Technology Due Diligence
Assesses a company as part of an acquisition or investment.
A preview of the first questions
Click an answer to see what a Kaliteq assessment feels like. Nothing is ever saved here.
Disposez-vous d'un responsable IT ou CTO dédié ?
Votre portefeuille d'applications et de services est-il documenté et maintenu à jour ?
Existe-t-il une instance de pilotage IT (comité de direction technique, comité IT) qui se réunit régulièrement ?
Les rôles et responsabilités IT sont-ils clairement définis au sein de l'organisation (type matrice RACI) ?
Another 163 questions await you
This is only a preview of the diagnostic
Continue to discover all the questions and get your personalized analysis.
Start my free trial15+ diagnostics available · 1000+ maturity questions · AI built in
What is the Technology Due Diligence ?
Assesses a company as part of an acquisition or investment.
Objective : Évaluer une entreprise dans le cadre d'une acquisition ou d'un investissement.
Domains assessed
Each domain is made up of factual questions, with no unnecessary jargon.
Gouvernance IT
Organisation, pilotage et stratégie informatique
Infrastructure
Hébergement, environnements, réseau, redondance et supervision
Architecture Logicielle
Choix architecturaux, scalabilité, couplage et documentation technique
Développement & Code Source
Qualité du code, couverture de tests, bus factor et pratiques de développement
Dette Technique & Maintenabilité
Qualité du code, obsolescence, complexité et stratégie de remboursement
Sécurité
Protection endpoints, gestion des accès, secrets et sécurité API
Données & Sauvegardes
Classification, protection, chiffrement, sauvegardes et récupérabilité
Qualité des données
Gouvernance, référentiels et intégrité des données
Conformité & RGPD
Respect des obligations légales sur les données personnelles
DevOps & CI/CD
Pipelines de déploiement, automatisation, métriques DORA et qualité des releases
Dépendances & Fournisseurs Techniques
Librairies open source, supply chain, vendor lock-in et gestion des vulnérabilités
Conformité fournisseurs
Audits et clauses sécurité dans la chaîne d'approvisionnement
Applications
Logiciels métier, licences et dépendances critiques
Methodology
The Technology Due Diligence is inspired by the main practice areas of CMMI v3 (governance, development, operations, cybersecurity, product…), to provide a pragmatic maturity diagnostic — without claiming official CMMI conformity.
Frequently asked questions
How long does the Technology Due Diligence take?
The Technology Due Diligence includes around 167 questions across 13 domains, roughly 84 to 134 minutes for a first pass. Answers remain editable as long as the diagnostic has not been finalized.
Which domains does the Technology Due Diligence cover?
The Technology Due Diligence covers the following domains: Gouvernance IT, Infrastructure, Architecture Logicielle, Développement & Code Source, Dette Technique & Maintenabilité, Sécurité, Données & Sauvegardes, Qualité des données, Conformité & RGPD, DevOps & CI/CD, Dépendances & Fournisseurs Techniques, Conformité fournisseurs, Applications.
Who should answer the Technology Due Diligence in my organization?
Typically, management answers the governance-related questions, while operational leads answer the questions in their domain (e.g. CISO or IT director for cybersecurity, CTO for development). Kaliteq lets you invite several contributors on the same diagnostic, each answering the domains that concern them.
What methodology is the Technology Due Diligence based on?
The Technology Due Diligence is inspired by the main practice areas of CMMI v3 (governance, development, operations, cybersecurity, product…), to provide a pragmatic maturity diagnostic — without claiming official CMMI conformity.
What does the report generated at the end of the Technology Due Diligence contain?
At the end of the diagnostic, Kaliteq generates a report structured by domain: maturity level, identified strengths, risks prioritized by impact and remediation effort, and recommendations automatically turned into a tracked Progress Plan. The report is based exclusively on the answers provided and any associated documents, with full traceability to their source.
Is the Technology Due Diligence suited to a small or mid-sized business?
Yes. The Technology Due Diligence is rated "avance" difficulty. Its advanced level covers more technical topics; it is best completed with input from an operational lead in the domain (CISO, CTO, IT director…). Kaliteq is designed for organizations of any size, with no dedicated team required to run the diagnostic.
How do you prepare for an IT due diligence?
An IT due diligence is prepared in advance by gathering technical documentation (architecture, vendor contracts, security audit results), clarifying code ownership, and structuring a Data Room. The diagnostic structures this preparation around factual domains (architecture, technical debt, DevOps, security, governance), with a report that can be shared directly with the acquirer or investor.
One engine shared by every diagnostic
Adaptive questionnaires, intelligent Data Room, Smart Hub RAG engine and automated reports: discover the tools shared by every Kaliteq diagnostic.
Discover Kaliteq's solutions