Investor Due Diligence Checklist for Startups (2026)

An investor due diligence checklist is what stands between “we’re interested” and a signed term sheet actually turning into wired money. Once a VC or angel commits verbally, their team spends two to six weeks combing through your legal filings, cap table, financials, contracts, and team documents. If that data room is messy, or worse, still half-empty, the round slips, valuation gets renegotiated, or the deal quietly dies.

This is the investor due diligence checklist we recommend startups prepare before term sheets land, split by fundraising stage (pre-seed, seed, Series A). Copy it, build the data room in an afternoon, and give your CFO or founder-legal contact a single place to send investors.

Why investors run due diligence (and what they’re actually looking for)

Investor due diligence is the verification step between a handshake and a closed round. The investor’s job is to check that what you told them in the pitch matches the paperwork: the cap table you sent is the one in your incorporation docs, the revenue on your deck matches the bank statements, the IP you claim is actually assigned to the company.

They are looking for three things:

  • Red flags — unassigned IP, missing founder agreements, tax filings that don’t exist, employees paid as contractors, unresolved disputes.
  • Consistency — your numbers, your team, your contracts, and your story all agree with each other.
  • Speed of response — how fast and how completely you send documents is a proxy for how you’ll run the company post-funding.

Ninety percent of the friction is not about the answers. It is about the retrieval. Founders who prepare the data room in advance close faster and negotiate from a stronger position.

The master investor due diligence checklist

This is the baseline every startup should have ready, regardless of stage. Section-by-section, this is what an investor’s counsel will ask for.

1. Corporate & organizational documents

  • Certificate of incorporation and all amendments
  • Bylaws or operating agreement
  • Board consent and stockholder resolutions
  • Foreign qualifications (states or countries where you operate)
  • Business licenses and permits
  • EIN confirmation letter
  • Registered agent details

2. Capitalization

  • Current cap table (fully diluted, including SAFE / convertible notes)
  • Stock purchase agreements for all founders
  • Option plan and grant records
  • All SAFEs, convertible notes, and warrants issued to date
  • 409A valuation report (US) or equivalent
  • Any previous funding round docs (SPAs, side letters)

3. Financials

  • Last three years of financial statements (or since inception)
  • Latest management accounts (P&L, balance sheet, cash flow)
  • Bank statements for the last 12 months
  • 24-month forward financial model
  • Revenue breakdown by customer, product, and geography
  • Accounts receivable and payable aging
  • Debt schedule

4. Tax

  • Federal and state tax returns (last three years)
  • Sales tax and VAT filings
  • R&D tax credit filings
  • Tax residency documentation
  • Any correspondence with tax authorities

5. Intellectual property

  • IP assignment agreements from every founder, employee, and contractor
  • List of patents, trademarks, and copyrights (filed and granted)
  • Domain names owned by the company
  • Open-source software usage log
  • Software licensing agreements

6. Team & HR

  • Employment agreements for all employees
  • Independent contractor agreements
  • Offer letters (current and past)
  • NDAs and non-competes
  • Employee handbook and policies
  • Payroll records (last 12 months)
  • Benefits plan documents
  • Equity grant letters

7. Commercial contracts

  • Top 10 customer contracts by revenue
  • Top 10 supplier or vendor contracts
  • Partnership agreements
  • Reseller or distribution agreements
  • Any contract with a change-of-control clause

8. Product & tech

  • Architecture diagram
  • Security policy (SOC 2 report if available)
  • Data processing agreements (GDPR, CCPA)
  • Incident log for the last 24 months
  • Backup and disaster recovery documentation

9. Legal & compliance

  • Active litigation summary (or a signed statement of no litigation)
  • Insurance policies (D&O, general liability, cyber)
  • Privacy policy and terms of service
  • Regulatory approvals (if applicable)

10. Prior investor communications

  • Investor updates for the last 12 months
  • Board minutes from the last 24 months
  • Any prior term sheets received

If you can hand over every item on that list within 24 hours of a term sheet, you are ahead of 80% of founders. If you’re still hunting for a founder’s IP assignment from three years ago, the investor’s counsel notices, and the deal loses momentum.

Stage-by-stage investor due diligence checklists

Not every stage needs every document. Here’s how the ask changes.

Pre-seed due diligence checklist

At pre-seed, most investors are underwriting the founder, not the metrics. Diligence is lighter but still exists.

Essentials:

  • Certificate of incorporation
  • Cap table with any SAFEs already issued
  • Founder stock purchase agreements
  • IP assignment agreements from all founders
  • 409A (if you’re granting options)
  • Basic financial model
  • Product demo or MVP walkthrough
  • Founder background information

Common red flags at pre-seed:

  • One founder holds all equity with no vesting schedule
  • IP was built during a previous job without a release
  • Company incorporated in the wrong jurisdiction for the investor’s fund

Seed due diligence checklist

At seed, you have early traction and possibly a team. Diligence expands to cover team, early customers, and financial hygiene.

Add to the pre-seed list:

  • Employment agreements for all hires
  • Top customer contracts
  • Bank statements (last 6-12 months)
  • Latest management accounts
  • Any prior funding round documents
  • Basic security posture (data handling, hosting)
  • Privacy policy and terms of service

Common red flags at seed:

  • Revenue in the deck doesn’t match bank statements
  • Contractors doing employee work without IP assignments
  • Missing 83(b) elections for founders
  • Options granted without a formal plan

Series A due diligence checklist

At Series A, expect three to six weeks of deep diligence with external counsel and often a QoE (quality of earnings) firm on the financials.

Add to the seed list:

  • Three years of audited or reviewed financials
  • Detailed cohort analysis and unit economics
  • Full customer contract database
  • SOC 2 Type I or Type II report
  • Complete debt schedule
  • Full IP portfolio audit
  • Litigation and dispute history
  • Every board resolution since incorporation
  • Every option grant and exercise
  • Insurance policies (D&O required)
  • References from customers, previous investors, and former employees

Common red flags at Series A:

  • Revenue recognition doesn’t follow accepted accounting standards
  • Customer concentration above 25% with a single account
  • Missing DPAs for enterprise customers
  • Unresolved employment disputes
  • IP built by an offshore team without a proper assignment structure

How to build a data room that actually closes rounds

Most founders build the data room the wrong way. They dump every file into a folder tree, share it, and hope investors find what they need. Investors dislike this because they can’t tell what’s missing, and you have no way to know who accessed what.

A better approach:

  1. Use a structured checklist, not a folder tree. Group requests by category, and give each item a status: not started, uploaded, approved, rejected.
  2. Assign owners. The CEO doesn’t have every IP assignment. Your legal contact does. Your finance lead has the tax returns. Assign each section to the right person.
  3. Track expiration. Insurance policies, tax residency certificates, and 409As expire. If you’re raising over several months, some documents will need refreshing mid-diligence.
  4. Log every access. Know which investor’s team downloaded what, and when. This tells you who is serious and who is fishing.
  5. Give investors the ability to request additional items. Diligence lists are never final. Investor counsel will ask for something you didn’t anticipate — make it easy for them to request, and easy for you to respond.

Traditional data rooms handle files but not the workflow. Email handles the workflow but not the files. What you actually need is a workflow that owns both.

Superdocu was built for exactly this kind of multi-step, multi-owner document collection. You can define a due diligence workflow once, assign the categories to different team members, invite investor counsel to a branded portal, and track every upload, approval, and expiration in one place. Because Superdocu is designed for external document collection, not internal file storage, investors get a clean, guided experience with magic-link access and no password friction. Reminders go out automatically when a document is missing or expiring, so your team is not writing follow-up emails at 11pm before a board call.

If you’re managing due diligence across multiple funds or bidders, this matters even more. See our document collection best practices for the underlying principles, or our broader due diligence checklist template for M&A and vendor variants of the same workflow.

Investor due diligence timeline (what to expect)

Understanding the timeline helps you set expectations with your team.

Stage Typical duration Depth
Pre-seed 3–10 days Founder background, IP, basic corporate
Seed 1–3 weeks Team, early customers, financial hygiene
Series A 3–6 weeks Full legal, financial (often QoE), technical, references
Series B+ 4–8 weeks Everything above plus commercial diligence and market study

Time kills deals. Every week your data room is incomplete is a week the investor’s momentum fades or their partnership decision gets rescheduled. The founders who close fast are the ones who treat diligence as a project managed with the same rigor as a customer implementation, not a scavenger hunt.

Common mistakes that stall investor diligence

  • Sending files over email. Version confusion, no access log, no security.
  • A shared Google Drive with public link. No expiration, no tracking, no way to redact.
  • Waiting until the term sheet to start. You lose the first week just gathering documents.
  • One founder holding all the knowledge. When your CEO is heads-down on customer calls, diligence stalls.
  • Skipping IP assignments for early contributors. This gets discovered in week three of Series A diligence and can blow up the round.
  • No expiration tracking. Your D&O policy lapsed. Your 409A is 14 months old. Your top customer contract needs renewal. Investors notice.

Most of these can be avoided with a simple rule: build your due diligence workflow the week you incorporate, not the week you get a term sheet.

Related resources

Frequently asked questions

What is an investor due diligence checklist?

An investor due diligence checklist is the structured list of legal, financial, tax, IP, HR, and commercial documents an investor’s team reviews before wiring funds. It converts a vague “send us the diligence pack” request into a specific, trackable set of items with owners and status.

How long does investor due diligence take for a startup?

Pre-seed diligence usually takes 3 to 10 days. Seed rounds take 1 to 3 weeks. Series A commonly runs 3 to 6 weeks, with Series B and later stretching to 4 to 8 weeks because of quality of earnings analysis and commercial diligence.

When should a startup start preparing its data room?

Immediately after incorporation, then continuously as the company grows. The founders who close fastest have a live data room they update as new contracts, hires, and financials come in, not one they scramble to build after a term sheet arrives.

What are the biggest red flags in investor due diligence?

Unassigned IP from founders or early contributors, revenue in the deck that doesn’t match bank statements, missing 83(b) elections, employees misclassified as contractors, and heavy customer concentration in a single account. Any of these can slow or kill a round.

Do angel investors run due diligence?

Some do, most run a light version. Expect requests for the certificate of incorporation, cap table, founder agreements, IP assignments, and a basic financial model. Institutional angels and syndicates typically run deeper diligence closer to a seed fund’s process.

Run your investor due diligence without the email chaos

Building the data room is only half the battle. Running it is the harder half: chasing IP assignments from a founder who left three years ago, updating your D&O policy mid-diligence, giving three different investor teams the exact same guided experience.

Try Superdocu free for 7 days and build your investor due diligence workflow once. Add every document category from this checklist, assign owners to each section, and share a branded portal with your investor’s counsel. Automated reminders handle the follow-ups. You focus on closing the round.

No credit card required.

← Back to blog

Part(s) or the totality of the above content may have been generated with the help of AI. Please double-check the information provided in this article to avoid any surprises.

Ready to automate your onboarding workflow?

Join thousands of businesses that have simplified their document collection process and delighted their clients.

N

7-Day free trial, cancel anytime.