Investor due diligence is the investigation an investor runs before committing capital. It covers your financials, legal documents, technology, team and market, according to the University of Virginia's Foundry glossary. This checklist works from both sides of the table. Investors can use it to decide what to verify. Founders can use it to see what will be asked and to have the answers ready before the request arrives.
TL;DR
- Diligence at the pre-seed and seed stages is mostly about the founding team, the market, the legal history and the cap table. Deep financial and technical scrutiny grows with each round.
- Investors work through a full checklist but spend their real effort on three or four critical risks.
- Founders should assemble an indexed data room before the first request: corporate records, cap table, financials, IP, contracts, product and team.
- The most common deal-killers are fixable in advance: missed 83(b) elections, unassigned IP, a messy cap table and numbers that differ between documents.
- How quickly and cleanly you answer requests is itself a signal of how well the company runs.
Table of Contents
- What investors are actually trying to learn
- The investor due diligence checklist
- Documents to prepare before the request arrives
- How to organize the data room
- Red flags that trigger deeper diligence
- Our perspective
- Getting investor-ready with KapVista
- FAQ
- Sources
What investors are actually trying to learn
Due diligence is not an audit. At the early stage, the Angel Capital Association frames it as identifying the key risks, developing an investment thesis and stating what has to be believed for the investment to make sense. A pre-revenue company will never have the paper trail of a ten-year-old business, so the question is not whether every box is ticked. The question is whether the risks are understood and whether the story holds together when someone checks it.
That guide lists the areas investors typically examine: management, technology, product, intellectual property, go-to-market, competition, market opportunity, financials, legal issues and investment risks. Its advice on process is worth remembering from either side: cross-check against a full checklist, but concentrate on the three or four areas that need the most examination.
The weight shifts by round. According to a Octopus Ventures guide, a seed round mainly scrutinizes the team and the company's legal history, while a Series A adds financials, technology scrutiny and possibly conversations with existing clients. A venture investor quoted in TechCrunch said that at the stage his firm invests, most diligence focuses on the quality of the founding team and the size and attractiveness of the market. If you are deciding how much to prepare, our guide to preseed versus seed explains how the milestones differ.
The investor due diligence checklist
Use the sections below in order. Each one lists what to verify and the evidence that answers it. Not every item applies to every company, and an early-stage startup will lack some documents simply because the event never happened. The Angel Capital Association's own checklist notes this explicitly and suggests investors adjust expectations accordingly.
1. Corporate structure and governance
The Angel Capital Association's due diligence questions guide says investors should verify the corporate structure, the number of shareholders, founder allocations and vesting, the composition of the board and advisers, any litigation, and the permits and licenses the business needs. It also asks whether the structure supports growth and an eventual liquidity event.
What to check:
- Certificate of incorporation, bylaws and any amendments
- Board and shareholder minutes and consents
- Good standing in the state of incorporation and anywhere you operate
- Subsidiaries and their ownership
- Founder vesting terms and who actually holds shares
- Pending or threatened litigation, and required permits or licenses
A typical venture request list, such as the sample from Cooley GO, asks for charter documents, board and shareholder minutes, and capital stock details such as optionee lists and vesting schedules. It dates from 2014, but the categories have stayed stable.
2. Cap table and financing history
Ownership problems are the quickest way to stall a round. Confirm that the cap table matches the stock ledger, option grants and every prior financing document. Check that SAFEs and convertible notes are modeled correctly, that vesting schedules are documented and that no one holds a promise of equity that never made it onto paper.
A Series A diligence checklist commonly asks for stockholder and option-holder lists. CRV's data room guide asks founders for an exact cap table and prior financing documents. If yours is not clean yet, our walkthrough on getting a clean startup cap table covers the fixes.
3. Financials and projections
For financial diligence the Angel Capital Association's questions guide points investors to one-, three- and five-year projections, accounting compliance, independent accounting work, the assumptions behind the forecast, how realistic revenue is, when the company becomes cash-flow positive, cash needs, prior funding terms, follow-on funding, tax returns, debt and valuation.
In practice, CRV expects historical profit-and-loss statements, a year-to-date P&L, the latest balance sheet, five-year projections and, for Series A, monthly management accounts, actual-versus-plan comparisons and expense detail. The same guide warns that ARR in your pitch deck that differs from your accounting records can undermine trust.
One point helps founders keep perspective: an investor writing for early-stage founders argues that investors care less about exact projected figures than about the logic and assumptions behind them. Build the model so you can explain every driver in a sentence.
4. Intellectual property and technology
The central question is simple: does the company own what it says it owns? Verify that founders, employees and contractors have signed invention assignment agreements, that open-source and third-party licenses are understood, and that any filings with governmental entities are recorded. The Series A checklist above specifically asks for evidence of filing or recordation of IP.
Technical diligence usually arrives later. Octopus Ventures notes it is often performed by a third-party provider who may examine the software architecture, a sample of code and the development team's processes. For a pre-seed company, a live product demo and a conversation with the technical lead often serve the same purpose.
5. Product, customers and market
This is where claims meet evidence. Ask for:
- Usage, retention and cohort data, matched to the figures in the deck
- Signed customer contracts, pilots or letters of intent
- The sales pipeline and the channels producing it
- Market sizing with its source and method, not just a top-down headline
- A candid competitor list and where the product genuinely differs
Investors often select a few customers for confidential reference calls. According to Octopus Ventures, these calls validate the product's value to clients and help assess the competitive landscape. Founders should expect this and brief the customers that a call may come.
6. Team and operations
The Angel Capital Association's guide covers management capability and references, compensation and options, and day-to-day operations. Check founder backgrounds, key-hire plans, employment agreements, contractor classification and who holds the critical knowledge in the company. A single point of failure in a two-person technical team is a risk worth naming early rather than letting an investor discover it.
7. Legal and regulatory
Beyond corporate records, review material contracts, data privacy practices, sector-specific compliance and any regulatory exposure. Securities compliance matters too: a raise from the wrong kind of investor can create problems later. Our guide on preseed fundraising and SEC Form D explains the filing side of this.
Documents to prepare before the request arrives
Founders who wait for a request list lose days. The documents below cover most first requests, drawn from the sources above.
| Area | Documents |
|---|---|
| Corporate | Charter, bylaws, board and shareholder minutes, good standing certificates |
| Capital | Cap table, stockholder and option-holder lists, vesting schedules, prior financing documents |
| Financial | Historical and year-to-date P&Ls, balance sheet, projections, tax returns, debt schedule |
| IP | Assignment agreements, filings or recordations, license agreements |
| Commercial | Material contracts, customer list, pipeline, pricing |
| Team | Founder and key-hire agreements, option plan, org chart |
| Product and tech | Roadmap, architecture overview, security practices |
CRV, Alehar and others structure data rooms the same way: an overview first, then corporate and governance, cap table and financing history, financials and forecasts, metrics and traction, customers and market, product and technology, and team and operations. If you want a deeper folder-by-folder version, see our startup data room checklist. For the broader raise, the capital raising checklist covers what comes before and after diligence.
How to organize the data room
The UK government published a data-room essentials checklist on 2 December 2025. It is written for UK growth-stage companies, but the discipline travels well. Its main points:
- Keep records accurate, current and consistent, with no undisclosed liabilities or IP-ownership gaps.
- Use indexed folders: Financial, Legal and IP, Commercial, Regulatory, HR and Governance, and Technical.
- Name one accountable internal owner.
- Update the room quarterly.
- Add a master index, plus short explanations for unusual figures.
- Run a mock diligence review before real investors do.
- Share through a platform with permission controls, version control and access logs.
The explanation notes are the step most founders skip. A dip in revenue, a one-off legal fee or a contractor who became an employee takes one paragraph to explain. Left unexplained, each becomes an email thread and a small loss of confidence.
What your handling of requests signals
Octopus Ventures observes that how a company deals with diligence requests can show how well it is run and how robust its internal processes are. That includes how you protect sensitive material. Investor data rooms hold cap tables, contracts and employee records, so access controls and basic security hygiene are part of looking prepared. If your team lacks in-house security expertise, a provider of managed cybersecurity and advisory services can help you assess the gaps before an investor asks about them.
Red flags that trigger deeper diligence
Most red flags are not fraud. They are small inconsistencies that make an investor ask what else might be off. Bowery Legal lists missed 83(b) elections, unassigned IP, messy cap tables and unaccredited investors on the cap table as issues that can derail financings. An 83(b) election generally has a hard 30-day filing window after a stock transfer, so check with your tax adviser early, since it cannot be repaired later.
A verification checklist from Verified.vc adds warning signs investors learn to watch for:
- Inconsistent identities or authority, or mismatched legal entities
- Opaque beneficial ownership
- Cap-table discrepancies and missing or altered documents
- Customer or revenue claims without support
- A fundraising story that keeps changing
- Pressure to shorten diligence
- References that are tightly controlled
- Wire-instruction changes near closing
- Accounting records that conflict with legal records
Founders should read that list as a pre-flight check. Investors should treat each item as a prompt to verify, not a verdict.
Our perspective
We see the same pattern in early-stage raises: founders treat diligence as a hurdle that starts after a term sheet, when it actually begins with the first meeting. Every deck, every metric and every answer to an investor question is a data point that will later be compared with the documents. The founders who move fastest are not the ones with the most polished data rooms. They are the ones whose story, numbers and paperwork agree.
We also think investors benefit from restraint. A checklist is a map, not a destination. Chasing every line item at pre-seed wastes the time of both sides, and the better use of attention is the three or four risks that decide whether the company can work. For founders, that means knowing your own three or four before an investor names them for you.
Finally, preparation changes the conversation. A founder who can say here is our cap table, here is the one open item, and here is how we are fixing it sounds like someone investors want to work with for a decade.
— Daniel
Getting investor-ready with KapVista
If you are preparing to raise, KapVista connects early-stage founders with venture firms, family offices and angel investors through tailored introductions. Founders can start with a basic profile, and paid offerings begin at $39 per month. We also offer Investor Relations service packages for founders who want help keeping materials and investor communication in order. See the plans and details or the Investor Relations packages. Before your first meeting, our post on investor meeting questions shows what to expect.
FAQ
What is included in an investor due diligence checklist?
A complete checklist covers corporate structure, cap table and financing history, financials and projections, IP and technology, product and customers, team and operations, and legal and regulatory matters. Early-stage investors usually weight the team, market and legal history most heavily. The checklist is a guide, and the real work goes into the few risks that matter most.
How long does startup due diligence take?
It depends on the round, the investor and how prepared the company is. Seed diligence is generally lighter than Series A, which adds financial and technical review. A ready data room and quick answers shorten the process, and slow or inconsistent responses lengthen it.
Do pre-seed startups need a data room?
A full data room is not required, but a simple, organized folder with corporate documents, the cap table, basic financials, IP assignments and key agreements is. It lets you answer a first request in hours instead of weeks and shows investors you run the company carefully.
Who performs technical due diligence?
It is often a third-party provider, according to Octopus Ventures, who may review software architecture, a sample of code and the development team's processes. At earlier stages, investors may rely on a product demo and a conversation with your technical lead.
Sources
- Due Diligence, Startup glossary, The Foundry at UVA
- Stones Unturned: An Investor's Guide to Due Diligence in Early-Stage Companies, Angel Capital Association
- Angel Capital Association, Due Diligence Questions
- Angel Capital Association, Due Diligence Checklist
- The majority of early-stage VC deals fall apart in due diligence, TechCrunch
- Seed and Series A Deals: Nailing Due Diligence, Octopus Ventures
- Sample VC Due Diligence Request List, Cooley GO
- Series A Diligence Checklist
- Data Room Setup: How to Prepare for Fundraising, CRV
- How to Do Due Diligence on an Early-Stage Startup
- Track 1: Data Room Essentials and Documents Checklist, GOV.UK
- VC Due Diligence Checklist for Startup Investments, Bowery Legal
- Startup Verification Red Flags Checklist, Verified.vc