Due Diligence — Il framework completo

2011. HP acquisisce Autonomy per $11.1 miliardi. Un anno dopo svaluta $8.8 miliardi. La due diligence era stata frettolosa.

Hewlett-Packard voleva battere Oracle nell'acquisto di Autonomy, una società britannica di software enterprise. Léo Apotheker, CEO di HP, spinse per chiudere rapidamente. La due diligence fu condotta in modo affrettato — 6 settimane invece delle 12-16 standard per un deal di quella dimensione.

HP pagò $11,1 miliardi (premium 64% sul prezzo di mercato). Un anno dopo, HP scrisse down $8,8 miliardi — accusando Autonomy di accounting fraud (riconoscimento ricavi aggressivo, channel stuffing, hardware venduto come software per gonfiare margins). La SEC aprì investigazione. Il CEO di Autonomy, Mike Lynch, fu arrestato e processato (assolto nel 2024 dopo 13 anni di litigation).

Léo Apotheker fu licenziato 6 settimane dopo l'annuncio del deal (per altri motivi). HP perse $8,8 miliardi.

Lesson: La fretta in DD è il nemico. Ogni settimana risparmiata può costare centinaia di milioni in write-downs futuri. La DD non è un costo — è un'assicurazione.

---

Cosa è la Due Diligence e perché è critica

---

Complete DD Framework — 7 aree con 10+ workstreams ciascuna

1. Financial Due Diligence (FDD)

Condotta da: Big 4 (Deloitte, PwC, EY, KPMG) o boutique specializzate (Grant Thornton, BDO).

Obiettivo: Verificare qualità, sostenibilità, e normalizzazione dei dati finanziari storici.

Workstreams FDD (10+):

1. Quality of Earnings (QoE) - EBITDA adjusted è reale? - Quali add-backs sono legittimi vs aggressivi? - Revenue recognition policies conformi a principi contabili? - One-time costs genuinely non-ricorrenti?

2. Revenue Analysis - Breakdown revenue per product line, geography, customer - Churn rate storico e forward (per SaaS/subscription) - Contract backlog e deferred revenue - Revenue concentration (top 10 customers)

3. Cost Structure Analysis - COGS breakdown (materiali, labor, overhead) - Opex categories (S&M, R&D, G&A) - Fixed vs variable costs ratio - Benchmark vs peers di settore

4. Working Capital (NWC) Analysis - DSO (Days Sales Outstanding — quanto tempo per incassare) - DPO (Days Payable Outstanding — quanto tempo per pagare) - DIO (Days Inventory Outstanding — inventory turnover) - NWC target per SPA (media storica normalizzata)

5. Cash Flow Verification - Riconciliazione EBITDA → Operating Cash Flow - Capex storico (maintenance vs growth) - Free Cash Flow generation - Cash conversion rate (OCF / EBITDA)

6. Debt and Liabilities - Tutti i debt instruments (bank loans, leases, bonds) - Off-balance-sheet liabilities (operating leases pre-IFRS 16) - Contingent liabilities (litigation, warranties, indemnities) - TFR (Trattamento Fine Rapporto) accruals correttezza

7. Tax Position - Effective tax rate storico - Tax loss carryforwards utilizzabili - Deferred tax assets/liabilities - Tax audits in corso (Agenzia delle Entrate)

8. Capex and Asset Base - Asset register completezza (PP&E, intangibles) - Depreciation policies ragionevolezza - Capex forecast necessario (replacement + growth) - Asset condition (site visits)

9. Related Party Transactions - Transactions con founders, holding, affiliates - Pricing arm's length? - Contratti di servizio infragruppo (management fees, royalties) - Loans to/from related parties

10. Financial Projections Validation - Business plan management: realistic vs optimistic? - Sensitivity analysis (downside scenarios) - Bridge EBITDA storico → EBITDA projected (growth drivers) - Benchmark growth rate vs settore

2. Commercial Due Diligence (CDD)

Condotta da: Fondo PE interno team o consulenti strategici (Bain, BCG, McKinsey, boutique come Basinghall, OC&C).

Obiettivo: Validare sizing mercato, posizione competitiva, e growth plan.

Workstreams CDD (10+):

1. Market Sizing (TAM, SAM, SOM) - Total Addressable Market: dimensione mercato teorico massimo - Serviceable Addressable Market: quota raggiungibile con prodotto attuale - Serviceable Obtainable Market: quota raggiungibile con risorse attuali - Growth rate mercato (CAGR historical + projected)

2. Competitive Landscape - Identificazione competitors (diretti + indiretti) - Market share target vs competitors - Competitive moat: differenziazione, switching costs, network effects - Pricing power vs competition

3. Customer Segmentation - Breakdown customer base (SMB, Mid-market, Enterprise) - Customer acquisition channels (direct sales, partners, inbound) - Average contract value (ACV) per segment - Cohort analysis (retention per vintage)

4. Customer Concentration Analysis - Top 10 customers % revenue - Dependency risk (se top customer churns?) - Contract renewal dates top customers - Relationship strength (interviste)

5. Churn and Retention Analysis - Gross churn rate (% customers lost) - Net Revenue Retention (NRR) — include upsells - Churn reasons analysis (price, product, competition, other) - Retention initiatives efficacia

6. Sales Pipeline Analysis - Pipeline reported management vs verified - Deal stages e conversion rates per stage - Average sales cycle length - Pipeline coverage ratio (pipeline / quota)

7. Customer Interviews (Voice of Customer) - 10-20 customer interviews (structured questionnaire) - Willingness to renew? Likelihood to expand? - Product strengths e weaknesses vs competition - Perception pricing, support, roadmap

8. Ex-Customer Interviews (Churn Analysis) - 5-10 ex-customer interviews - Perché hanno churned? (prezzo, prodotto, competitor, internal) - Potrebbero tornare? A che condizioni? - Churn era evitable?

9. Supplier and Partner Analysis - Key supplier dependencies - Contratti supplier favorevoli/sfavorevoli - Partnership strategiche stabilità - Vendor lock-in risks

10. Regulatory and Macro Trends - Regulatory tailwinds/headwinds settore - Technology trends (AI, cloud, etc) impatto - Macro trends (demographics, economic) impatto - ESG trends e compliance cost

3. Legal Due Diligence (LDD)

Condotta da: Studi legali specializzati M&A (Chiomenti, Bonelli Erede, Gianni Origoni in Italia; internazionali Magic Circle in UK).

Obiettivo: Identificare rischi legali, compliance issues, litigation.

Workstreams LDD (10+):

1. Corporate Structure and Cap Table - Organigramma societario (parent, subsidiaries, JVs) - Cap table accuracy (shareholders, ownership %, classes) - Statuto e patti parasociali esistenti - Delibere assembleari ultime (approvazioni, modifiche statuto)

2. Material Contracts Review - Top 20 customer contracts (revenue weighted) - Top 10 supplier contracts (cost weighted) - Partnership agreements, distribution agreements - Change of control clauses (deal killer potenziali)

3. Employment Contracts and Labor - Executive contracts (CEO, CFO, CTO) — termination clauses, severance - Key employee contracts — non-compete, IP assignment - Collective bargaining agreements (CCNL applicato) - Labor disputes in corso o potenziali

4. Intellectual Property (IP) - Patents: ownership, validity, expiration, freedom to operate - Trademarks: registration territories, disputes - Copyright: software ownership (developed in-house vs outsourced) - Trade secrets: protections in place (NDAs, access controls)

5. Real Estate and Leases - Owned real estate: title clarity, mortgages, encumbrances - Leased premises: lease terms, renewal options, termination rights - Subleases: permitted? Terms? - Environmental site assessments (se manufacturing/industrial)

6. Litigation and Disputes - Litigation in corso: claims contro target, claims da target - Arbitration proceedings - Regulatory investigations (AGCM, Garante Privacy, Agenzia Entrate) - Contingent liabilities estimation

7. Regulatory Compliance - GDPR compliance (privacy policy, data processing agreements, DPO appointed) - Antitrust compliance (se dominant position) - Sector-specific regulations (financial services, healthcare, pharma, energy) - Licensing requirements

8. Insurance Coverage - Property insurance (buildings, equipment) - Liability insurance (general, professional, D&O) - Key man insurance (CEO, founders) - Coverage adequacy vs industry benchmark

9. Environmental Liabilities - Environmental permits (if applicable) - Contamination history (soil, water) - Compliance D.Lgs 152/2006 (Testo Unico Ambientale) - Potential remediation costs

10. Tax Compliance - Tax returns filed (last 5 years) - Tax audits in corso (Agenzia delle Entrate, Guardia di Finanza) - Transfer pricing policies (if international) - VAT compliance, withholding tax compliance

4. Tax Due Diligence (Tax DD)

Condotta da: Big 4 tax practices o boutique fiscalisti.

Obiettivo: Identificare tax risks, optimize struttura post-closing, quantify contingent tax liabilities.

Workstreams Tax DD (10+):

1. 01Corporate Income Tax (IRES) Compliance
2. 02VAT Compliance and Refunds
3. 03Withholding Tax Compliance (ritenute)
4. 04Transfer Pricing Policies (if multinational)
5. 05Tax Loss Carryforwards Utilization
6. 06Tax Audits History and Ongoing
7. 07Tax Structuring Opportunities Post-Closing
8. 08Deferred Tax Assets/Liabilities Review
9. 09Indirect Taxes (regional, municipal)
10. 10Tax Indemnities and Warranties SPA

5. IT / Technology Due Diligence (IT DD)

Condotta da: IT consulting firms (Accenture, Capgemini) o fondo internal tech team.

Obiettivo: Valutare qualità tech stack, scalability, security, tech debt.

Workstreams IT DD (10+):

1. Architecture Review - Monolith vs microservices - Cloud vs on-premise (AWS, Azure, GCP) - Scalability (can handle 10x traffic?) - Technical debt estimation (refactor needed)

2. Code Quality Assessment - Code review sample (GitHub, GitLab access) - Test coverage (unit tests, integration tests) - Code documentation quality - Development practices (CI/CD, code reviews)

3. Security and Vulnerabilities - Penetration test results (if available) - Vulnerability scanning (OWASP top 10) - Data encryption (at rest, in transit) - Access controls and authentication

4. Infrastructure and DevOps - Infrastructure as Code (Terraform, CloudFormation) - Monitoring and alerting (Datadog, New Relic) - Disaster recovery and backup - Uptime SLA historical

5. Product Roadmap and R&D - Product roadmap credibility - R&D team capacity (engineers, PMs) - Feature backlog prioritization - Technical competitive moat

6. Data and Analytics - Data warehouse architecture - Analytics capabilities (BI tools) - Data quality and governance - GDPR compliance data handling

7. Third-Party Dependencies - Critical vendors (Stripe, Twilio, AWS, etc) - Vendor lock-in risk - API dependencies stability - Open source licenses compliance

8. IT Organization - CTO and engineering team structure - Key person dependencies (10x engineers) - Hiring plan vs roadmap - Offshore/nearshore teams

9. IT Budget and Costs - Cloud infrastructure costs trend - Software licenses costs - IT headcount costs - Capex IT forecast

10. Cybersecurity Incidents History - Breaches past (disclosed or not) - Incident response capability - Cyber insurance coverage - Compliance ISO 27001, SOC 2

6. HR / People Due Diligence (HR DD)

Condotta da: HR consulting firms (Mercer, Aon, Willis Towers Watson) o fondo HR team.

Obiettivo: Assess organization, talent risks, retention, compensation.

Workstreams HR DD (10+):

1. 01Organization Structure
2. 02Key Person Risk Assessment
3. 03Compensation Benchmarking
4. 04Retention Risk (attrition rate)
5. 05Employee Engagement (surveys if available)
6. 06Labor Disputes and Unions
7. 07Benefits and Pensions (TFR accruals)
8. 08Recruitment Pipeline and Hiring Plan
9. 09Performance Management System
10. 10Diversity and Inclusion Metrics

7. Environmental Due Diligence (Environmental DD)

Condotta da: Environmental consultants (AECOM, Arcadis).

Obiettivo: Identify environmental liabilities, contamination, remediation costs.

Workstreams Environmental DD (10+):

1. 01Phase I Environmental Site Assessment (ESA)
2. 02Phase II ESA (soil/groundwater sampling if Phase I flags)
3. 03Hazardous Materials Presence (asbestos, lead)
4. 04Environmental Permits Compliance
5. 05Waste Management Practices
6. 06Air Emissions Compliance
7. 07Water Discharge Permits
8. 08Historical Contamination (previous uses site)
9. 09D.Lgs 152/2006 Compliance (Testo Unico Ambientale)
10. 10Remediation Cost Estimation (if contamination found)

---

VDR (Virtual Data Room) Structure e Red Flags quando documenti mancanti

VDR Setup

Il venditore (o M&A advisor) carica documenti in una Virtual Data Room (software: Ansarada, Intralinks, Datasite, DealRoom).

Struttura tipica VDR (folder structure):

1. Corporate and Legal
   1.1 Articles of Association and Bylaws
   1.2 Shareholder Agreements
   1.3 Board Minutes (last 5 years)

2. Financial Information 2.1 Audited Financials (last 5 years) 2.2 Management Accounts (monthly, last 24 months) 2.3 Budget and Forecast (current year + 3Y plan) 2.4 Tax Returns (last 5 years)

3. Commercial 3.1 Customer Contracts (top 20) 3.2 Supplier Contracts (top 10) 3.3 Sales Pipeline and CRM export 3.4 Marketing Materials

4. HR and Employment 4.1 Organization Chart 4.2 Employee List (anonymized) 4.3 Executive Contracts 4.4 Compensation and Benefits Summary

5. IT and Technology 5.1 IT Architecture Diagrams 5.2 Software Licenses 5.3 Security Policies 5.4 Source Code Access (GitHub read-only)

6. Legal and Compliance 6.1 Material Contracts 6.2 IP Registrations (patents, trademarks) 6.3 Litigation Summary 6.4 Insurance Policies

7. Real Estate 7.1 Lease Agreements 7.2 Property Title Deeds (if owned)

8. Environmental 8.1 Environmental Permits 8.2 Phase I ESA Reports (if available) ```

Red Flags quando documenti mancano

Azioni quando documento critico manca:

Step 1: Request formale via VDR Q&A system
Step 2: Se non fornito entro 48h, escalate a M&A advisor seller
Step 3: Se ancora non fornito, assume worst case in valuation
Step 4: Se persistente, consider walk away (deal killer)

---

Management Presentation Preparation

Durante DD week 2-4, management presenta al fondo. Management presentation (o "management meeting") è momento critico DD.

Agenda tipica management presentation (1 giornata):

09:00-09:30  Welcome, introductions, agenda
09:30-10:30  CEO: Company overview, history, vision, strategy
10:30-11:00  Break
11:00-12:00  CFO: Financials deep dive, unit economics, forecast assumptions
12:00-13:00  Lunch (informal, relationship building)
13:00-14:00  CTO/CPO: Product roadmap, tech stack, R&D priorities
14:00-15:00  Head of Sales: Go-to-market, pipeline, customer wins/losses
15:00-16:00  Q&A open session (fondo asks anything)
16:00-16:30  Site visit (office, operations, product demo)

Preparation management (cosa preparare):

1. Pitch deck aggiornato (30-50 slides) - Company overview, market opportunity - Product differentiation, competitive landscape - Business model, unit economics - Financial performance, forecast - Team, organization - Vision, use of proceeds

2. Financial model dettagliato (Excel) - P&L mensile 24 mesi historical + 36 mesi forecast - Cohort analysis (per vintage customers) - Unit economics breakdown - Sensitivity scenarios

3. Customer references list - Top 10 customers willing to speak with fondo - Mix of segments (SMB, enterprise) - Include churned customers (credibility)

4. Product demo (live or video) - Golden path user journey - Key features differentiators - Roadmap preview

Red flags durante management presentation:

• •CEO non sa metriche chiave (churn rate, CAC, LTV)
• •CFO e CEO danno numeri inconsistenti
• •Management evita domande scomode ("lo prepariamo e mandiamo")
• •Forecast unrealistic (100% YoY growth senza assunzioni credibili)
• •Team disfunzionale (tensioni visibili CEO-CFO-CTO)

---

Q&A Process durante DD

Il Q&A process è ciclo continuo domande fondo → risposte venditore.

Esempi Q&A:

Q047 [Financial]: Per i top 5 clienti, fornire breakdown revenue per anno (2021, 2022, 2023, 2024 YTD).

Q122 [Legal]: Il contratto cliente Acme Corp (35% revenue) ha clausola change of control? Se sì, fornire estratto clausola. A122: Sì. Clausola 8.3 del contratto permette a Acme di terminare con 90 giorni notice se change of control. Vedi pag. 12 contratto in folder 3.1.

Q201 [IT]: Quanti critical bugs aperti in backlog con severity P0/P1? A201: P0: 3 bugs. P1: 17 bugs. Lista dettagliata in allegato "Bug_Report_P0P1.pdf". ```

---

DD Timeline per Italian PMI (4-8 settimane)

Deal size €5M-20M (PMI target tipica fondo PE italiano):

Week 1-2:   VDR setup, initial document review, request list submitted
Week 2-3:   Management presentation, site visit, Q&A round 1
Week 3-5:   FDD, LDD, CDD parallel workstreams (advisor on-site)
Week 5-6:   Q&A round 2, findings consolidation
Week 6-7:   DD reports draft, red flags assessment, price adjustment negotiation
Week 7-8:   Final DD reports, IC (Investment Committee) presentation
Week 8-12:  SPA drafting and negotiation (post-DD, pre-closing)

Fattori che allungano DD:

• •Auction process competitivo (multiple bidders → parallel DD → seller impone tight timeline)
• •Target complessità (multi-country, multi-product, M&A storico)
• •Data quality bassa (financials disorganizzati, contratti missing, IT systems legacy)
• •Red flags severity (litigation, IP disputes, regulatory issues → require deep dive)

Fattori che accorciano DD:

• •Bilateral deal (solo 1 bidder → fondo controlla timing)
• •Repeat transaction (fondo conosce già settore, ha template DD)
• •Quality seller (private equity exit → data room ben organizzato, Q&A process smooth)
• •Confirmatory DD (vs full DD — vedi sotto)

---

Auction DD vs Bilateral DD

Auction DD (competitive process)

Setup: Venditore (o M&A advisor) gestisce auction con 5-10 bidders.

Bilateral DD (one-to-one process)

Setup: Venditore negozia con 1 solo bidder (proprietario, fondo).

---

Confirmatory DD vs Full DD

Full DD (comprehensive)

Scope: Tutto. Ogni area (FDD, LDD, CDD, Tax, IT, HR, Environmental) investigata a fondo.

Timeline: 8-12 settimane.

Output: Reports 300-500 pagine totali, findings dettagliati.

Quando si fa: Bilateral deals, large deals (>€50M), high-risk sectors.

Confirmatory DD (limited scope)

Scope: Focus solo su key risks identificati in preliminary review. Assume che la maggior parte delle informazioni seller sono corrette — verifica solo i critical items.

Timeline: 3-4 settimane.

Output: Reports 100-150 pagine, focused on red flags.

---

DD Findings → Price Adjustments

I findings DD si traducono in price adjustments via:

1. Direct Price Reduction

Finding: EBITDA adjusted seller €2M → QoE real EBITDA €1.6M (-20%)
Multiplo: 8x EBITDA
Price original: €16M (8x €2M)
Price adjusted: €12.8M (8x €1.6M)
Reduction: €3.2M

2. Escrow (parte prezzo in custodia)

Finding: Litigation contingent liability €500K-€2M (outcome incerto)
Action: €1.5M del prezzo in escrow per 18 mesi
  - Se litigation si risolve <€500K → seller prende remaining escrow
  - Se litigation si risolve >€1.5M → buyer assorbe excess, escrow a zero

3. Earn-out (prezzo differito condizionato)

Finding: Top customer 40% revenue, contratto scade in 6 mesi, rinnovo incerto
Action: €2M del prezzo pagato come earn-out
  - Se top customer rinnova entro 12 mesi → seller riceve €2M
  - Se top customer non rinnova → seller riceve €0

4. Indemnity Cap Increase (SPA protection)

Finding: Multiple red flags medio-severity (IP disputes, tax audits, customer concentration)
Action: Indemnity cap increase da 10% prezzo (standard) a 25% prezzo
  - Se materializza passività post-closing, buyer può claim fino a 25% del prezzo pagato

5. Reps & Warranties Insurance (W&I Insurance)

Invece di trattenere escrow o increase indemnity cap, buyer acquista W&I insurance che copre breach of representations.

---

W&I Insurance — Growing Use in Italy

W&I (Warranty & Indemnity) Insurance è polizza che protegge buyer da breach of reps & warranties nel SPA.

Meccanica:

Traditional deal (no W&I):
  - Buyer: paga €10M
  - Escrow: €1M trattenuto per 18-24 mesi
  - Seller: riceve €9M subito, €1M dopo se no claims

Deal con W&I Insurance: - Buyer: paga €10M + acquista W&I policy (premium 1-2% = €100K-200K) - Escrow: €0 (no escrow, seller prende tutto subito) - Seller: riceve €10M subito (clean exit) - Se breach si materializza → insurance paga buyer (non seller) - Indemnity seller: ridotto a fundamental reps solo (fraud, title, tax) ```

Benefits W&I:

• •Seller: Clean exit, no escrow, riduce liability post-closing
• •Buyer: Protection più ampia (insurance cap €5M-10M vs seller cap €2M), no litigation con seller
• •Deal velocity: Rimuove friction su escrow negotiation

Costi W&I:

• •Premium: 1-2% dell'enterprise value (€10M deal → €100K-200K premium)
• •Retention (deductible): Buyer assorbe primi €100K-500K di claims (insurance paga solo sopra retention)

Adoption Italia:

• •Pre-2015: Raro (solo deal €100M+)
• •2015-2020: Crescita (deal €20M+ iniziano ad usare)
• •2021-oggi: Mainstream per deal €10M+ (auction competitive quasi sempre include W&I)

Providers W&I in Italia: AIG, Chubb, Liberty Mutual, Allianz, Generali (recentemente entrata market).

---

Best Practices DD per Fondi PE

1. Start DD early (anche prima di LOI)

Pre-wire advisor team, identifica red flags in CIM, prepara preliminary Q&A list.

2. Use experienced advisors (non risparmiare su FDD/LDD quality)

Big 4 costano più di boutique ma hanno depth su complex issues. €50K risparmiati in advisor fees possono costare €5M in missed red flags.

3. Parallel workstreams (FDD + LDD + CDD simultaneamente)

Non sequential — tempo è critico in auction.

4. Red flag triage immediato

Ogni red flag: severity (low/medium/high/critical), quantify impact (€), mitigation plan.

5. Communicate findings a IC early

Non aspettare week 8 per dire "abbiamo un deal killer" — escalate subito se red flag critical emerge.

6. Prepare walk-away threshold

Prima di DD, decide: "se EBITDA real è <€X o se litigation >€Y, we walk." Stick to it.