A due diligence questionnaire, commonly called a DDQ, is a standardized document that institutional investors send to a fund manager or business partner to evaluate their operational, financial, and legal integrity before committing capital. It asks about investment strategy, ownership, team backgrounds, compliance history, risk controls, cybersecurity, and increasingly ESG and diversity practices. Investors developed these questionnaires largely in response to financial scandals that exposed how little scrutiny some allocators applied before writing checks. For fund managers, a careless or incomplete response can end a fundraising conversation before the first meeting.
What a DDQ Asks About
Most questionnaires open with investment strategy. Managers explain how they generate returns, which asset classes they trade, and which benchmarks they measure themselves against. The next section drills into ownership: who the ultimate beneficial owners are, whether any affiliate relationships create conflicts of interest, and how profits flow between the management company and the fund. The ILPA DDQ 2.0, one of the most widely used templates, devotes an entire section to alignment of interests, including compensation structures, carried interest, and co-investment rights.1Institutional Limited Partners Association. ILPA Due Diligence Questionnaire 2.0
Team backgrounds get serious attention. Investors expect the shared work history of principals, individual track records, and any disciplinary events on file with regulators. A key person who left a prior firm under an SEC investigation raises different questions than one with a clean record. The questionnaire also probes succession planning so investors can see what happens if a critical team member departs mid-fund.
Risk management and compliance take up a substantial share of any DDQ. Firms describe internal controls for market risk, liquidity risk, and counterparty exposure, along with the governance structures that oversee those controls. Compliance history matters because the Investment Advisers Act makes it unlawful for any adviser to engage in fraudulent, deceptive, or manipulative practices.2Office of the Law Revision Counsel. 15 USC 80b-6 – Prohibited Transactions by Investment Advisers Investors use the DDQ to check that firms actually have the infrastructure to comply, not just a policy document filed away.
Cybersecurity questions have moved from afterthought to core content. The ILPA DDQ 2.0 includes a dedicated section on data security, technology, and third-party vendors. Investors ask whether the firm holds a current SOC 2 Type II report, which audits the operating effectiveness of internal security controls over a sustained period, typically six months to a year. A SOC 2 Type I report captures only a single point in time, so allocators generally treat the Type II version as the meaningful one. Questions extend to encryption standards, business continuity planning, incident response procedures, and any past data breaches.
ESG and diversity sections have become standard. The ILPA DDQ 2.0 includes dedicated modules covering responsible investment policies, greenhouse gas tracking, and workforce composition.3Institutional Limited Partners Association. ESG – Due Diligence and Investment Decision-Making Not every allocator weights them equally, but large pension funds and endowments increasingly treat them as screening criteria.
The Standard Templates
Most institutional investors work from standardized templates rather than building questionnaires from scratch. Two dominate the market.
ILPA DDQ for Private Equity
The Institutional Limited Partners Association publishes the most widely adopted template for private equity. The current version, ILPA DDQ 2.0, covers 20 topic areas, from firm and fund information to data security, ESG, and diversity.1Institutional Limited Partners Association. ILPA Due Diligence Questionnaire 2.0 It digs deep into fund economics, asking managers to disclose management fee structures, carried interest calculations, waterfall mechanics, and whether portfolio company fees offset management fees. ILPA’s broader principles also address fund term, key person provisions, and financial disclosures, all of which feed into the DDQ responses.4Institutional Limited Partners Association. ILPA Principles Because large pension funds and insurance companies expect this format, showing up with a non-standard questionnaire creates friction.
AIMA DDQ for Hedge Funds
The Alternative Investment Management Association publishes a parallel template for hedge fund managers. AIMA released a 2025 edition covering performance presentations, leverage risks, liquidity risk management, counterparty risks, anti-money laundering, expense disclosures, and outsourcing and technology risks.5Alternative Investment Management Association. Presenting the 2025 Edition of AIMA’s Illustrative Questionnaire for the Due Diligence of Investment Managers Leverage and liquidity get more weight here than in the ILPA version, because hedge funds trade daily in public markets rather than holding companies for five to seven years. Choosing the right template depends on the asset class.
Documents You Submit With the DDQ
Answering the questions is only half the work. Investors expect a package of supporting documents that verify the responses. Audited financial statements covering at least the last two to three years are standard, prepared by an independent accounting firm. The SEC’s books-and-records rule requires registered advisers to maintain financial statements, trial balances, and internal audit working papers, so a firm that cannot produce these has a more fundamental compliance problem.6eCFR. 17 CFR 275.204-2 – Books and Records to Be Maintained by Investment Advisers
Other documents commonly requested:
- Compliance manual and code of ethics, showing written policies on employee conduct, personal trading, and gifts. Registered advisers must keep both under the same recordkeeping rule.
- Business continuity plan, showing how the firm handles cyberattacks, natural disasters, or key-person departures.
- Organizational chart, confirming reported personnel, reporting lines, and segregation of duties between investment, compliance, and operations.
- Form ADV Parts 1 and 2, the SEC filing that investors cross-reference against DDQ responses for consistency. Form ADV requires advisers to disclose direct and indirect owners, executive officers, business practices, disciplinary history, and any advisory affiliate involvement in regulatory or legal events.7U.S. Securities and Exchange Commission. Form ADV – General Instructions
- Insurance certificates showing errors and omissions coverage, directors and officers liability, and cyber insurance.
The documents need to line up with the written answers. An organizational chart showing one reporting structure while the DDQ describes another is the kind of inconsistency that ends deals.
How the Review Process Works
Once the questionnaire and supporting documents are assembled, the firm uploads everything into a secure virtual data room or a dedicated investor portal. These platforms use 256-bit AES encryption, multi-factor authentication, and granular access controls that define what each user can view, download, or print. Audit trails record every document access and user interaction.
Submission triggers an initial desk review. The investor’s analysts read every response, cross-reference answers against the supporting documents and public filings, and flag anything that needs clarification. A few weeks is a common timeline for the first pass. Follow-up questions typically ask the firm to explain gaps, add context to a compliance event, or reconcile contradictory information. After the desk review, the process moves to virtual or in-person meetings with the firm’s management and compliance officers, where investors probe answers in real time and gauge whether the people running the firm actually understand their own policies.
Red Flags Reviewers Watch For
A completed DDQ is a starting point for investigation, not a rubber stamp. Experienced allocators watch for specific warning signs:
- Weak segregation of duties, where the same person handles trading, valuation, and reporting.
- Missing or evasive answers, blank fields, or responses that don’t match the question asked.
- Unexplained changes in assets under management, ownership, or key personnel.
- Non-standard fund terms, such as unusually long lock-ups or opaque fee structures that deviate from industry norms.
- Background check issues, including prior bankruptcies, fraud allegations, or regulatory sanctions involving the manager or key employees.
- No independent service providers, with affiliated entities handling administration, audit, and custody instead of independent third parties.
What Happens If Answers Are False
Fund managers who provide false or misleading information in a DDQ face regulatory consequences. Section 206 of the Investment Advisers Act broadly prohibits advisers from employing any scheme to defraud clients or prospective clients, or engaging in any practice that operates as fraud or deceit.2Office of the Law Revision Counsel. 15 USC 80b-6 – Prohibited Transactions by Investment Advisers Misrepresentations in due diligence materials can trigger enforcement under this statute.
In 2024, the SEC charged two investment advisers with making false and misleading statements about their use of artificial intelligence in advisory services. The firms agreed to pay $400,000 in combined civil penalties, were censured, and were ordered to cease and desist from future violations of the Advisers Act and the Marketing Rule.8U.S. Securities and Exchange Commission. SEC Charges Two Investment Advisers with Making False and Misleading Statements Under the current inflation-adjusted penalty schedule, a single violation involving fraud can cost an individual up to $118,225 per act, and violations that cause substantial investor losses can reach $236,451 per act for an individual or over $1.1 million per act for an entity.9U.S. Securities and Exchange Commission. Inflation Adjustments to the Civil Monetary Penalties Those figures are per violation, so a pattern of false disclosures across multiple DDQ responses compounds quickly.
Annual Refreshes and Ongoing Monitoring
A DDQ is not a one-time exercise. Most institutional investors require fund managers to refresh their responses annually, and additional updates get triggered by fundraising events, operational reviews, or regulatory examinations. A firm that passed diligence two years ago can look very different today if it lost key personnel, shifted strategy, or received a regulatory inquiry.
Monitoring extends beyond the questionnaire itself. Investors track updated regulatory filings, annual audited financial statements, and any public enforcement actions. The SEC’s books-and-records requirements mean advisers must maintain current documentation of communications, orders, and advisory agreements, so the paper trail should always be available for review.6eCFR. 17 CFR 275.204-2 – Books and Records to Be Maintained by Investment Advisers Firms that build compliance infrastructure to handle continuous updates rather than treating the DDQ as a one-off filing save themselves significant scrambling when the next request lands.