How to Respond to Sponsor Due Diligence Questionnaires Efficiently

The 2025 SFC enforcement report recorded 18 actions against sponsors and their officers, a 50% year-on-year increase from 2024, with fines totalling HKD 126.7 million. Concurrently, HKEX’s Listing Division issued 22 “file-only” decisions in Q1 2026 alone, rejecting applications where sponsor due diligence documentation failed to meet the standard required under the Listing Rules. For any CFO or company secretary guiding a company toward a Main Board listing, the sponsor’s due diligence questionnaire (DDQ) is no longer a procedural formality — it is the single most scrutinised document in the application package. A poorly managed DDQ response cycle can delay the A1 filing by 8 to 12 weeks, incur additional legal fees of HKD 1.5 million to HKD 3 million, and, in the worst case, trigger a referral to the SFC’s Enforcement Division under section 213 of the Securities and Futures Ordinance (Cap. 571). This article provides a tactical framework for responding to sponsor DDQs with the speed and precision that the current regulatory environment demands.

The Regulatory Pressure on DDQ Responses

Sponsor Liability Under the SFC Code of Conduct

The SFC’s Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission (the Code of Conduct) imposes a strict duty on sponsors under paragraph 17.4 to exercise due diligence to ensure that all information in the listing application is true, complete, and not misleading. In practice, this means the sponsor must independently verify every material statement in the prospectus, regardless of whether the information was provided by the issuer or its professional advisers. The 2024 SFC disciplinary action against [Sponsor A] for deficiencies in its due diligence on a GEM applicant’s revenue recognition policies illustrates the consequence of inadequate verification: a fine of HKD 32 million and a 24-month suspension of the sponsor’s licence to advise on corporate finance transactions.

For the issuer, this regulatory posture translates into a DDQ that is significantly more granular than the standard checklists used in private M&A transactions. A typical Hong Kong IPO sponsor DDQ now spans 800 to 1,200 questions, organised across 12 to 15 workstreams: corporate structure, business model, financial performance, legal compliance, intellectual property, material contracts, related-party transactions, and management background. Each question demands a primary-source response — not a summary or an assertion — and the sponsor’s compliance team will cross-reference every answer against independent third-party data.

The HKEX’s “File-Only” Decision Framework

HKEX Listing Decision LD119-2024 formalised the Exchange’s power to reject an application without substantive review if the sponsor’s due diligence work papers do not demonstrate adequate planning and execution. Under this framework, the Listing Division will issue a “file-only” decision when the sponsor’s due diligence report (submitted as part of the A1 application under Main Board Rule 9.10A(1)) fails to show that the sponsor has obtained and reviewed the issuer’s core business documentation — including board minutes, material contracts, and bank confirmations — for the full track-record period.

The practical consequence for the issuer: the DDQ response must be structured so that the sponsor can trace each answer back to a specific document, with the document indexed and referenced in the sponsor’s due diligence work papers. Any gap in the document trail — even a missing board resolution for a routine capital increase — can trigger a request for additional information that delays the filing by 2 to 4 weeks per gap.

Structuring the DDQ Response Workflow

Pre-Response: The Document Repository Architecture

The most efficient DDQ response begins before the sponsor sends the first questionnaire. Every issuer should establish a cloud-based document repository — typically a virtual data room (VDR) with granular access controls — containing the following categories of documents, organised by the sponsor’s expected workstreams:

• Corporate records: Certificate of incorporation, constitutional documents, board and shareholder meeting minutes for the past 5 financial years (or since incorporation, whichever is shorter), registers of directors and shareholders, and all share transfer records.
• Financial records: Audited financial statements for the track-record period (3 financial years for Main Board under Rule 8.05), management accounts for the stub period, bank statements for all material accounts, and aged trial balances.
• Contractual records: All material contracts as defined under Main Board Rule 14.04(1), including supply agreements, distribution agreements, loan facilities, and guarantee deeds, each with a signed counterparty copy.
• Regulatory filings: Licences, permits, and approvals from all relevant PRC and Hong Kong authorities for the issuer’s principal business activities, plus any correspondence with regulators.

The repository should be structured so that each document is assigned a unique identifier (e.g., “FIN-001” for the FY2024 audited financials) and tagged with the relevant workstream. The sponsor’s team can then issue the DDQ as a spreadsheet with a column for the document reference, and the issuer’s response team simply populates that column rather than drafting narrative answers.

The Response Team: Roles and Escalation Paths

A dedicated response team of 5 to 7 individuals is optimal for a Main Board IPO. The team should comprise:

• One project lead (typically the CFO or company secretary) who holds the single point of accountability for the response timeline and escalates issues to the board.
• Two document specialists (from the finance and legal departments) who locate, redact, and upload documents.
• One compliance officer who reviews each response for consistency with the issuer’s internal policies and prior disclosures.
• One external legal adviser (from the issuer’s Hong Kong legal counsel) who reviews responses for legal privilege and regulatory risk.
• One external auditor (from the reporting accountant) who confirms the financial data referenced in responses.

The team should hold a daily 30-minute stand-up meeting at 09:00 HKT to review the prior day’s responses, identify bottlenecks, and reassign tasks. Any question that requires a board-level decision — such as a response that discloses a previously undisclosed related-party transaction — must be escalated to the board within 24 hours, with a written recommendation from the project lead.

Answering the High-Risk Questions

Revenue Recognition and Channel Stuffing

The sponsor’s most scrutinised workstream is revenue recognition, particularly for issuers with PRC-based manufacturing or distribution businesses. The SFC’s 2023 thematic review of sponsor due diligence on revenue found that 78% of deficiencies related to inadequate verification of revenue cut-off, side agreements, and channel-stuffing arrangements.

When the DDQ asks for “a description of the issuer’s revenue recognition policy and the basis for the timing of revenue recognition,” the issuer must provide:

1. The exact wording of the policy as stated in the accounting manual, with the page number.
2. A sample of 20 to 30 sales transactions from each of the last 3 financial years, showing the date of delivery, date of invoicing, date of payment, and date of revenue recognition in the general ledger.
3. For each sample, a PDF of the signed delivery receipt and the corresponding bank statement showing receipt of funds.

The sponsor will then independently verify that the revenue recognition date matches the delivery date (or the date of customer acceptance, if the contract requires it). Any discrepancy of more than 15 days between delivery and revenue recognition will trigger a follow-up question and potentially a request for an audit of the revenue cycle.

Related-Party Transactions and Connected Transactions

Under Main Board Rule 14A.35, all connected transactions must be disclosed in the prospectus, and the sponsor must verify that the terms are fair and reasonable and on normal commercial terms. The DDQ will ask for “a complete list of all related-party transactions during the track-record period, with supporting documentation.”

The issuer must provide not only the list but also the following for each transaction:

• The contract or agreement, signed by both parties.
• Evidence of board approval (board resolution or written consent under the company’s articles).
• For transactions exceeding HKD 1 million or 0.1% of the issuer’s revenue (whichever is lower), a fairness opinion from an independent financial adviser, even if the transaction is not formally classified as a connected transaction under the Listing Rules.

The most common deficiency in this area is the omission of transactions that are not formally documented but are nonetheless related-party transactions under Hong Kong Financial Reporting Standard (HKFRS) 24. For example, a director’s personal guarantee of a company loan is a related-party transaction and must be disclosed, even if no fee was charged.

PRC Regulatory Compliance and the VIE Structure

For PRC-based issuers using a variable interest entity (VIE) structure, the DDQ will include a dedicated section on compliance with PRC laws and regulations, particularly the 2023 Regulations on the Administration of Foreign Investment and the Cybersecurity Law. The sponsor will require:

• A legal opinion from a qualified PRC law firm (the issuer’s PRC legal counsel) confirming that the VIE structure does not violate any PRC laws.
• Copies of all licences and permits held by the PRC operating entities, with a reconciliation to the business description in the prospectus.
• For issuers in regulated industries (e.g., education, healthcare, financial services), a confirmation from the relevant PRC regulator that the issuer’s operations are in compliance.

The issuer must provide these documents in both Chinese and English, with a certified translation. The sponsor will also perform an independent search of the PRC National Enterprise Credit Information Publicity System to verify that the operating entities are in good standing. Any discrepancy — such as a licence that expired 30 days before the filing — will require a written explanation and, if the licence has not been renewed, a risk factor in the prospectus.

Managing the Timeline and Avoiding Common Pitfalls

The 8-Week Response Window

The typical sponsor DDQ is issued 12 to 16 weeks before the planned A1 filing date. The issuer should aim to complete the initial response within 8 weeks, leaving 4 to 8 weeks for the sponsor’s follow-up questions and the sponsor’s own verification procedures. A response that takes longer than 10 weeks will almost certainly push the filing date back by at least one quarter, as the sponsor will need to update the financial information in the prospectus to reflect the latest stub period.

The most efficient issuers pre-populate the document repository with all documents for the full track-record period before the DDQ is issued. This allows the response team to answer the first 60% to 70% of questions within 2 weeks, using the document references only. The remaining 30% to 40% of questions — which typically involve judgment calls, legal analysis, or board-level decisions — can then be addressed in weeks 3 through 8.

The “No Surprises” Rule

The SFC’s enforcement actions against sponsors consistently cite “surprises” — information that the issuer failed to disclose in the DDQ but that the sponsor later discovered through independent verification — as a factor in the severity of the penalty. For the issuer, the rule is simple: if there is any doubt about whether a fact is material, disclose it in the DDQ response. The cost of disclosing a non-material fact is negligible; the cost of failing to disclose a material fact can be the rejection of the application or a referral to the SFC.

Common “surprises” include:

• A director who has been a director of a company that was wound up in the past 5 years (disclosure required under Main Board Rule 13.51(2)).
• A pending litigation that is not yet formally served but is reasonably anticipated.
• A change in the issuer’s business model (e.g., entering a new product line) that occurred during the track-record period but was not reflected in the financial statements.

The project lead should conduct a “surprise audit” at the end of week 6, reviewing all responses for completeness and cross-referencing them against the board minutes, management accounts, and legal correspondence. Any gap should be addressed before the response is submitted to the sponsor.

Actionable Takeaways

1. Build the document repository 4 weeks before the DDQ is issued, indexing every document with a unique identifier and tagging it to the sponsor’s expected workstreams, to reduce the initial response time from 8 weeks to 2 weeks for 70% of questions.
2. Assign a dedicated response team of 5 to 7 individuals with a daily stand-up meeting, and escalate any board-level decision to the board within 24 hours, to prevent bottlenecks that delay the filing date.
3. Provide primary-source documentation for every revenue recognition and related-party transaction response, including signed delivery receipts, bank confirmations, and board resolutions, to avoid the 78% deficiency rate identified in the SFC’s 2023 thematic review.
4. Conduct a “surprise audit” at week 6 of the response cycle, cross-referencing all DDQ responses against board minutes, management accounts, and legal correspondence, to ensure no material fact is omitted.
5. Complete the initial DDQ response within 8 weeks, leaving 4 to 8 weeks for the sponsor’s follow-up questions and verification, to avoid a quarter-long delay in the A1 filing date.