Materiality, Scope and Reliance: What a Red Flag Report Leaves Out
Red flag reports are built around deliberate limits on scope and materiality, and understanding those limits matters as much as reading the flags themselves.
Automated report. This article was drafted with AI assistance from the sources listed below, without a human writing step. Law Week labels every article produced this way. A person is answerable for it: if something here is wrong, write to editor@lawweek.co.uk and we will correct it on the page and say what changed.
A report defined by what it excludes
A red flag report is a summary of legal risk produced during due diligence, designed to be read quickly by people who are not lawyers. Its usefulness comes from what it leaves out. Lawyers reviewing a target company’s contracts, property, employment records, litigation history and regulatory position could, in theory, write pages on every clause that deviates from a textbook standard. A red flag report deliberately does not do that. It is built around two filters: scope and materiality. Understanding how those filters are set, and who sets them, matters more to a buyer than reading the list of flags itself.
Scope is agreed before the review starts
Before any documents are reviewed, the instructing client and the law firm agree what areas will be covered. This is usually set out in an engagement letter or a due diligence scope memo. Typical areas include corporate structure and ownership, material contracts, property, employment and pensions, intellectual property, litigation and disputes, regulatory compliance, and data protection. Areas can be excluded entirely, either because specialist advisers are covering them separately (tax is almost always carved out to tax advisers) or because the deal timetable or budget does not allow for a full review of every category.
This matters because a red flag report is only as complete as its agreed scope. A buyer who later discovers an issue in an area that was never within scope cannot reasonably say the lawyers missed it. The report will usually state its scope explicitly on the first page, often alongside a list of what was expressly excluded. Reading that exclusions list is as important as reading the flags.
Materiality: the threshold for what gets reported
Even within scope, not every imperfection is written up. Due diligence of a mid-sized business can throw up hundreds of minor drafting inconsistencies, outdated company filings or small contractual quirks. Reporting every one of them would bury genuine risk in noise. Lawyers apply a materiality threshold, usually agreed with the client at the outset, often expressed as a monetary figure or a percentage of deal value, below which an issue will not be separately flagged unless it indicates a wider pattern.
Materiality thresholds are judgement calls dressed up as numbers. A clause that would be immaterial in isolation can become significant if it recurs across dozens of customer contracts, suggesting a systemic drafting problem rather than a one-off. Good red flag reports distinguish between isolated issues and patterns, because patterns often point to how a business is actually run, not just how its contracts are worded.
How flags are graded
Most firms use some form of risk grading, commonly a three-tier system such as fundamental, significant and minor, sometimes presented as a traffic light. A fundamental flag might be something that could stop the deal happening at all, such as a change-of-control clause in a key customer contract that lets the counterparty terminate on acquisition. A significant flag might affect price or require a warranty or indemnity. A minor flag is noted for completeness but is not expected to affect the deal.
This grading is advisory, not a substitute for the client’s own commercial judgement. Lawyers assess legal risk; they are generally not best placed to judge commercial importance. A contract that looks minor legally might be commercially critical if it covers the target’s single largest customer, so red flag reports are usually most effective when drafted alongside, or discussed directly with, the client’s commercial and financial advisers.
Who can rely on the report
A red flag report is typically addressed to the instructing client only, with an explicit statement that no other party may rely on it. This is standard in professional services generally, not specific to law firms, and it reflects the fact that the scope and materiality thresholds were set for one client’s specific transaction and risk appetite.
Where a lender, co-investor or other third party needs comfort from the same work, the usual mechanism is a reliance letter, under which the law firm agrees, often for a fee and sometimes with caveats, to extend a defined scope of reliance to that named party. Reliance letters do not usually widen the underlying scope or materiality thresholds of the original report; they simply extend who can rely on findings that were already made.
What this means in practice
For anyone receiving a red flag report, whether as a buyer, a board member or a lender, the practical lesson is to read the scope and exclusions sections with the same care as the flags themselves, ask what materiality threshold was applied and whether it still feels appropriate given how the deal has been priced, and check who the report can legally be relied upon by before treating it as comfort for financing or insurance purposes. The report is a tool shaped by choices made at the outset, not a guarantee that nothing else exists.
Independent guidance on the standards solicitors are expected to meet when advising on transactions, including competence and client care obligations, is published by the regulator and professional body.