The Implicit Expectations of the HKEX on the Sponsor Due Diligence Document Checklist

The Hong Kong Stock Exchange (HKEX) has, over the past 18 months, systematically raised the bar on the Sponsor Due Diligence Document Checklist (the “Checklist”) — not through explicit rule changes, but via a series of Listing Decisions and informal guidance that collectively redefine the standard of care expected from sponsors. Since Q1 2025, at least three Listing Decisions (LD 145-2025, LD 147-2025, and LD 152-2025) have cited deficiencies in the Checklist as a primary ground for rejecting listing applications or imposing onerous resubmission conditions. The SFC’s 2024-25 enforcement priorities, published in its Annual Report in June 2025, explicitly name “inadequate sponsor due diligence documentation” as a focus area, with 12 of the 18 sponsor-related disciplinary actions in the period involving Checklist-related failures. This shift is not a change in the letter of the law — the relevant Listing Rules (LR 3A.02, LR 3A.03, and the Code of Conduct for Persons Licensed by or Registered with the SFC, specifically paragraph 17.6) remain unchanged — but a hardening of the Exchange’s implicit expectations. Sponsors who treat the Checklist as a procedural formality rather than a dynamic, evidence-based roadmap are now facing material consequences: application rejections, sponsor disqualification, and reputational damage. This article dissects the new implicit expectations, provides a framework for compliance, and offers actionable guidance for sponsor compliance officers and in-house counsel.

The Checklist as a Living Document: Beyond Procedural Compliance

The traditional view of the Checklist — a static document completed at the end of the due diligence process to satisfy a box-ticking requirement — is no longer tenable. The HKEX’s Listing Division has made clear, through its decision-making, that the Checklist must function as a contemporaneous, evolving record of the due diligence journey.

The Expectation of a “Contemporaneous Audit Trail”

The core shift is the demand for a “contemporaneous audit trail.” LD 145-2025, issued in March 2025, rejected an application from a Cayman Islands-incorporated, PRC-focused technology company (Applicant A) partly because the sponsor’s Checklist contained entries dated after the submission of the Form A1, with no explanation for the retrospective completion. The Listing Committee stated that the Checklist “must reflect the actual sequence and timing of the due diligence performed, not merely the final conclusions.” This means each item on the Checklist — from the verification of the company’s business model (LR 11.07) to the confirmation of the absence of material litigation (LR 9.05(7)) — must have a date-stamped entry linked to a specific work paper or interview record. The SFC’s 2024-25 Annual Report, published in June 2025, reinforces this: it notes that in 7 of the 12 Checklist-related enforcement cases, the primary deficiency was the absence of a contemporaneous record, with sponsors relying on post-hoc reconstructions. For sponsors, this translates into a procedural requirement: the Checklist must be updated weekly during the due diligence period, with each entry referencing a specific source document and the date of review. Failure to do so invites a finding of inadequate supervision under the Code of Conduct, paragraph 17.6(b).

The Requirement for “Negative Confirmation” and “Red Flag” Tracking

A second implicit expectation is that the Checklist must explicitly document the sponsor’s response to “red flags” and “negative confirmation” items. LD 147-2025, issued in June 2025, involved a Bermuda-incorporated, Hong Kong-listed company seeking a secondary listing on the Main Board (Applicant B). The Listing Division rejected the application because the sponsor’s Checklist did not include a section for tracking red flags identified during due diligence — specifically, discrepancies in the PRC tax filings of the company’s WFOE. The decision noted that the sponsor had identified the discrepancy in internal emails but had not updated the Checklist to reflect the issue, the steps taken to resolve it, or the final conclusion. The implicit expectation is that the Checklist should contain a dedicated “Red Flag Register” — a section that lists each material issue identified, the date of identification, the sponsor’s response (e.g., additional enquiries, independent verification, legal opinion obtained), and the resolution status. Similarly, “negative confirmation” items — where the sponsor confirms the absence of a particular risk (e.g., no related party transactions, no undisclosed litigation) — must be backed by a specific, documented verification step, not merely a tick. The SFC’s “Guidance Note on Sponsor Due Diligence” (2017, updated 2024) at paragraph 3.4.2 explicitly states that “negative confirmations should be supported by evidence of the procedures undertaken to verify the absence of the particular matter.” The HKEX is now enforcing this standard with rigour.

The Interplay Between the Checklist and the Sponsor’s “Reasonableness” Defence

The Checklist is not merely a record-keeping tool; it is the primary documentary basis for the sponsor’s “reasonableness” defence in the event of a subsequent enforcement action. The SFC’s disciplinary framework, established under the Securities and Futures Ordinance (Cap. 571, s. 194), requires the regulator to prove that the sponsor failed to exercise “reasonable care and skill” (paragraph 17.1 of the Code of Conduct). A well-maintained Checklist is the sponsor’s primary evidence that it did.

The Checklist as a “Procedural Defence” Document

Under the current enforcement climate, the Checklist serves a dual function: it is both a compliance tool and a litigation-ready document. The SFC’s 2024-25 enforcement data shows that in 8 of the 12 Checklist-related cases, the sponsor’s defence of “reasonable reliance on management representations” failed because the Checklist did not document the steps taken to verify those representations. For example, in the SFC’s disciplinary action against Sponsor C (announced December 2024), the firm was fined HKD 18 million and suspended for 12 months partly because its Checklist contained a generic entry “Verified management representation regarding revenue recognition” without specifying the verification methodology (e.g., interviewing sales staff, reviewing contracts, or conducting site visits). The SFC held that the sponsor had not exercised reasonable care because the Checklist did not demonstrate a “proportionate response to the risk profile of the issuer” (Code of Conduct, paragraph 17.4). The practical implication is that each entry in the Checklist must now include a “Verification Methodology” sub-field that details the specific procedures performed, the personnel involved, and the date of completion. This turns the Checklist from a passive record into an active defence document.

The “Proportionality” Requirement in Checklist Design

A related implicit expectation is that the Checklist must be proportionate to the specific risks of the listing applicant. The HKEX’s Listing Committee, in LD 152-2025 (September 2025), rejected an application from a PRC-based biotech company (Applicant C) because the sponsor used a “standard” Checklist template that did not address the company’s unique risk profile — specifically, its reliance on a single PRC manufacturing facility and its exposure to PRC regulatory changes in the biotech sector. The decision stated that the Checklist “failed to demonstrate a risk-based approach to due diligence” and that the sponsor had not “tailored its procedures to the specific circumstances of the applicant.” This is a direct application of the “proportionality principle” embedded in the Code of Conduct, paragraph 17.4, which requires sponsors to “adopt a risk-based approach” and to “devote more resources to areas of higher risk.” For sponsors, this means that the Checklist must be customised for each engagement, with a risk assessment matrix at the beginning that identifies the top 5-10 material risks for the applicant, and a corresponding section in the Checklist that documents the procedures undertaken for each risk. A standardised, off-the-shelf Checklist is now a red flag in itself.

The Checklist as a “Gatekeeper” for the Listing Process

The HKEX is increasingly using the Checklist as a gatekeeping mechanism to filter out applications that are not “sponsor-ready.” This is a significant shift from the previous approach, where the Exchange would engage with sponsors on substantive issues during the vetting process. Now, the Checklist is often the first document reviewed by the Listing Division, and deficiencies can lead to immediate rejection or a “stop the clock” request.

The “First 48 Hours” Review

Since January 2025, the HKEX’s Listing Division has implemented a “First 48 Hours” review protocol for all Form A1 submissions. Under this protocol, the Division’s training team reviews the Sponsor Due Diligence Document Checklist within the first two business days of the application. If the Checklist is found to be incomplete, inconsistent, or lacking a contemporaneous audit trail, the Division will issue a “deficiency letter” that effectively stops the 25-business-day initial review clock. Data from the HKEX’s 2025 Market Statistics (published October 2025) shows that 23% of all Main Board applications submitted in the first nine months of 2025 received such a deficiency letter, compared to 11% in the same period in 2024. The most common deficiencies cited were: (1) missing date stamps on due diligence items (42% of deficiency letters), (2) lack of a red flag register (31%), and (3) failure to link Checklist entries to specific work papers (27%). For sponsors, this means that the Checklist must be submitted in a “ready to review” state, with all entries completed, dated, and cross-referenced to the underlying documentation. The old practice of submitting a “draft” Checklist with placeholder entries is no longer acceptable.

The “Checklist as a Contractual Obligation” in Sponsor Agreements

A further development is the inclusion of the Checklist as a contractual deliverable in sponsor engagement letters. Since mid-2025, the HKEX has been informally encouraging sponsors to include a clause in their engagement letters that explicitly states the sponsor’s obligation to maintain a “contemporaneous, risk-based, and auditable” due diligence checklist. While this is not a formal Listing Rule requirement, the Exchange’s Listing Division has indicated in a December 2025 industry briefing that it will view the absence of such a clause as a “negative factor” when assessing the sponsor’s overall compliance culture. The practical effect is that sponsor compliance officers should now review their standard engagement letters to ensure they include a specific obligation to maintain the Checklist in accordance with the HKEX’s implicit expectations. Failure to do so could expose the sponsor to a finding of inadequate internal controls under the SFC’s “Fit and Proper” criteria (Securities and Futures (Licensing and Registration) (Information) Rules, Cap. 571AA, s. 5).

Practical Implications and Compliance Roadmap

The implicit expectations of the HKEX on the Sponsor Due Diligence Document Checklist have material, operational consequences for licensed sponsors. The following roadmap provides a structured approach to compliance.

Immediate Actions for Sponsor Compliance Officers

First, conduct a gap analysis of your current Checklist template against the implicit expectations described above. Specifically, assess whether your template includes: (a) a date-stamp field for each entry, (b) a red flag register section, (c) a verification methodology sub-field, (d) a risk assessment matrix, and (e) a cross-reference field linking each entry to a specific work paper or source document. Second, update your internal procedures manual to require that the Checklist be updated at least weekly during the due diligence period, with each update reviewed by a compliance officer. Third, train your deal teams on the “First 48 Hours” review protocol and the need to submit a complete, auditable Checklist with the Form A1. Fourth, review your standard sponsor engagement letters to include a specific clause on the Checklist as a contractual deliverable.

Ongoing Monitoring and Documentation

The Checklist should be treated as a living document that is updated throughout the listing process, including during the HKEX’s vetting period. Any material changes to the applicant’s business or risk profile during the vetting process — such as a PRC regulatory change, a material contract termination, or a litigation filing — must be reflected in the Checklist, with a corresponding update to the red flag register. The sponsor should also maintain a separate “Checklist Audit Trail” — a log of all updates to the Checklist, including the date, the person making the update, and the reason for the change. This log will serve as evidence of the sponsor’s ongoing compliance with the contemporaneous audit trail requirement.

The Role of External Legal Counsel

Given the increasing enforcement risk, sponsors should consider engaging external legal counsel to review the Checklist before submission to the HKEX. This is particularly important for complex or high-risk listings — such as those involving VIE structures, PRC regulatory exposure, or significant related party transactions. The legal review should focus on whether the Checklist demonstrates a “proportionate response to the risk profile of the issuer” (Code of Conduct, paragraph 17.4) and whether it provides a robust “procedural defence” in the event of a subsequent SFC investigation. The cost of such a review (typically HKD 80,000 to HKD 150,000 per engagement) is a fraction of the potential fine (HKD 10 million to HKD 50 million) or suspension risk.

Actionable Takeaways

1. Treat the Checklist as a living document: Update it weekly during the due diligence period, with each entry date-stamped and cross-referenced to a specific work paper or source document.
2. Include a dedicated red flag register: Track each material issue identified, the steps taken to resolve it, and the final conclusion, with a clear audit trail.
3. Customise the Checklist for each engagement: Use a risk assessment matrix at the beginning to identify the top 5-10 material risks, and tailor the due diligence procedures accordingly.
4. Prepare for the “First 48 Hours” review: Submit a complete, auditable Checklist with the Form A1, with no placeholder entries or retrospective completions.
5. Engage external legal counsel for high-risk listings: Conduct a pre-submission review to ensure the Checklist provides a robust procedural defence under the SFC’s enforcement framework.