Pharma regulatory due diligence, explained.

Regulatory due diligence explained: reading what regulators told the company you want to buy

One bid, from the first upload to the last transfer

1. The seller opens the data roomNorthwind gets access on September 22. Orvanne's room fills in batches, 14 of them by October 7.
2. The buyer reads and checks the recordEvery approval, letter, commitment and inspection, set against what agencies publish. This is where the second deficiency is caught, or missed.
3. A red-flag report reaches the deal committeeDue October 9. Each finding says what it does to the approval date, the forecast or the purchase terms.
4. The bid and the contract price the findingsBinding bid October 16, signing October 30. Findings become price cuts, contingent payments, indemnities and closing conditions.
5. Every approval moves to the buyer after closeClose on December 1 starts a separate legal transfer in each market. The commitments move with them.

Step 2 is the subject of this guide. The people, companies and figures in this example are fictional.

The seller's slide can be true and still misleading, and three more diligence surprises

Data room, red-flag report, complete response letter, registration

Fourteen terms are defined in the one-page summary.

What regulatory due diligence covers: five things to inventory, and where a public record can check them

In shortA request list asks for documents. A useful review turns those documents into five lists: registrations, commitments, open agency clocks, inspections and the archive. Each item passes to the buyer, carries a date and an owner, and can be late. Most have a public record that can contradict the seller, which tells you where to spend your best days.

A pharma data room is organized by folder, and the regulatory folder is usually one of several. A useful review builds five lists from it. Each list has one row per item, and each row names the page it came from. Those lists outlive the report: they answer the deal lead's question about how much of the forecast sits on a problem, and after signing they become the integration plan.

The five inventories every regulatory review builds

Which seller documents a public record can contradict

Public checks are unevenly spread. Some document classes can be tested against an agency's own words, and some rest on the seller's account alone. A team that knows the difference asks more questions about the second group and spends less time re-reading the first.

Where regulatory diligence hands over to the deal, legal and commercial teams

Agree these limits on day one. The regulatory review states a finding's effect in months and dollars, and the deal team decides what that does to value. Legal diligence reads the contracts around a registration, and commercial diligence tests the forecast the registration supports, so a licensee who holds an approval in one market concerns all three teams. What was said on a call and never minuted stays out of everyone's reach.

The rules behind a pharma data room review, and what changed between 2024 and 2026

In shortNo regulation governs diligence itself. The work reads against the rules that govern refusals, post-approval studies, inspections and transfers. Several moved recently: FDA began publishing refusal letters in 2025, the pediatric study law changed in February 2026, and the EU's new pharmaceutical law is close but not in force.

How to read a complete response letter against the seller's story, and what one extra deficiency does to the date

In shortA refusal letter must list every deficiency FDA found, and what the letter asks for decides how long the next review takes. Company summaries have been measured against these letters and fall well short. A new clinical study or a reinspection turns a two-month review into a six-month one, on top of the time the fix itself takes.

A complete response letter is FDA's written explanation of why it cannot approve an application in its present form. It reflects the full review of the data submitted and must describe all the specific deficiencies the agency found.18 Until 2025 the public mostly saw the company's own account. On July 10, 2025, FDA published more than 200 letters, and on September 4 it added 89 more and said it would release new letters promptly after issue.2,3 The openFDA collection covers approved and unapproved NDAs and BLAs, with confidential information redacted.8

What FDA found when it compared letters with press releases

FDA's own staff ran the test in 2015. They took 61 refusal letters issued between August 2008 and June 2013 and matched them, statement by statement, against the sponsors' press releases.6 Press releases are investor announcements, and a data-room deck is a different document written for a different reader. Nobody has published the same test on decks. The finding still tells a reviewer what to expect from any summary written by the company.

One more figure frames what these letters tend to hold. Of the 202 letters in FDA's first batch, for applications later approved, a trade analysis counted 150, or 74%, with quality or manufacturing issues.12 So a summary that leads with the factory is usually telling the truth about the factory. Ask what else the letter says.

Five things to read in every refusal letter

1. Every deficiency, by heading. Facility, clinical, clinical pharmacology, product quality, labeling. Count them, then count what the slide names.
2. Whether new clinical data is asked for. This line alone can decide the length of the next cycle.
3. The cycle. An application refused twice has two letters. Match the letter's date to the resubmission history before reading it against any statement.
4. What sites are named. A contractor's problem has a different owner, a different fix and a different date from a problem in the clinical package.
5. What is blacked out. Each redaction marks a place where the seller holds the only copy. Ask for it.

Why Class 1 or Class 2 decides the approval date

When an applicant answers a refusal letter, FDA sorts the resubmission into one of two classes, and each has a review goal. Class 1 is a short list, which includes draft and final labeling, stability updates, assay validation data, release testing on the last one or two lots, and minor re-analysis or clarifying information. Class 2 is everything else, and FDA's manual names a resubmission requiring a reinspection and one requiring an advisory committee presentation.11

The goals are 90% of Class 1 in 2 months and 90% of Class 2 in 6 months.19 Those goals run through fiscal 2027; a filing after that depends on the next user fee agreement, which is still a proposal.16

Now the example. Orvanne's slide plans a Class 1 filing in early 2027 and approval in mid-2027. FDA's letter asks for a thorough QT study, and at the follow-up meeting FDA declines to accept modeling of existing data instead. The international QT guidance does allow concentration-response analysis in some settings, so the seller's attempt was reasonable; here it failed.26

The study has to run first, and the example's plan allows 9 to 12 months for it. New clinical data is on no Class 1 list, so the filing is Class 2, and FDA has also said a reinspection may be needed, which alone would make it Class 2.

What a year's delay is worth, three ways

Nobody publishes the cost of a missed refusal deficiency, so build it from a delay. A 2024 white paper from the Tufts Center for the Study of Drug Development (Tufts CSDD) puts a day of delay at about $800,000 of unrealized sales and about $40,000 of direct cost in a Phase II or III trial; an earlier commentary by the same group's director gives about $500,000 of sales and the same $40,000.27,28 Those are averages over products, and they count sales before any costs. For a real deal, use the seller's own forecast for the drug.

NAI, VAI and OAI: reading a target's inspection history, and why a contractor's status can stop an approval

In shortFDA classifies a closed inspection in one of three ways. About one in five ended in Official Action Indicated in fiscal 2025. FDA also measured what that does to applications: 12 of every 100 submissions it studied were held up by a facility, and most of those holds traced to a site already in bad standing. A buyer therefore needs each site's record, the contractors' included.

FDA defines the three outcomes in one sentence each.29 No Action Indicated (NAI) means no objectionable conditions or practices were found. Voluntary Action Indicated (VAI) means they were found, but the agency is not prepared to take or recommend action. Official Action Indicated (OAI) means regulatory or administrative actions are recommended.

The classification describes the agency's response, so an NAI speaks only for one visit, on one date, with one scope. A Form FDA 483 is the list of observations the investigator leaves at the end of the visit, and it comes first; the classification follows later.

How often a factory stops a filing

FDA's latest quality report studied nearly 10,000 original applications and supplements received in fiscal 2024 and 2025 that needed a facility assessment. As of May 2026, 28% had received a refusal letter, and 43% of those letters, 12% of all submissions, were due to a facility withhold: a hold on approval because of a site's status. More than half of those withholds came from sites already classified OAI or potential OAI when the application went in.30 The study's scope includes generic applications and supplements, so read it as a whole-industry figure.

Timing matters to a buyer: the seller could have known about a site already in bad standing when it filed. FDA also names the citations most often behind those holds: inadequate investigation of batch failures, quality unit procedures not written or followed, and poor control of microbial contamination.30 Each of those can be looked for in a Form 483.

What FDA's inspection classification database leaves out

The database is updated weekly, and it is a selection.4 State inspections are excluded. So are some preapproval inspections, which is often the inspection a buyer most wants to see when an application is pending. Laboratory inspections sit elsewhere, and only inspections with a final classification appear, so FDA warns against using it to count visits.

Visits have also been uneven: the US Government Accountability Office (GAO) counted 1,065 FDA drug inspections in fiscal 2023, 36% fewer than in fiscal 2019, while the investigator vacancy rate rose from 9% in November 2021 to 16% in June 2024.31 FDA's own quality report counts 972 drug quality assurance inspections in fiscal 2024 and 1,248 in fiscal 2025.30 A site's last classification may be several years old, so check its date as well as its code.

Building one site's record from five public and private sources

Post-marketing requirement or commitment: what the buyer inherits, and what a late study legally means

In shortA requirement is ordered by law; a commitment is agreed in writing. Late means different things under each authority, so a list has to record which one applies. Pending is an ordinary status. Delayed is the one to count, and pediatric work is where most of it sits.

FDA draws the line in a sentence. A post-marketing requirement (PMR) is a study or clinical trial an applicant must run after approval because a statute or regulation says so. A post-marketing commitment (PMC) is one the applicant agreed in writing to run, with no statute behind it.33 In a data room the two look alike, often in one table with the same kinds of dates. The reader has to separate them, from the authority cited for each.

The status words matter as much. Pending means the study has not started and its start date has not passed. Ongoing means it is on or ahead of its original schedule. Delayed means it is behind the original schedule, with or without good cause, under section 505(o)(3) of the Food, Drug, and Cosmetic Act, FDA's authority to order post-approval studies. Pediatric work differs in one way: when FDA grants more time, called a deferral extension, the new date counts as the original due date. Submitted means the final report is in. Fulfilled and released close it.33

At September 30, 2024, FDA counted 1,636 open PMRs on NDAs and BLAs: 70% on schedule and 489 off schedule, about 99% of those delayed. Of 386 open PMCs, 80% were on schedule.33

What late means under each authority

FDA's public list of late pediatric studies

Late pediatric work is the one obligation a seller cannot keep private for long. FDA's table of non-compliance letters held 207 entries on October 28, 2026, with older letters in an archive. It lists the product, the letter date, the sponsor's response and comments such as a deferral extension or release.5

FDA's quarterly searchable database adds the other half: all open PMRs and section 506B PMCs, and those closed in the last year, for drugs.38 A row that exists on FDA's list and not on the seller's is a finding by itself.

Agency clocks that keep running during a sale, and how a label change reaches the forecast

In shortA deal timetable does not stop an agency's. Some clocks are short: 30 days to answer a labeling request, 45 days to answer a non-compliance letter. Files that start those clocks can land in the data room days before the bid. A forecast that assumes a stable label is the assumption to test against them.

How a 505(o)(4) labeling notice works

Section 505(o)(4) of the Food, Drug, and Cosmetic Act lets FDA act when it learns of new safety or effectiveness information that should be in a drug's labeling. The steps are short, and a reviewer can trace each one in the data room.

The commercial effect has no published formula. A new warning with routine monitoring can slow uptake, and only the deal team's market model can say by how much. What the reviewer adds is the citation: the label section requested, the monitoring it would impose, and the slide that assumes neither.

Questions from European regulators, and other clocks in the room

In the centralized procedure at the European Medicines Agency (EMA), a question list stops the assessment clock until the applicant answers, and extensions are agreed only exceptionally, so the list carries its own response date.39 A line extension, such as a new strength or form of an approved medicine, can sit open beside that product, and a slide may still show the old launch quarter. A major objection is an issue that can prevent a positive opinion, so read those first.39

A reviewer records every list as one row: the product, the agency, the response date and the days left. Sorting that list by days left gives the deal team the calendar of things that can change before signing.

Why the last batch deserves its own read

Sellers keep uploading until the bid, for ordinary reasons as well as tactical ones. Answers to questions come in, and new correspondence arrives from agencies. No public figure says how many files arrive late or how many matter. So measure it on your own closed deals: list when each eventual finding's first file landed, by day of the data room, and see how much arrived in the last week. That count tells you how much the final batches matter on your deals.

Scoring a regulatory finding by likelihood and impact, and eight mistakes that hide one

In shortA common method scores likelihood and impact on a small scale and multiplies them. The number earns its place by forcing a sentence on each: how sure are we, and what does it move? The common errors come from reading in a hurry: the wrong letter, a blank search, a summary schedule, a file nobody opened.

One such scheme rates likelihood from 1 to 5 and impact from 1 to 5, and multiplies. Thresholds are a house choice. The grid below sets Critical at 20 and Major at 9. A likelihood of 4 and an impact of 4 scores 16 and goes to the weekly deal meeting. A letter that certainly moves the approval by a year scores 25 and goes to the deal team the same day. Whatever the thresholds, write them down before the first finding, or the team will adjust them when an awkward one arrives.

The five parts of a regulatory finding, from the seller's words to the deal protection

Eight errors in pharma regulatory diligence, and how each is caught

How findings turn into price, contingent value rights and indemnities, and what happened in Akorn

In shortA finding becomes a term in the deal: a lower price, a payment that depends on approval, an indemnity (a promise to cover a cost), a closing condition or a covenant (a promise to act). One Delaware case shows how much money sits on regulatory compliance. Published data shows that contingent payments mostly go unpaid, one reason a buyer facing a date risk may prefer them.

Akorn: when regulatory problems ended a merger

On October 1, 2018, the Delaware Court of Chancery held for the first time, after a trial, that a buyer had validly ended a merger because of a material adverse effect, a serious decline in the target's business that lets a buyer walk away. The Delaware Supreme Court affirmed on December 7, 2018.42,43

After signing, Fresenius received whistleblower letters about Akorn, a generic drug maker, and investigated. The court found "overwhelming evidence of widespread regulatory violations and pervasive compliance problems", including serious data integrity problems and inaccurate data submitted to FDA. It put the valuation hit from those problems and their remediation at about $900 million, a decline of 21% on the $4.3 billion equity value the merger agreement implied, and called that a rough estimate.40

Two points matter for a diligence team. First, data integrity has a plain meaning in FDA's guidance: data that is complete, consistent and accurate, and attributable, legible, contemporaneously recorded, original or a true copy, and accurate, often shortened to ALCOA.44

Second, the court rejected the argument that Fresenius had taken the risk on by knowing about it generally or by what it could have found. The regulatory representation in the contract, the seller's written statement of the facts, was there to allocate that risk.40 A representation and a diligence finding do different jobs, and a buyer needs both. Courts rarely decide these cases this way, and few deals reach that point. The usual outcome of a finding is a negotiated term.

Five protections a regulatory finding can become

Why contingent payments suit a date risk

Read that figure from both sides. A seller hears that a contingent payment is worth far less than its face value. A buyer hears that when approval is uncertain, tying price to approval returns the risk to the people who know the most about it.

Across all life sciences earnouts in the study, 9.5% of the $95.1 billion potential has been paid, $9 billion, and that total counts potential payments as well as those already due.41 These are private targets; public deals use listed or unlisted CVRs on terms of their own.

Counsel writes the milestone. The regulatory lead's job is to say which event, in which market, on which label would count, because a loosely worded approval milestone is where disputes begin.

Transferring a marketing authorization after close: US letters, the EU's 30-day opinion and the UK's 42 days

In shortEach registration moves separately. In the US, the two owners exchange letters and FDA records it. In the EU, EMA forms an opinion and the Commission decides. In the UK, the Medicines and Healthcare products Regulatory Agency (MHRA) processes a form per product. A share purchase may leave the holder unchanged; an asset purchase moves everything. The same inventory that fed the report drives this plan.

Change of ownership of an NDA: letters from both owners under 21 CFR 314.72

The archive line is why the archive index belongs in diligence. Label changes beyond a name follow the ordinary supplement rules.7

A biologics license follows a different route. The procedure at CBER, FDA's biologics center, treats ownership changes as administrative actions. On a buy-out it asks for two submissions, one from the applicant being bought and one from the buyer, ideally coordinated so they are processed at the same time, and revocation of the old license is coordinated with issue of the new one.46 That text is CBER's; biologics reviewed by CDER, FDA's drugs center, should confirm the route with their division.

European Union: an opinion within 30 days, then a Commission decision

EMA aims to finish by Day 10 when an application is complete. Regulation (EC) 2141/96 is the legal basis, and related changes such as a company name change run under the variations rules.23 A new medicines package has passed the Council and is waiting on Parliament, so a deal closing in 2027 should still plan on today's route and watch for publication.14,15

The UK's 42 days, local holders elsewhere, and approvals a licensee holds

The MHRA asks for a change of ownership form per product, with supporting documents, and says processing can take up to 42 days. A missed response to a validation query within 10 working days cancels the application with the full fee charged.47

Other markets have national procedures, and some want a local holder: Swissmedic says the future holder on a transfer must meet the Article 10 conditions of the Therapeutic Products Act, including a registered office or branch in Switzerland.48 So a multi-market plan starts by listing who will hold each approval the day after close. Where a licensee holds the approval, as can happen in Japan, nothing transfers; what moves is the license agreement, and its change-of-control clause needs reading.

What moves with the approval

Life sciences M&A in 2026: bigger deals, a patent cliff, and rules on what merging companies may share

In shortDeal value jumped in 2025 on fewer, larger deals, and large companies have record capacity to buy as patents expire. That means more regulatory reviews on tight timetables. It also means antitrust rules on what competitors may share apply to the review itself.

Nobody publishes how large a pharma data room is or how many hours the regulatory work takes. Treat any such figure you meet, including ones later in this guide, as an estimate until you have timed your own.

Clean teams: what the regulatory reviewer may see and pass on

Two companies that compete stay competitors until closing. The US agencies' position is that merging firms need some information for diligence and planning but must be careful about what they send and to whom. If the exchange would harm competition should the deal fail, the parties should use a clean team or other protections that keep the information from people running the business day to day.25

The FTC announced a record $5.6 million gun-jumping penalty in January 2025, in a case about a buyer taking control of a target before the waiting period ended.24

Regulatory reviewers often touch sensitive material: forecasts, supply terms, launch timing. Good practice is to agree four things with antitrust counsel.

If the buyer or seller is listed, deal information is also inside information, so securities counsel will want a named list of who has access.

What AI changes in due diligence, what regulators expect, and where it still fails

In shortSoftware can read every file and compare it with the public record, which removes the sampling problem. It can also invent a citation. No regulator has written rules for AI in deal diligence, and FDA's draft guidance leaves internal workflows out of its scope. The sound design has every statement citing a page and a named person deciding.

What the work gains, and what stays with people

How each regulator's AI text touches a diligence tool

Why a citation on every statement is the control that matters

A Stanford-led study tested legal research tools built on large language models, tools that retrieve real documents before answering. They still gave invented answers, which researchers call hallucinations, between 17% and 33% of the time.60 That study is from 2024 and covers legal research, so the rate does not transfer to diligence. The lesson does. A finding that cites a page can be checked in seconds, and an uncited sentence cannot. Test any tool with planted errors on a closed deal, and measure what it misses as well as what it finds.

How a pharma regulatory diligence team works a data room today: roles, handoffs and where four weeks go

In shortA lead, a head of regulatory strategy, a CMC and inspections reviewer and a deal lead pass the work between them, with counsel and the integration office at either end. By our estimate, more than half of a four-week window goes to indexing, inventorying and checking. Teams do it in house, with outside consultants, or with software, and each path leaves the same question: how much was read?

Diligence lead to integration office: who touches a red-flag report

From the first upload to a signed red-flag report, step by step

Where a four-week regulatory review spends its days

In-house team, outside consultants or diligence software

Whichever path you take, one line in the report changes how it should be read: how many of the regulatory files were read closely, and which products that leaves uncovered.

Project Larch: the overnight upload, the amber tile, the signed Critical finding and the transfer plan

In shortThis is the example from the top of the page, inside the product. Six AI agents, each with one job, read every regulatory file as it arrives and lay the result out as a map of the target's registrations. Lena Ortiz, the diligence lead, confirms each finding. Dana Okafor, head of regulatory strategy, signs the Critical one and the report. Sam Patel, who leads integration, approves the plan.

1

Forty-one unread files stripe three tiles

At 7:20 a.m. on October 7, Lena opens Orvanne's registration footprint. Each tile is one product in one market, sized by the seller's 2027 forecast and colored by regulatory risk. $960 million of the $1.90 billion forecast, 50%, sits on red or amber.

Reading stands at 6,173 of 6,214 regulatory files. The overnight batch holds 41 more: 26 on Tavirel US, 9 on Tavirel EU and 6 on Pelvanor US. Those three tiles carry stripes and a badge saying their color is provisional. A tile is never shown clean while files about it are unread.

2

Replay shows Day 8, when Pelvanor turned red

Replay runs the data room again from Day 1. Tiles start gray and take their color on the day a finding was raised. On Day 8, September 29, Pelvanor US turns red: post-marketing requirement 4102-1, a pediatric assessment, is overdue and FDA has sent a non-compliance letter. On Day 15, ORV-214 US turns red.

Lena uses this to show the deal lead how the picture formed, and how much of it depends on files that arrived late.

3

Reading batch 14 finds a liver warning

Lena clicks Read new upload. The Data Room Reader logs 312 files and classifies 41 as regulatory: 23 agency correspondence and 18 labeling. The Inventory Extractor pulls 64 facts with page citations and one new agency clock, a response due October 21. The Public Record Checker compares 186 agency records. The Risk Scorer raises one new finding.

R-06, Major: FDA asks for a liver-injury warning on Tavirel, and the seller's forecast assumes no label change. The run took 5.8 seconds on this sample.

4

Tavirel US turns amber, and 78% of the forecast is on red or amber

Tavirel US, NDA 900417, $520 million of 2027 forecast, turns amber. Its panel says why: R-06, the FDA clock with 14 days left, the closed untitled letter R-09, and commitment 3302-2 on track. All 1,148 of its files are read.

Forecast on red or amber rises from $960 million to $1,480 million. The seller's slide 22 says "Label stable". FDA's notice asks for a new Warning and Precaution, section 5.4, with liver tests at baseline and monthly for three months. Likelihood 4 times impact 4 is 16, Major.

5

Seller's words beside FDA's words, on the Critical finding

R-01 scores 25. Slide 14 says the refusal was "limited to observations at our third-party manufacturer" and plans a Class 1 filing. The letter also asks for a thorough QT study, the follow-up minutes reject modeling instead, and the contractor is classified OAI. The plan-against-record strip runs quarter by quarter to mid-2028.

The letter text on this screen is the product's sample wording. In real life the Class 2 basis is FDA's manual, MAPP 6020.4, as Part A explains.

Batch 14 moved $520 million of forecast from blue to amber

Lena confirms; Dana signs with the meaning of her signature

Lena confirms R-01 as Critical and it goes to Dana Okafor. Dana signs with the meaning "Approved, release to the deal team". Only then does the finding reach the deal team, and the audit trail records her name, the time and the meaning.

On October 9 the Report Writer's six sections are ready, each sentence cited, and Dana signs before the report reaches the committee. At signing, the Integration Planner turns the same inventory into a plan: 13 registrations move, Japan stays with the licensee, 1,842 eCTD sequences migrate, and the last transfer lands on Day 118. Sam Patel approves it.

Ten findings, ranked by likelihood and impact

The ten findings. R-01 thorough QT study · R-02 late pediatric study · R-03 contractor classified OAI · R-04 EU major objection · R-05 EU study enrollment · R-06 liver warning · R-07 archive gap · R-08 Japan held by the licensee · R-09 closed untitled letter · R-10 Canadian study on schedule.

Orvanne's data room, findings, inventory, transfer plan and dashboard, screen by screen

In shortSeven tabs carry the work: the footprint, the data room, findings, the inventory, integration, a dashboard and settings. Click any screen to see it whole.

Six diligence agents read and score; a named lead, signer and integration owner decide

In shortEach agent has one job and a line it never crosses. People confirm, sign and approve. Every step is on the audit trail, and nothing about the deal leaves the workspace.

Data Room Reader to Integration Planner: what each agent does

Who confirms a finding, who signs it, who approves the transfers

Signatures record the name, the time and the meaning. Agent steps and human decisions are kept apart on the audit trail, along with every change to the rules. These controls support your compliance with your own record-keeping duties, and whether a given record falls under 21 CFR Part 11 is your quality team's call.58 Botminds is SOC 2 Type II audited, and its information security is managed to ISO 27001.

The people in the Project Larch screens

From the seller's virtual data room to a cited footprint, a signed report and a transfer plan

In shortThe solution reads what a deal already produces: the seller's data room, public agency records, the forecast model and the archive index. It gives back a map, an inventory, cited findings, a signed report and a plan. The outcome numbers below are design targets, to be measured in your own pilot.

Connecting to the data room, your forecast and your RIM system

Reading coverage, time to a finding, days to the last transfer: design targets

What a thin data room review costs you: a small staff bill, then findings that surface after the bid

In shortThe workstream costs tens of thousands of dollars of staff time, on a deal worth many times that. A missed finding can cost much more than the review did. So the case for changing the work rests on what your team reads before the bid, and saved hours are the smaller part. Nearly every cost that matters is one only you can measure.

O*NET, the US occupational database, gives 2025 medians of $141,900 for a regulatory affairs manager and $80,730 for a specialist, using its nearest wage categories, managers all other and compliance officers.61,62 One of the first and three of the second come to $384,090 a year. A loading multiplier adds benefits and overhead to a wage. No source publishes one for this profession, so take 1.4 to 2.0. That gives $537,726 to $768,180 a year, or about $41,000 to $59,000 for four weeks. Adding files does not add seats, so a larger room means a smaller share read.

Auditing one closed deal to find your own numbers

Write-downs, lost leverage and transfer surprises

What reading every regulatory file returns: staff hours on each deal, and one finding priced before the bid

In shortPut in your own numbers. For most teams, hours saved will not cover the cost. One finding that changes a price or a term usually does. The calculator shows both, so you can see which case you are making. Each default marked illustrative is an assumption to replace.

Reading, checking and late uploads: where diligence automation pays

Deals a year, team size and the value of one finding

An acquirer doing one bolt-on a year with an in-house team should expect the hours not to pay and should decide on coverage and findings alone. An adviser running regulatory diligence for many clients may reach the staff-time case by itself, and a company with no deal in sight should wait until it has one.

How ready your diligence team is: deal flow, baseline, reviewers, security and sign-off

In shortPick the answer closest to your team today. Eight questions score 0 to 2; the last is for reflection. The meter adds up your score as you go, and each question says why it matters and what a strong answer sounds like.

What your score means: audit a closed deal, replay one, or set up for a live room

What to ask an AI due diligence vendor or regulatory consultant about coverage, citations and confidentiality

In shortAsk every vendor and every adviser the same questions, us included. The answers show what gets read, how a statement traces to a page, how the public record is used, and what happens to your deal's secrets.

We found no published independent test of any regulatory diligence tool or service, as of November 2026. A planted-error replay of your own closed deal is the fairest comparison, and the same test measures your current process.

Replay a closed deal with planted errors, then decide on coverage, catches and false alarms

In shortDiligence has no steady flow to run in parallel, so test on the past. Take a deal you already reviewed, plant known errors in a copy, run it blind and compare with your original report. None of these steps commits you to a vendor.

1. Audit one closed deal. Pull the access log, the report and integration's list of surprises. That is your baseline.
2. Clear it with counsel. Confirm your right to reuse the files for testing, under the old data room terms and your confidentiality rules.
3. Plant errors in a copy. Change a deficiency in a slide, hide a labeling notice in a late batch, remove three archive sequences, misdate a study.
4. Run it blind, releasing files in the original batches, with your thresholds and your signers.
5. Decide with three numbers: planted errors caught by type, false alarms on clean files, and reviewer hours to a signed report.

Catch rate, false alarms and citation accuracy on the replay

Pharma regulatory due diligence: answers to what deal teams search for

In shortEach answer stands on its own. Regulatory status is as of November 2026.