For sure, there's a basic amount of stuff that you should always be doing: - Employee agreements - Updated financials (potentially get them audited once a yea

For sure, there's a basic amount of stuff that you should always be doing: - Employee agreements - Updated financials (potentially get them audited once a year) - Insurance paperwork - etc. There's no reason you should ever not have those things. But there's other stuff that can creep in - for example, we were using a variety of perl modules in our software. We had made sure from a policy perspective that all of the modules were in CPAN and licensed apporpriately. But during DD they wanted us to identify every module, and provide them with a copy of the license for every single module. They wanted to see a written DR plan, and a list of business operational risks, both personnel and office-wise. Just two examples of the sorts of things that can come up in DD that probably aren't worth doing day 1.