Pharmaceutical Due Diligence Checklist: A Complete Guide

The tightly regulated pharmaceutical industry is a prime example of why due diligence matters. A pharmaceutical due diligence checklist helps you work through that complexity step by step, rather than relying on a generic M&A template that misses what makes a drug or biotech asset unique.

Bayer inherited significant glyphosate litigation following the Monsanto acquisition. Thorough due diligence doesn’t guarantee a deal avoids trouble, but it gives you the clearest possible view of what you’re actually buying.

Deal volume only raises the pressure. Global biopharma M&A reached $130 billion in the first half of 2026 alone, according to IQVIA, already nearing the full 2025 total. More deals moving faster means less room for a checklist to have gaps.

This guide covers the full scope a pharma or biotech deal actually needs: products and assets, company structure, financial data, commercial viability, legal exposure, cultural fit, and two areas generic checklists tend to skip entirely: manufacturing/CMC readiness and outsourcing/CDMO risk.

Key takeaways

• A complete pharma due diligence checklist spans eight categories: products and assets, company structure, financial data, commercial viability, legal exposure, cultural fit, manufacturing/CMC readiness, and outsourcing/CDMO risk. A systematic evaluation across these areas helps identify risks early in the acquisition process. 
• Regulatory due diligence needs to cover specific FDA pathways, IND/BLA readiness, and the status of each clinical trial, rather than relying on a general compliance check. Where relevant, the review should also consider the European Medicines Agency’s requirements and those of other regulatory bodies involved in the asset’s development.
• Commercial due diligence involves assessing market size, market dynamics, the competitive landscape, pricing and reimbursement, and relevant market segments, rather than simply reviewing a business plan. This helps determine the asset’s competitive advantage and potential for market access. 
• Manufacturing and CMC due diligence is a named gap in most generic templates: GMP history, quality systems, and Quality Target Product Profile (QTPP) alignment all belong on the checklist.
• A target’s reliance on CDMOs and other outsourced partners carries its own risk profile, covering supply continuity, quality oversight, and whether key contracts even transfer in a change of control.
• A secure VDR platform is what makes a checklist this detailed practical to run across a real deal team.

Best VDRs for pharma due diligence

The importance of due diligence

When a company considers a prospective merger or acquisition (M&A), information is of the essence. To know exactly what it stands to gain and to learn about risk mitigation strategies, a company conducts in-depth research and investigation. That’s due diligence in pharma.

For more details on this topic, read our guide on the different types of due diligence.

In a few words, due diligence seeks to ultimately answer one simple question: “To buy or not to buy?”

Due diligence in the pharmaceutical industry

While due diligence is a vital process for corporations across all industries, M&A due diligence in biopharma carries even greater weight due to government regulations and the sheer volume of M&A deals.

Regulatory due diligence

The pharmaceutical and biotechnology industries are as tightly regulated as they come. That’s no coincidence: these are manufacturers and distributors whose business directly affects the health of the entire world.

With that in mind, acquiring another company without a full understanding of what you’re getting into carries enormous potential risks. The Bayer-Monsanto deal above remains one of the clearest examples of “acquisition indigestion” on record.

Effective regulatory due diligence means understanding the specific FDA pathway a drug asset is following, not just confirming a general compliance checkbox. A target developing a product under the 505(b)(2) pathway, for instance, carries a different risk and timeline profile than one filing a full New Drug Application from scratch. 

You’ll also want to assess IND (Investigational New Drug) and BLA (Biologics License Application) readiness directly: how complete is the application package, what open questions has the FDA already raised, and how far out is the realistic filing date.

Large quantity of M&A deals

The second reason relates to a defining feature of the pharmaceutical business: patent and exclusivity expiry.

If a pharma company wants to stay in business, it needs to be continually on the lookout for new drugs, either producing its own (hardly a speedy process) or acquiring the rights to production and distribution from other companies. Enter the M&A. IQVIA’s 2026 mid-year outlook points to the same pressure: deal value jumped 133% from 2024 to 2025, and 2026 has kept that pace.

As a result, there’s something of a categorical imperative in the pharma sector: absorb or die. And because of the large number of deals, acquisitions tend to get done more quickly. They tend to be hastier, leaving more room for error.

Why is due diligence so important in the pharma industry? Because, paradoxically, the industry with one of the highest levels of responsibility and regulation also sees more frequent, faster mergers than almost any other.

Read more: See the regulatory due diligence checklist for the fuller cross-industry framework these pharma-specific pathways sit inside.

Initial steps of pharma M&A

After your corporation has set its sights on a target for a merger or takeover, pharma acquisition due diligence turns to determining whether the target’s perceived value matches its actual value. The better you answer this question, the greater your chances for a successful deal.

1. Have a team in charge

The first thing your company will want to do is assemble a dedicated team to research and investigate the potential merger or acquisition. This task force should consist of well-seasoned professionals with broad expertise in financial and legal services, marketing, and product distribution, among other areas.

2. Make use of an effective VDR platform

Any team is only as good as its level of organization. To ensure optimal communication and efficiency as the due diligence pharma effort moves forward, you’ll want to leverage available technology. Using a virtual data room for the pharma industry can make the difference between a good research job and a great, thorough one.

With a VDR, you get:

• The highest level of security for sharing sensitive data
• A controlled platform for highly effective communication and cooperation
• A plethora of resources fine-tuned for processing massive amounts of data
• A dedicated support team available at all times
• A simple, intuitive interface designed for busy people, without a steep technical learning curve

3. Prepare a checklist

Each M&A deal process is different, and it’s up to your task force to build a list tailored to the specific demands of your merger or acquisition. That said, several aspects should never be omitted from your due diligence process.

A well-prepared due diligence questionnaire is a useful companion to the checklist below, since it gives you a structured way to request exactly what each checklist item still needs from the target company.

A pharma due diligence checklist

As a starting point, we’ve prepared a guide you can lean on as you go about your research. It’s not only a checklist of healthcare aspects, but an extended list that helps ensure no stone is left unturned in your investigation.

The checklist spans eight areas: products and assets, company structure, financial data, commercial viability, legal exposure, cultural fit, and the two areas most generic checklists leave out: manufacturing/CMC readiness and outsourcing/CDMO risk. The table below maps out all eight before the detailed breakdown.

Category	What it covers
Products and assets	Drug and product inventory, IP ownership and licensing, clinical records, real estate and physical assets
Company structure	Internal organization, corporate charter, board minutes, shareholder list, key external partners
Financial data	Financial statements, balance sheet, projections, cash flow, tax records
Commercial	Market sizing, competitive landscape, pricing and reimbursement, business plan viability
Legal	Litigation exposure, environmental compliance, contracts, insurance coverage
Cultural	Compliance history, leadership track record, values, public image
Manufacturing, quality, and CMC	GMP compliance history, quality systems, CMC readiness, QTPP alignment
Outsourcing and CDMO relationships	Third-party manufacturing risk, supply continuity, quality oversight, contract transferability

1. Products and assets

You want to list everything the target company owns or has legal rights to: medications and other products, intellectual property, real estate, equipment, and so on. You need:

I – A comprehensive inventory of company products, both existing and in development, with relevant information such as patent terms. Also include:

• Relevant regulatory correspondence and submissions, including INDs, applications for products under development, and deficiency letters, if any;
• Clinical investigation records. Clinical information in due diligence is key. Determine whether these have been inspected or otherwise reviewed by the FDA (or other relevant regulatory authority);
• List of products undergoing or having undergone regulatory oversight, if any;
• Ongoing, planned, or terminated clinical research.

II – A list of intellectual property and relevant specialists. This is where IP due diligence belongs on your checklist specifically: patents, chain of title, and licensing terms each deserve their own line item, since any gap here can block a deal’s core value proposition. Include:

• A complete record of existing patents;
• Active patent applications;
• Patent licenses and chain-of-title documentation confirming the target actually owns what it claims to own;
• Any agreements on the acquisition or cession of intellectual property, including the specific licensing terms attached to each;
• Relevant expertise in specific areas;
• List of leading scientists working in or for the company.

See intellectual property due diligence for the fuller IP-specific checklist and a real example of what happens when chain-of-title gets missed.

III – Listing of real estate assets, including:

• Physical business units and production facilities;
• Real-estate leases and other relevant documentation.

IV – Physical assets such as equipment, machinery, vehicles, etc.

2. Company structure

Here, the aim is to get a clear picture of the company’s internal organization and key external connections. You want to find out how the target’s organizational structure compares, and potentially adapts, to yours.

I – Internal company organization, including:

• Distribution of authority: relevant hierarchies and their levels;
• Reporting/oversight structure;
• How business/production units are organized.

II – Corporate charter and bylaws, as well as any relevant conclusions derived from their analysis.

III – Minute book covering all board and shareholders’ meetings, committee resolutions, and so forth.

IV – List of shareholders.

V – Key external connections, including distribution or manufacturing partners.

3. Financial data

• I – Financial statements, audited and unaudited, for a period of 3–5 years are common;
• II – Company balance sheet, an accounting statement that lists assets, liabilities, and equity;
• III – Projections for the future;
• IV – Cash flow statements;
• V – Capital expenditures;
• VI – Relevant analyses of budgets and fixed expenses;
• VII – Tax information, including:
  • Tax returns for the period of time deemed appropriate by your team (typically 3–5 years, but may vary);
  • Employment tax data for the relevant period;
  • Recent and pending audits;
  • Applicable tax exemptions or reductions and connected products/services.

4. Commercial

This is where commercial due diligence pharma work happens: understanding the target’s current market presence, competitive position, and the realistic commercial viability of its asset, not just reviewing a business plan on paper.

I – Review the company’s business plan. Ask yourself:

• How realistic is it in light of current market realities?
• How does it stack up against past performance?

II – Size the market and map the competitive landscape, including:

• Company position in its current market, and realistic total addressable market for the asset;
• Points of overlap and difference with your company’s existing portfolio;
• Customer base and geographical reach;
• Named competitors already active or in development in the same indication.

III – Analyze pricing and reimbursement dynamics, including projected pricing changes, margins, and payer or reimbursement pathway assumptions specific to the target market.

• Investigate relevant market trends and their impact on the company;
• Review marketing history and outstanding marketing applications.

5. Legal

Here the main goal is simple: make sure you’re not inheriting trouble. You have to be aware of any pending copyright, intellectual property, or liability lawsuits and have a firm grasp of areas such as compliance and insurance. Be sure to cover:

• Any existing or threatened malpractice, criminal, or other liability suits;
• Active, past, or pending copyright/intellectual property litigation;
• Actions taken by foreign authorities regarding the company or company products, if any;
• Environmental considerations, including a list of environmental permits, licenses, audits, and certificates; records of environmental litigation; a list of company-handled hazardous substances; and the company’s environmental standing;
• Contracts, including distribution, supply, and sales agreements; bank agreements; contracts from past M&A operations; partnership or joint venture agreements; and contracts with executive directors and shareholders;
• Insurance coverage documentation, including company, product, and personal liability, plus a history of insurance claims for the established period.

6. Cultural

Culture is one of the most overlooked aspects of due diligence research, yet it plays a key role in whether an M&A deal actually succeeds. A McKinsey survey of nearly 1,100 M&A leaders in 2023 found that 44% cited a lack of cultural fit as a top reason integrations failed. While all other factors may look promising, a marked difference in internal culture and values can make for a very bad combination indeed.

Because culture is intangible and not easily quantified, it calls for a different approach. Keep the question of culture constantly in mind as your team works through the “hard” data above. Take note of the impressions you form, and why.

You should aim to answer questions such as:

• Does the company have a good history of regulatory compliance?
• Does it show a good record on major business decisions?
• Is there a good history with former executives?

The answers help establish a general image of the corporate culture, which, to a certain extent, helps predict the likelihood of future trouble.

Other “soft” aspects worth considering:

• Long- vs. short-term orientation: does the company follow a sustainable vision, or tend to opt for short-term profit?
• Environmental mindset: how “green” is the company, in practice and in perception?
• Public image: are there widespread perceptions tied to company-owned or distributed brands, and are they good, bad, or neutral?
• Values: is there a genuinely strong, value-based corporate culture?
• Ethical considerations: Is the company known for moral practices? What’s its history with Good Laboratory Practice (GLP)? To what extent does it manufacture its own products, and what’s known about the practices of its associated manufacturers?

Your team should also schedule one or more visits to physical company locations. That, plus your interaction with the opposing M&A team, helps form a real sense of the company’s internal environment, spirit of cooperation, and executive values.

7. Manufacturing, quality, and CMC

A manufacturing due diligence checklist assesses whether a target can produce its product reliably, at the required scale, and in accordance with applicable regulatory requirements. It’s a named gap in most generic M&A checklists, and one of the fastest ways for a pharma deal to carry hidden risk.

I – GMP compliance history. Review the target’s Good Manufacturing Practice (GMP) inspection record directly, including:

• Any FDA Form 483 observations or warning letters issued in the last several years;
• The status and timeline of any corrective action plans tied to past findings;
• Inspection history from other relevant national regulators, where the target manufactures or sells outside the US.

II – Quality systems and documentation. Confirm the target’s quality management system actually functions day-to-day, not just on paper:

• Batch records and deviation logs for recent production runs;
• Standard operating procedures (SOPs) covering manufacturing and quality control;
• Internal audit history and any unresolved corrective and preventive actions (CAPAs).

III – CMC (Chemistry, Manufacturing, and Controls) readiness. Consistent with ICH Q8(R2), CMC development should be supported by a clear Quality Target Product Profile (QTPP) that defines the intended use, dosage form, and quality characteristics the product must meet. From there, check that:

• Critical Quality Attributes (CQAs), the specific physical, chemical, or biological properties that must stay within a defined range, are clearly identified;
• Critical Process Parameters (CPPs), the process parameters that can affect those CQAs, are appropriately controlled and monitored as part of the validated manufacturing process;
• The control strategy linking Critical Material Attributes (CMAs), CPPs, and CQAs together is documented, not just implied.

The same principles extend to medical device and combination-product assets: a combination product may require device-related quality documentation in addition to the drug-related CMC documentation, and a gap there carries the same deal risk as a gap in the drug-side CMC package.

The table below turns these risk areas into a quick reference for your deal team:

Risk type	What it means for the deal
GMP non-compliance history	Past FDA Form 483 observations or warning letters signal that a manufacturing process may require costly remediation before it can scale.
Incomplete CMC package	Gaps in Chemistry, Manufacturing, and Controls documentation can delay or block regulatory filings after the deal closes.
Unvalidated critical process parameters	If CPPs tied to Critical Quality Attributes aren’t well defined, batch-to-batch consistency is harder to guarantee at scale.
Single-source raw materials	Reliance on a single supplier for a key input creates a supply disruption risk that doesn’t appear in the financials.
Facility capacity constraints	A manufacturing site running near capacity limits how fast the combined company can scale production post-deal.
Device/combination-product gaps	For combination products, incomplete device-side quality documentation carries the same risk as a gap in the drug-side CMC package.

8. Outsourcing and CDMO relationships

Outsourcing pharma due diligence is increasingly important because most pharma and biotech companies don’t manufacture everything themselves. A target’s reliance on a contract development and manufacturing organization (CDMO), or other outsourced partners, is a risk category you inherit directly once the deal closes.

I – Supply continuity. Confirm:

• How concentrated production is with a single CDMO or supplier, and what backup capacity exists if that relationship ends;
• The CDMO’s own delivery track record, including any history of missed deadlines or quality holds;
• Lead times for qualifying a second manufacturing source, if one doesn’t already exist.

II – Quality oversight. A target generally retains regulatory responsibility for activities performed by its outsourced manufacturing partners. Review:

• How the target audits and monitors its CDMO’s quality systems on an ongoing basis;
• Whether the CDMO’s own GMP inspection history is clean, since its problems become the target’s problems;
• Quality agreements that define exactly who is responsible for what between the two parties.

III – Contract transferability. Before you assume an existing CDMO or supply agreement simply carries over:

• Check for change-of-control clauses that could let the CDMO renegotiate, or walk away, once the deal closes;
• Confirm pricing terms and minimum volume commitments survive the transaction on the terms you’re expecting;
• Flag any exclusivity provisions that could limit your options after the deal.

Final considerations

The importance of proper due diligence for a successful M&A deal can’t be overstated.

As you move forward with your pharma due diligence planning and operations, keep your main goal in sight: clearly establish the benefits and risks of integration across every category above, including manufacturing/CMC and outsourcing risk, and produce a final report that orients your company’s decision.

Second-guess yourself and consider appointing a team member to act as a devil’s advocate. Don’t underestimate the many pitfalls lurking in every M&A deal. In particular, watch for:

• Over-optimism, overlooking the potential dangers behind a shiny façade, such as in the Bayer-Monsanto deal mentioned above;
• Consistency and sunk-cost traps: as talks progress, expectations can run high, and weeks of due diligence effort can leave you feeling committed to “making it work.” Stay objective.

The checklist above is a strong starting point, but the quality and impact of your due diligence work, and ultimately of the whole deal, still hinge on the competence and dedication of your team. 

FAQ

What is a licensing deal in pharmaceuticals, and how does the due diligence process work?

A pharmaceutical licensing deal grants one company the rights to develop, manufacture, or sell another company’s drug, technology, or pharmaceutical products, usually in exchange for upfront payments, milestone payments, and royalties, without requiring a full acquisition. Due diligence follows a structured approach, with particular attention to intellectual property ownership and chain of title, commercial fit, and the asset’s regulatory strategy. Buyers should also review the applicable legal requirements, regulatory status, market access, and any outstanding regulatory interactions with relevant regulatory bodies in each territory covered by the license.

What due diligence is required for a biotech acquisition?

A biotech due diligence checklist covers the same eight categories as any pharma deal: products and assets, company structure, financials, commercial viability, legal exposure, cultural fit, manufacturing/CMC, and outsourcing/CDMO risk. The review should assess assets at their various stages of drug development, including available clinical data, regulatory milestones, manufacturing readiness, and potential barriers to market access. 

How do pharma companies protect sensitive R&D data during M&A due diligence?

Pharma companies rely on a secure virtual data room (VDR) to control access to R&D, clinical development, and IP data throughout the deal. As covered in “Make use of an effective VDR platform” above, a VDR lets administrators set granular permissions, track exactly who viewed which document and when, and revoke access instantly if a deal falls through, which a shared drive or email thread simply can’t match.

What should be included in a CMC due diligence checklist?

A CMC due diligence checklist should confirm GMP compliance history (inspection findings and corrective actions), quality systems (batch records, SOPs, CAPAs), and CMC readiness, including a clear Quality Target Product Profile (QTPP), defined Critical Quality Attributes, and validated Critical Process Parameters for the manufacturing process. See “Manufacturing, quality, and CMC” above for the full breakdown and a risk-category table you can apply directly.