Legal Due Diligence for Institutional Investors

Legal due diligence for an institutional investor is not a scaled-down version of a buyer's due diligence — it answers a narrower, sharper question: should the investment committee approve this cheque, at this price, on these terms. A complete exercise covers five workstreams — corporate structure and share capital, material contracts and related-party dealings, anti-bribery exposure under Section 17A of the MACC Act 2009, employment and key-person risk, and litigation or regulatory history — each mapped to a specific term-sheet condition or price adjustment, not just listed as a finding. This guide sets out what a Malaysian target's legal due diligence must resolve before an investment committee will sign off.

Most founders raising from a fund for the first time expect due diligence to feel like an audit. It is closer to cross-examination. A private equity or venture capital investment committee does not ask whether the company is compliant in the abstract — it asks whether any finding changes the price, the structure, or the decision to invest at all. The company's own data room rarely anticipates that question, which is why the process routinely runs longer and surfaces more issues than either side expected.

How is due diligence for an institutional investor different from a buyer's due diligence?

An acquirer buying 100% of a company runs due diligence to price a full transfer of risk — every liability becomes the buyer's. An institutional investor is usually taking a minority or growth stake, so the question shifts from “what am I inheriting” to “what am I exposed to as a shareholder, and what governance rights do I need to control it.” Our guide to due diligence in mergers, acquisitions and business transactions covers the buyer-side process; this guide covers the investor-side one.

The fund itself typically has to qualify as a “sophisticated investor” for the placement to rely on the prospectus exemptions under the Capital Markets and Services Act 2007. Under the Securities Commission's Guidelines on Categories of Sophisticated Investors (SC-GL/1-2024, effective 5 February 2024), an individual generally qualifies with net personal assets exceeding RM3 million — with a primary residence capped at RM1 million of that figure — or gross annual income exceeding RM300,000; a corporation qualifies with net assets exceeding RM10 million on its audited accounts. A fund's own qualification is a closing condition, not an afterthought, and legal due diligence on the investor side confirms it before the term sheet is signed.

What corporate structure and share capital issues does an investment committee flag?

Before a fund prices a round, the due diligence team reconstructs the cap table from source documents, not from the spreadsheet the founders maintain. Three questions move price more than any others:

Two adjacent questions usually come up at the same point in this process: see cap table structuring for malaysian startups and investment and subscription agreements in malaysia for how each is handled.

• Were all prior share issuances validly authorised? Every allotment needs the board resolution, the shareholder resolution where required, and the correct filing with the Companies Commission of Malaysia (SSM) — a gap here can make an existing shareholder's stake defective before the new money even arrives.

• Were pre-emption rights honoured? If an earlier round diluted an existing shareholder without the waiver the constitution or an existing shareholders' agreement required, that shareholder may hold a live claim against the company the new investor is about to fund.

• Did any past transaction trigger Section 223 of the Companies Act 2016? A disposal or acquisition of an undertaking or property is treated as “substantial” if it exceeds 25% of the company's total assets, 25% of its net profit, or 25% of its issued share capital. Directors must obtain shareholder approval by resolution before or when the transaction takes effect — miss it, and the transaction is exposed to being unwound, with directors facing imprisonment of up to five years, a fine of up to RM3 million, or both. An investor finding an unapproved substantial transaction in the target's history is finding a defect in the balance sheet it is about to buy into.

Which contracts and related-party dealings get escalated to the investment committee?

Material contract review for an investor due diligence focuses on three things a valuation model cannot see on its own:

• Change-of-control clauses. A new investor crossing a shareholding threshold can trigger termination or consent rights buried in customer, supplier, licence, or facility agreements — a clause that looks routine can quietly require a third party's sign-off before the round closes.

• Customer and revenue concentration. Contracts with no minimum term, or a small number of customers driving most of the revenue, change how the investor prices the round even where nothing is legally wrong.

• Related-party transactions. Loans to directors, transactions with entities a founder also controls, and management fees paid to a related company all need disclosure and, in some structures, separate approval — undisclosed related-party dealing is one of the most common reasons a term sheet gets repriced after due diligence rather than before.

How does Section 17A of the MACC Act factor into an institutional investor's due diligence?

Section 17A of the Malaysian Anti-Corruption Commission Act 2009, in force since 1 June 2020, makes a commercial organisation criminally liable if a person associated with it — including an employee, agent, or subsidiary — commits corruption for the organisation's benefit, whether or not its management knew. The only defence is proving the organisation had “adequate procedures” in place, generally assessed against five principles in the government's guidelines: top-level commitment, risk assessment, undertaking control measures, systematic review and monitoring, and training and communication. Conviction carries a fine of at least ten times the value of the bribe or RM1 million, whichever is higher, and imprisonment of up to 20 years — exposure that attaches to the company an institutional investor is about to hold shares in.

Institutional and ESG-mandated funds increasingly build an adequate-procedures check into the due diligence scope directly, and some now require a warranty or a closing condition on it rather than treating it as a soft compliance item. A target with no anti-bribery policy, no whistleblowing channel, and no documented risk assessment is not automatically uninvestable, but it is a finding that reaches the investment committee, not just the deal team.

What employment and key-person risks matter to a minority investor?

An institutional investor backing a Malaysian company is usually betting on the people running it as much as the business itself, and the legal tools to lock founders and key employees in are narrower than most cap tables assume.

Section 28 of the Contracts Act 1950 makes a restraint-of-trade clause void in Malaysia, subject to three narrow statutory exceptions — on the sale of a business's goodwill, and between partners on or in anticipation of dissolving a partnership, or while the partnership continues. A standard post-employment non-compete in a founder's service agreement is generally unenforceable here, which means an investor cannot rely on one to stop a founder leaving to build a competitor. Retention has to be engineered through vesting schedules, good-leaver/bad-leaver definitions in the shareholders' agreement, and staged consideration — not through a non-compete clause a Malaysian court is likely to strike down.

What does the due diligence report actually decide?

Every finding lands in one of four buckets. A report only earns its keep if it sorts findings this way rather than handing the committee a flat list. When we scope legal due diligence for institutional investors, the report is built around exactly this structure.

What does skipping or rushing this actually cost?

A fund that closes on a rushed due diligence does not avoid the risk — it inherits it as a shareholder instead of pricing it as a term. An unresolved Section 223 defect surfaces later as a claim that unwinds part of the cap table the investor just funded. An undisclosed related-party loan becomes a dispute the investor is now indirectly financing on both sides. A missing anti-bribery defence under Section 17A becomes the investor's own reputational, and in some fund structures indirect legal, exposure if the portfolio company is investigated after the round closes. Our guide to red flags in legal due diligence covers how these issues surface on the ground. None of this is hypothetical — it is the difference between a warranty negotiated at term sheet stage and a dispute negotiated after the money has moved.

Frequently Asked Questions

How is due diligence for an institutional investment different from due diligence for an acquisition?

Acquisition due diligence prices a full transfer of risk on a 100% purchase. Investor due diligence prices a minority or growth stake and focuses on governance rights, exit mechanics, and which findings justify a reprice rather than a walkaway.

Who counts as a “sophisticated investor” under Malaysian law?

Under the Securities Commission's Guidelines on Categories of Sophisticated Investors (SC-GL/1-2024), an individual generally qualifies with net personal assets exceeding RM3 million or gross annual income exceeding RM300,000; a corporation qualifies with net assets exceeding RM10 million on its audited accounts.

How long does legal due diligence take before an institutional investment closes?

Timelines turn heavily on how organised the target's records are — a company with clean SSM filings and an up-to-date cap table moves faster than one where the legal team has to reconstruct share issuance history from scratch. Our due diligence timeline guide breaks the schedule down stage by stage; build in time for at least one round of follow-up requests once the first set of findings comes back.

What happens if due diligence uncovers a problem after the term sheet is signed?

Most term sheets are non-binding on price and structure specifically so a material finding can reopen those terms. See our guide to the letter of intent for fundraising for how that due diligence out clause should be drafted. The investor's options are usually to reprice, add conditions precedent to completion, require specific warranties and indemnities in the subscription agreement, or walk away.

Getting the investment committee a report it can act on

A due diligence report that lists findings without sorting them into deal-breaker, reprice, condition precedent, and accepted-and-warranted does not give an investment committee a decision it can actually make. Legal That Works advises Malaysian funds and institutional investors on legal due diligence for institutional investors — from scoping the review through to a report structured around the decision the committee has to take. If a term sheet is already signed and the exclusivity clock has started, speak to us before it runs out.

This article is for general information only and does not constitute legal advice. Every transaction and every set of facts is different. Obtain specific advice from a qualified adviser before acting on any part of it.

Related guides

• Cap Table Structuring for Malaysian Startups

• Investment and Subscription Agreements in Malaysia

• Equity Crowdfunding Compliance in Malaysia

• Bursa LEAP Market Listing for Malaysian SMEs

• Reserved Matters in a Shareholders Agreement

• Asset Purchase vs Share Purchase in Malaysia