Pre-Acquisition Due Diligence Audit

Pre-acquisition due diligence is an independent investigation into a target company's financial, tax, legal, and operational position before you commit to a purchase price. You cannot rely solely on the seller's financial statements because they are prepared (or presented) by a party whose interest is in a favourable sale outcome — reported EBITDA may include owner add-backs, related-party pricing that is not arm's length, or revenue recognition that flatters short-term performance. Due diligence exists specifically to test those figures against independent source evidence: bank records, FTA filings, payroll registers, and contracts.

There is no UAE statute that mandates due diligence before a private acquisition. It is a commercial risk-management practice, not a legal requirement. That said, certain regulated sectors (financial services under Central Bank oversight, for instance) impose their own approval and disclosure requirements on a change of control, which effectively require a form of regulatory diligence as part of the approval process. For most private company acquisitions, due diligence is undertaken because the cost of not doing it — inheriting undisclosed liabilities — is typically far higher than the cost of the review itself.

In a share acquisition, the buyer acquires the shares of the existing legal entity — and with it, everything the entity is a party to: contracts, employees, tax history, and liabilities, known and unknown. In an asset or business transfer, the buyer acquires specified assets (and sometimes assumes specified liabilities and transferring employees) while the legal entity itself, and its historical liabilities, generally remain with the seller. Diligence scope and priorities differ accordingly: share deals require exhaustive historical liability review since everything transfers; asset deals require careful definition of exactly what is and is not included in the transfer, and confirmation that title actually passes cleanly.

For a proportionately-scoped SME acquisition, 3–6 weeks from engagement letter to final findings report is typical, depending on target size, the quality and completeness of the data room, and how promptly the seller's management responds to information requests. Larger, multi-entity, or cross-border group acquisitions take longer. A red-flag or limited-scope review, used for early screening before committing to a full process, can be completed considerably faster.

Fees are scoped and quoted based on target size, transaction complexity, sector, and the workstreams included (financial only, versus financial plus tax plus legal plus HR). PNPC agrees a fixed or capped fee in writing before work begins, following the initial scoping call. As a general principle, diligence cost should be proportionate to transaction value and risk — we will advise if a proposed scope appears disproportionate to the deal size in either direction.

Quality of earnings analysis normalises a target's reported EBITDA to reflect the true, sustainable earning power of the business — adjusting for one-off items, above-market owner remuneration, personal expenses run through the company, non-arm's-length related-party pricing, and revenue recognition timing issues. Since many UAE SME acquisitions are priced on an EBITDA multiple, a difference between reported and normalised EBITDA translates directly, multiplied by the agreed deal multiple, into the purchase price the acquirer should actually pay.

Since the introduction of UAE Corporate Tax (federal Corporate Tax at 9% on taxable income above the AED 375,000 threshold, administered by the Federal Tax Authority), a target company's tax registration status, filing history, and any exposure to prior-period assessments become material diligence items — because in a share acquisition, the acquirer inherits the entity's tax history and any associated liability. Free zone targets require additional scrutiny of their Qualifying Free Zone Person status, since the 0% rate on qualifying income depends on conditions — including maintaining adequate substance and limiting non-qualifying revenue below the applicable de minimis threshold — that must continue to be satisfied after the change of ownership.

The UAE's Economic Substance Regulations, under Cabinet Decision No. 57 of 2020 and its amendments, required UAE entities conducting specified 'Relevant Activities' to demonstrate adequate economic substance in the UAE and to file annual notifications and, where applicable, substance reports. Cabinet Decision No. 98 of 2024 discontinued the ESR notification and report filing requirement for financial years starting on or after 1 January 2023, so ESR is no longer a live, ongoing annual filing obligation. Diligence still checks the target's historical ESR filing record for financial years before that date, since unfiled notifications or reports for those earlier periods can carry penalty exposure that transfers with the entity in a share acquisition.

End-of-service gratuity is a statutory benefit payable to eligible employees under UAE labour law, calculated based on length of service and final basic salary. It represents a real, accruing liability of the employer from the employee's first day of service — but many UAE SMEs account for it on a cash basis (expensing it only when actually paid on an employee's departure) rather than accruing it progressively on the balance sheet. This means the reported liability on a target's balance sheet is frequently understated relative to the actual obligation the acquirer will need to fund as the workforce eventually turns over.

We reconcile reported revenue against independent sources — bank statement deposits, point-of-sale system exports, e-commerce platform settlement reports, and, where available, VAT return filings with the FTA (since VAT returns are filed based on actual taxable supplies and provide an independent cross-check against management-reported turnover). Discrepancies between these sources and the management accounts are a standard red flag we investigate and report on.

Related-party transactions are dealings between the target and entities or individuals connected to its owners — shared premises with another group company, intercompany loans, management fees paid to a holding entity, or goods and services transacted between commonly-owned businesses. UAE family and group business structures very commonly involve these arrangements, which can distort the target's standalone profitability (if costs are absorbed elsewhere in the group) or overstate revenue (if sales are made to related parties at above-market pricing). Diligence maps these out to determine what the target's genuinely standalone, arm's-length economics look like.

In our experience, the most common undiscovered liabilities are: understated or unprovisioned end-of-service gratuity, WPS payroll non-compliance (which can carry MOHRE penalties and work permit suspension risk for the sponsoring entity), trade licence activity mismatches (operating outside the scope of the licensed activity), unresolved pre-2023 ESR notification or report gaps from the years before that filing requirement was discontinued, and unresolved FTA VAT or Corporate Tax queries that were not disclosed because they had not yet escalated to a formal assessment at the time of sale.

PNPC's core scope is financial, tax, and operational due diligence, with legal and corporate diligence typically coordinated alongside external UAE transaction counsel for contract drafting, title opinions, and regulatory filings. Where a client does not already have transaction counsel, we can refer to trusted UAE legal practices we have worked with. Our role includes translating diligence findings into the specific commercial terms — price adjustments, indemnities, escrow amounts — that counsel then documents in the SPA or BTA.

A well-drafted Letter of Intent or Term Sheet should be non-binding on price and completion (other than customary exclusivity and confidentiality provisions), specifically so that a serious diligence finding can be addressed through renegotiation, restructuring of the deal (for example, moving from a share deal to an asset deal to ring-fence a liability), a price adjustment, or, in the most serious cases, walking away from the transaction entirely. This is precisely why diligence should occur before signing binding transaction documents, not after.

The core financial, tax, and employment diligence procedures are broadly similar for both. The differences lie in the corporate and regulatory review: mainland companies are licensed and regulated by the relevant emirate's DED (or equivalent authority) and, historically, foreign ownership structures for certain activities involved local shareholding or service agent arrangements worth reviewing for continuing validity; free zone companies are licensed by their specific free zone authority (JAFZA, DMCC, DIFC, ADGM, RAK ICC, and others each have their own registrar and rules) and carry the additional Qualifying Free Zone Person tax-status review under the Corporate Tax framework. DIFC and ADGM entities also sit under their own common-law court systems, which is relevant to how disputes and enforcement provisions in the transaction documents should be structured.

Yes. PNPC operates from Dubai, Abu Dhabi, Chennai, Bangalore, and Hyderabad, and we regularly coordinate diligence on group structures that span the UAE and India (and, through our network, other jurisdictions). This is particularly relevant where a UAE entity is a holding or trading vehicle for an Indian operating business, or vice versa — intercompany pricing, DTAA implications, and consolidated group liability all need to be reviewed as a single connected picture rather than as two disconnected reviews handed to two different firms.

An escrow holdback is a portion of the purchase price withheld in a neutral escrow account for a defined period after completion, released to the seller only if no valid indemnity claims are made against it within that period (or reduced by the amount of any successful claim). Diligence findings that represent quantifiable but not yet crystallised risk — such as a possible but unconfirmed FTA assessment, or a gratuity shortfall the seller disputes — are natural candidates for an escrow holdback rather than an outright price reduction, since they give the acquirer recourse if the risk materialises without requiring the seller to accept a definitive price cut upfront.

Yes, as part of the commercial and legal diligence workstream, we review what insurance policies the target holds — property, public liability, professional indemnity where relevant, and any key-person or trade credit insurance — and whether coverage appears adequate for the nature of the business. Gaps in coverage do not necessarily reduce the purchase price, but they inform the acquirer's post-completion risk management priorities and are noted in the findings report.

Representations and warranties are statements of fact and promises made by the seller in the Share Purchase Agreement about the condition of the business — for example, that all taxes have been properly filed and paid, that there is no undisclosed litigation, or that all employees are correctly documented under UAE labour law. If a warranty later proves false, the buyer generally has a contractual claim for breach. Diligence directly shapes which warranties are necessary and how specifically they should be drafted — a generic warranty pack misses the target-specific risks that a proper diligence process actually uncovers.

PNPC operates under a signed Non-Disclosure Agreement with both the acquirer (our client) and, where the seller requires it as a condition of data room access, directly with the target or seller as well. Our engagement team is restricted to the professionals actually working on the transaction, and target information is not shared outside the engagement scope, consistent with standard chartered accountancy professional confidentiality obligations.

A seller's refusal or reluctance to provide requested documents — particularly FTA correspondence, MOHRE/WPS records, or related-party transaction detail — is itself a significant diligence signal and is reported to the acquirer as such. We distinguish between genuine confidentiality-driven staged disclosure (common and reasonable for highly sensitive commercial information pre-signing) and outright refusal to substantiate representations already made in the information memorandum, which is a red flag warranting escalation before the acquirer proceeds further.

Yes, though the process differs. Without prior audited financial statements, our procedures rely more heavily on primary source verification — bank statements, FTA filings, payroll records, and underlying transaction documents — rather than reviewing and testing a prior auditor's working papers. This generally takes longer and, because there is no independently reviewed baseline, requires a more granular ground-up reconstruction of the target's true financial position.

A red flag review is a condensed, faster diligence process focused on identifying deal-breaking issues — a lapsed trade licence, undisclosed litigation, a materially different financial picture than presented — before an acquirer commits significant time and cost to a full diligence process or exclusivity period. It is not a substitute for full diligence before completion; it is a screening step to decide whether full diligence is worth commissioning at all.

No. A due diligence engagement is fundamentally different from a statutory audit — it does not result in a formal audit opinion on the financial statements taken as a whole. It results in a findings report describing what was reviewed, what was found, and the assessed materiality and risk level of each finding, intended to inform the acquirer's own commercial decision. This distinction should be clearly understood and is set out in our engagement letter and findings report.

Where the target operates in a sector designated as a Designated Non-Financial Business or Profession (DNFBP) under UAE AML/CFT regulations — real estate brokers, dealers in precious metals and stones, and certain corporate service providers, among others — diligence includes a review of the target's own AML/CFT compliance programme, goAML registration, and customer due diligence procedures, since acquiring a non-compliant regulated business carries its own regulatory exposure for the new owner.

The magnitude varies enormously with headcount, average tenure, and salary levels, and we do not quote a general percentage since it depends entirely on the specific target's workforce profile. What is consistent across engagements is the direction of the finding — the recomputed liability from length-of-service and salary data is, more often than not, higher than the balance sheet provision, sometimes materially so for businesses with longer-tenured staff.

Yes, and arguably it matters more, not less, in these situations. Related-party acquisitions carry a particular risk of informal historical arrangements, undocumented understandings, and pricing that was never tested against market terms — precisely the categories of issue formal diligence is designed to surface and document, which protects both parties (not just the acquirer) by creating a clear, evidenced basis for the transaction.

The engagement concludes with a written findings report, organised by workstream and risk severity, together with a summary risk register mapping each material finding to a recommended commercial or contractual response. Where requested, PNPC also participates directly in negotiation discussions and liaises with the acquirer's legal counsel to ensure findings translate accurately into the final Share Purchase Agreement or Business Transfer Agreement terms.

Yes. Many of our due diligence clients transition directly into an ongoing engagement — UAE accounting and bookkeeping, VAT and Corporate Tax compliance, WPS payroll management, and Virtual CFO support — so there is no gap in statutory compliance or financial oversight between completion and the target's integration into the acquirer's own systems and controls.

Our UAE due diligence work spans trading and distribution businesses, professional and business services firms, hospitality and F&B operations, logistics and freight-forwarding companies, and free-zone-based holding and management structures, reflecting the composition of the SME and mid-market economy across Dubai and the wider UAE. Sector-specific nuances — inventory verification for trading businesses, licence and food-safety compliance for F&B, fleet and freight documentation for logistics — are built into the scope where relevant.

A large international firm brings brand recognition but often deploys a junior, high-turnover team on SME-scale UAE deals, applying globally standardised procedures that are not always tuned to UAE-specific issues like gratuity accrual practices or free zone Qualifying Free Zone Person nuance — at a fee structure calibrated for much larger transactions. A smaller local practice may know the UAE market well but lack the cross-border India-UAE coordination, sector breadth, and post-completion compliance capacity that many acquirers eventually need. PNPC has practised as a Chartered Accountancy firm since 1986, with offices across Dubai, Abu Dhabi, and India, giving senior-CA-led engagement teams, UAE-specific procedural depth, and continuity from diligence through to post-acquisition compliance — at a fee structure proportionate to mid-market and SME transactions.

Yes. Diligence includes confirming the target's registered UBO declaration against the actual shareholding structure, since UAE entities are required to maintain and file UBO information with their licensing authority, and a mismatch between the declared UBO and the real economic owner is both a compliance red flag and a signal that other disclosures in the data room may be unreliable. We cross-check the UBO register against shareholder resolutions, share certificates, and, where the target has related-party financing, the source of historical capital contributions.

Offshore companies are registered for holding, investment, or international trading purposes and are generally not permitted to conduct business directly within the UAE market or lease physical office space in the way a mainland or onshore free zone company can. If the target is an offshore holding vehicle, diligence focuses on what it actually holds — shares in operating subsidiaries, real estate, or investment assets — and confirms that the offshore registrar's records (shareholding, director appointments, registered agent) are current, since offshore entities rely on a registered agent for statutory filings rather than a physical presence.

No. The UAE is not a party to the Hague Apostille Convention, so there is no apostille shortcut for UAE-issued corporate documents that need to be recognised abroad, or for foreign documents that need to be recognised in the UAE. Any document in the transaction chain that requires cross-border legal effect — a foreign parent company's board resolution authorising the sale, for example — needs the full legalisation route: notarisation, home-country foreign ministry authentication, UAE embassy or consulate attestation, and MOFAIC attestation in the UAE (or the reverse sequence for UAE documents going abroad).

Scope is set in writing at the engagement letter stage against the specific deal: share deal versus asset deal, mainland versus free zone target, sector, and the acquirer's stated risk tolerance. Anything outside that written scope — for example, a technical environmental survey, or a jurisdiction-specific review of an overseas subsidiary not disclosed at scoping — is flagged as an open item requiring a scope-change discussion, rather than silently assumed to be covered.

A well-organised data room — indexed, complete, with source documents rather than summaries — can compress a 3–6 week engagement meaningfully, because fieldwork time shifts from chasing documents to analysing them. A disorganised or incomplete data room extends timeline and can increase fees, since our team spends proportionately more time issuing follow-up requests and reconciling gaps rather than performing substantive analysis. We flag data room quality as a timeline and fee risk factor at the scoping call, based on what is available at that point.

Each finding is rated by two factors: financial materiality (the quantified or estimated impact on valuation, working capital, or contingent liability) and likelihood of crystallising (confirmed fact versus disclosed risk versus speculative exposure). Findings are then grouped into deal-breaker, price-adjustment, and warranty/indemnity categories so the acquirer and counsel can prioritise negotiation effort rather than working through an undifferentiated list.

We review Ejari-registered lease terms (expiry, renewal conditions, rent escalation, and any landlord consent requirement on a change of control), and material customer and supplier contracts for change-of-control clauses, exclusivity or territory restrictions, termination triggers, and any personal guarantee given by the departing owner that would need to be released or replaced at completion. A change-of-control clause that allows a key customer or landlord to terminate on an ownership change is a material finding that directly affects deal structuring.

Beyond gratuity, we confirm each employee's WPS salary payment history matches their employment contract terms, check for any employees paid outside WPS (a MOHRE compliance breach that can carry penalties and work-permit implications for the sponsoring entity), verify visa and labour card status is current for the full workforce, and review whether any senior employment contracts contain change-of-control triggers — accelerated bonus, enhanced severance, or a right to resign with entitlements intact — that could create an unplanned cost on completion.

Whether a new account is needed depends on deal structure — a share acquisition typically keeps the target's existing bank accounts and signatory arrangements, updated for new authorised signatories post-completion, while an asset purchase into a newly formed acquiring entity requires a fresh account. Diligence reviews the target's existing banking facilities, any security or guarantee the seller has given over the accounts, and outstanding loan covenants that a change of control might trigger, so the acquirer knows what banking continuity or restructuring is needed at completion.

Institutional and family-office investors typically expect a more formally structured report — executive summary, workstream-by-workstream detail, an explicit risk register with quantified exposure ranges, and often a presentation to an investment committee — whereas an individual acquirer buying a single SME target may only need the core findings and risk register in a more direct format. We agree reporting format and depth at the scoping stage based on who the ultimate reader of the report will be.

Where the acquirer is India-based or the target has Indian group connections, we additionally consider FEMA overseas investment rules on the Indian acquirer's side, the Indian tax treatment of the acquisition (including any Form 15CA/15CB filing obligations on outbound consideration payments), and whether the UAE-India tax treaty position is relevant to the deal structure — these sit alongside, not instead of, the UAE-side diligence covered elsewhere in this service.

We prepare a summary presentation — typically 15 to 25 minutes — covering the headline findings, the recommended commercial response to each material item, and an explicit recommendation on whether to proceed, renegotiate, or walk away, supported by the full findings report as backup detail rather than requiring the board to read the complete document to reach a decision.

This is treated as a material finding in its own right, separate from the financial and tax workstreams — an unresolved internal disagreement on the seller's side creates completion risk regardless of how clean the underlying financial and tax position is, since a disputing shareholder can delay or block signing. We flag this to the acquirer as soon as it becomes apparent during management interviews or document review, since it affects deal timeline and the acquirer's negotiating leverage.

We maintain a live exception register throughout the engagement — not just at the final report stage — listing each open item, who owns resolving it (acquirer, seller, or PNPC), the deadline, and how it affects the completion timeline if unresolved. This is reviewed with the acquirer at agreed checkpoints rather than left to surface only in the final findings report.

Acquirers who have done deals in jurisdictions with public filing regimes are used to pulling audited accounts, statutory filings, and a litigation register from a central registry. In the UAE, much of the equivalent evidence is not publicly filed — audited accounts are not universally mandatory for SMEs, there is no open litigation-search database equivalent to some Western jurisdictions, and confirmation of tax and labour compliance requires the target's own portal access (FTA EmaraTax, MOHRE) rather than a third-party lookup. So the diligence depends far more heavily on the seller granting genuine access, and on our procedures being built to reconstruct the picture from source documents rather than assuming a filing exists to be pulled.

Scope is driven by three things: the size of the cheque relative to the acquirer, how the price is built (an EBITDA-multiple deal always pulls in full quality-of-earnings work; an asset-value deal may not), and which risk areas are load-bearing for this specific target — a 60-employee hospitality business makes gratuity and WPS the priority workstream, a free zone holding company makes Qualifying Free Zone Person status and the underlying subsidiaries the priority. We deliberately do not run every workstream at full depth on every deal; we run the ones where a finding would actually change the price or the decision.

The recurring blockers are: a related-party transaction schedule the seller has never actually prepared, FTA Corporate Tax and VAT portal correspondence the owner is reluctant to share, MOHRE/WPS payroll history for informally-topped-up staff, and an out-of-date UBO declaration that no longer matches the share register after an old internal transfer. We request all four explicitly on day one of the Information Request List rather than waiting for them to surface, because each one tends to conceal exactly the kind of exposure — undisclosed intercompany balances, an open FTA query, understated payroll — that materially moves the deal.

The financial, tax, and employment analysis is almost entirely document- and portal-based and runs remotely — data room review, bank-statement reconciliation, gratuity recomputation, and FTA/MOHRE status checks do not require a site visit. Where on-the-ground work adds real value is physical verification: inventory counts for a trading or F&B target, confirming that a leased premises and its Ejari registration match the licensed activity actually being carried on, and in-person management interviews where reading the room matters. We flag at scoping which of those apply to the specific target.

The strongest acquirers arrive at diligence having already decided three things: their walk-away price and what would trigger it, whether they are structurally committed to a share deal or open to converting to an asset deal to ring-fence a liability, and who on their side holds decision authority to accept or reject a finding in real time. They also confirm their LOI or term sheet preserves the right to renegotiate or walk away on diligence findings. When those are settled upfront, diligence findings translate straight into decisions; when they are not, findings sit unactioned while the acquirer's own side debates them and the seller's negotiating leverage grows.

The failure mode is not a wrong number in a report — it is a whole risk area that was never in scope: gratuity accepted from the balance sheet without recomputation, Free Zone Qualifying Free Zone Person status never independently tested, a change-of-control clause in a key customer contract missed, or an unconsented loan covenant left undiscovered until it triggers technical default after completion. Each of those can cost multiples of the entire diligence fee, and none of them shows up unless someone specifically runs the UAE-tuned procedure that surfaces it.

Under Federal Decree-Law No. 47 of 2022, a share acquirer inherits the target's Corporate Tax history, and a change of ownership does not reset filing obligations or record-retention duties — Taxable Persons must retain records for at least seven years, so the acquirer becomes responsible for the target's historical documentation trail on day one. Diligence therefore does not just quantify past tax exposure; it confirms whether the target's EmaraTax registration, filing history, and supporting records are in a state the new owner can continue to file from without a gap. A free zone target's Qualifying Free Zone Person status also has to keep being satisfied after the deal, or the 0% rate on qualifying income is lost prospectively.

PNPC quotes its own professional diligence fee as a fixed or capped amount after scoping, and separates it clearly from third-party costs the transaction may incur — escrow agent charges, legal counsel fees for SPA drafting, notarisation and legalisation of cross-border corporate documents, trade-licence transfer or amendment fees payable to the DED or free zone authority, and any regulatory change-of-control approval fees in regulated sectors. Those third-party amounts are confirmed against the relevant provider or authority at the time, because their schedules change.

The UAE tax and regulatory framework has moved quickly — Corporate Tax only took effect for financial years starting on or after 1 June 2023, and the ESR notification and report filing requirement was discontinued for financial years starting on or after 1 January 2023 under Cabinet Decision No. 98 of 2024. If a relevant rule or FTA practice shifts mid-engagement, we update the findings and the acquirer, and re-check whether any conclusion or price recommendation still holds. We are specifically careful not to describe a discontinued obligation, such as ongoing ESR filing, as still live — treating a lapsed requirement as current is exactly the kind of dated error that undermines a diligence report.

When the buyer is India-based or the target sits in an India-UAE group, the UAE diligence has to be sequenced with India-side steps rather than run in isolation: FEMA overseas-investment rules govern the Indian acquirer's ability to fund the purchase, outbound consideration may trigger Form 15CA/15CB obligations on the remittance, and the India-UAE tax treaty position can shape the acquisition structure. Because PNPC operates from both Dubai and India (Chennai, Bangalore, Hyderabad), the same firm sequences the FEMA filing timeline on the Indian side against the UAE completion timeline so the two do not collide at signing.