Startup Investor Data Room Checklist India: 12 Folders Founders Need Before Due Diligence
A fundraising data room should let an investor verify the company quickly without exposing every sensitive record on day one.
Direct answer
An investor data room is not a document dump. It is a controlled evidence system that lets an investor verify ownership, financial performance, contracts, intellectual property, compliance and risk without creating new confidentiality or privacy problems.
Startup India publishes both a financial due-diligence checklist and legal and financial due-diligence templates. Its fundraising guidance also recommends a detailed business and financial plan before approaching investors. For issuance mechanics, founders should review the official Companies Act, 2013 and MCA forms relevant to the proposed round. The Best CS Firm In India method is to reconcile every folder to one signed cap table, one compliance calendar and one source-of-truth index.
Use a staged data-room architecture
| Stage | Typical access | Control |
|---|---|---|
| Introductory | Pitch deck, public profile and high-level metrics | No customer-level or employee data |
| Serious diligence | Corporate, financial, tax, contracts and cap-table folders | Named users, watermarking and download limits |
| Confirmatory | Material customer records, security evidence and employee detail | Need-to-know access and redaction |
| Closing | Transaction documents, approvals, valuation and filings | Version lock and closing checklist |
Do not open the entire room merely because someone uses an investor email domain. Verify the fund, contact, investment thesis and stage before granting access.
Folder 1: corporate identity and ownership
- Certificate of incorporation, PAN, GST and DPIIT recognition.
- Memorandum and current articles of association.
- Registered-office evidence and corporate master data.
- Group structure, subsidiaries and beneficial ownership.
- Current directors, key managerial personnel and authorised signatories.
Folder 2: cap table and securities
Provide a fully diluted cap table that reconciles to the register of members, share certificates, allotment filings and every convertible instrument.
| Instrument | Documents | Model |
|---|---|---|
| Equity shares | Allotment/transfer approvals and certificates | Issued and fully diluted ownership |
| CCPS/CCDs | Terms, valuation, filings and conversion schedule | Conversion at the proposed round |
| Convertible notes/iSAFE | Signed instrument and trigger terms | Discount, cap and maturity scenarios |
| ESOP | Scheme, approvals, grants and exercises | Granted, vested, exercised and available pool |
| Founder arrangements | Vesting, transfer and leaver documents | Outstanding repurchase or transfer risk |
Folder 3: board and shareholder governance
- Board and shareholder meeting notices, agendas and signed minutes.
- Registers, disclosures of interest and related-party approvals.
- Reserved-matter and investor-consent tracker.
- Delegation of authority and banking resolutions.
- Outstanding conditions from earlier investment rounds.
Folder 4: financial statements and MIS
Startup India’s financial due-diligence checklist asks for historical audited information and current-year unaudited data. Build a bridge from audited accounts to the latest management numbers.
- Audited financial statements and audit reports.
- Monthly P&L, balance sheet and cash-flow statement.
- Bank statements and cash reconciliation.
- Revenue by product, customer, geography and channel.
- Gross margin, burn, runway, receivables and payables.
- Budget versus actual and 24–36 month model.
Folder 5: tax and statutory filings
| Area | Minimum record | Reconciliation |
|---|---|---|
| Income tax | Returns, assessments and tax positions | Books to return |
| GST | Registrations, returns, notices and reconciliations | Revenue to GSTR-1/3B |
| TDS | Returns, challans and defaults | Ledger to Form 26Q/24Q |
| Payroll | PF/ESI/professional-tax records where applicable | Employee list to payments |
| ROC | Annual and event-based filings | Registers to MCA records |
Folder 6: customers, revenue and receivables
- Top-customer list with concentration and retention metrics.
- Material MSAs, order forms, SLAs and renewals.
- Pipeline methodology and signed order evidence.
- Receivables ageing, credit notes, refunds and disputes.
- Revenue-recognition policy and deferred revenue.
Redact personal data and commercially sensitive customer terms until confirmatory diligence. Use a contract abstract instead of circulating every agreement at the first stage.
Free Weekly Newsletter
Subscribe to BSA startup funding alerts
- Every Sunday, all Indian startup funding alerts in one place
- Monthly funding report on the last day of the month
- Free, concise, founder-focused, and easy to unsubscribe
Get the complete Indian startup funding roundup in your inbox, covering deals, sectors, investor moves, and founder readiness notes from the week.
Built for founders, investors, CFOs, and advisors
No spam. Unsubscribe anytime.
Folder 7: vendors and operations
- Critical cloud, manufacturing, logistics and agency contracts.
- Purchase commitments and minimum-order obligations.
- Service levels, data-processing terms and exit assistance.
- Vendor concentration and business-continuity alternatives.
- Open disputes, credits and unpaid balances.
Folder 8: intellectual property and technology
| Asset | Evidence | Typical gap |
|---|---|---|
| Code/product | Employee/contractor assignments and repository history | Code created before incorporation |
| Brand/domain | Trademark filings and registrant records | Founder-owned domain |
| Patents/designs | Applications, grants and inventor assignments | Missing assignment |
| Open source | Software bill of materials and licence review | Copyleft obligations |
| Data/models | Source, licence, consent and governance record | Unclear training-data rights |
Folder 9: people, ESOP and founder records
- Organisation chart and employee/consultant list.
- Employment, confidentiality and IP documents.
- ESOP scheme, grant letters and vesting schedule.
- Founder service, vesting and compensation documents.
- Attrition, key-person dependency and open disputes.
- POSH, leave, payroll and labour-compliance evidence where applicable.
Folder 10: licences and regulatory compliance
List every licence, registration, consent and sector-specific approval. Include applications, renewals, correspondence, inspection reports, notices and remediation. State clearly when the company operates through a licensed partner rather than holding the licence itself.
Folder 11: privacy, cybersecurity and insurance
- Data map, notices, consent records and retention schedule.
- Vendor/sub-processor list and data-processing agreements.
- Security policies, access controls and penetration-test summaries.
- Incident register and remediation evidence.
- Cyber, D&O, property and key operating insurance.
Folder 12: disputes, debt and contingent liabilities
- Litigation, notices, claims and settlement documents.
- Borrowings, security, guarantees and covenant compliance.
- Founder or related-party loans.
- Tax, employee and customer contingencies.
- Undocumented commitments and side letters.
Data-room index and version control
| Index field | Purpose |
|---|---|
| Document ID | Stable reference in the diligence tracker |
| Folder and name | Consistent navigation |
| Period/date | Prevents stale-document confusion |
| Owner | Named person responsible for accuracy |
| Status | Final, draft, expired or pending |
| Access tier | Controls sensitive disclosure |
| Last verified | Evidence of review |
Common mistakes founders should avoid
- Uploading unsigned drafts as final contracts.
- Using different cap tables in finance, legal and the pitch deck.
- Exposing customer or employee personal data unnecessarily.
- Deleting inconvenient documents instead of explaining the issue.
- Sharing files through unrestricted public links.
- Providing forecasts with no assumptions or monthly bridge.
- Ignoring prior investor consent and information rights.
- Waiting until exclusivity to correct missing filings.
A 14-day readiness sprint
- Day 1–2: create the index and assign folder owners.
- Day 3–5: reconcile cap table, registers and securities.
- Day 6–8: bridge audited finance, MIS, tax and bank records.
- Day 9–10: abstract customer/vendor contracts and IP ownership.
- Day 11–12: complete HR, privacy, licences and disputes.
- Day 13: run founder, finance and legal consistency checks.
- Day 14: lock version one and open staged access.
Founder / Business Takeaway
A premium data room answers investor questions before they become red flags. Build it before the round, disclose in stages, and make every number traceable to a signed document or ledger. The objective is not perfection; it is transparent, controlled and internally consistent evidence.
Suggested internal links
FAQ
When should a startup build its data room?
Before formal fundraising, followed by monthly updates.
Should every investor receive full access?
No. Use staged access based on identity, seriousness and the diligence purpose.
What is the most common data-room issue?
Conflicting versions of the cap table, statutory records, financials and deck.
Can the room contain personal data?
Only where necessary, minimised, secured and disclosed for a documented purpose.
