Large companies have whole teams for this. They have procurement departments, credit controllers, and lawyers whose entire job is to make sure the business on the other side of a deal is what it claims to be. Small businesses have none of that, which is exactly why they get caught out more often — not because they are careless, but because the loss of a single unpaid invoice or a collapsed supplier hurts them far more, and they rarely have a process to prevent it.

The good news is that effective due diligence does not require a department. It requires a checklist — a short, repeatable set of checks that a small business can run in minutes on anyone it is about to depend on or extend credit to. Most of the information is public, most of it is free, and the discipline of working through it the same way every time is what turns scattered caution into genuine protection.

What due diligence actually means for a small business

Stripped of the jargon, company due diligence is simply the act of confirming, before you commit, that a business is real, solvent, run by accountable people, and capable of doing what it has promised. For a small firm, the aim is not the exhaustive review a corporate acquisition demands. It is proportionate confidence — enough to know whether to proceed, on what terms, and with how much caution.

The checklist below moves from the fastest, most decisive checks to the deeper ones, so that an obvious problem stops the process early and the heavier work is reserved for the relationships that warrant it.

Stage one: confirm the company is real and active

The foundation, and the quickest wins.

• Confirm the exact registered company name and number, and check that they match the business actually dealing with you. Trading names often differ from registered names — the point is that the trading name leads to a genuine registered company.
• Check the company’s status. « Active » is what you want. « Dissolved », « in liquidation » or « proposed for strike-off » should stop the deal until explained.
• Note the incorporation date. Age is context, not a verdict — but a company claiming a long history while registered last month is worth a question.

If a company fails this stage, nothing else matters. If it passes, move on.

Stage two: check it is meeting its obligations

A company’s filing record is the closest thing to a character reference it offers in public.

• Are the annual accounts up to date or overdue?
• Is there a steady history of confirmation statements, or a long, unexplained silence?
• Has anything changed recently and abruptly — a sudden change of registered office, a director resigning just before a filing was due?

None of these is proof of bad faith on its own. A pattern of late or missing filings, though, tells you the company struggles to keep its own affairs in order — useful to know before trusting it with yours.

Stage three: understand who runs and owns it

The company is only as trustworthy as the people behind it.

• Identify the directors and the persons with significant control — the individuals who ultimately own or direct the business.
• Look at the directors’ other appointments. A stable history across solvent companies is reassuring; a string of companies dissolved within a year or two, often under similar names, fits the pattern specialists call a phoenix and warrants real caution.
• Check that the person you have actually been dealing with has a genuine connection to the registered company. A contract agreed with someone who turns out to have no formal role is a problem that surfaces at the worst moment.

Stage four: assess financial health (for anything substantial)

For small, low-risk transactions, the first three stages are usually enough. When real money or ongoing dependence is involved, go further — and accept that this part often means paying for data the free record does not hold.

• A credit report or score, for a sense of how likely the company is to pay.
• Any county court judgments, which flag unpaid debts that ended up in court.
• Registered charges, which show who already has a claim over the company’s assets.
• Payment behaviour, where available — the difference between a company that exists and one that actually settles its bills.

Stage five: sense-check the wider picture

A few minutes of ordinary scepticism, outside the formal record, that costs nothing.

• Does the registered office look like a real trading address, or a flat shared with hundreds of companies?
• Does the website carry plausible contact details and a footprint matching the size the company claims?
• If the business claims to be VAT-registered or authorised in financial services, confirm it through the relevant free government register.
• Do independent reviews exist, and do they read like real customers rather than a hurried afterthought?

Stage six: match the depth to the risk, and write it down

Two habits turn a checklist from a one-off into a defence.

• Scale the effort to the exposure. A modest one-off order needs stage one. A major supplier or a large credit line earns all six. Applying the same depth to everyone either wastes effort or under-checks the deals that matter.
• Record what you find. A concern noted at onboarding becomes valuable context months later when a payment is late or a dispute arises. Due diligence that lives only in someone’s memory disappears the moment that person is unavailable.

Reading the results without overreacting

A checklist surfaces evidence; it does not deliver a verdict. A young company is not disqualified by its age, and a single late filing is not a crisis. The purpose is not to reject everyone with an imperfect record — that would rule out a great many sound businesses — but to understand the risk well enough to proceed deliberately. Often the right response to a mild concern is not to walk away, but to adjust the terms: a smaller first order, payment up front, a shorter credit line until trust is earned.

This proportionate, practical view is one the better formation agents share, because they see the register from the inside. Your Company Formations, one of the UK’s established company formation providers, has helped register and maintain a large number of UK companies, and understands how a clean, current public record becomes a small business’s most persuasive credential — and why running the same checks on a counterparty is simply the other side of keeping a record worth trusting.

The discipline that levels the field

A small business will never have a procurement department, and it does not need one. What it needs is a checklist it actually uses — the same handful of checks, run the same way, on everyone it is about to rely on. The information is public. The effort is minutes. The protection is real.

The firms that rarely get caught out are not the ones with the biggest budgets for due diligence. They are the ones that made a simple checklist routine, scaled it sensibly to the risk, and wrote down what they found. Most of the time it confirms what they hoped. Occasionally it catches the trouble early — which is the only time that ever really counted.