Due Diligence
Any review, against your rules
Rules-based document review for any diligence exercise, from M&A and vendor onboarding to regulatory change, with findings, gaps and exposures extracted and checked by reviewers.

The challenge
Whatever triggers it, diligence means large volumes of documents read against set criteria, on a hard deadline.
Diligence exercise, whatever triggers it
Agreed with your team before review starts
Every finding verified by a reviewer
Findings that show exposure and next steps
How modern teams approach due diligence
Diligence is not one exercise. A deal, a new vendor, a regulatory change or an internal policy update each mean reading a body of documents against defined parameters to find out what they contain, whether they comply and where the exposure sits.
Whatever the origin, we start with a clear purpose and clear review rules agreed with your team. Reviewers and AI work together to extract the information, answer questionnaires and flag gaps and risks, and every finding is checked before it reaches you, so you can assess the exposure and act.
Any diligence exercise
M&A, vendor and third party, regulatory change, policy compliance or any review against set criteria.
Rules first
With a clear purpose and clear review rules, we capture the information your team needs.
People plus AI
Questionnaire answers and key findings are extracted and checked by reviewers.
Go slow to go fast
We prove the approach on a small sample with you first, then scale. Here is how the work flows, and where AI carries the load versus where our attorneys apply judgement.
Technology where it adds value
An indicative view of how work is shared between AI and our attorneys at each stage. Judgement, protocol and sign-off always stay with people.
- 01
Agree purpose and rules
5% 95%Purpose, risk thresholds and review rules agreed with your team.
- 02
Review documents
60% 40%Documents reviewed against the agreed parameters, in your data room or platform.
- 03
Extract and verify
50% 50%Answers, gaps and findings extracted and verified.
- 04
Report findings
25% 75%Risks, exposures and structured findings reported so you can act.
What you receive
Structured findings, completed questionnaires and a clear view of risks and exposures, so your team can decide and act.
Where it fits best
- M&A buy-side and sell-side diligence
- Vendor, supplier and third-party reviews
- Regulatory change impact reviews
- Policy and compliance gap assessments
Whatever triggers the diligence
If documents need to be read against defined criteria to understand risk and exposure, we can run it, whatever the origin.
Transactions and partners
Change and compliance
Pricing that fits the shape of the work
The attorney who scopes your work shares pricing up front. These are the models that typically suit due diligence.
Fixed fee
Best for
Defined projects, such as a CLM assessment or a contract clean-up.
How it is billed
One price for an agreed scope and outcome.
Unit rate with cap
Best for
Variable volume, such as document review or abstraction.
How it is billed
Per document or per contract, with a ceiling on total spend.
Managed team
Best for
Ongoing work, such as platform operations or monitoring.
How it is billed
A monthly fee for a dedicated team, scaled up or down with notice.
Hybrid
Best for
Programmes that mix a project with steady run work.
How it is billed
A fixed fee to build, then a unit rate or team fee to run.
What clients ask us
No. Any exercise where documents are reviewed against set rules or parameters, such as a regulatory change or a policy update, follows the same method.
Related services

Contract Remediation
Counsel-guided repapering of live contracts after a regulatory, policy or business change, scaled to the deadline with a live status tracker.

Regulatory Survey
Validated multi-jurisdiction legal research, compared side by side, as a one-time report or continuous monitoring of change.

KYC
Sector-agnostic know-your-customer screening and documentation using your tools or online data sources, with consistent records for every entity.

Data Subject Access Requests
GDPR-focused DSAR support: collected data reviewed to find what relates to the requester, with third-party and confidential information redacted.

Incident Response
Post-breach data review to identify affected individuals and their information, delivered as a validated, de-duplicated notification list.
Know your exposure before it becomes a problem
Whatever triggers the review, we set the parameters with you, check every document against them and hand you findings you can act on.
Start a Conversation