How to Prepare a Workspace Due Diligence Checklist (2026)

TL;DR

Workspace due diligence is not the same as M&A due diligence. It covers property title, lease terms, safety compliance, data protection, and operational readiness of a physical office, coworking space, or virtual office. Enterprise legal teams in India need a structured checklist that accounts for state-level variations in stamp duty, fire safety norms, and the new DPDP Act. This glossary-style guide defines every critical term, flags the hidden-clause traps that catch even experienced counsel, and walks you through building a procurement-defensible checklist from scratch.

What This Glossary Covers and Who Needs It

When enterprise legal teams hear “due diligence checklist,” they usually think of M&A transactions, vendor assessments, or financial audits. Workspace due diligence is different. It is the systematic evaluation of a physical office, managed workspace, coworking arrangement, or virtual office before signing any agreement. The risks are real: unregistered leases that courts won’t enforce, fire safety gaps that void insurance, data protection violations carrying penalties up to ₹250 crore, and hidden cost escalations that blow past approved budgets.

This guide is for GCC compliance officers, enterprise legal counsel, procurement heads, and startup founders scaling to multi-city operations in India. It matters before signing a commercial lease, a managed office agreement, a coworking license, or a virtual office contract.

India’s regulatory environment makes this especially complex. Stamp duty rates, fire safety norms, Shops & Establishments Act requirements, and even security deposit caps vary by state. Coworking arrangements sit in a legal grey area that most standard lease templates don’t address. And the Digital Personal Data Protection Act, 2023, has introduced workspace-level obligations that no competitor guide currently covers.

If you are evaluating coworking options for enterprise teams, understanding these terms before you walk into a site visit will save months of renegotiation later.

The glossary below is organized by category, not alphabetically. Each entry includes a plain-language definition, India-specific context, enterprise relevance, and a red flag signal. Use it to build, validate, or pressure-test your own workspace due diligence checklist.

Property and Title Terms

These are the foundational checks. Skip them and the entire deal sits on unstable ground.

Title Verification

The process of confirming that the landlord or developer legally owns the property and has the right to lease it. A proper title verification includes reviewing the chain of ownership documents, checking for stay orders or injunctions issued against the premises, and confirming there are no competing claims.

Why it matters: A perfect title at the time of executing the lease agreement is non-negotiable. If the landlord’s ownership is disputed later, your occupancy rights collapse. Enterprise legal teams should insist on reviewing title documents going back at least 13 years (the standard search period in most Indian states).

Red flag: The landlord refuses to share original title documents or offers only photocopies “for now.”

Encumbrance Certificate

A document obtained from the concerned Sub-Registrar’s office that reveals whether the property has any existing charge, mortgage, pledge, or legal encumbrance. It shows all registered transactions against the property for a specified period.

Why it matters: Leasing an encumbered property without the lender’s consent can be challenged later. If the property is mortgaged to a bank and the landlord defaults, the bank’s claim takes priority over your lease.

Red flag: The landlord says the encumbrance certificate “isn’t needed” or “takes too long to obtain.” It typically takes 15 to 30 days. Budget for this in your exclusivity period.

Land-Use and Zoning Approval

Confirmation from the local development authority that the property is approved for commercial use. In Indian cities, mixed-use developments are common, and a building may have residential zoning even if it looks and functions like a commercial space.

Why it matters: Operating a commercial office in a residentially zoned building exposes the tenant to municipal action, including forced closure. GCCs and enterprises face additional reputational risk.

Red flag: The operator says “everyone in this building runs offices” but cannot produce the zoning certificate.

Occupancy Certificate (OC) and Completion Certificate (CC)

The OC confirms that the building has been constructed according to the approved plan and is fit for occupation. The CC confirms construction is complete. Both are issued by local municipal authorities.

Why it matters: Without an OC, the building is technically not authorized for occupation. Utility connections, insurance claims, and even lease registration can be challenged.

Red flag: The building is occupied but the OC is “under process.” This is more common than it should be.

Landlord NOC (No Objection Certificate)

A written consent from the property owner permitting specific uses of the space. For coworking or managed office setups, the NOC must explicitly allow shared workspace operations and sub-licensing.

Why it matters: Many standard leases prohibit “sub-letting.” Coworking falls into a grey area. Practitioners on Reddit’s r/IndiaStartups frequently flag that operators sometimes lack explicit landlord consent for shared-workspace use, which means the entire arrangement could be challenged if the landlord objects.

Red flag: The coworking operator’s lease says “no sub-letting” but they assure you the landlord is “fine with it” verbally.

Lease and Commercial Terms

This section covers the financial and contractual terms that determine your total cost of occupancy and your ability to exit cleanly.

Letter of Intent (LOI)

A preliminary agreement between tenant and landlord outlining key proposed terms: rent, security deposit, lease term, fit-out period, and exclusivity. In India, the LOI stage is when legal and technical due diligence typically begins while the landlord is restricted from negotiating with third parties.

Why it matters: Any negotiating power a tenant has is greatest before signing the LOI or agreeing on price. Multiple legal practitioners note that clients often contact them to review a lease after having already reached a verbal agreement on key terms, at which point further negotiation becomes considerably harder. Start your checklist review before the LOI, not after.

Exclusivity Period

The window (typically 30 to 60 days) during which the landlord agrees not to negotiate with other potential tenants while you complete due diligence.

Why it matters: Your due diligence checklist should map to this timeline. Title verification, encumbrance certificates, fire NOC validation, and zoning checks all need to fit within the exclusivity window or you risk losing it.

Lock-In Period

A contractual period during which neither party can terminate the lease without penalty. Standard commercial leases in India range from 3 to 5 years, with a lock-in period of 1 to 2 years.

Why it matters: The lock-in concept was developed through common leasing practice, not statute. It protects both parties from losses due to early termination. But poorly drafted lock-in clauses can trap a tenant in an unsuitable space with no exit. Verify whether the penalty is the remaining rent for the lock-in period or a fixed fee.

For a deeper look at managed office structures and their lock-in norms, see this managed office guide with costs and risks.

Red flag: Lock-in applies only to the tenant, not the landlord. Insist on mutual lock-in.

Rent Escalation Clause

Specifies how much and how often rent will increase during the lease term. Typical annual escalation in Indian commercial leases is 5% to 10%.

Why it matters: One of the biggest traps in commercial leasing is ambiguity in rent escalation clauses. If the clause says “market rate escalation” without defining a cap or formula, you have no ceiling. Enterprise budgets need predictability. Pin down the percentage, the frequency, and whether it compounds.

Red flag: Escalation clause references “prevailing market rates” without a defined cap.

Security Deposit

An upfront refundable payment to the landlord, typically 6 to 12 months’ rent for commercial spaces in India. The Model Tenancy Act caps residential security deposits at 6 months, but commercial leases are often negotiated higher.

Why it matters: A 12-month security deposit on a large office can lock up crores of working capital. Negotiate the amount, the refund timeline (30 days after exit is standard, but many leases say 60 to 90 days), and whether the deposit earns interest.

Fit-Out Period

A rent-free period given to the tenant for installing equipment, furniture, and infrastructure. Typically 3 months to 1 year depending on the size and condition of the space.

Why it matters: If the lease start date is the fit-out start date, rent might accrue before you’ve moved a single desk in. Clarify in writing that rent commences only after the fit-out period ends.

CAM (Common Area Maintenance) Charges

Fees covering the upkeep of shared building areas: corridors, lobbies, elevators, parking, landscaping, and security. Billing methods vary: flat monthly fee, prorated per square foot, or based on occupancy numbers.

Why it matters: Not factoring in hidden costs like CAM charges is the second-most common mistake businesses make in Indian commercial leasing. CAM can add 15% to 25% on top of base rent. Demand a CAM cap in the lease and audit rights to verify actual spending.

Red flag: CAM charges are described as “as applicable” without a defined rate or cap.

Permitted Use Clause

Defines what business activities the tenant can conduct in the leased space. A narrow permitted use clause can restrict future pivots or expansion of services.

Why it matters: Tenants should demand clarity regarding permitted uses. If you’re a GCC that might add a customer support function to an existing development centre, and the permitted use says “software development only,” you’ll need an amendment, which the landlord may not grant.

Sub-Leasing Rights

The tenant’s ability to assign or sub-let part or all of the leased space to a third party. Most standard Indian commercial leases restrict or prohibit sub-leasing without landlord consent.

Why it matters: If your enterprise might downsize a floor and want to sub-let, or if you’re using a coworking operator who sub-licenses seats from a primary lease, this clause determines whether the arrangement is legally enforceable.

Force Majeure Clause

A provision excusing one or both parties from performance obligations during events beyond their control: natural disasters, pandemics, government orders, war.

Why it matters: Post-COVID, this clause has moved from boilerplate to business-critical. Verify whether pandemic-type events are explicitly included, whether rent abatement applies during force majeure, and the notice period required.

Termination and Exit Clause

Specifies how either party can end the lease, including notice periods (typically 3 to 6 months), penalties for early termination outside the lock-in, and make-good obligations (restoring the space to its original condition).

Why it matters: The exit cost is part of your total cost of occupancy. Make-good obligations on large fit-outs can run into lakhs. Negotiate a fair wear and tear exception.

Tax and Registration Terms

Getting these wrong doesn’t just cost money. It can make your lease unenforceable.

Stamp Duty on Commercial Leases

A state-level tax paid on the execution of a lease agreement. Rates vary significantly: typically 2% to 7% of the property value or total lease consideration, depending on the state. Registration charges add approximately 1%.

Why it matters: Stamp duty is a state subject, so Karnataka, Maharashtra, Tamil Nadu, and Telangana each have different rates and calculation methods. Underpayment or non-payment can result in penalties and the document being challenged in court.

Lease Registration

Under the Registration Act, 1908, any lease agreement for immovable property in India with a term exceeding twelve months must be registered with the Sub-Registrar’s office. This is not optional. An unregistered lease exceeding twelve months cannot be admitted as evidence in a court of law.

Why it matters: Some landlords and operators propose 11-month agreements renewed annually to avoid registration costs. This works for small setups but exposes enterprise tenants to risk: the arrangement has no legal standing if disputed, and renewal terms are not guaranteed.

Red flag: The operator insists on an 11-month “license agreement” for what is clearly a multi-year commitment.

GST on Workspace Leases

India’s Goods and Services Tax at 18% applies to commercial leases for terms longer than 11 months. The landlord must provide a GST-compliant invoice, and the tenant can typically claim input tax credit.

Why it matters: Verify that the landlord is GST-registered and will issue proper invoices. Without valid invoices, your enterprise cannot claim input tax credit, effectively increasing occupancy cost by 18%.

TDS on Rent (Section 194-I)

Tax Deducted at Source obligations under the Income Tax Act. The tenant must deduct TDS on rent payments exceeding ₹2,40,000 per year (threshold as of FY2024-25) at prescribed rates and deposit it with the government.

Why it matters: Non-compliance results in disallowance of the rent expense for tax purposes and penalties. Enterprise finance teams need the landlord’s PAN and the correct TDS rate (10% for rent of land/building/furniture/fittings, 2% for plant and machinery).

Safety and Building Compliance Terms

These protect lives, ensure insurance validity, and prevent license revocation.

Fire Safety NOC

A No Objection Certificate from the state fire department confirming that the building meets fire safety standards per the National Building Code. For commercial buildings, the NOC is valid for 3 years and must be renewed.

Why it matters: Failure to obtain a Fire NOC leads to legal implications, revocation of business licenses, and increased liability in case of fire incidents. If you are leasing in a building without a valid Fire NOC and a fire occurs, your insurance claim will almost certainly be denied. State-level variations exist in inspection standards and renewal processes.

Spaces with compliance-ready infrastructure often already hold valid Fire NOCs, which reduces onboarding risk.

Red flag: The building has a Fire NOC, but it expired more than 3 years ago.

Electrical Safety Audit

An inspection of the building’s electrical systems to verify compliance with the Indian Electricity Rules. Particularly important in older buildings or those with heavy power loads (data centres, server rooms).

Why it matters: Electrical faults are a leading cause of commercial building fires in India. Enterprise tenants with server rooms or high-density seating should request the most recent electrical safety audit report.

CCTV and Surveillance Policy

Rules governing the installation, placement, and data retention of surveillance cameras in the workspace. Cameras should be installed only in common areas, never in private cabins or restrooms. Notice boards disclosing CCTV presence are required in most jurisdictions.

Why it matters: Some cities (Hyderabad, Gurugram) have specific requirements for establishments operating late shifts or employing women staff. Under the DPDP Act, CCTV footage constitutes personal data, making retention periods and access controls a compliance concern.

Shops and Establishments Act Registration

A mandatory registration under the state-specific Shops and Establishments Act for any workplace operating in India. Covers working hours, leave policies, employment conditions, and record-keeping obligations.

Why it matters: Without this registration, the establishment is technically operating illegally. Requirements vary by state. Enterprise tenants using managed offices should verify that the operator holds a valid registration that covers the tenant’s operations.

Pollution Control Board Clearance

Most offices fall under the “white category” (non-polluting) and need only a simple consent to operate. Relevant if the workspace includes DG sets above certain capacity thresholds.

Why it matters: Large DG sets commonly used for power backup in enterprise setups may require a consent to operate from the State Pollution Control Board. Missing this can result in fines and forced shutdown of the DG set.

Data Protection and Privacy Terms

This is the section that no competitor workspace guide covers. It should be on every enterprise legal team’s checklist starting now.

DPDP Act, 2023 (Digital Personal Data Protection Act)

India’s primary data protection legislation, enacted on 11 August 2023. It establishes a framework for consent-based processing of personal data, with provisions for non-consent based processing in specified circumstances.

Why it matters for workspaces: Coworking operators handle visitor logs, Wi-Fi traffic data, biometric access records, and CCTV footage, all of which constitute personal data under the Act. Enterprise tenants sharing infrastructure with a coworking operator need to verify how the operator collects, processes, stores, and deletes this data. Penalties can reach up to ₹250 crore for significant data breaches or non-compliance.

DPDP Rules, 2025 (Phased Enforcement)

The implementation rules for the DPDP Act. Most day-to-day compliance obligations, including notice and consent operations, breach notification, and individual rights handling, become enforceable during an 18-month implementation phase, with full compliance required by mid-May 2027.

Why it matters: Enterprise legal teams signing 3 to 5-year workspace leases today will be occupying those spaces when full DPDP enforcement kicks in. The 72-hour breach reporting requirement is particularly relevant: in a shared workspace with shared Wi-Fi infrastructure, the liability chain between operator and tenant is undefined. Clarify this contractually now.

Data Fiduciary and Data Processor

Under the DPDP Act, the entity that determines the purpose and means of processing personal data is the Data Fiduciary. The entity that processes data on behalf of the fiduciary is the Data Processor. In a workspace context, both the tenant (employer) and the coworking operator may qualify as Data Fiduciaries for different data sets.

Why it matters: If the operator collects biometric access data from your employees, who is the Data Fiduciary for that data? If a breach occurs through the shared Wi-Fi network, who reports it within 72 hours? These questions need answers in the workspace agreement.

Data Localization Requirements

Rules requiring certain categories of personal data to be stored and processed within India. While the DPDP Act does not mandate blanket localization, sectoral regulators (RBI for financial data, for example) impose their own requirements.

Why it matters: GCCs processing data for global parent companies must verify that workspace IT infrastructure (servers, cloud gateways, backup systems) supports applicable localization requirements.

Enterprise and GCC-Specific Terms

India had 2,117 GCCs as of FY2026, generating $98.4 billion in revenue. In 2025, GCCs accounted for 38% of office leasing across India’s top seven cities, securing 31.3 million square feet of space. This demand makes workspace due diligence for GCCs a non-trivial exercise.

GCC (Global Capability Centre)

An offshore or nearshore operation established by a multinational corporation to perform technology, analytics, business process, or R&D functions. Setting up a GCC in India requires obtaining DIN, DSC, PAN, TAN, and GST registrations through the Ministry of Corporate Affairs.

Why it matters for workspace diligence: GCC workspace requirements go beyond desks and conference rooms. They include BCP readiness, data security infrastructure, visitor access controls, and compliance with FEMA rules, FDI policy, and RBI guidelines. For an overview of providers serving this segment, see our guide on top corporate flex space providers for GCCs.

FEMA and FDI Compliance

Foreign Exchange Management Act rules and Foreign Direct Investment policy govern how multinational companies structure their Indian operations. Wholly Owned Subsidiaries are the standard structure, while Joint Ventures are required for restricted sectors.

Why it matters: The workspace agreement should align with the entity structure. If the Indian entity is a WOS, the lease should be in the WOS’s name. If it is a branch office, different rules apply for property leasing under FEMA.

Transfer Pricing Documentation

Documentation required by Indian tax authorities to demonstrate that transactions between the Indian entity and its foreign parent are conducted at arm’s length. Includes the GCC’s service fees, cost allocations, and mark-ups.

Why it matters for workspace: The cost of the workspace (rent, CAM, fit-out amortization) feeds into the GCC’s cost base, which in turn affects transfer pricing calculations. Overpaying for workspace inflates the cost base and the mark-up, increasing tax liability.

BCP (Business Continuity Planning) and Swing Seats

BCP readiness in a workspace context means verifiable power backup (DG sets with fuel reserves, UPS for critical systems), dual ISP connectivity, alternate site provisions, and “swing seat” capacity for disaster scenarios. Swing seats are pre-provisioned desks at a secondary location that can be activated if the primary site goes down.

Why it matters: This is a key differentiator between managed offices and basic coworking. Enterprise legal teams should verify BCP provisions in writing, including response time SLAs for failover to the secondary site.

Visitor Access Control

Systems and protocols for managing who enters the workspace, how they are identified, and what areas they can access. Includes reception protocols, visitor badges, pre-registration requirements, and escort policies for sensitive areas.

Why it matters: For GCCs handling client data, uncontrolled visitor access is a security breach waiting to happen. The workspace agreement should specify the operator’s access control obligations, and these should be auditable.

Managed Office vs. Coworking License

Two legally distinct arrangements. A managed office is typically a dedicated, customized space operated on behalf of a single tenant under a service agreement. A coworking license grants the right to use shared workspace and amenities under a license-to-use model, not a lease.

Why it matters: The legal structure affects everything: stamp duty applicability, GST treatment, lock-in enforceability, and sub-leasing rights. Enterprise legal teams must verify which structure they’re actually entering, regardless of what the operator calls it.

Procurement-Defensible Comparison

A documented evaluation process that demonstrates to internal audit, compliance, and procurement teams that the workspace selection was based on objective criteria: cost benchmarking, compliance verification, amenity comparison, and risk assessment across multiple options.

Why it matters: Enterprise legal teams don’t just pick spaces. They must document the evaluation process for internal audit. This term doesn’t appear in any competitor glossary, but it is core to how procurement and legal teams actually operate. CoSqrd’s advisory workflow, which runs from discovery through benchmarking, coordinated tours, term hygiene, and move-in readiness, is specifically built for this kind of procurement-friendly workspace comparison.

Virtual Office Compliance Terms

With founders increasingly shifting to virtual office plus day-pass arrangements, legal teams reviewing VO agreements face a distinct set of compliance checks.

Virtual Office

A service that provides a business address, mail handling, and sometimes phone answering without a physical dedicated workspace. Used primarily for MCA/ROC company registration and GST registration in India.

Why it matters: A virtual office is not a lease. It is a service agreement. The compliance requirements are different, and acceptance varies by state, registrar, and even individual GST officer.

Business Address for MCA/ROC Registration

The registered office address filed with the Ministry of Corporate Affairs. The address must be a real, verifiable location where official correspondence can be received.

Why it matters: Multiple founder threads on r/IndiaStartups discuss the documentation needed for VO-based company registration: the agreement, a landlord NOC, and a utility bill. Acceptance varies by city and department. CoSqrd’s virtual office plans (starting from ₹1,200/month for business registration) include compliance-minded document paths covering NOC, agreement, and utility references, though final validation with a CA is recommended for state and entity-specific rules.

GST Registration via Virtual Office

Using a virtual office address as the principal place of business for GST registration. Requires the VO agreement, landlord NOC for the VO premises, and a recent utility bill as proof of the premises.

Why it matters: Some GST officers conduct physical verification of the address. The VO provider must allow signage or nameplate display and ensure someone is present during verification visits.

For details on how company address compliance works across MCA and GST workflows, see our dedicated guide.

Red flag: The VO provider cannot produce a valid NOC from their own landlord for the premises.

How to Build Your Workspace Due Diligence Checklist Step by Step

Knowing the terms is step one. Assembling them into a working checklist that your team can execute is step two.

Step 1: Classify the workspace type. Is it a traditional commercial lease, a managed office agreement, a coworking license, or a virtual office contract? Each type triggers a different subset of the terms above. A managed office requires fire NOC verification and BCP checks. A virtual office requires NOC and utility bill verification. All types require GST and registration compliance.

Step 2: Map non-negotiable items. Some checks cannot be skipped regardless of workspace type:

• Title verification and encumbrance certificate
• Zoning and land-use confirmation
• Fire Safety NOC (commercial buildings)
• Lease registration (if term exceeds 12 months)
• Stamp duty payment
• GST invoice compliance
• DPDP Act alignment (if shared infrastructure)

Step 3: Add situational items based on enterprise profile. GCCs add FEMA/FDI compliance, transfer pricing documentation, BCP swing seats, and visitor access controls. Startups scaling to multi-city add sub-leasing rights, permitted use flexibility, and virtual office compliance checks.

Step 4: Define red flags that should halt the deal. Missing OC, expired Fire NOC, unregistered lease for a term over 12 months, landlord refusal to share title documents, coworking operator without explicit sub-licensing consent from landlord. Any of these should pause the process until resolved.

Step 5: Assign validation owners. Title verification goes to external counsel. Fire NOC and OC go to the facilities team. GST and TDS compliance go to finance. DPDP alignment goes to the data protection officer or privacy counsel. BCP verification goes to IT operations.

Step 6: Document everything for audit. Every check, every document reviewed, every red flag raised and resolved should be logged. This is your procurement-defensible record.

When to involve external counsel: For any lease above ₹50 lakh annual rent, multi-location deals, GCC setups with FEMA implications, or any arrangement where the landlord pushes back on standard diligence requests.

To benchmark workspace options across micro-markets while building your checklist, verified listings with transparent pricing make side-by-side comparison easier.

Quick-Reference Checklist Table

Use this as a starting template. Customize it for your organization’s risk profile and workspace type.

For verified workspaces with shortlist-ready compliance documentation, applying this checklist during site visits turns abstract terms into pass/fail criteria.

Frequently Asked Questions

What is the difference between workspace due diligence and standard M&A due diligence?

M&A due diligence evaluates a company’s financials, liabilities, contracts, and intellectual property. Workspace due diligence evaluates a physical location’s legal title, regulatory compliance, safety certifications, data protection readiness, and lease terms. The overlap is limited to contract review. The rest, including fire NOC validation, zoning checks, DPDP alignment, and BCP verification, is unique to workspace evaluation.

Is lease registration mandatory for all commercial leases in India?

Under the Registration Act, 1908, any lease exceeding twelve months must be registered with the Sub-Registrar. An unregistered lease of more than twelve months is inadmissible as evidence in court. Many operators use 11-month “leave and license” agreements to avoid registration, which works legally but offers less protection for the tenant on renewal terms.

How does the DPDP Act affect coworking and shared workspace arrangements?

Coworking operators collect personal data through visitor logs, CCTV systems, biometric access controls, and Wi-Fi networks. Under the DPDP Act, 2023, they are likely Data Fiduciaries for this data. The 72-hour breach notification requirement creates a tricky liability question: if a breach occurs through shared Wi-Fi, who is responsible for reporting? Enterprise tenants should address this contractually before signing.

What security deposit is normal for commercial leases in India?

Landlords typically require 6 to 12 months’ rent as a security deposit. The Model Tenancy Act caps residential deposits at 6 months, but commercial leases are negotiated separately and often land at 8 to 10 months. Always negotiate the refund timeline and whether the deposit earns interest.

Why is the landlord NOC critical for coworking arrangements?

Most standard commercial leases prohibit sub-letting. A coworking operator who leases a floor and then licenses seats to multiple tenants is, functionally, sub-letting. If the operator’s own lease doesn’t explicitly permit this, the arrangement can be challenged by the landlord. Enterprise legal teams should review the operator’s primary lease, not just the license agreement offered to them.

How do CAM charges typically work in Indian commercial leases?

CAM covers maintenance of common areas like lobbies, elevators, parking, and landscaping. Billing can be a flat fee, prorated per square foot, or based on headcount. The risk is that CAM charges escalate without a cap. Insist on a defined rate per square foot with an annual escalation cap, and negotiate audit rights to verify that CAM collections are actually being spent on maintenance.

What workspace compliance issues are specific to GCCs in India?

GCCs face additional requirements beyond standard workspace diligence: FEMA and FDI compliance for the entity structure, transfer pricing documentation that includes workspace costs in the cost base, BCP and swing seat provisions for client SLA compliance, visitor access controls for data security, and sometimes data localization requirements imposed by sectoral regulators. With GCCs now accounting for 38% of office leasing in India’s top cities, these checks are increasingly standardized.

When should enterprise legal teams start the due diligence process?

Before agreeing on price. The strongest negotiating position exists before the LOI is signed. Map your checklist to the exclusivity period timeline so that title verification, encumbrance checks, and fire NOC validation can be completed within the window. Starting diligence after verbally agreeing on terms, as many teams do, limits your ability to renegotiate if issues surface.