Startup Data Room Checklist: What to Prepare Before Diligence

Start before you email your first investor. Gathering documents takes longer than founders expect, because some sit with a lawyer, an accountant or a former contractor who has to be chased. Building the room early also shows you what's missing while you still have time to fix it.

Use two stages. A light room, with your deck, high-level metrics, a cap table summary and a few key contracts, can go to investors who are seriously interested. The full room, with everything below, opens when there's a term sheet and the investor's counsel starts formal diligence. That keeps sensitive information out of the hands of investors who may not proceed.

Name one person as the owner. Every request should route through them, and every answer should be logged, so you know what each investor has seen.

Use numbered top-level folders that follow the order investors' lawyers usually work through. Each one lists what to include:

1. Corporate and legal: certificate of incorporation and amendments, bylaws, board and stockholder consents, minutes, good-standing certificates and a list of subsidiaries.
2. Financings and cap table: current fully diluted cap table, executed SAFEs, notes and stock purchase agreements, investor rights and voting agreements, and option plan documents.
3. Financials: monthly statements, the financial model, tax returns, bank statements on request and a debt schedule.
4. Commercial: top customer contracts, standard terms, pipeline summary and partner agreements.
5. Intellectual property and technology: invention assignment agreements for employees and contractors, trademark and patent filings, open-source policy and security documentation.
6. People: org chart, employment agreements, offer letters, contractor agreements and benefit plans.
7. Compliance and insurance: licenses, privacy policy, insurance certificates and any regulatory filings.

Use consistent file names, such as date first, then document type. Anyone should be able to find the current version without asking.

Investors want to see that your numbers are consistent across documents and that you understand them. Include:

• Monthly income statement, balance sheet and cash flow statement for the periods you have, on an accrual basis if possible.
• A forecast with written assumptions and a headcount plan.
• Your definitions for revenue, recurring revenue, churn and any other metrics you report, matching your monthly investor updates.
• Cohort retention data if you sell subscriptions.
• The last filed tax returns.
• A cash and runway summary.

Tie every figure in the deck to a source in this folder. If the deck says one thing and the statements another, expect the conversation to shift from your story to your credibility. For a related view of preparing books for a buyer, the financial due diligence checklist for sellers covers reconciliation in more detail, and the working capital calculator guide helps if your business carries receivables or inventory.

Match access to how far along each investor is:

• Give early-stage investors view-only access to the light room, and turn off downloads for sensitive items.
• Ask for an NDA where it's reasonable, but understand that many venture investors won't sign one at the first meeting.
• Redact customer names and pricing in contracts until a deal is close, or share summaries instead.
• Use per-investor permissions and a log of who opened what, so you know who has seen your customer list.
• Keep source documents in one place and export current versions into the room, so you don't maintain two copies.

A data room platform or a cap table tool can handle permissions and activity tracking. Cap table platforms such as Carta can keep your ledger, grants and investor records in one place, and board portals such as Diligent provide secure document sharing for boards; ask in a demo how each handles investor access and audit logs. Compare cap table providers in Carta vs Shareworks vs Pulley.

These come up again and again, so check for them before an investor's lawyer does:

• Employees or contractors who never signed an invention assignment agreement.
• Option grants without board approval or a valuation to support the strike price.
• A cap table that doesn't match the stock ledger, SAFEs or notes.
• Missing 83(b) elections or founder vesting documents.
• Board and stockholder actions that were agreed to verbally but never signed.
• Customer contracts with unusual clauses such as change of control, exclusivity or most-favored pricing.
• Financial statements that don't reconcile to tax returns.

If you're also raising debt, expect a similar list; see the venture debt due diligence checklist. Have your attorney run a pre-diligence review of the corporate records, since fixing a missing consent is easier before an investor's counsel finds it.