Digital Due Diligence: the missing D

An investor buys an office building for fifty million euros. Beforehand, hundreds of pages of documentation are gathered. Lawyers check the contracts, technical advisors examine the installations, appraisers analyze the rental values and ESG specialists assess sustainability. The data room overflows. Little goes unseen.

And yet, something else regularly turns up after the transaction closes. The fiber infrastructure is limited, there is no redundant connection, the internal data cabling is outdated, technical rooms are insufficiently secured and network components are poorly documented. Smart building systems turn out to be fragmented. And no one knows exactly which digital facilities belong to the landlord, the tenant or the supplier.

An uncomfortable question then presents itself. We examine the construction, the roof, the installations, the lease agreements, the environmental risks and the energy performance. But who actually examines the digital foundation of the building? And how complete was that due diligence really?

We examine everything, except what the user relies on

The modern user of commercial real estate runs on data, cloud, videoconferencing, digital access control and, increasingly, AI. Dependence on digital infrastructure has grown quietly but unmistakably in recent years. Yet this is precisely the element that often still remains outside the scope of transaction research.

This is not a matter of reluctance but of habit. Due diligence practice has been built around matters that determined value and use for decades. Digital infrastructure was long a precondition, not a core question. That relationship is now shifting, because the way a building is used is changing.

The result is a blind spot. A building can meet every classic requirement and still be unsuitable for the organization moving in. Those who want to understand where this tension comes from can find the background in our article on the blind spot in real estate.

What Digital Due Diligence is

Digital Due Diligence (DDD) is the structured examination of the digital infrastructure, digital dependencies, digital risks and digital future-readiness of real estate, ahead of an investment, lease, development or other major real estate decision.

Important: DDD is not the same as a traditional IT audit of a company. It is not about the user's business systems, but about the building as a carrier of digital functions. It sits at the intersection of real estate, IT, connectivity, cybersecurity and smart building. The building is central, not the organization inside it.

This scope makes DDD manageable for real estate professionals. It is about what the building can facilitate, how reliable that is and what is needed to maintain that level.

Why now

Commercial real estate is changing because the user is changing. Cloud, AI, data, videoconferencing, IoT, building apps, digital access control, real-time monitoring and automation are no longer extras but daily conditions for productivity. As a result, the meaning of technical quality is shifting as well.

A building can function excellently from a structural standpoint and still be digitally outdated. That phenomenon deserves its own name: digital obsolescence. Digital obsolescence can grow into a new form of functional obsolescence, in which a building gradually becomes less suited to the use the market demands, without anything visible changing on the facade.

A building may still look excellent in ten years and yet have become digitally unusable for the tenant who needs it.

Traditional due diligence asks: what am I buying? DDD adds two questions to that. What can the building handle digitally? And perhaps more importantly: what do I need to invest to ensure the building remains digitally relevant in five or ten years?

What a Digital Due Diligence examines

DDD looks at multiple layers, from the connection at the street to the scalability of the whole. The following topics together form a usable framework.

1. Connectivity

This concerns the presence of fiber, available providers, capacity, redundancy, physical routes, demarcation points and expansion possibilities. The relevant question is not just "is there fiber", but how reliable, scalable and redundant the building's digital connection is. Further detail can be found in our article on fiber in buildings.

2. Internal digital infrastructure

Data cabling, CAT classifications, fiber backbone, patch panels, switches, network structure, technical rooms and WiFi infrastructure determine what happens behind the front door. A fiber connection at the entrance means little if the infrastructure behind it cannot keep up.

3. Physical cybersecurity

Cybersecurity does not begin exclusively in software. DDD examines whether server and patch rooms are locked, who has access, whether that access is logged, how technical cabinets are secured and how access by external suppliers is arranged. You can invest millions in digital security, but if anyone can reach the patch panel, the risk literally starts at the door. The broader context can be found in our article on cybersecurity in real estate.

4. Continuity

How vulnerable is a building to internet outages, power failures or a provider disruption? Think of UPS systems, backup power, redundancy, monitoring, recovery procedures and single points of failure. This relates to digital business continuity: when digital infrastructure fails, a modern office may remain physically open but become economically almost unusable.

5. Smart building and IoT

Building management systems, access control, cameras, climate control, sensors, lighting, elevators, charging infrastructure and apps make a building smart, but not automatically secure or future-proof. The questions are: who manages these systems, how are they connected and how dependent has the building become on them? More on this in smart building technology.

6. Digital capacity

DDD is not just a snapshot. Alongside the question of what is currently in place, it also matters whether it can grow with AI, larger data flows, greater cloud use, higher WiFi density and more digital building systems. Digital scalability should therefore be an explicit part of the assessment.

Who is actually responsible?

In real estate, digital infrastructure is often fragmented. Part belongs to the landlord, part to the tenant, part to the provider and part to an IT supplier. Another part belongs to the building management system. And sometimes no one knows exactly where the boundary lies. A risk without an owner may well be the biggest risk of all.

That is why an IT demarcation list belongs at the core of DDD. It clarifies what is present, who owns it, who manages it, who maintains it, who replaces it and who is responsible when it fails. We describe how these responsibilities play out legally in our article on IT in the ROZ lease agreement.

From TDD to DDD

A Technical Due Diligence examines the roof, facade, structure, elevators, HVAC, electrical systems, fire safety, maintenance and CAPEX. Modern buildings, however, contain increasingly more digital infrastructure. The question then becomes: where does Technical Due Diligence end and where does Digital Due Diligence begin?

The answer is not a dividing line but a complement. DDD is not a competitor to TDD, but the layer that adds the user perspective to the research. Together they provide a more complete picture: TDD + DDD, physical and digital building quality alike.

Place these rows side by side and the conclusion is obvious: perhaps one D has been missing from our due diligence for years.

Digital CAPEX and the financial translation

At acquisition, a multi-year CAPEX plan is drawn up for roofs, elevators, installations, facades and sustainability upgrades. But how much is set aside for fiber, network infrastructure, cabling, WiFi, cybersecurity-related facilities and smart building infrastructure? If digital infrastructure becomes necessary for lettability, digital CAPEX simply belongs in the investment model. We describe how it connects to the rest of the budget in IT-label and CAPEX.

Weak digital infrastructure has financial consequences. Think of extra CAPEX, longer fit-out periods, delays in occupancy, downtime, a more limited tenant pool, additional incentives, higher management costs, cybersecurity risks and possibly faster functional obsolescence. Digital infrastructure is therefore no longer just an IT issue, but an investment issue.

Take two buildings of 10,000 square meters each, energy label A++, same city, comparable tenants, WALT, rent and technical condition. Building A has limited digital infrastructure and will require, hypothetically, five hundred thousand euros in digital investments over the coming years. Building B has redundant fiber, modern internal infrastructure, secured technical rooms and sufficient scalability. From an investment perspective, are these buildings really worth the same?

Ultimately, the tenant decides

The shift originates with the user. An AI company, a law firm, a fintech, an engineering firm, a hospital or a government organization: all of them are becoming more dependent on digital infrastructure. The housing question is therefore changing from "how many square meters do we need" to "what does our organization need to be able to do here digitally." When users start selecting differently, investors need to start investigating differently.

That is why DDD is not limited to acquisitions. It is relevant for sales, development, redevelopment, financing, appraisal, letting, taking on a lease, sale-and-leaseback and portfolio analysis. Especially before a tenant signs a long-term agreement, digital due diligence is appropriate. After all, a tenant is effectively conducting their own research into their future business environment, as we explain in what to look out for.

Digital Location Risk and the surrounding area

A building can be digitally well set up and still be located in an area with limitations. DDD therefore also looks at the surrounding environment: grid congestion, available power capacity, regional fiber infrastructure, provider choice, area development and digital expansion possibilities. This is digital location risk, because a building never stands alone digitally.

The United Kingdom explicitly assesses future AI locations on a combination of power, land, water, planning and connectivity. Translated to real estate, this raises a logical question: if governments already assess digital economic locations based on connectivity and energy, why wouldn't investors do the same for individual assets? We elaborate on this parallel in what the Netherlands can learn from the UK on AI infrastructure.

From building to portfolio

DDD does not have to stop at a single building. An investor with seventy-five office buildings wants to know which assets are digitally strong, which are lagging, where digital CAPEX is needed, which buildings are at risk of digital obsolescence and which are attractive to technology and AI-intensive tenants. In this way, a building classification turns into management information for the entire portfolio.

When digital infrastructure begins to influence lettability, CAPEX, continuity, future-readiness and functional obsolescence, this information may in time also become relevant to banks, lenders, insurers and appraisers. We will not get ahead of that conclusion, but the direction is not hard to guess.

Ask the extra question in your next deal

We thoroughly examine a building before investing millions in it: the roof, the facade, the foundation, the installations, the energy performance, the contracts and the tenants. Meanwhile, those same tenants are increasingly running on data, cloud, connectivity, cybersecurity and AI. Perhaps tomorrow's biggest hidden CAPEX is not the roof or the installation, but the digital infrastructure that no one examined during due diligence.

A concrete next step is simple: have the digital quality of your building or portfolio independently assessed, so that it becomes part of your research instead of a surprise afterward. See how it works at how the IT-label works or get in touch through our contact page. TDD examines the building, DDD examines the digital building. Together, they tell the full story.