Due Diligence for Law Firms: Client Onboarding, M&A, and Litigation Support

By Beady Team Aug 25, 2026

A law firm does due diligence in at least three distinct places. Before deciding whether to act for a prospective client, it screens them. When advising on a transaction, it screens the parties to it. And in a dispute it is litigating, it builds a picture of the entities involved. These look like three different jobs, they sit with different teams, and they are usually treated as unrelated.

Underneath, they share a single task, which is finding and verifying information about external entities and people, thoroughly enough to rely on and defensibly enough to stand up later. And there is a common problem beneath that. Most firms still handle it through manual research, a paralegal working through search results or an associate pulling filings by hand, and manual research has structural limits that surface in all three workflows at once.

What follows walks through the three workflows and what screening involves in each, then turns to where manual research falls short and what closes the gap. In short, the gap is a matter of coverage, speed, defensibility, and, for a client relationship that persists, continuity.

Client onboarding and intake

Deciding who to represent is the first workflow, and the trouble with it is that an intake check starts going out of date the moment it is signed off, while the client it describes carries on changing for years.

Two things make intake screening matter. The regulatory one is that acting for a client on certain kinds of work, in many jurisdictions, brings client due-diligence duties, identity, beneficial ownership, source of funds, and sanctions and PEP screening among them, with the exact weight varying a great deal by jurisdiction, so the firm has to know which rules apply to it before anything else. The reputational one runs past the rulebook, because who a firm represents reflects on it regardless of whether a rule was broken, and a client who is later sanctioned or the subject of serious adverse media is a liability whatever the regulatory position.

Both come back to the same weakness in a single check. A client who is clean when taken on can be sanctioned afterward, acquire a sanctioned owner, or surface in adverse media partway through a representation that runs for years, and none of that reaches a file closed at intake. Watching the relationship rather than freezing it at the start is the answer, and the full case for continuous monitoring is here. On scope: screening the client and those behind it for sanctions, adverse media, and ownership is not the firm’s conflicts-checking system, which is a separate, established part of practice. This layer covers who the client is in the world, not whether the firm may act.

M&A and deal work

The second workflow is screening in service of a transaction, and it moves on the transaction’s clock rather than the firm’s.

The core of it is screening the parties to a deal, the target, the counterparty, and their beneficial owners, for the things that can affect or derail a transaction: sanctions exposure, adverse media, opaque or concerning ownership structures, and other red flags. Often the firm is conducting or reviewing this diligence on behalf of a client, which means the speed and thoroughness of screening feed directly into deal timelines. Slow screening slows the deal, and incomplete screening is a risk the client inherits.

Deal work also tends to overlook monitoring. A transaction can run for weeks or months, and a party’s risk picture can change within that window. A designation that lands mid-deal, or an ownership change during negotiations, matters, and monitoring the parties through the life of the deal rather than only at kickoff is what catches it. Above all, in deal work, a finding has to be defensible. A red flag raised in diligence, or the absence of one, must trace to a verifiable source, because the client will rely on it and it may be tested later. An unverifiable assertion is not usable in a transaction, which is why source-traceability is not a nicety here but a requirement.

Litigation support and case-building

The third workflow uses screening as investigation, in service of a dispute rather than a relationship or a deal.

Some of it is asset tracing and entity mapping: working out what an opposing party owns and how a web of entities connects, which matters in disputes, enforcement, and recovery, where the practical question is often not whether a claim succeeds but whether there is anything to recover against. Some of it is surfacing adverse information, sanctions, adverse media, and background, on opposing parties, counterparties, or others connected to a case. And running through all of it is the need for a defensible record. Information used to build or support a case has to be traced back to primary sources to be credible and usable, because it will be scrutinised by the other side and by the court.

The scope boundary matters here as much as anywhere. Screening surfaces and traces entities, sanctions, and adverse-media signals, and maps how entities connect. It is not a litigation case-management system, and it is not a legal-research database of case law and statute, which established tools cover. The screening layer answers questions about entities and people; the legal-research layer answers questions about law, and the two complement each other rather than overlap.

Where manual research falls short

Pull the three workflows together, and one limitation sits under all of them. Manual research, the paralegal working through search results and the associate pulling filings by hand, is not wrong, but it is structurally limited in four ways that apply equally to intake, deals, and cases:

  • Coverage. A person can only work through so many sources, while real screening spans sanctions and watchlists, corporate registries, adverse media, and ownership data across many jurisdictions. What a manual search doesn’t reach, it doesn’t find.
  • Speed. Manual research is slow, and the delay costs something in every workflow: slower client decisions at intake, dragging deal timelines, and held-up cases.
  • Defensibility. Manual notes are inconsistent, whereas a record that links every finding to a primary source is what stands up to a regulator, a court, or a client.
  • Continuity. This is the one that matters most and the one manual research cannot solve. It happens once, so it cannot watch a client relationship that persists for years. No firm re-runs a full manual search on every active client every week.

That last limit is not a matter of doing manual research better. For the intake relationship, where the risk keeps changing long after onboarding, it is something manual research cannot do at all.

What screening tooling adds across all three

Set against those four limits, what dedicated screening tooling contributes maps directly onto the gaps, and it serves all three workflows rather than any one of them.

  • Broad source coverage in a single pass, across sanctions, watchlists, registries, adverse media, and ownership, which serves intake, deal work, and litigation alike.
  • Source-traceability on every finding, so a result can be verified and defended, which matters most in deal work and litigation where findings are relied on and tested.
  • Continuous monitoring for the persistent client relationship, which is the thing manual research cannot replicate, catching a change after intake rather than never.
  • Noise filtering, so what reaches a lawyer is the material that warrants attention rather than a pile of weak matches to sort by hand.

This external-entity-screening layer is what Beady AI provides: continuous, source-traceable monitoring of the entities and individuals a firm is exposed to, across sanctions, adverse media, ownership, and impersonation. It sits alongside the firm’s own systems rather than replacing them, and the boundary is worth restating plainly. Beady is not a conflicts-checking system, not case management, and not a legal-research database. It is the screening layer that feeds intake, deal, and litigation work, and how that continuous screening is delivered for sanctions specifically is covered on the sanctions monitoring page.

Frequently Asked Questions

What is due diligence for a law firm?
It is the work of finding and verifying information about external entities and people across the firm’s activities, principally in three workflows: screening a prospective client at intake, screening the parties to a transaction the firm is advising on, and building a picture of the entities in a dispute it is litigating. All three rest on the same underlying task, and all three have traditionally been done through manual research.
In many jurisdictions, yes. Taking on a client for certain kinds of legal work brings client due-diligence duties with it, which typically means verifying identity, establishing who ultimately owns a corporate client, understanding the source of funds, and screening against sanctions and politically exposed person lists. How far those duties reach differs a great deal from one jurisdiction to the next, and it changes, so a firm should check the rules that actually bind it against primary sources rather than assume one standard holds everywhere.
Because it runs into four limits at once. It reaches only a fraction of the sources real screening needs. It is slow, which holds up intake, deals, and cases alike. Its notes are inconsistent and hard to defend to a regulator or a court. And, most of all, it happens once, so it cannot keep watch over a client relationship that lasts for years. That last one is not a matter of doing manual research better. It is simply beyond what it can do.
Mainly for asset tracing and entity mapping, working out what an opposing party owns and how entities connect, and for surfacing adverse information such as sanctions and adverse media on parties to a case. The essential requirement is that findings trace back to primary sources, because they will be scrutinized by the other side and the court. Screening surfaces and traces these signals; it is not a case-management system or a legal-research database.
No, and the difference is worth understanding. Intake is where it does the real work, because a client can stay on the books for years and be sanctioned or hit adverse media long after the file was opened, which a check at onboarding will never see. A live deal gets some benefit over the weeks or months it runs, catching a change before closing. A case gets the least, since building it is a one-time investigation, not a standing watch.
No. Beady is the external-entity-screening layer: continuous, source-traceable monitoring of the entities and individuals a firm is exposed to, for sanctions, adverse media, ownership, and impersonation. It is not a conflicts-checking system, not case management, and not a legal-research database of case law. It feeds the intake, deal, and litigation workflows with entity information, and works alongside the firm’s existing legal-practice systems rather than replacing them.

The short version

A law firm runs due diligence across three different workflows, screening clients at intake, screening parties in deal work, and building cases in litigation, and beneath the differences they share one task: finding and verifying information about external entities and people, reliably and defensibly. That task has traditionally been handled by manual research, which falls short in four specific ways, on coverage, on speed, on defensibility, and, for the client relationship that persists, on continuity.

Screening tooling addresses all four, and it serves all three workflows rather than any single one. The limit it removes that manual research never could is continuity: the ability to keep watching a client relationship that lasts for years, rather than checking once at intake and hoping nothing changes. For deal work and litigation, the decisive addition is source traceability: findings you can verify and defend.

For that external-entity-screening layer, continuous and source-traceable across sanctions, adverse media, ownership, and impersonation, Beady AI is built for the job, scoped to entity screening rather than the conflicts, case-management, or legal-research systems a firm runs alongside it. A session will show what it surfaces against a real set of clients or parties, and how short the gap can be between a change and knowing about it.

Beady Team

The team behind Beady, building risk intelligence and compliance software. We write about sanctions, due diligence, KYC, and screening, drawing on what we see across 100,000+ public sources every day. Practical insight for compliance, risk, and investment teams.

Risk Intelligence, Straight to Your Inbox

Guides, regulatory updates, and lessons from real screening cases. Written for compliance, risk, and investment teams who need to know what's coming next.

    Follow Beady Where You Already Work

    Risk alerts, regulatory changes, and screening insight, posted where your team already spends its day. Join us on the most popular social networks.

    Ready to get started?

    Live within 24 hours, not weeks.
    Trusted by compliance and risk teams at