Due Diligence for Startup Acquisition India: Buyer Guide


Further Reading