Digital Due Diligence is an IT-Label audit

The real estate sector has a fixed repertoire of research carried out before a transaction is completed. Technical Due Diligence maps the structural and installation-technical condition. Legal Due Diligence checks the legal situation. Financial Due Diligence looks at the figures. And increasingly, ESG Due Diligence is added, in which sustainability and responsible business practices are assessed.

Yet a dimension is missing that becomes more important by the day. Buildings and their users are becoming increasingly digital, but the digital infrastructure itself is rarely researched systematically before a signature is put on paper. That is remarkable, because it is precisely that layer that increasingly determines whether an organization can function in a building.

The name for that missing research suggests itself: Digital Due Diligence. And the notable thing is that a large part of it already exists. Anyone who has an IT-Label audit carried out is, in practice, doing exactly what a Digital Due Diligence sets out to do.

We are already doing Digital Due Diligence

Start with a simple observation. During an IT-Label audit, questions are asked that any digital researcher would ask. Is fiber optic present? Which connections are available and from which providers? Is there redundancy in the connection? How is the internal data cabling implemented and how is the WiFi infrastructure set up?

The research goes beyond the connection alone. How are the patch and server rooms designed, and are critical technical rooms secured? Which building-bound digital systems and smart building systems are connected? How is continuity organized, what is present at building level and at user level, and who is responsible for what? And perhaps the most important question: can the infrastructure grow along with future use?

Then ask yourself: if you collect, verify, document and translate this information into risks and a digital delivery level, what are you actually doing? The answer is Digital Due Diligence.

We just call it an IT-Label audit

A traditional due diligence often results in an extensive report. That is valuable for specialists, but a landlord, investor, tenant, broker or asset manager ultimately mainly wants to be able to understand a conclusion. The underlying question is always the same: what can this building handle digitally?

That is why IT-Label adds something that regular research does not offer. The methodology follows a fixed line: audit, analysis, translation and classification. Technical complexity is thereby converted into an understandable digital delivery level. That effectively makes an IT-Label audit Digital Due Diligence in a real estate language that everyone understands. Anyone who wants to know how these steps relate to each other can find that in the methodology behind the classification.

A due diligence researches. An IT-Label audit researches and translates. That small difference holds the entire value for the real estate market.

Digital Due Diligence from an IT-Label perspective

It helps to define the concept sharply. Digital Due Diligence is the independent and structured investigation of a building's digital infrastructure, digital facilities, continuity, relevant physical security, responsibilities and digital scalability.

An IT-Label audit then provides a standardized and understandable translation of that. The exact scope depends on the building type and the audit level. The boundaries are important: an IT-Label audit is not a substitute for a penetration test, an ISO 27001 audit or a full cybersecurity audit of an organization. It focuses on the real estate and the building-bound infrastructure.

DDD plus classification equals IT-Label

The relationship can be summarized in a simple thought: Digital Due Diligence plus classification results in an IT-Label. The outcome should not remain stuck in hundreds of technical data points. It must answer questions that real estate professionals recognize: what is present, what is missing, what is the delivery level, where are the points of attention, what should possibly be improved, who is responsible for what, and how future-proof is the digital foundation?

Compare it to Technical Due Diligence

The comparison with a Technical Due Diligence makes the distinction concrete. A TDD looks at the physical and installation-technical condition of real estate: roof, facade, structure, elevators, climate installations, electrical systems, fire safety, maintenance and the resulting CAPEX. That is the first infrastructure of a building.

But a modern user also depends on a second infrastructure, namely the digital one. A TDD investigates how the building functions physically. A DDD investigates how the building functions digitally. And IT-Label makes the outcome of that DDD understandable and comparable, so that buildings can be placed side by side on this point. We explore in more detail why digital infrastructure has become just as value-defining as physical infrastructure in the article on IT as a value-defining factor.

An IT-Label audit before acquisition

Take an investor considering the purchase of a 15,000 m² office building. A TDD is carried out. The roof is in good condition, the installations still have sufficient lifespan, the energy label is excellent and the maintenance forecast is clear. On paper, a sound acquisition.

But what does the buyer know about the fiber optic connection, the choice of provider, redundancy, internal data cabling, server and patch rooms, WiFi infrastructure, digital access control, smart building systems, digital continuity and digital scalability? That is precisely the Digital Due Diligence, and an IT-Label audit makes that digital layer visible in advance, rather than after the transaction.

An IT-Label audit before leasing

Digital Due Diligence is not only relevant for investors. For tenants it may be even more important. Suppose an organization signs a ten-year lease agreement. Management asks the usual questions: how many square meters, what rent, how many parking spaces and what energy label?

Only after signing does the IT department discover that significant investments are needed to actually put the building into use. Digital Due Diligence therefore belongs not only before an acquisition, but also before a lease agreement. An IT-Label audit gives the tenant advance insight into the digital delivery level that is actually being offered. What tenants can specifically pay attention to is described on the page about what to look out for as a tenant.

From data room to IT-Label

Look ahead to a situation that is easy to imagine. In 2030, an investor opens a digital data room for an office building. It contains the Legal Due Diligence, the Technical Due Diligence, environmental information, ESG data and the energy label. And alongside it: the IT-Label, as Digital Due Diligence.

The buyer thereby immediately sees the digital delivery level of the building. Not only after the transaction is completed, but beforehand. The remaining question is simple: why would digital building information not become a standard part of the data room, just as the other studies already are?

From a snapshot to a periodic DDD

A traditional due diligence is usually carried out around a transaction. But digital infrastructure does not stand still. New tenants move in, providers change, network equipment is replaced, smart building systems are added, AI increases data usage and cybersecurity requirements shift.

That is why an IT-Label audit can be more than a one-time transaction study. It can become a periodic Digital Due Diligence. Not determining once what a building could handle digitally at the time of purchase, but periodically showing what the building can handle digitally now. This connects to the idea that an IT-Label is a starting point, not an end station.

Digital CAPEX follows naturally

As soon as an audit reveals shortcomings or points for improvement, the next question arises naturally: what does it cost to improve the digital delivery level? This brings a new concept into view: Digital CAPEX.

Just as a TDD provides input for technical CAPEX, a Digital Due Diligence can provide insight into future digital investments. Think of fiber optics, redundancy, data cabling, WiFi, technical rooms, monitoring, smart building infrastructure and digital continuity provisions. This gives an audit meaning for asset management and investment planning as well.

Value across the entire real estate cycle

Digital Due Diligence therefore has value at multiple moments:

• Acquisition: what am I buying digitally?
• Development: what do I need to design digitally?
• Leasing out: what do I offer my tenant digitally?
• Leasing in: what am I being delivered digitally as a user?
• Asset management: where do I need to invest digitally?
• Refinancing: how future-proof is my asset?
• Sale: what digital quality can I demonstrably transfer?

This turns DDD into a recurring part of the real estate cycle, rather than a standalone report.

What an IT-Label audit is not

Credibility requires a clear boundary. An IT-Label audit is not automatically a cybersecurity certification, not a penetration test, not an ISO 27001 audit and not a NIS2 certification. Nor is it a guarantee that digital outages will never occur, and it does not assess all of a tenant's IT systems.

It concerns the digital quality and digital delivery level of the real estate and the relevant building-bound infrastructure. That very limitation is what makes IT-Label understandable and usable. You can read more about this positioning in the explanation of why IT-Label is not a certification but a translation.

From Due Diligence to Digital Disclosure

Due diligence is about researching. But what happens if the information remains transparently available afterwards? Then Digital Disclosure emerges. An owner can show, when leasing or selling, what the digital delivery level of the building is, instead of every party having to figure it out again.

This creates not only Digital Due Diligence, but also digital transparency in the real estate market. Perhaps in ten years we will look back and find it strange that real estate was bought and leased without structurally looking at the digital infrastructure. Just as energy performance has become a matter of course, digital quality may become increasingly normal as well. Perhaps what is missing is not only a D in Due Diligence, but a digital standard for real estate.

Start with one question

The strength of IT-Label ultimately lies not in complexity, but in simplicity. An investor does not need to become a network engineer, a broker does not need to become a cybersecurity specialist, and a tenant does not need to become a fiber optic expert. They all only need to be able to ask one question: what can this building handle digitally?

Digital Due Diligence investigates the digital quality. The IT-Label audit makes that quality visible, understandable and comparable. From technical data to real estate information, from invisible infrastructure to insight. If you want to take that step for a specific building, take a look at how an IT-Label audit works in practice and what information you gather beforehand.