The Digital Due Diligence Checklist Every Director Should Print
2026-04-17 · 11 min read
I have been eliminated from vendor shortlists. Not because our work was bad. Not because our pricing was off. Because someone on the procurement team Googled our company name and did not like what they found. Or worse, found nothing at all.
That experience made me build a checklist. Not a nice-to-have document for a strategy meeting. A literal checklist I run every quarter against my own companies to make sure we do not fail the digital due diligence that happens before anyone picks up the phone.
This is that checklist. Print it. Run it against your company. Fix what fails. Then read How to Pass Digital Due Diligence for the deeper strategic framework behind each item.
How procurement teams actually work
A procurement officer at a multinational does not evaluate vendors one at a time. She evaluates 20-40 at once. She has a spreadsheet. Each row is a vendor. Each column is a verification point. She is not looking for the best vendor. She is looking for reasons to eliminate vendors. That is the job. Reduce 40 to 5.
The elimination happens fast. Most of it happens in the first five minutes of looking at your digital footprint. No website? Gone. Website looks like it was built in 2009? Gone. Company name on LinkedIn does not match the company name on the tender document? Gone.
This checklist mirrors what she actually checks. Not what marketing consultants think she checks. What she actually checks.
The checklist: digital presence foundation
| # | Item | What They Check | Pass / Fail Criteria |
|---|---|---|---|
| 1 | Website exists and loads | Type company name in Google, click first result | Pass: Professional site loads in under 3 seconds. Fail: No site, parked domain, or "under construction" |
| 2 | SSL certificate valid | Browser padlock icon | Pass: HTTPS with valid cert. Fail: Browser shows security warning |
| 3 | Company name consistency | Compare name on website vs LinkedIn vs Google vs tender docs | Pass: Exact match everywhere. Fail: Different names, abbreviations, or spellings |
| 4 | Physical address verifiable | Address on website, check Google Maps | Pass: Real building shows on Street View. Fail: PO Box, no address, or pin drops in empty lot |
| 5 | Contact information professional | Email domain, phone format | Pass: company@domain.com, landline listed. Fail: Gmail/Yahoo as primary contact |
| 6 | Domain age | WHOIS lookup | Pass: 3+ years old. Warning: Under 1 year |
| 7 | Google Business Profile | Search company name, check knowledge panel / map result | Pass: Verified, photos, reviews. Fail: Unclaimed or missing |
The checklist: credibility signals
| # | Item | What They Check | Pass / Fail Criteria |
|---|---|---|---|
| 8 | LinkedIn company page | Search LinkedIn for company name | Pass: Active page, real employees listed. Fail: No page, or page with zero followers |
| 9 | Director/founder visible | Google the director name | Pass: LinkedIn profile, mentions, verifiable history. Fail: No digital footprint for key person |
| 10 | Client references verifiable | Can they confirm client relationships independently? | Pass: Named clients with case studies. Fail: "Trusted by 100+ clients" with no names |
| 11 | Certifications documented | ISO, industry certs mentioned with numbers | Pass: Cert numbers, issuing body, validity dates. Fail: "ISO certified" with no proof |
| 12 | News or press mentions | Google News search for company name | Pass: Third-party coverage. Warning: Only self-published content |
| 13 | Government registry match | Check NIB/SIUP/OSS against stated company info | Pass: Registry data matches website. Fail: Mismatch or not findable |
| 14 | Negative results check | Search "[company name] scam" or "[company name] complaint" | Pass: Nothing concerning. Fail: Unaddressed complaints, fraud reports |
The checklist: digital depth
| # | Item | What They Check | Pass / Fail Criteria |
|---|---|---|---|
| 15 | Structured data on website | Google Rich Results Test | Pass: Organization schema with name, address, contacts. Warning: No structured data at all |
| 16 | Content freshness | Last blog post, last social update | Pass: Activity within 90 days. Fail: Last update over a year ago |
| 17 | AI search visibility | Ask ChatGPT or Perplexity about company or industry | Pass: Named or referenced. Warning: Not mentioned at all |
| 18 | Third-party directory listings | Industry directories, Crunchbase, D&B | Pass: Listed with consistent data. Fail: Not listed anywhere |
| 19 | Track record documentation | Project photos, case studies, testimonials with names | Pass: Verifiable projects with dates and details. Fail: Generic claims without evidence |
| 20 | Financial transparency signals | Annual reports, D&B rating, credit references | Pass: Some financial visibility. Warning: Total opacity |
How to score yourself
Run through all 20 items. Score each one:
- Pass = 2 points. You are fine here.
- Warning = 1 point. Not a dealbreaker, but a weak spot.
- Fail = 0 points. This is where you get eliminated.
35-40: You will survive most due diligence processes. Focus on AI visibility and third-party verification to move from "acceptable" to "preferred."
25-34: You are passing some checks but failing others. You will get shortlisted by smaller companies but eliminated by enterprises with rigorous procurement. Fix the fails first.
Below 25: You are getting eliminated before anyone reads your proposal. Start with items 1-7. Those are the foundation. Nothing else matters until those pass. The vendor evaluation checklist breaks down the priority order.
The elimination flow
Here is what the process looks like from the procurement team's side. Each stage eliminates vendors who fail that check.
Notice something? More than half the vendors are eliminated before anyone evaluates the actual work. Before pricing. Before capability. Before the presentation deck. This is not how procurement should work in an ideal world. But it is how procurement actually works when someone has 40 vendors and two hours.
What most companies get wrong
They obsess over the proposal. The presentation. The pricing. Those matter. But they matter at stage 6 of a 6-stage process. If you fail at stage 1 or 2, your proposal never gets opened.
I have seen technically excellent companies lose contracts to mediocre competitors because the mediocre competitor had a clean digital footprint and the excellent company had nothing. No website. Or a website that said "PT Something" while their LinkedIn said "Something Corp" while their Google profile said "PT. Something Industries."
As I wrote in Digital Red Flags That Kill Deals, these inconsistencies are not cosmetic. They are structural. A procurement officer sees a name mismatch and thinks: if they cannot get their own name right across three platforms, how will they manage a complex project?
That is not fair. But it is real.
How to use this checklist quarterly
Block 45 minutes every quarter. Run through all 20 items for each entity you operate. Document results in a simple spreadsheet. Track changes over time.
For the items you fail, prioritize by position in the elimination flow. Foundation items (1-7) first. Credibility items (8-14) second. Depth items (15-20) third.
If you want the full strategic framework behind why each item matters and how to fix failures systematically, that is what entity infrastructure work looks like in practice. Not fixing one thing. Fixing the system.
Or start with the free courses if you want to understand the theory first.
Frequently Asked Questions
How often should I run this checklist?
Quarterly at minimum. Monthly if you are actively bidding on enterprise contracts. Things change: SSL certificates expire, Google profiles get edited by third parties, social media accounts go dormant without you noticing. A quarterly check catches these before a procurement team does.
Which items should I fix first if I fail multiple checks?
Start with items 1-7 (digital presence foundation). A working website with consistent name, valid SSL, and verified address is the floor. Nothing else matters if those fail. Then move to items 8-14 (credibility signals). Items 15-20 (digital depth) differentiate you from competitors but will not save you if the foundation is broken.
Does this apply to small companies or only enterprises?
It applies to any company selling to institutional buyers. If your clients are other businesses, government agencies, or multinational procurement teams, they are running some version of this checklist. The formality varies, but the checks are the same. A procurement manager at a mid-size manufacturer and one at a Fortune 500 both Google your company name before calling you.
References
- Forbes Business Council. "Online Presence And Due Diligence: Why Your Digital Footprint Matters." Forbes, 2023. Link
- OMMAX. "Digital Due Diligence." OMMAX Advisory, 2024. Link
- Evident ID. "Due Diligence for Vendors and Suppliers." Evident, 2024. Link
- CSO Online. "Almost Half of Customers Have Left a Vendor Due to Poor Digital Trust." CSO Online, 2023. Link
Related notes
The companies that show up in ChatGPT are the ones that bothered to be verifiable.