Due Diligence Checklist for Stock Research 2026
Due Diligence Checklist for Stock Research 2026
Due diligence in stock investing is a systematic review of a company's business model, financial statements, management track record, risk exposures, and valuation before committing capital. A complete process covers five stages: business understanding, financial statement review, management and governance, risk assessment, and valuation. Each stage is a checkpoint — not a formality. Analysts who skip stages don't save time. They just find out later what they missed.
By Minalyst · March 18, 2026 · Updated: March 18, 2026
Table of Contents
- Why a Due Diligence Checklist Matters
- Stage 1: Business Understanding
- Stage 2: Financial Statement Review
- Stage 3: Management and Governance
- Stage 4: Risk Assessment
- Stage 5: Valuation
- Pro Tips for Running Due Diligence Faster
- Frequently Asked Questions
- The Bottom Line
Why a Due Diligence Checklist Matters
A due diligence checklist converts a messy, open-ended research task into a repeatable process with defined endpoints. Without one, analysts either over-index on what's easy to find or stop when their initial thesis feels confirmed.
Stock research has no natural stopping point. A 10-K runs 150–300 pages. An earnings call transcript adds 30 more. MD&A, footnotes, proxy statements, prior-year comparisons — the material is essentially unlimited. A checklist doesn't eliminate judgment. It makes sure judgment gets applied to the right questions in the right order, not just the ones that happened to catch your eye first.
Small fund analysts feel this most directly. No compliance team writes your research framework. No research director reviews your process. You run 10–15 positions across sectors with no institutional support structure — and the depth of your due diligence is exactly as good as the discipline you bring to it.
This 5-stage checklist covers what professional equity research actually examines. The stages map to how analysts think about a company: from the outside in, from qualitative to quantitative, from understanding to conviction. Each item is a checkpoint, not a box to tick.
Stage 1: Business Understanding
Every investment thesis starts with understanding what the company actually does — not the IR narrative version, but the economic reality: how money flows in, what drives pricing, and where the business is exposed.
Skipping or rushing Stage 1 is the most common error in stock research. Analysts who don't understand the business model well enough to explain it to a generalist analyst will build financial models on assumptions they can't defend. The numbers only make sense once the business does.
Business Model Checklist
- Revenue model clarity. Describe the revenue model in one paragraph — without using the company's own marketing language. What does the customer pay for? Is revenue recurring (subscription, annuity) or transactional (project-based, one-time)? What drives pricing — volume, price per unit, mix?
- Customer concentration. What do the top 10 customers represent as a percentage of total revenue? A single customer at 20%+ of revenue is a risk that requires explicit modeling. If the 10-K discloses that "no single customer exceeded 10% of revenue," note that — it's the best case scenario.
- Geographic and segment exposure. Revenue by geography and business segment. Which segments are growing? Which are declining? What's the margin differential across segments? This shapes how you build a forecast.
- Competitive moat assessment. What protects this business from competitors? The four credible moat sources in equity research are pricing power evidence (gross margins holding or expanding over time), switching costs (customer behavior at renewal or contract end), network effects (value increases with users), and cost advantages (scale or structural cost edge). Not every company has all four. Identify which ones apply and test each with data.
- Regulatory environment. What industry-specific rules govern this business? Healthcare, financial services, energy, and defense all carry regulatory risk that can materially alter revenue or require capital deployment with no financial return.
- IR narrative vs. reality. Read the investor presentation last — not first. Form your own view of the business from the 10-K and earnings transcripts, then compare it against what management says. Gaps between the two are worth noting.
The primary sources for Stage 1 are the 10-K Item 1 (Business), the MD&A narrative, and the most recent four earnings call transcripts. Understanding fundamental analysis helps frame which business characteristics to prioritize at this stage.
Stage 2: Financial Statement Review
Five years of financial statement data tells a story that no single-year snapshot can. Revenue growth rates, margin trends, and the relationship between earnings and cash flow reveal how the business actually performs — independent of how management describes it.
The three statements work together. Income statement margins tell you about pricing power and cost structure. The balance sheet shows capital allocation and leverage. The cash flow statement reveals the gap between reported earnings and real cash generation — which is often where the most useful information lives.
Income Statement Checklist
- 5-year revenue growth trend. Is growth accelerating, stable, or decelerating? What's driving the trend — organic growth, acquisitions, pricing, volume? A company showing 15% headline growth driven entirely by acquisitions has a different risk profile than one with 15% organic growth.
- Gross margin trend. Gross margin is the cleanest indicator of pricing power. Expanding gross margins over five years, even in inflationary cost environments, signal real competitive advantage. Compressing gross margins signal commoditization or cost pressure that management can't offset.
- Operating margin and EBITDA margin. Are operating expenses scaling with revenue or growing faster? SG&A as a percentage of revenue rising while gross margins hold flat means cost structure problems, not competitive ones.
- Earnings quality: non-recurring items. How many "non-recurring" charges has this company taken in the last five years? Restructuring charges that appear every year are not non-recurring. Add them back to reported earnings and compare the adjusted figure to management's non-GAAP number — note whether management's adjustments are reasonable or aggressive.
Balance Sheet Checklist
- Leverage. Net debt-to-EBITDA. Under 2x is generally manageable. Above 4x in a cyclical business is a quality risk trigger under most institutional frameworks. Pull 5-year trend, not just current year.
- Liquidity. Current ratio and quick ratio. Does the company have enough short-term assets to cover short-term obligations? When is the nearest debt maturity?
- Working capital. Days sales outstanding (DSO), days inventory outstanding (DIO), and days payable outstanding (DPO). Rising DSO can signal receivables quality issues or channel stuffing. Rising DIO signals demand weakness or supply chain problems.
For a detailed walkthrough of balance sheet analysis, see Understanding Balance Sheets.
Cash Flow Statement Checklist
- FCF vs. net income divergence. Free cash flow should track net income over time. A persistently wide and widening gap — where net income exceeds FCF consistently — signals earnings quality problems. Calculate FCF conversion rate: FCF divided by net income. Below 70% sustained over three-plus years is a flag.
- Capex intensity. Maintenance capex vs. growth capex matters for understanding true cash generation. Companies that lump both together in reported numbers require an analyst question on capex split — ask on the call or check the MD&A.
- Accruals ratio. Net operating accruals (change in net operating assets divided by average total assets) measures the degree to which earnings are cash-backed. High accruals — above 5–8% — correlate with future earnings disappointments in academic literature.
Full detail on reading and interpreting the cash flow statement is at Cash Flow Statement: What It Tells You About a Company.
Ratio Analysis Checklist
- Profitability ratios. Return on equity (ROE), return on invested capital (ROIC), and return on assets (ROA). Compare against peers and against the company's own 5-year history. ROIC consistently above the weighted average cost of capital (WACC) is the primary signal of a value-creating business.
- Leverage ratios. Net debt/EBITDA, interest coverage (EBIT/interest expense), and total debt/equity.
- Valuation ratios vs. peers. P/E, EV/EBITDA, EV/Revenue, and FCF yield vs. both the sector median and the company's own 5-year historical range.
For the 12 ratios that matter most in equity research, see Financial Ratio Analysis.
Stage 3: Management and Governance
Management quality separates companies with identical financial metrics into different investment propositions. Two businesses at similar EV/EBITDA multiples — one run by a disciplined capital allocator, one by an empire-builder — are not comparable investments.
The evidence for management quality isn't what they say on earnings calls. It's what they did with free cash flow when they had it.
Management Checklist
- Capital allocation track record. Pull the last 5 years of acquisitions, buybacks, and dividends. Did the acquisitions produce returns? Were buybacks done at attractive prices or at cycle peaks? Did management say one thing and do another? The proxy statement and historical 10-K MD&A sections tell this story with specific numbers.
- Insider ownership and recent transactions. Meaningful insider ownership — executives and directors owning more than 1% of shares, with market value representing a significant portion of their net worth — aligns incentives with shareholders. Recent insider buying in the open market is a stronger signal than original founder ownership. Run the Form 4 history through the SEC EDGAR database.
- Executive compensation structure. What performance metrics tie to equity vesting? Revenue growth, earnings per share, and total shareholder return metrics are common — but the details matter. Does the performance-based equity vest on metrics that management can influence through accounting choices? A compensation committee that tied EPS vesting to non-GAAP EPS with wide adjustment latitude is a governance flag.
- Related-party transactions. Read the proxy statement. Related-party transactions — purchases from entities controlled by executives, leases from board members, consulting fees to family — are not automatically red flags, but each requires a judgment call on whether the terms are arm's length and the disclosure is adequate.
- Board independence. What percentage of the board is independent? Is the audit committee composed entirely of independent directors with relevant financial expertise? The audit committee's quality is a direct signal of oversight rigor.
The best source for Stage 3 data is the proxy statement (DEF 14A) — a document most analysts skim or skip entirely. It contains executive compensation details, related-party transactions, and board composition all in one place. SEC EDGAR has every filing; how to analyze a 10-K filing covers where to find proxy data and what to look for.
Stages 1 through 3 typically require 4–8 hours of reading and data extraction before an analyst is positioned to ask the right questions — let alone form a view.
Minalyst's four workflow templates — Initiation Analysis, Segment Unit Economics (SOTP), Quality of Earnings, and Pre-Mortem — map directly to each stage of this checklist. The Initiation Analysis covers Stages 1 and 2. Quality of Earnings goes deeper on the cash flow and accruals analysis. The Pre-Mortem runs Stage 4. The analyst's judgment applies at every checkpoint; the mechanical extraction doesn't have to be the bottleneck.
Minalyst uses licensed financial data — not web scraping — to pull five years of financials, flag footnote items, and surface the signals that manual reads miss. 17 reports in 5.5 hours is what this looks like in practice.
Stage 4: Risk Assessment
Risk assessment is not a checklist of generic macro factors. It's a structured review of the specific, quantifiable risks this company carries — including the ones that don't appear on the reported balance sheet.
The risks that don't appear on the balance sheet are where analysts get hurt. Standard leverage analysis — debt-to-equity, interest coverage, net debt calculations — misses off-balance-sheet commitments entirely.
Risk Checklist
- Off-balance-sheet items. Purchase obligations, contingent liabilities from litigation, variable interest entities, and underfunded pension gaps — all disclosed in 10-K footnotes, rarely captured in headline metrics. Calculate total off-balance-sheet exposure as a percentage of reported liabilities. A company with $1B in reported liabilities and $800M in off-balance-sheet commitments carries 80% more effective financial obligation than the balance sheet shows. See the full methodology in How to Identify Off-Balance-Sheet Risks.
- Customer concentration risk. Already identified in Stage 1 — model it explicitly here. If the top customer represents 20% of revenue, what happens to earnings if that relationship deteriorates by 50%? Build the scenario, not just the flag.
- Technology and disruption risk. Is this business facing a technology shift that changes unit economics — not in 10 years, but in 3? The test is whether competitors with different cost structures or delivery models have demonstrated any ability to take share.
- Supply chain concentration. Single-source suppliers in critical components create operational and financial fragility. Read the risk factors section of the 10-K specifically for supplier concentration language.
- Litigation exposure from contingencies note. Read the contingencies footnote in full. The GAAP recognition threshold is "probable and reasonably estimable." Everything below that threshold — "reasonably possible" losses with disclosed maximum exposure — sits in the notes. Size the gap between the maximum disclosed exposure and the recognized liability on the balance sheet. In large litigation matters, that gap can exceed $500 million with zero balance sheet impact until crystallization.
- Key-person risk. If the founder or CEO departed tomorrow, what happens to the thesis? Businesses that depend on one person for customer relationships, product vision, or institutional credibility carry an unmodeled risk that standard financial analysis misses.
Stage 5: Valuation
Valuation is the final stage — not the first. An analyst who starts with a price target and works backward has the order wrong. Valuation makes sense only after understanding the business, its financial quality, management's track record, and the risk profile.
Three valuation methods, used together, produce an intrinsic value range. A single-method valuation is a single assumption masquerading as precision.
Valuation Checklist
- DCF valuation. Discounted cash flow requires explicit assumptions about revenue growth, operating margins, and the terminal value. The terminal value typically represents 60–80% of total DCF value — which means the assumptions driving it matter more than the near-term model. Run a sensitivity table on the terminal growth rate and WACC. The DCF doesn't produce a price target. It produces a range — and the range should be wide enough to be honest about uncertainty.
- Comparable companies (EV/EBITDA and P/E vs. sector median). Select peers with genuine business model similarity — not just SIC code similarity. Compare the current multiple to both the peer median and the company's own 5-year historical range. A stock trading at a 40% discount to its own 5-year average EV/EBITDA, with no deterioration in business quality, is a different proposition than one at a 40% premium.
- Precedent transactions. What have strategic buyers or private equity paid for comparable businesses in the last 3–5 years? Transaction multiples typically carry a 20–30% premium to public market multiples — useful for estimating a ceiling on private market value.
- FCF yield relative to alternatives. A business generating a 7% FCF yield while the 10-year Treasury yields 4.5% has a 2.5-point spread to justify the equity risk premium and growth expectations. Price FCF yield relative to risk-free rate and sector peers, not in isolation.
- Margin of safety. The entry price should trade at a discount to the intrinsic value range — not the midpoint, the low end of the range. A 20–30% discount to conservative intrinsic value is the margin of safety that makes an investment thesis durable against model error and unexpected deterioration.
- Bear case valuation. What is the business worth if the bear case materializes? If the largest risk identified in Stage 4 plays out at full severity, does the downside fit within the portfolio's risk tolerance? Asymmetric situations — where the downside is bounded and the upside is open — earn capital. Symmetric situations need a larger margin of safety.
Pro Tips for Running Due Diligence Faster
Systematic due diligence doesn't have to mean slow due diligence. These practices compress the process without compressing the analysis.
-
Start with the 10-K Item 1 and Item 7 (MD&A), not the financial statements. Reading the business description and management's own narrative first gives context that makes the numbers interpretable — rather than spending two hours on financials you don't yet have a frame for.
-
Use the contractual obligations table in MD&A as your off-balance-sheet starting point. Most 10-K filings include a consolidated obligations matrix — debt maturities, lease payments, and purchase commitments by year. That table is one of the most information-dense pages in any 10-K. It takes 5 minutes to read and surfaces the inputs for Stage 4 risk analysis immediately.
-
Read the proxy statement before forming a management view. Proxy statements are required annual filings. They contain executive compensation structures, insider ownership tables, related-party transactions, and board composition — all in one document, cross-referenced to dollar amounts. Most analysts don't read them.
-
Build a 5-year table before forming any view. Revenue, gross margin, EBITDA margin, FCF, net debt, ROIC — 5 years side by side. Trends visible in a table are invisible in individual year filings. This takes 20 minutes and shapes every subsequent stage of the analysis.
-
Run the bear case before the bull case. The bull case in most investment situations is the obvious thesis. The bear case is where the work is. Stress-testing the thesis against Stage 4 risks before building valuation assumptions forces intellectual honesty about the entry price required.
-
Sequence the four Minalyst workflows to match this checklist. Initiation Analysis for Stages 1–2. Quality of Earnings for the accruals and FCF analysis in Stage 2. Pre-Mortem for Stage 4 risk assessment. SOTP for any multi-segment business in Stage 1. Running all four on the same company covers the institutional due diligence process end-to-end.
Frequently Asked Questions
What is due diligence in stock investing?
Due diligence in stock investing is a structured review of a company before committing capital — covering the business model, financial statements, management quality, risk exposures, and valuation. Professional equity analysts run due diligence to confirm their initial thesis, identify risks not visible in headline financial metrics, and determine whether the current market price offers an adequate margin of safety relative to intrinsic value. The process typically covers 5 stages: business understanding, financial statement review, management and governance, risk assessment, and valuation.
How long should stock due diligence take?
Thorough stock due diligence on a mid-cap company with 5 years of filing history typically takes 8–20 hours for an experienced analyst — covering all five stages. Screening-level due diligence (Stages 1–2 only) takes 3–5 hours. The time varies significantly based on business complexity, filing length, number of segments, and how many red flags require follow-up. Using tools that automate data extraction — pulling five years of financials, flagging footnote items, and running ratio analysis — can compress the mechanical portion from 5–8 hours to under 1 hour, leaving analyst time for judgment and interpretation.
What documents do you need for stock due diligence?
The core documents for equity due diligence are: the annual 10-K filing (business description, full financials, footnotes, and MD&A), the quarterly 10-Q filings for the most recent three quarters, the proxy statement (DEF 14A) for management compensation and governance, the most recent 4–8 earnings call transcripts, and any 8-K filings disclosing material events. For M&A targets, S-4 registration statements contain additional disclosure. All filings are available through SEC EDGAR at no cost.
What financial metrics matter most in due diligence?
The metrics that matter most are: free cash flow conversion rate (FCF divided by net income — below 70% sustained over 3+ years is a flag), return on invested capital (ROIC vs. WACC — consistent ROIC above WACC signals a value-creating business), net debt-to-EBITDA trend over 5 years, gross margin trend (5-year direction, not single-year level), and the accruals ratio (high accruals predict future earnings misses in academic research). These five metrics, taken together, give a more accurate picture of business quality than any single valuation multiple.
What is the most commonly missed step in stock research?
Off-balance-sheet risk assessment is the most commonly missed step. Standard balance sheet analysis — net debt, debt-to-equity, interest coverage — misses purchase obligations, contingent liabilities, underfunded pension gaps, and VIE exposure entirely. These items sit in the footnotes of 10-K filings, legally disclosed and routinely overlooked. An analyst at a Minalyst client firm covered a company for six months before Minalyst flagged purchase obligations buried in footnote 14 of the 10-K — obligations that the analyst's own read and a surface-level AI summary had both missed. The risk was in the filing the entire time.
How do professional analysts structure their due diligence?
Professional buy-side analysts typically run due diligence in the same 5-stage sequence: business understanding first, then financial analysis, then management quality assessment, then explicit risk review, then valuation. The sequencing matters — analysts who start with valuation reverse-engineer their assumptions from a target price rather than deriving the target from genuine business understanding. Institutional research departments often formalize this into written frameworks: initiation reports, quality of earnings reviews, and pre-mortem risk analyses run on every new position. The sequence prevents confirmation bias from contaminating the financial or risk analysis.
What is the difference between buy-side and sell-side due diligence?
Buy-side due diligence produces investment decisions — the analyst owns the outcome. Sell-side due diligence produces research for distribution — the analyst's recommendation influences clients but doesn't manage capital. Buy-side analysts run deeper, more proprietary analysis: they model specific scenarios, stress-test assumptions, and integrate company-specific due diligence into a portfolio context. Sell-side research provides useful data coverage and management access, but the format (price targets, buy/hold/sell ratings, public distribution) creates structural limitations on how contrarian or specific the analysis can be. Buy-side analysts typically treat sell-side research as a starting point, not a conclusion.
How does Minalyst fit into the due diligence process?
Minalyst is an AI analyst for capital markets that uses licensed financial data to execute the mechanical stages of the due diligence process — pulling five years of financials, analyzing SEC filings and earnings transcripts, and running ratio analysis — in the time it typically takes to read a single 10-K section. Minalyst's four workflow templates map directly to this checklist: Initiation Analysis covers Stages 1–2, Quality of Earnings goes deep on the cash flow and accruals analysis in Stage 2, the Pre-Mortem covers Stage 4 risk assessment, and SOTP handles multi-segment business analysis. The analyst's judgment, interpretation, and conviction-building happen at each checkpoint — Minalyst handles the extraction and surface analysis so analysts spend time on what matters.
The Bottom Line
A due diligence checklist works because it forces completion, not just coverage. An analyst who finishes all five stages knows what they know, what they don't, and where the risk lives — before capital is committed.
The five stages build on each other. Business understanding shapes what you look for in the financials. Financial analysis shapes what questions you ask of management. Management review shapes how you assess the risk factors. Risk assessment shapes what valuation method and margin of safety the situation demands.
No checklist eliminates the judgment required at each stage. That's not what a checklist is for. It's to ensure the judgment gets applied to the right questions — and that the questions that get answered are the ones that actually determine whether the thesis holds.
Stage 4 (off-balance-sheet risk assessment) is the one most analysts skip. Run it on every position. The risk you miss in the footnotes is the risk that finds you.
Run a complete off-balance-sheet risk review → as the first step of Stage 4 on every new position.
Or start the full due diligence process with a tool built to handle the mechanical extraction: Try Minalyst →