Diligence practiceOct 2026

What the Four P's of Due Diligence Cover and What They Miss

People, philosophy, process and performance: a shorthand for judging whoever runs money, not a scope for buying a company. It asks who holds knowledge, whether strategy matches spending, which routines are written down, and whether results repeat. It names no workstream for technology, legal exposure, tax, benefits or integration, so a buyer adds those.

Four translucent glass panels of differing thickness standing in a row, their overlapping shadows revealing gaps the panels themselves never cover

Four words, borrowed. People, philosophy, process, performance.

Ask someone who allocates money to funds and the Four P's are how you choose who runs a mandate. Ask a deal lead and the same four words arrive as a scoping shorthand for buying a business with employees, systems and customers. The words travel. What they ask for does not travel with them.

Where the Four P's Came From

The framing belongs to investment manager selection, and the practitioner literature is explicit about it: the tangible set is people, process and philosophy, portfolios and performance, with a second, intangible set behind it. That origin fixes what the framing was built to decide, which is who should run a portfolio of listed securities. The evidence on hand is a track record, a stated approach, a team and a list of holdings. Nobody is buying the firm. Nobody inherits its systems, its contracts or its people.

A second answer crowds the same search, and it is worth clearing out of the way. Under the federal tax rules, a paid preparer must meet four due diligence requirements when a return claims certain credits or head of household filing status, with a penalty attached to each failure. That is a compliance obligation with a form behind it. It describes nothing about a transaction. If you reached the Four P's from that direction, you are in the wrong literature.

So take the Four P's for what it can be to a buyer: a memory device for the first scoping conversation, and a weak substitute for due diligence scope. Here is what each P can be made to ask of an operating company, the evidence that answers it, and where the framing runs out.

People: Who Holds the Knowledge and What Happens If They Leave

In manager selection, People means the investment team and its turnover. In an operating business it means something harder to see: where undocumented knowledge sits, and how much of the company's output depends on it.

Ask for artifacts, not impressions.

  • The chart against the work. Who actually reviews, approves and unblocks, by name, next to who the chart says does.
  • Tenure and departures cut by team and by manager, with the definition of a regretted departure agreed in writing before anyone counts.
  • Retention terms for the people who matter, including the owners, the CEO and anyone whose relationships carry revenue.
  • Single points of failure. Which systems, customers or approvals route through one person. That is key person risk, and it is the part of People that a management meeting is least able to settle.

Philosophy: Whether the Stated Strategy Matches Where the Money Goes

Philosophy in a fund is a stated approach you can test against the holdings. In a company it is the same test run against spending: headcount by function over three years, the product roadmap against what actually shipped, which customers received discounts and who approved them, which contracts were renegotiated and on whose terms.

A stated strategy that the spending contradicts is itself a finding, and it is usually a finding about who decides. Philosophy is where you test the company's account of itself. Your own thesis is the other half: write it down in a form that can fail, before the first data request, and let it decide which of the four words gets the week.

Process: Which Routines Are Written Down and Which Live in Someone's Head

The Process question is not whether a procedure exists. It is whether the written procedure is the one that runs.

Regulators have examined exactly that gap. When examiners looked at how advisers chose alternative investments for clients, they found firms whose practices differed from the process their own disclosures described. A written procedure is a claim about behavior, and behavior leaves traces elsewhere: ticket history, approval logs, change records, the meeting that was supposed to happen weekly.

For an operating business, pick the handful of routines that carry money or risk, and ask for evidence that each one ran:

  • Month end close. The checklist, the last three closes, the adjustments made after the books were open.
  • Pricing and discount approval. Who can sign, and what the exceptions show.
  • Release and incident handling. How long a change takes, how often it fails, who can deploy without help.
  • Hiring and onboarding. Whether the loop exists, and whether anyone followed it in the last two quarters.

Scoping this properly is operational due diligence, and it is where the shorthand starts needing a real workstream behind it.

Performance: Telling Durable Results From a Good Year

Performance looks the most like evidence and is most often somebody else's arithmetic, already summarized. The work is to find what produced the number: a quality of earnings analysis that shows each adjustment and lets you contest it line by line, cohort retention rather than blended growth, pipeline by source and by stage, and the customer concentration sitting behind the trend.

In fund selection, the track record is long, standardized and measured against a benchmark. In a private company it is short, unaudited, and shaped by decisions the seller made about what to recognize and when. Treat Performance as a question about the ledger, not as a score.

Guidance written for directors is useful here for a reason that has nothing to do with boards: it tells them to use sessions without management present to push on the assumptions inside the valuation, and on overzealous pricing. The same instinct belongs in the deal team. An assumption nobody argued with is not an assumption that held.

The Workstreams the Four P's Leave Out

This is the serious objection. The framing has no slot for most of what a buyer of an operating business has to examine, because none of it existed in the question it was built for. Practitioner guidance written for boards overseeing transactions names legal exposure, tax, employee benefits and human resources, reputational background work, and integration and synergy work as distinct workstreams, and adds insurance, environmental and engineering reviews as common besides.

Four more gaps are worth naming directly:

  • Technology. Architecture, dependencies, security controls and technical debt sit in nobody's P. Organizations align their security work to published frameworks, so ask which one and ask for the mapping, rather than for an opinion. See technology due diligence.
  • Regulatory and contractual exposure. Change of control provisions, licenses, open litigation, trade and employment obligations.
  • Integration. How long it takes, what it costs and who runs it are diligence questions. The workstream lists place integration and synergy work before signing, not after close.
  • The counterparty problem. Whoever hands you the answers to the Four P's works for the other side of the table.

That last one has been tested. A Delaware court dismissed fraud claims brought by a buyer that had relied on oral assurances and management presentations received during diligence, noting the buyer could have requested additional information and that the people supplying it owed it no duty. The summary of the year's developments draws the line plainly: diligence should not be a passive process. What any of that means for your own agreement is a question for deal counsel, not for a framework.

Turning the Four P's Into a Scoped Plan

Keep the four words if they help the first conversation. Then convert each one into a request, an owner and a date, and add the workstreams the framing has no name for. A due diligence checklist does that conversion, and the M&A due diligence checklist carries the deal specific items the shorthand omits. How those workstreams fit together across a transaction is M&A due diligence proper.

The Four P's is a question set. A plan names documents, systems and people. The difference is who has to produce something.

Frequently asked questions

What are the Four P's of due diligence?

People, philosophy, process and performance. The shorthand comes from investment manager selection, where the tangible set is usually given as people, process and philosophy, portfolios and performance; some practitioners add a fifth P for the portfolio. Applied to a company, each P has to become a question about named artifacts rather than an impression formed in a meeting.

What are the four due diligence requirements?

That phrase belongs to the federal tax rules, not to deals. A paid preparer claiming certain credits or head of household filing status must complete and submit the required checklist, compute the credit, meet a knowledge standard that calls for reasonable inquiries when information looks inconsistent, and keep records for the period the rules set. A penalty applies to each failure.

What are the four main types of due diligence?

No authoritative source fixes the number at four. Deal practice usually treats financial, legal, commercial and operational work as the core, then adds tax, employee benefits and human resources, technology, reputational, insurance, environmental and integration workstreams as the deal requires. Which ones you run follows the thesis you are testing, not a count.

Is the Four P's framing enough for buying a private company?

No. It was built to compare managers of listed portfolios, where the buyer acquires a mandate rather than a business with staff and systems. It carries no workstream for technology, regulatory and contractual exposure, tax, benefits or integration planning, and it says nothing about who produced the evidence. Use it to open the conversation, then scope properly.

How do the Four P's differ from a workstream based diligence plan?

The Four P's name categories of judgment. A workstream plan names documents, systems, owners and dates, records what was tested rather than described, and marks where access ran out. Courts have treated diligence as an active obligation, so the record of what you asked for and received matters more than the frame you organized it under.

References

  1. Current Thinking in Investment Manager Selection · CFA Institute Research and Policy Center (accessed October 2026)
  2. Due diligence law, regulations and requirements · Internal Revenue Service (accessed October 2026)
  3. M&A: The Intersection of Due Diligence and Governance · Deloitte (accessed October 2026)
  4. 2025 M&A/PE Key Developments · Harvard Law School Forum on Corporate Governance (accessed October 2026)
  5. SEC Issues Risk Alert on Investment Advisers' Due Diligence Processes for Selecting Alternative Investments · U.S. Securities and Exchange Commission (accessed October 2026)
  6. What Boards Need to Know Before, During, and After an Acquisition · Harvard Law School Forum on Corporate Governance (accessed October 2026)
  7. Cybersecurity Framework · National Institute of Standards and Technology (accessed October 2026)

See the work

Ask for the evidence, not another pitch.

See how claims, findings, confidence, and source trails come together in a finished Deal Package.