How to Prepare for Due Diligence: The Complete Startup Checklist

Due diligence is the formal investigation an investor conducts after issuing a term sheet and before wiring funds, in which they verify every material claim about your company — its financials, legal standing, cap table, intellectual property, contracts, and compliance. Startups that are prepared close in 2-4 weeks. Startups that are not prepared lose 2-3 months, renegotiate terms, or lose the deal entirely.

When Due Diligence Happens

Due diligence typically begins after you and the lead investor have agreed on a term sheet. The term sheet outlines the deal structure — valuation, investment amount, board seats, and protective provisions — and is usually non-binding except for exclusivity and confidentiality clauses.

Once signed, you enter a period of exclusivity (usually 30-60 days) during which the investor conducts their investigation. During this time, you usually cannot negotiate with other investors. The clock is ticking.

Here is the typical fundraising timeline:

1. Pitch and partner meetings — 2-8 weeks
2. Term sheet negotiation — 1-2 weeks
3. Due diligence — 2-6 weeks (this is what we are preparing for)
4. Legal documentation — 1-3 weeks (overlaps with diligence)
5. Closing and wire — 1-2 days

The companies that close fastest are the ones who had their data room ready before the term sheet arrived.

The Complete Due Diligence Checklist

Corporate Documents

These prove your company legally exists and is properly structured.

• [ ] Certificate of incorporation (and all amendments)
• [ ] Bylaws (current version)
• [ ] Board meeting minutes (all meetings since incorporation)
• [ ] Written board consents (all actions taken by written consent)
• [ ] Stockholder meeting minutes (all meetings or written consents)
• [ ] Organizational chart showing parent/subsidiary relationships (if any)
• [ ] Qualifications to do business in states where you operate
• [ ] Good standing certificates from state of incorporation and operating states

Why it matters: Missing board minutes or unsigned consents are the most common corporate hygiene failure. If key decisions (equity issuances, officer appointments, fundraises) were not formally approved, the investor's lawyers will flag it and you will spend time and money on remedial board actions.

Cap Table and Equity

Your cap table is the centerpiece of equity due diligence.

• [ ] Fully diluted cap table showing all share classes, option grants, SAFEs, and convertible notes
• [ ] Stock purchase agreements for all founders and stockholders
• [ ] Stock option plan (the plan document itself, typically a board-approved equity incentive plan)
• [ ] Individual option grant agreements for every optionholder
• [ ] Stock option exercise records (who exercised, when, at what price)
• [ ] SAFE agreements (every SAFE note with its cap, discount, and investment amount)
• [ ] Convertible note agreements (principal, interest rate, cap, discount, maturity)
• [ ] 409A valuation reports (current and all historical)
• [ ] 83(b) election filings for any restricted stock recipients
• [ ] Transfer restrictions and right of first refusal (ROFR) agreements
• [ ] Investor rights agreement, voting agreement, and ROFR/co-sale agreement (if from a prior round)
• [ ] Pro rata and information rights documentation

Why it matters: The investor is about to buy a percentage of your company. They need to verify that percentage is real — that the shares exist, were properly authorized, and that no undisclosed claims dilute their position.

Financial Information

Investors need to understand your financial health and trajectory.

• [ ] Historical financial statements (P&L, balance sheet, cash flow) — since inception or last 3 years
• [ ] Current month financial statements (as recent as possible)
• [ ] Budget and financial projections for the next 12-24 months
• [ ] Monthly revenue breakdown (by product, by customer, or by cohort)
• [ ] Bank statements (last 3-6 months)
• [ ] Outstanding debt schedule (credit lines, loans, convertible notes)
• [ ] Accounts receivable and accounts payable aging reports
• [ ] Tax returns (federal and state) for all filed years
• [ ] Sales tax and payroll tax compliance records

Why it matters: Financial diligence catches discrepancies between what you pitched and what is real. If you told investors you have $500K ARR but your financials show $380K, the deal does not close at the same terms.

Intellectual Property

For technology companies, IP is often the most valuable asset.

• [ ] Patent filings and registrations (granted and pending)
• [ ] Trademark registrations (and pending applications)
• [ ] Copyright registrations (if any)
• [ ] Domain name ownership records
• [ ] Invention assignment agreements (signed by every current and former employee, contractor, and co-founder)
• [ ] Open source software usage audit (list of all open source libraries used and their licenses)
• [ ] Technology architecture overview (high-level description of the tech stack)
• [ ] Prior art or freedom-to-operate analysis (if you have one)

Why it matters: Investors need assurance that the company owns its technology. The most common IP red flag is a missing invention assignment agreement — if a former contractor built core features and never assigned the IP, the company may not actually own its product.

Contracts and Agreements

Every material relationship should be documented.

• [ ] Customer contracts (top 10 by revenue, or all if fewer than 10)
• [ ] Vendor and supplier agreements (especially critical dependencies)
• [ ] Partnership or channel agreements
• [ ] Lease agreements (office space, co-working)
• [ ] Insurance policies (D&O, general liability, cyber, E&O)
• [ ] Non-disclosure agreements (any NDAs the company has entered into)
• [ ] Loan agreements and lines of credit
• [ ] Government contracts or grants (with compliance obligations)

Why it matters: Contract diligence reveals concentration risk (one customer is 60% of revenue), unfavorable terms (a vendor can terminate with 30 days' notice), or hidden liabilities (an auto-renewing contract at above-market rates).

Team and Employment

People are the asset investors are really buying.

• [ ] Employee roster (name, title, start date, compensation, equity)
• [ ] Employment agreements for all key employees
• [ ] Offer letters for all employees
• [ ] Independent contractor agreements (for all current and past contractors)
• [ ] Non-compete and non-solicitation agreements (if any)
• [ ] Employee handbook or HR policies
• [ ] Pending or threatened employment disputes or claims
• [ ] Benefits and perks summary
• [ ] Key person dependencies (who are the critical people and what happens if they leave?)

Why it matters: A co-founder who never signed an employment agreement or invention assignment is a ticking time bomb. Investor lawyers check this first.

Compliance and Legal

Outstanding or threatened legal issues must be disclosed.

• [ ] Pending or threatened litigation (lawsuits, demand letters, arbitrations)
• [ ] Regulatory compliance documentation (industry-specific: HIPAA, SOC 2, GDPR, PCI-DSS)
• [ ] Data privacy policy (published and internal)
• [ ] Terms of service (current version)
• [ ] Consent decrees or regulatory orders
• [ ] Environmental compliance (if applicable)
• [ ] Export control compliance (if selling internationally)

Why it matters: Undisclosed litigation is a deal-killer. Every investor's standard representations require the company to disclose all known legal proceedings. Discovering an undisclosed lawsuit during diligence destroys trust.

Setting Up Your Virtual Data Room

A virtual data room (VDR) is a secure, organized online repository where you share due diligence documents with investors. Do not use Google Drive with haphazard folder naming. A professional data room signals competence and accelerates the process.

Data Room Structure

Organize your VDR with clear top-level folders matching the categories above:

1. Corporate Documents
   1.1 Certificate of Incorporation
   1.2 Bylaws
   1.3 Board Minutes
   1.4 Stockholder Consents
   1.5 Good Standing Certificates
2. Cap Table & Equity
   2.1 Cap Table (current)
   2.2 Stock Purchase Agreements
   2.3 Option Plan & Grants
   2.4 SAFEs & Convertible Notes
   2.5 409A Valuations
3. Financial Information
   3.1 Historical Financials
   3.2 Projections
   3.3 Bank Statements
   3.4 Tax Returns
4. Intellectual Property
   4.1 Patents & Trademarks
   4.2 Invention Assignments
   4.3 Open Source Audit
5. Contracts
   5.1 Customer Contracts
   5.2 Vendor Agreements
   5.3 Leases & Insurance
6. Team & Employment
   6.1 Employment Agreements
   6.2 Contractor Agreements
   6.3 Employee Roster
7. Compliance & Legal
   7.1 Regulatory Compliance
   7.2 Privacy & Terms
   7.3 Litigation (if any)

Data Room Best Practices

Number everything. Investors review dozens of data rooms. A numbered, hierarchical structure lets them find documents instantly and reference them in their internal memos.

Name files clearly. Use the format [DocType] - [Entity/Person] - [Date]. For example: Stock Purchase Agreement - Jane Chen - 2024-03-15.pdf. Never name files "Document1.pdf" or "scan_final_v3.pdf."

Grant role-based access. The lead investor gets full access. Co-investors may get limited access until they commit. Your lawyers get full access. Track who views what — activity logs help you gauge investor interest and anticipate follow-up questions.

Keep it current. If financials update during diligence, upload the new version and notify investors. Stale data creates confusion and delays.

Red Flags Investors Look For

Understanding what kills deals helps you prevent it.

Cap table problems. Missing 409A valuations, options granted below FMV without safe harbor, unsigned stock purchase agreements, or a cap table that does not reconcile with corporate records. Read our cap table guide for details on keeping yours clean.

Missing invention assignments. If any founder, employee, or contractor who built product did not sign an invention assignment, the company's ownership of its own IP is questionable. This is the single most common legal red flag at seed and Series A.

Customer concentration. If one customer represents more than 30% of revenue, investors worry about key-account risk. This is not necessarily a deal-killer, but you should have a clear narrative about diversification plans.

Founder vesting gaps. Founders who hold fully vested stock with no reverse vesting create a risk: if they leave, they keep 100% of their shares while contributing nothing. Investors typically require founder vesting as a condition of investment.

Undisclosed liabilities. Unpaid taxes, unreported litigation, or debt that does not appear on financial statements. This is the fastest way to lose investor trust permanently.

Sloppy corporate governance. Equity issued without board approval, missing meeting minutes, or decisions made without proper authorization. These require remedial actions that cost legal fees and delay closing.

Unresolved co-founder disputes. If a departed co-founder's equity situation is unclear — no separation agreement, contested vesting, or open claims — the investor's lawyers will not let the deal close until it is resolved.

Timeline Expectations

Pre-Seed and Seed (SAFE-Based Rounds)

Due diligence for SAFE rounds is lighter. Investors typically review:

• Cap table and SAFE stack
• Founder backgrounds (LinkedIn, references)
• Product demo or metrics dashboard
• Basic corporate documents

Timeline: 3-7 days. SAFEs are designed for speed. If a seed investor requires four weeks of diligence, evaluate whether they are the right partner.

Series A

This is where formal diligence begins. A Series A lead investor will typically assign an associate to manage the data room review, engage outside counsel, and may bring in a third-party accountant.

Timeline: 2-4 weeks if you are prepared, 6-10 weeks if you are not.

Series B and Beyond

Later-stage rounds involve deeper financial analysis, customer reference calls, technical diligence (code review, architecture assessment), and market analysis. Some growth-stage investors hire independent firms to conduct portions of the diligence.

Timeline: 4-8 weeks.

How to Prepare Before You Need To

The founders who close fastest are the ones who maintain a standing data room — not one they scramble to assemble after a term sheet arrives.

Start your data room at incorporation. Every time you sign a document — stock purchase agreement, board consent, contractor agreement — upload it immediately. This takes 30 seconds per document and saves weeks later.

Run a quarterly self-audit. Every quarter, review your data room against the checklist above. Are board minutes up to date? Is the cap table current? Are all employment agreements signed? Fix gaps when the stakes are low, not when a term sheet is on the table.

Keep your cap table clean at all times. Your cap table is the first thing investors review and the last thing lawyers verify before closing. If it does not reconcile with your corporate documents, the entire diligence process grinds to a halt.

Designate a diligence point person. This is typically the CEO or head of finance. This person manages the data room, responds to investor questions, and coordinates with lawyers. Having one person own the process prevents dropped balls and conflicting information.

Frequently Asked Questions

What is due diligence in startup fundraising?

Due diligence is the formal investigation an investor conducts after issuing a term sheet, in which they verify the startup's financials, legal standing, cap table, intellectual property, contracts, team, and compliance. Its purpose is to confirm that the company is what it claims to be and to identify any risks that could affect the investment. Due diligence typically takes 2-6 weeks depending on the stage of the company.

What documents do I need for investor due diligence?

At minimum, you need your certificate of incorporation, bylaws, board minutes, fully diluted cap table, all equity agreements (stock purchases, options, SAFEs), financial statements, tax returns, employment agreements, invention assignment agreements, material contracts, IP documentation, and any regulatory compliance records. For a complete list, use the checklist in this guide as your starting point.

How long does due diligence take?

Due diligence for SAFE-based seed rounds typically takes 3-7 days. Series A due diligence takes 2-4 weeks when the company is well-prepared and 6-10 weeks when it is not. Series B and later rounds take 4-8 weeks. The single biggest factor in timeline is preparation — having a well-organized virtual data room with all documents ready before the term sheet arrives.

What is a virtual data room?

A virtual data room (VDR) is a secure, cloud-based repository where a company shares confidential documents with investors during due diligence. It provides structured folder organization, access controls, activity tracking, and watermarking. A well-organized VDR with numbered folders and clearly named files signals professionalism and accelerates investor review.

What are the biggest red flags in due diligence?

The top red flags that delay or kill deals are: missing invention assignment agreements (the company may not own its IP), cap table errors or missing 409A valuations, undisclosed litigation or liabilities, customer concentration above 30%, founders holding fully vested stock with no reverse vesting, and equity issued without proper board authorization. Any of these can add weeks to the process or cause investors to renegotiate or withdraw.

Should I prepare for due diligence before I have a term sheet?

Yes. Maintaining a standing data room from the day you incorporate is the single most impactful thing you can do to accelerate future fundraising. Every document you sign should be uploaded immediately. Every quarter, audit your data room against a standard checklist. Companies that maintain ongoing diligence readiness close 2-3x faster than those that scramble after receiving a term sheet.

Can due diligence findings change the deal terms?

Yes. If due diligence reveals material issues — inaccurate financials, undisclosed liabilities, cap table errors, or IP ownership gaps — the investor may renegotiate the valuation, add protective provisions, require remedial actions before closing, or walk away entirely. The term sheet is typically non-binding (except for exclusivity and confidentiality), so the investor is not obligated to close on the original terms if diligence uncovers problems.

Organize Your Due Diligence in Slyced's Virtual Data Room

Slyced provides a built-in virtual data room that stays synchronized with your cap table, equity documents, and corporate records. Invite investors with role-based access, track document views in real time, and maintain a standing data room that is always ready for your next raise. When the term sheet arrives, you share a link — not a scramble.

Get started with Slyced

Disclaimer: This article is for informational purposes only and does not constitute legal or financial advice. Consult a qualified attorney for guidance specific to your situation.