Due diligence isn't a simple 'check-the-box' exercise; it's an investor's process for confirming your claims and de-risking their investment. Prepare a comprehensive data room *before* you get a term sheet, understand the difference between pre- and post-term sheet diligence, and proactively manage the process to maintain momentum and build trust.
Key takeaways
- Build your data room before you start fundraising, not after you get a term sheet.
- Diligence is a test of your operational discipline as much as your business metrics.
- Proactively flag and explain potential issues; don't wait for investors to find them.
- Use your lawyer for legal diligence, but manage the overall process and timeline yourself.
- Maintain momentum with weekly check-ins and clear communication.
- Know the difference between legitimate diligence requests and investor red flags.
It's not a formality. It's the whole game.
You got the verbal "yes." The investor sent a term sheet. You feel the thrill of victory, but let’s be clear: a term sheet is not a commitment to invest. It’s an agreement to begin the final, most critical phase of fundraising: due diligence.
Due diligence is the investor's process of verifying your claims. They liked the story; now they need to check the facts. Think of it less as a final exam and more as an open-book test on your own company. Your job is to make it easy for them to find the answers and prove you’re a competent operator.
Getting this wrong can kill your deal. Getting it right builds the trust that turns a signed piece of paper into a wire transfer.
Pre-Diligence vs. Confirmatory Diligence
First, you need to understand the two stages of diligence. Founders often confuse them.
Pre-Term Sheet Diligence: This is the work an investor does to decide if they want to offer you a term sheet. It involves your pitch deck, financial model, market analysis, and multiple conversations. They might ask for high-level metrics on customer acquisition or retention. This is about building conviction. · Post-Term Sheet (Confirmatory) Diligence: This is what happens after you've signed a term sheet. It's a formal, structured process to confirm there are no hidden skeletons in the closet. The goal here is not to re-evaluate the business case, but to verify the legal, financial, and operational health of your company. This is about de-risking the investment.
Your goal is to provide just enough information during pre-diligence to get the term sheet, while holding back the full data room for the confirmatory phase.
The Ultimate Due Diligence Data Room Checklist
The single biggest mistake you can make is scrambling to assemble documents after you get a request list. It signals disorganization and slows down momentum. A professional founder has 90% of this ready before the first pitch.
Create a folder in Dropbox, Google Drive, or a dedicated data room service (like DocSend or Carta). Organize it cleanly with the following structure. Don't share the top-level folder; share specific folders as requested.
Certificate of Incorporation & all amendments. · Bylaws and other corporate governance documents. · A simple, clean cap table (spreadsheet is fine). Include all issued stock, the option pool, and any convertible notes or SAFEs. · All board meeting minutes and written consents. · Stock Purchase Agreements for all stock ever issued. · Any convertible notes, SAFEs, or other debt instruments. · Confidential Information and Invention Assignment Agreements (CIIAA) for ALL employees and contractors, past and present. This is critical. · List of all legal counsel and advisors.
Historical financial statements (P&L, Balance Sheet, Cash Flow) for the last 2-3 years, or since inception if younger. · Current year-to-date monthly financials. · The operating financial model you shared during the pitch (Excel/Google Sheets). · Bank statements for the last 12 months. · Details of any debt or loans.
High-level technical architecture diagram. · List of key open-source libraries used and their licenses. · Description of your product development process. · (For deep tech) Any patent filings or provisional patents. You will almost never be asked for your source code. If you are, it's a red flag.
Anonymized list of all current employees with their role, start date, and salary/equity. · Offer letters and employment agreements for key hires (especially founders). · Contractor agreements. · Bios or links to LinkedIn profiles for the founding team.
Top 10 customer contracts (by revenue). · Standard sales agreements, terms of service, and privacy policy. · A pipeline of current sales prospects, if applicable. · Any major partnership agreements.
Common Founder Mistakes (And How to Avoid Them)
Investors are looking for patterns. Here are the unforced errors that spook them:
Sloppy IP Assignment: If you or a co-founder ever performed work on the product before the company was incorporated, or if you used a contractor who didn't sign a CIIAA, the investor will flag it. Their money can't buy IP that the company doesn't legally own. Fix: Work with your lawyer now to get all IP properly assigned to the company. · A Messy Cap Table: Vague promises of equity, unrecorded handshake deals, or SAFEs with conflicting terms are huge red flags. It creates legal risk and signals a lack of discipline. Fix: Use standard documents (like YC's SAFE) and record every equity grant, no matter how small. A clean cap table is non-negotiable. · Co-Founder Red Flags: Are all founders fully committed? Is vesting in place for everyone? The investor is betting on the team, and any sign of instability—like a founder who hasn't quit their day job—is a major risk. Fix: Have clear, written agreements and vesting schedules for all founders from day one. · Hiding Bad News: Did you lose a major customer last month? Is a key employee leaving? Don't wait for them to find out. Get ahead of it. Frame the issue, explain what you learned, and present your plan to mitigate it. Hiding problems kills trust faster than the problems themselves.
Managing the Process: Create Momentum, Build Trust
Diligence is a game of psychology and momentum. A process that drags on for months loses energy, and deals fall apart. Your job is to drive the process forward.
1. The Kickoff: Once the term sheet is signed, send a kickoff email to the lead investor and their team. Re-state your excitement and propose a plan.
Subject: Diligence Kickoff - [Your Company] & [Investor Firm]
We're incredibly excited to be moving forward. To make diligence as smooth as possible, we've prepared a data room with most of the standard corporate and financial documents.
Please send over your diligence request list, and we can schedule a kickoff call early next week to walk through it and align on a timeline. Our goal is to get you everything you need quickly so we can get to a close.
2. The Weekly Check-in: Send a short update every Friday. List the open requests, who is responsible for them, and the expected delivery date. This keeps everyone accountable and prevents the process from stalling.
3. Reference Calls: The investor will want to talk to customers, former managers, and advisors. Curate a list of potential references in advance, and ask them for permission. Give them a heads-up about the key themes the investor is likely exploring. Choose people who can speak with specificity about your strengths.
Investor Red Flags to Watch For
Diligence is a two-way street. Watch for these signals that the investor might not be serious or could be problematic:
Endless, Disorganized Requests: A professional firm has a standardized list. If they keep coming back with random, one-off requests, it may mean they are disorganized or simply fishing for reasons to say no. · Trying to Re-Trade the Deal: If an investor uses a minor diligence finding—like a missing document—to try and lower your valuation or change key terms, it's a major red flag about their integrity. · Going Silent: Long periods of silence are a bad sign. A serious investor will communicate clearly and manage the process on their end. If they disappear for a week, it's your job to follow up and re-engage them.
How to Apply This This Week
Create Your Data Room Folder: Use the checklist above and create the folder structure. Don't worry about populating it all at once, just build the skeleton. · Gather Core Corporate Docs: Find your Certificate of Incorporation, Bylaws, and any existing stock purchase agreements. Put them in the folder. If you can't find them, email your lawyer. · Build Your Cap Table v1: Open a spreadsheet and list every person or entity that owns a piece of your company. List all SAFEs and their terms. It doesn't have to be perfect, but you need a single source of truth. · Check Your IP Assignments: Go through every single person who has ever written code or contributed to the product (including founders and contractors). Do you have a signed CIIAA from them? If not, flag it as an action item to fix with your lawyer.
Frequently asked questions
- How long does startup due diligence usually take?
- For a typical seed or Series A round, expect confirmatory due diligence to take 2-4 weeks after you sign the term sheet. Pre-seed rounds can be faster, sometimes as little as 1-2 weeks.
- What's the biggest mistake founders make in due diligence?
- The most common mistake is being unprepared. A messy, incomplete data room signals a lack of discipline and can kill an investor's enthusiasm and trust before the process even begins.
- What happens if an investor finds a problem during due diligence?
- It depends on the problem. If it's a minor issue (e.g., a missing contractor agreement), you fix it. If it's major (e.g., a co-founder dispute), it's better to raise it proactively and present your plan for resolving it. Hiding problems is what kills deals.
- Do I need a lawyer for due diligence?
- Yes, you absolutely need a competent startup lawyer. They will manage the legal diligence process with the investor's counsel, reviewing corporate records, contracts, and cap table accuracy. However, you, the founder, are responsible for the business and financial diligence.
