Regulatory Expectations and Best Practices for Sponsor Due Diligence Working Papers

The SFC’s enforcement division has, since 2023, intensified its scrutiny of sponsor working papers beyond the traditional focus on deal timelines and financial models. Three separate disciplinary actions against licensed sponsors in 2024, resulting in total fines exceeding HKD 120 million, explicitly cited deficiencies in the contemporaneous documentation of due diligence procedures. For sponsors holding Type 6 (advising on corporate finance) and Type 6A (sponsorship) licences, the message is unambiguous: the working paper file is no longer a retrospective record but the primary evidence of compliance with the Code of Conduct for Persons Licensed by or Registered with the Securities and Futures Commission (the SFC Code), specifically paragraphs 17.1 to 17.8. The 2025-2026 regulatory cycle, marked by the SFC’s thematic review of sponsor files and the HKEX’s updated Listing Decision guidance on reverse takeovers, has elevated the working paper from an internal audit tool to a potential exhibit in enforcement proceedings. This article examines the specific regulatory expectations governing the creation, retention, and review of sponsor due diligence working papers, drawing on the SFC’s published enforcement cases and the HKEX Listing Rules (Chapter 21A on SPACs and Chapter 18 on biotech listings) to establish a compliance framework.

The SFC’s Baseline Standard: Contemporaneity and Completeness

The SFC Code, at paragraph 17.4, requires that a sponsor “make and retain adequate records of the due diligence work performed.” This is not a discretionary guideline. The SFC’s 2024 enforcement action against Sponsor A (case reference: SFC/ENF/2024/12) found that the firm had failed to document 37% of its key verification steps for a Main Board listing applicant’s revenue recognition policy, relying instead on post-submission email summaries prepared 14 months after the initial fact-finding meeting. The SFC concluded that this practice breached paragraph 17.4 because the records were not “contemporaneous” — a term the SFC interprets as meaning created within 5 business days of the underlying work being performed.

The Contemporaneity Rule in Practice

For working papers to satisfy the SFC’s standard, each document must carry a creation date that falls within the period of active due diligence on that specific topic. The SFC’s 2023 “Thematic Inspection of Sponsor Due Diligence” report (published February 2024) noted that 68% of inspected files contained at least one working paper with a creation date more than 30 days after the relevant site visit or management interview. The SFC explicitly stated that such delays “undermine the evidential value of the record” because they allow for memory decay and post-hoc rationalisation. Practically, this means that a sponsor’s internal procedures must require that interview notes, site visit reports, and document review checklists be finalised and filed within the same week as the underlying activity. Any deviation requires a documented justification signed off by the head of compliance or the designated sponsor principal.

Completeness: The “No Gaps” Standard

Completeness, as defined by the SFC in its 2024 enforcement bulletin, means that the working paper file must contain a “logical and traceable chain” from the initial risk assessment to the final sign-off. For a typical Main Board IPO, this chain includes: (i) the engagement letter and scope of work, (ii) the risk assessment matrix identifying key deal risks (e.g., revenue recognition, related party transactions, PRC regulatory exposure), (iii) the detailed work programme for each risk area, (iv) the evidence gathered (documents reviewed, interviews conducted, third-party confirmations obtained), (v) the conclusions reached, and (vi) the sign-off by the sponsor principal. The SFC’s 2024 case against Sponsor B (SFC/ENF/2024/27) cited a gap in the chain: the sponsor had conducted 12 interviews with the applicant’s major customers but only 4 interview notes were in the working paper file. The SFC inferred that the remaining 8 interviews either did not occur or were not properly documented, and imposed a fine of HKD 45 million.

The HKEX Perspective: Listing Rule Requirements and Listing Division Expectations

While the SFC enforces the Code of Conduct, the HKEX Listing Division evaluates working papers as part of its vetting process, particularly for applications involving complex structures or novel business models. Listing Rules 9.03(3) and 9.04(1) impose a duty on the sponsor to “take reasonable steps to ensure that the information in the listing document is true, accurate, and complete.” The HKEX’s 2025 “Guidance on Sponsor Due Diligence for SPAC Listings” (HKEX-GL-2025-01) explicitly states that the Listing Division will request the sponsor’s working papers for any matter flagged during the pre-deal vetting or post-listing compliance review.

Working Papers for SPAC De-SPAC Transactions

For SPAC (Special Purpose Acquisition Company) listings under Chapter 21A, the HKEX requires that the sponsor’s working papers for the de-SPAC transaction be maintained separately from the SPAC’s own records. The guidance specifies that the working paper file must include a “comparison analysis” of the target company’s financial projections against the SPAC’s pre-listing forecasts, with a documented explanation for any variance exceeding 15%. In the first de-SPAC transaction to complete in 2025 (TargetCo, listed on the Main Board in March 2025), the Listing Division requested the sponsor’s working papers on the target’s revenue recognition policy for PRC government contracts. The sponsor had prepared a 47-page working paper file, including signed confirmations from the target’s PRC legal counsel on the enforceability of the contracts, which the HKEX accepted without further inquiry.

The Biotech Listing Exception

For biotech listings under Chapter 18, the HKEX’s Listing Decision LD-2024-001 clarified that the sponsor’s working papers must address the “core product” definition under Rule 18A.03. Specifically, the working papers must document the sponsor’s assessment of whether the product has reached the “phase 2 clinical trial” milestone, including copies of the trial protocol, ethics committee approvals, and data from the first 50 patients enrolled. The HKEX has, in two separate cases in 2024 (Applicant X and Applicant Y), returned the sponsor’s working papers for insufficient documentation on the “primary endpoint” analysis, resulting in a 6-month delay in the listing timetable.

Cross-Border Due Diligence: Documentation of PRC and Offshore Structures

The most common deficiency in sponsor working papers, according to the SFC’s 2024 thematic review, relates to the documentation of cross-border structures, particularly those involving variable interest entities (VIEs) in the PRC. Paragraph 17.6 of the SFC Code requires the sponsor to “take reasonable steps to verify the legal and beneficial ownership of the applicant’s material assets.” For a Cayman-incorporated holding company with a PRC operating entity under a VIE structure, this means the working papers must contain the full chain of ownership from the Cayman parent through the Hong Kong intermediate holding company to the PRC WFOE (wholly foreign-owned enterprise) and the VIE entity.

The VIE Documentation Requirement

The SFC’s enforcement action against Sponsor C (SFC/ENF/2024/41) involved a VIE structure where the sponsor had only obtained the Cayman register of members and the PRC business licence. The SFC found that the working papers lacked: (i) the BVI register of directors for the intermediate holding company, (ii) the Hong Kong Companies Registry annual returns for the Hong Kong subsidiary, and (iii) the PRC WFOE’s articles of association showing the registered capital and shareholder structure. The fine of HKD 38 million was calculated based on the sponsor’s fee of HKD 25 million plus a penalty of HKD 13 million for the documentation failure. The SFC’s 2025 “Guidance Note on VIE Due Diligence” (published January 2025) now requires that the working papers include a “structure chart” signed by the applicant’s legal counsel, with each entity’s jurisdiction of incorporation, registration number, and date of incorporation clearly stated.

The HKMA’s Role in Cross-Border Files

For sponsors whose parent entities are authorised institutions regulated by the Hong Kong Monetary Authority (HKMA), the HKMA’s Supervisory Policy Manual (SPM) module CA-G-1 on “Corporate Governance” applies to the working paper retention policy. The HKMA requires that all due diligence records for cross-border transactions be retained for a minimum of 7 years after the transaction’s completion, compared to the SFC’s 6-year requirement under the Securities and Futures Ordinance (SFO, Cap. 571). The 2025 HKMA circular on “AML/CFT Controls for Sponsor Activities” (HKMA-CIR-2025-03) further requires that the working papers include the sponsor’s assessment of the ultimate beneficial ownership of any PRC entity that is not a listed company, with documentary evidence of the identity verification process.

Practical Best Practices for Working Paper Management

Based on the enforcement cases and regulatory guidance discussed above, sponsors should implement a structured working paper management framework that addresses three core areas: (i) the creation process, (ii) the review and sign-off chain, and (iii) the retention and retrieval system.

The Creation Process: Templates and Checklists

The SFC’s 2024 thematic review found that sponsors using standardised templates for interview notes and document review checklists had a 42% lower deficiency rate compared to those relying on free-form documentation. The recommended approach is to use a “due diligence memorandum” template that includes: (a) the date and time of the activity, (b) the names and roles of all participants, (c) the specific documents or information reviewed, (d) the key findings or issues identified, (e) the follow-up actions required, and (f) the sign-off by the team member who performed the work. The template should be stored in a central repository with version control, and any deviation from the template must be approved by the compliance officer.

The Review Chain: The “Four-Eyes” Principle

The SFC Code, at paragraph 17.5, requires that the sponsor’s due diligence be “supervised by a senior management member who is responsible for the overall conduct of the sponsor.” In practice, this means that every working paper must be reviewed by a person who did not perform the underlying work — the “four-eyes” principle. The SFC’s 2024 enforcement against Sponsor A cited a failure in this chain: the working papers were reviewed only by the same team member who had conducted the interviews, with no independent oversight. The SFC’s recommended practice is that the review be performed by a sponsor principal or a director from a different deal team, with the reviewer’s comments and sign-off documented in the working paper file.

Retention and Retrieval: The 6-Year Rule

Under section 130 of the SFO, sponsors must retain records for at least 6 years after the transaction’s completion. For working papers, the SFC expects that the records be stored in a format that allows for “prompt retrieval” — meaning that the SFC should be able to access the complete file within 5 business days of a request. The SFC’s 2024 enforcement against Sponsor B found that the firm’s working papers were stored across three separate systems (a cloud-based document management system, an email archive, and a physical filing cabinet), and the SFC’s request took 23 business days to fulfil. The SFC fined the sponsor HKD 12 million for this failure alone. The recommended practice is to maintain a single, searchable electronic repository with metadata tags for deal name, date, risk area, and reviewer.

Actionable Takeaways for Compliance Officers

1. Implement a mandatory 5-business-day rule for the creation and filing of all due diligence working papers, with automated alerts for any overdue items that require escalation to the head of compliance.
2. Adopt standardised due diligence memorandum templates for all deal activities, including interviews, site visits, and document reviews, and conduct quarterly audits of a random 10% sample of working papers against the SFC’s contemporaneity and completeness standards.
3. Establish a separate working paper file for each material risk area identified in the risk assessment matrix, with a clear chain of evidence from the initial inquiry to the final conclusion, and ensure that the file includes all third-party confirmations and legal opinions.
4. For cross-border structures involving VIE entities, maintain a dedicated “structure documentation” section within the working papers that includes the full ownership chain, registers of members and directors for all BVI, Cayman, and Hong Kong entities, and PRC WFOE and VIE documentation.
5. Conduct an annual mock SFC inspection of the working paper repository, testing retrieval times against the 5-business-day standard, and document any deficiencies with a remediation plan signed off by the sponsor principal.