Operational Due Diligence (ODD) for Fund Investors
Operational due diligence is the part of a fund investment decision that asks not whether the strategy works but whether the business around it can be trusted. This guide sets out what an ODD review covers, the rules it tests a manager against, a checklist by area, the red flags that end reviews, and how fund managers and administrators prepare.
Investment due diligence can be wrong and still be defensible: a sound process can produce a losing year. Operational due diligence is held to a different standard, because operational failure is usually avoidable and usually visible in advance to anyone who looks. That is why allocators separate the two, staff ODD with people who read agreements and reconciliations rather than pitch books, and give them the authority to say no.
This guide is written for two audiences: investors and consultants building or refreshing an ODD programme, and fund managers, administrators and transfer agents who are on the receiving end and want to pass. The AML/KYC section is deliberately detailed, because investor onboarding is the area where our readers are most often asked to produce evidence, and where the regulatory bar is moving. For the investor-side rules themselves see our guides to know your investor and investor onboarding.
What Operational Due Diligence Covers
ODD examines everything that can lose an investor money other than the investment decisions themselves: fraud, theft, mis-valuation, operational error, counterparty and service-provider failure, regulatory breach, key-person loss and the collapse of the management company. The table contrasts it with investment due diligence.
| Question | Investment due diligence | Operational due diligence |
|---|---|---|
| What is being judged | Whether the strategy can make money: edge, process, risk-taking, track record, team | Whether the business around the strategy can be trusted with the money: people, controls, service providers, systems |
| Who does it | Portfolio managers, research analysts, investment committee | A separate ODD team, or an operational specialist with a right of veto, so that a strong return story cannot override a control failure |
| Typical evidence | Performance, attribution, position data, pitch book, reference calls on the strategy | Policies, audited accounts, regulatory filings, service-provider confirmations, onsite walkthroughs, background checks |
| Typical outcome | Conviction and sizing | Approve, approve with conditions, or veto; then a monitoring plan |
The two reviews share documents and meetings but reach independent conclusions. A common governance design is that ODD cannot approve an investment, only block one, so that its finding is never traded off against expected return.
Who Performs ODD and When
Institutional investors such as pension schemes, insurers, sovereign and endowment funds, funds of funds, outsourced CIO providers, private banks and wealth platforms, family offices and investment consultants all run ODD, either in-house or through a specialist firm. Fund managers run it in the other direction on their own service providers, and administrators and distributors run a version of it on the managers and funds they take on.
- Before commitment. The full review described below, completed before the subscription is signed or the capital commitment is made.
- Annually. A refreshed questionnaire, the new audited statements and regulatory filings, and a shorter meeting focused on change.
- On a trigger. A change of auditor, administrator or custodian; departure of a key person; a regulatory examination or enforcement action; a NAV restatement; rapid growth or shrinkage of assets; a new strategy or vehicle; or adverse media about the firm or its principals.
The Rules an ODD Review Tests Against: United States
Most ODD questions map to a regulatory requirement. For an SEC-registered adviser the anchors are the compliance rule, the custody rule, the Form ADV and Form PF reporting rules, the books-and-records rule and, from 2028, the FinCEN AML rule. The summaries below are paraphrased from the current Code of Federal Regulations.
| Rule | What it requires | What the ODD reviewer looks for |
|---|---|---|
| Compliance rule, 17 CFR 275.206(4)-7 | A registered adviser must adopt and implement written policies and procedures reasonably designed to prevent violations of the Advisers Act, review their adequacy and effectiveness at least annually, and designate a chief compliance officer who is a supervised person | The compliance manual, the most recent annual review and what changed because of it, the CCO's seniority, reporting line and other roles |
| Custody rule, 17 CFR 275.206(4)-2 | Client funds and securities must sit with a qualified custodian (a bank, a registered broker-dealer, a registered futures commission merchant or a foreign financial institution that segregates customer assets), with notice to clients, quarterly custodian statements and an annual surprise examination by an independent public accountant. For a private fund that is audited at least annually by a PCAOB-registered and inspected independent public accountant and distributes GAAP financial statements to all investors within 120 days of its fiscal year end, and on liquidation, the adviser is excused from the notice and quarterly-statement requirements and deemed to have met the surprise-examination requirement; the assets must still sit with a qualified custodian | Who the custodians and prime brokers are, whether the audit exception is relied on, when the last audited statements went out, whether the auditor is PCAOB-registered and inspected, and any qualified opinion or change of auditor |
| Form ADV, 17 CFR 275.204-1 and 275.204-3 | An annual updating amendment to Form ADV within 90 days of fiscal year end, other-than-annual amendments when the Form ADV instructions require them, and delivery of the Part 2A brochure or a summary of material changes to clients annually within 120 days of fiscal year end where there are material changes. Item 9 of Part 2A carries disciplinary information | Consistency between Form ADV, the offering documents and what the team says in meetings; disciplinary disclosures; conflicts and related-party arrangements; assets under management trends |
| Form PF, 17 CFR 275.204(b)-1 | A registered adviser that manages private fund assets of at least US$150 million at its last fiscal year end files Form PF at least annually, with larger advisers filing additional sections under the Form PF instructions | Whether the adviser files, which sections, and whether the fund data given to the investor reconciles with regulatory reporting |
| Books and records, 17 CFR 275.204-2 | The records a registered adviser must make and keep, including those relating to its compliance policies and procedures | Whether the records that support the DDQ answers actually exist and can be produced on request |
| FinCEN investment adviser AML rule, 89 FR 72156 | A final rule of 4 September 2024 brings covered registered investment advisers and exempt reporting advisers into the Bank Secrecy Act definition of financial institution, with AML/CFT programme and suspicious activity reporting duties. FinCEN delayed its effective date by two years, to 1 January 2028 (91 FR 36, published 2 January 2026) | What the manager has done so far, who owns the programme, and whether investor due diligence already runs to a bank-equivalent standard. See our guide to the investment adviser AML rule |
Two points in the custody rule drive a great deal of ODD practice. First, the definition of custody is wide: an adviser has custody if it or a related person holds client assets or has any authority to obtain them, including through the capacity of general partner or managing member. Second, the audit exception is conditional: the fund must be audited at least annually by a PCAOB-registered and inspected independent public accountant and the audited statements must reach all investors within 120 days of the fiscal year end. A late audit therefore is not only an inconvenience; it removes the basis on which the adviser avoided a surprise examination.
The Rules an ODD Review Tests Against: Singapore, Luxembourg and Industry Standards
| Regime | Instrument | Relevance to ODD |
|---|---|---|
| Singapore | MAS Guidelines on Outsourcing (Financial Institutions other than Banks), dated 11 December 2023, effective 11 December 2024, last revised 24 January 2025 | Paragraph 5.4 expects an institution to subject a service provider to due diligence before entering, renegotiating or renewing an outsourcing arrangement, covering experience, financial strength, governance and reputation, security and controls, risk management, disaster recovery, sub-contractors, insurance, external environment and compliance record (5.4.3), to document it and to re-perform it periodically (5.4.5). A fund manager's own provider due diligence is therefore a line item in an investor's ODD |
| Singapore | MAS Notice SFA04-N02 (dated 30 June 2025, in force 1 July 2025) | Sets the manager's customer due diligence, screening, monitoring, record-keeping and reporting duties for the funds it manages. The ODD team checks that the investor-onboarding function described in the DDQ matches the Notice. See MAS Notice SFA04-N02 explained |
| Luxembourg | CSSF Circular 18/698 (23 August 2018) | Governs the authorisation and organisation of Luxembourg investment fund managers and carries specific AML/CFT provisions for managers and registrar agents, covering outsourcing and its oversight, NAV calculation, fund administration and customer onboarding. An ODD on a Luxembourg structure checks the manager's substance and its oversight of delegates against it |
| Industry standards | ILPA Due Diligence Questionnaire 2.0 (1 November 2021) and the AIMA DDQ modules (first published 1997, modular versions updated through 2025) | The standard question sets most allocators start from. ILPA's is written for private-markets funds; AIMA's has modules for open-end funds, closed-end funds, managed accounts, platforms and sub-advisers, with short-form manager and fund modules |
Managers in other centres face equivalents: the depositary and delegation rules under the EU alternative investment fund managers framework, the FCA's systems-and-controls and outsourcing rules in the United Kingdom, and the Cayman Islands Monetary Authority's requirements for registered funds and their AML officers. The structure of the review is the same; only the citations change.
How an ODD Review Runs
Scoping and the questionnaire
The investor sends a questionnaire, usually the ILPA DDQ for a closed-end private fund or the relevant AIMA module for an open-end fund or managed account, with the investor's own additions. The answers set the agenda for everything that follows; AIMA describes the DDQ as an early step in the process rather than the last one.
Document review
The team reads the offering and constitutional documents, the compliance manual, policies on valuation, cash, personal dealing and AML, three years of audited statements, Form ADV or the local regulatory filings, service-provider agreements and insurance schedules, and notes every point where documents and DDQ answers diverge.
Onsite or virtual meetings
Separate sessions with the chief operating officer, chief financial officer, chief compliance officer and head of operations, plus a walkthrough of a trade from order to settlement, a cash movement from request to release, and an investor subscription from first contact to acceptance.
Independent verification
Direct contact with the administrator, auditor, custodian or prime broker and legal counsel to confirm the relationship, its scope and its history. Background checks on principals cover regulatory records, litigation, corporate affiliations and adverse media. See our guide to running an adverse media search.
Testing
Samples rather than assertions: a few wires traced through the approval chain, a month-end NAV reconciled to custodian statements, a hard-to-value position traced to its pricing source, and a handful of investor files checked for identity, ownership and screening evidence.
Report, rating and conditions
A written report rates each area, lists exceptions and sets conditions, for example an additional signatory, a change in administrator reporting, or completion of an independent AML audit before the subscription is accepted. Serious findings are a veto regardless of the investment case.
Ongoing monitoring
Annual refresh of the DDQ, review of each year's audited statements and regulatory filings, and event-driven reviews on a change of auditor, administrator, key person, strategy or regulatory status.
ODD Checklist by Area
The checklist below is the working list most ODD teams converge on. Managers can use it to assemble a data room; investors can use it to structure a report.
| Area | Questions to answer | Evidence to obtain |
|---|---|---|
| Ownership and governance | Who owns the management company and how is it capitalised? Who sits on the fund board and which directors are independent? How are conflicts identified and escalated? | Ownership chart, board minutes, conflicts register, directors' letters of engagement |
| People | Who are the key persons, what is their history, and what happens if one leaves? Have principals or senior staff faced regulatory, civil or criminal action? | Biographies, background and adverse-media checks, Form ADV Part 2A Item 9 or the equivalent regulatory record, key-person clauses |
| Compliance programme | Is there a written compliance manual tailored to the business, an annual review, a CCO with authority, personal account dealing and gifts policies, and training? | Compliance manual, annual review memo, CCO reporting line, training log, regulatory correspondence and examination letters |
| Cash and custody controls | Who can move cash? How many signatories? Does the administrator independently verify wire instructions? Are assets at a qualified custodian in the fund's name? | Cash movement policy, authorised signatory list, custodian and prime broker confirmations, test of a sample of wires |
| Valuation | Who values hard-to-value positions, with what sources and hierarchy? Is there a valuation committee independent of the portfolio managers? How often does the administrator challenge prices? | Valuation policy, committee minutes, administrator pricing matrix, year-end audit adjustments |
| Fund administration and NAV | Is NAV calculated independently? Does the administrator reconcile cash and positions to the custodian and prime broker? How are errors handled and disclosed? | Administration agreement, service-level reports, NAV error log, reconciliation samples |
| Audit and financial reporting | Who audits, how long have they done so, and were the last statements unqualified and delivered on time? | Audited financial statements for three years, management letters, auditor confirmation |
| Legal and fund terms | Do the offering documents, subscription documents and side letters say what the manager says? Are fees and expenses charged as disclosed? | Offering memorandum, LPA or constitution, side-letter summary, expense allocation policy, fee reconciliation |
| Technology, cyber and business continuity | What systems run the order lifecycle and the books? Who has access? When were the BCP and cyber controls last tested? | Systems map, access review, penetration test summary, BCP test results, incident log |
| AML/KYC and investor onboarding | Who performs investor due diligence, the manager or the administrator? What is checked at subscription, how are beneficial owners traced, how often are investors re-screened, how are suspicious transactions escalated? | AML policy, reliance or delegation agreement, screening configuration, sample investor files, periodic review records, STR or SAR log, independent AML audit |
| Insurance | What professional indemnity, D&O and crime cover is in place, with what limits and exclusions? | Policy schedules and claims history |
Red Flags That End Reviews
Some findings can be remedied with conditions. Others are vetoes in almost every ODD framework:
- A single person who can initiate and release payments, or wire instructions that the administrator accepts without call-back verification.
- The manager, or a related party, acting as custodian, administrator or valuation agent without the independence conditions the custody rule describes.
- Audited statements delivered late, a change of auditor without a clear reason, or an auditor that is not registered with and inspected by the relevant oversight body.
- A compliance manual that is generic, an annual review that produced no changes, or a CCO who is also the chief financial officer and head of operations.
- Form ADV, the offering memorandum and the DDQ answers that do not agree with each other.
- Investor files with the subscription form but no identity verification, no beneficial-owner chain and no evidence of screening, or an administrator that is assumed to be doing the AML work with nothing in writing.
- Reluctance to let the ODD team speak directly to the administrator, auditor or custodian.
The common thread is independence: of the custodian from the manager, of the administrator's NAV from the portfolio manager's marks, of the auditor from both, and of the compliance function from the revenue line.
ODD on the AML/KYC Function
Investor onboarding has moved from a back-office formality to a standing ODD topic, for three reasons. Allocators are themselves regulated and must show that the funds they invest in do not expose them to illicit money. Regulators have extended bank-style customer due diligence to fund managers, with MAS Notice SFA04-N02 already in force and the FinCEN investment adviser rule due in 2028. And the investor base of most funds now includes nominees, platforms, feeders and layered private structures, so the question of who is actually behind the capital has become harder. The ODD team typically asks:
- Ownership of the function. Who performs investor due diligence: the manager, the administrator, a transfer agent, or a combination. Where the manager relies on a third party, the ODD team asks for the agreement, the regulatory basis for reliance and evidence that the manager can obtain the underlying documents on request. MAS Notice SFA04-N02, for example, permits reliance only on specified third parties, with conditions, and never for ongoing monitoring.
- What is checked at subscription. Identity verification of individuals, entity verification of companies, trusts and partnerships, tracing of beneficial owners through intermediate layers, and screening against sanctions, PEP and adverse-media sources. The team will read a sample of files, not the policy alone. See fund subscription documents and the look-through approach.
- Investor risk rating and enhanced measures. How investors are risk-rated, what triggers enhanced due diligence and source-of-wealth inquiries, and who approves higher-risk investors. See source of funds versus source of wealth.
- Ongoing monitoring. Re-screening frequency, periodic reviews by risk tier, monitoring of subscriptions, redemptions, transfers and third-party payments, and the route from an alert to a decision.
- Reporting and records. The suspicious transaction reporting procedure, the named reporting officer, the record-retention period, and whether files can be produced within days rather than weeks.
- Independent testing. Whether the AML programme has been audited or tested independently, and what was found. See our AML internal audit checklist.
- Regulatory horizon. For US advisers, what the firm is doing ahead of the FinCEN rule's 1 January 2028 effective date; for Singapore managers, how the revised MAS Notice SFA04-N02 dated 30 June 2025 and in force from 1 July 2025 was implemented; for other regimes, the equivalent.
The manager that passes this section can show a written policy, a clear allocation of responsibility between itself and its administrator, complete files for a sample of investors chosen by the reviewer rather than the manager, periodic reviews that actually happened, and a reporting trail. The one that struggles usually has the policy but not the evidence.
Preparing for ODD as a Manager or Administrator
Keep a standing data room
Hold the current compliance manual, policies, audited statements, regulatory filings, service-provider agreements, insurance schedules, organisation chart and a completed ILPA or AIMA DDQ in one place, with an owner for each document and a review date.
Make the answers agree
Reconcile the DDQ, the offering documents, Form ADV or local filings and the marketing material before an investor does. Most ODD findings begin as an inconsistency.
Document the controls you already operate
Dual authorisation on payments, call-back verification by the administrator, valuation committee minutes and reconciliation sign-offs only count if they leave a record.
Run your own provider due diligence
Apply to your administrator, custodian, auditor and technology vendors the same assessment a regulator expects of you. The MAS outsourcing guidelines list the factors (paragraph 5.4.3); an investor will ask whether you have done it and when it was last refreshed.
Prepare the investor-onboarding walkthrough
Be ready to show a complete investor file end to end: the subscription documents, identity and entity verification, the beneficial-owner chain, screening results, the risk rating and approval, and the periodic review. A system that holds all of this in one record makes the walkthrough short.
Fix what you find first
Where a control is weak, change it before the review and be able to say when and why. An honest account of a closed gap is received far better than a gap discovered onsite.
How One Constellation Supports the Investor-Onboarding Section of ODD
One Constellation gives fund managers, fund administrators and transfer agents one system for the investor-onboarding controls an ODD team tests: an investor onboarding portal that collects subscription information and documents, identity verification for individuals, KYB and beneficial-ownership tracing for entity investors, sanctions, PEP and adverse-media screening at onboarding and on a periodic basis, investor risk assessment, transaction monitoring of subscriptions, redemptions and transfers, and case management with STR workflows. Each investor file, its screening history, its reviews and its approvals sit in one record with an audit trail, so the walkthrough an ODD reviewer asks for is a matter of opening the file. See investor onboarding and AML compliance for fund managers.
Frequently Asked Questions
What is operational due diligence in fund investing?
Operational due diligence is an investor's review of a fund manager's business rather than its investment strategy: ownership and governance, compliance, cash and custody controls, valuation, administration, audit, legal terms, technology, business continuity, insurance and the AML/KYC process for onboarding investors. Its purpose is to identify the risk of fraud, operational failure or regulatory breach before capital is committed.
How is ODD different from investment due diligence?
Investment due diligence judges whether the strategy is likely to make money. ODD judges whether the organisation can be trusted to run it: whether assets are safe, valuations are independent, controls work and the firm complies with its rules. The two are usually done by different people, and ODD commonly has the power to veto an investment but not to approve one.
What documents does an ODD review ask for?
A completed questionnaire such as the ILPA DDQ or an AIMA DDQ module, offering and constitutional documents, the compliance manual and key policies, three years of audited financial statements, regulatory filings such as Form ADV, service-provider agreements, insurance schedules, an organisation chart and biographies, and, for the AML section, the AML policy, any reliance agreement with the administrator, sample investor files and evidence of screening and periodic review.
What are the biggest red flags in operational due diligence?
Weak cash controls, such as a single signatory or no call-back on wire instructions; lack of independence between the manager and its custodian, administrator or valuation process; late or qualified audits or an unexplained change of auditor; inconsistency between Form ADV, offering documents and DDQ answers; and investor files that lack identity verification, beneficial-owner information or screening evidence.
How often is operational due diligence repeated?
A full review before the initial commitment, a refresh at least annually around the audited statements and regulatory filings, and an event-driven review whenever something material changes, such as a new auditor or administrator, the departure of a key person, a regulatory action or a NAV error.
What do ODD teams check about investor KYC and AML?
Who performs investor due diligence and under what agreement, what is verified at subscription, how beneficial owners are traced, how investors are risk-rated and re-screened, how suspicious activity is escalated and reported, how long records are kept, and whether the programme has been independently tested. They usually read a sample of investor files rather than relying on the policy.
Sources
- 17 CFR 275.206(4)-7, Compliance procedures and practices (Cornell LII e-CFR)
- 17 CFR 275.206(4)-2, Custody of funds or securities of clients by investment advisers (Cornell LII e-CFR)
- 17 CFR 275.204-1, Amendments to Form ADV (Cornell LII e-CFR)
- 17 CFR 275.204-3, Delivery of brochures and brochure supplements (Cornell LII e-CFR)
- 17 CFR 275.204(b)-1, Reporting by investment advisers to private funds (Form PF) (Cornell LII e-CFR)
- 17 CFR 275.204-2, Books and records to be maintained by investment advisers (Cornell LII e-CFR)
- FinCEN: AML/CFT Program and SAR Filing Requirements for Registered Investment Advisers and Exempt Reporting Advisers, final rule, 89 FR 72156 (4 September 2024)
- FinCEN: final rule delaying the effective date of the investment adviser AML/CFT program and SAR rule, 91 FR 36 (2 January 2026)
- ILPA: Due Diligence Questionnaire (DDQ 2.0, 1 November 2021)
- AIMA: Due Diligence Questionnaires
- MAS: Guidelines on Outsourcing (Financial Institutions other than Banks), 11 December 2023, effective 11 December 2024, last revised 24 January 2025 (page)
- MAS: Guidelines on Outsourcing (Financial Institutions other than Banks), last revised 24 January 2025 (PDF)
- MAS Notice SFA04-N02 dated 30 June 2025 (PDF)
- CSSF: Circular CSSF 18/698 (23 August 2018)
This article is general information, not legal advice. Requirements change — check the current text with the regulator before relying on it.
Investor Files an ODD Team Can Read
See how fund managers, administrators and transfer agents keep identity, ownership, screening, reviews and approvals for every investor in one record with an audit trail.
