Financial Model Validation before a Data Room: What to fix for Investors

A financial model built internally is not the same as a model that is ready for investor scrutiny. The gap is almost never the spreadsheet formulas. It is assumption integrity, cross-statement coherence, reconciliation against actuals, and the ability to hold its shape when a VC analyst starts pulling threads on Day 1 of diligence. Founders who open a data room with an unvalidated in-house model spend the first two weeks of diligence defending the spreadsheet rather than selling the company. This article covers the structured validation process: what to check, in what order, what India-specific issues surface at the worst moment, and what investors actually do with the model before they ask the founder a single question.

What does “financial model validation” mean in the context of a data room?

Financial model validation, in this specific context, is the structured process of verifying that a completed in-house model is internally consistent, grounded in defensible assumptions, reconciled against actuals and statutory returns, coherent with the pitch deck narrative, and capable of withstanding the first-pass methodology a VC or PE analyst runs in week one of financial diligence. It is not the same as building a model from scratch. It is also not the same as the financial due diligence that investors run after the data room opens. Validation is what the founder does before the room opens, to find and fix every material error before the other side finds it for them.

Why an in-house model will not survive diligence as-is

Most in-house models are built under time pressure, usually by a founder and a finance executive working together across multiple updates without a formal quality-control step. They are built to answer internal planning questions, not to withstand external forensic scrutiny. By the time a data room opens, those models carry months of accumulated assumption drift, silent inconsistencies, and structural workarounds that are invisible to the people who built them and immediately visible to an analyst reviewing cold.

Four structural failure points recur across almost every unvalidated in-house model.

Hardcoded inputs inside calculation blocks. When numbers are embedded in formula rows rather than isolated on a dedicated assumptions tab, the model becomes opaque. An analyst who finds a hardcoded growth rate at row 47 of the revenue schedule cannot tell whether it is intentional or an error. That uncertainty is enough to flag the model as unreliable.

Assumption drift across updates. Models updated repeatedly over months accumulate inconsistencies: a pricing assumption updated in the revenue tab that was never carried through to the COGS build; a headcount ramp that diverged from the hiring plan after a mid-year org restructure; a churn rate that was revised in the dashboard but not in the underlying cohort logic. These are not fraudulent. They are the natural result of iterating without a reconciliation discipline.

The multi-version problem. Founders routinely maintain three or more versions of the model simultaneously: one for internal planning, one shared with an existing investor, one included in a pitch deck. Each version has drifted from the others. When a data room opens, it is often unclear which version is canonical. Investors who encounter a model dated eight months earlier, or one that contradicts figures in the deck, begin diligence with a credibility question already open.

The India-specific reconciliation gap. Indian startup models carry regulatory complexity that creates specific reconciliation obligations the model must address. A delta of more than 10% between book revenue and GST-declared turnover is a yellow flag in diligence. A delta above 20% typically triggers a separate workstream. These are discoverable in under an hour by an investor’s chartered accountant with access to the data room, which is why the reconciliation must be prepared before the room opens, not after the question arrives.

What investors actually do with your model in week one of diligence

Validation done right mirrors the methodology the other side will use. A VC analyst reviewing a data room financial model in the first week typically runs eight checks before asking the founder anything.

Three-statement balance check. If ending cash on the cash flow statement does not equal cash on the balance sheet, the model fails its first test. This takes under two minutes to verify and is always the first check.

Sensitivity and linkage test. The analyst will change one input (usually revenue growth rate or churn) and watch whether outputs update consistently across all sheets. A pricing change in Month 3 that does not flow through to gross margin, OPEX, cash, and runway means the model is not properly linked. Broken linkage is treated as a structural error, not a minor omission.

Pitch deck coherence check. The model is cross-referenced against the pitch deck before any detailed review begins. If the deck states 3x ARR growth over two years but the model projects 2x, or if the deck’s gross margin figure does not match the model’s, the inconsistency is flagged immediately. Analysts routinely find that founders updated the deck after the model or vice versa without aligning both.

Actuals-versus-historicals reconstruction. If the model includes historical columns, the analyst will reconstruct actuals from the MIS reports, bank statements, and audited accounts in the data room and compare them line by line. Revenue figures, gross margin, and headcount costs that diverge by more than a rounding difference between the model’s historical section and the audited P&L raise a question about which version of the numbers is correct. The pattern described by multiple investor-side practitioners is consistent: they rebuild the trailing 12-month numbers from source data before they trust the projections.

Benchmark comparison. Implied unit economics (gross margin, burn multiple, CAC payback period) are derived from the model’s own numbers and compared against sector norms. For an Indian SaaS company at Series A, a gross margin above 78% implied by the model but 61% in the audited accounts immediately triggers a request for reconciliation. The investor is not trying to catch the founder lying. They are trying to understand which number reflects the real business and why the two differ.

Revenue recognition coherence. For SaaS and subscription businesses, the analyst will check whether revenue in the model is booked on cash receipt basis or accrual basis, and whether that treatment matches the Ind AS 115 treatment in the audited accounts. A model that shows revenue equal to cash receipts for a business that bills annually upfront (which should carry a deferred revenue balance) signals that the model was not built with Ind AS 115 mechanics in mind. Investors with India experience check this routinely.

Working capital mechanics. A model showing revenue and cash receipts moving in lockstep for a business with 45-day payment cycles is missing working capital. Analysts calculate the implied days sales outstanding (DSO) from the model’s revenue and cash figures and compare it to the payment terms stated elsewhere in the data room. If the DSO implied by the model is zero but the sales contracts show 30-day terms, the model’s cash timing is wrong.

FEMA and cap table compliance check (for rounds involving foreign investors). Where FDI is involved, the analyst will verify that the share issuance price in the cap table model complies with the pricing guidelines under Rule 21 of the Foreign Exchange Management (Non-Debt Instruments) Rules, 2019 (the NDI Rules). The price must not be less than the fair value determined by a registered valuer. A cap table model that shows a price below the RBI’s prescribed floor risks creating a FEMA violation that can block the allotment or require post-close rectification.

The eight-step validation process

Run these steps in order. Each is a gate: a material failure at any step should be fixed before proceeding to the next.

Step 1: Version audit and model consolidation

Before validating anything in the model, identify which version is the master. List every version of the model that exists: on the founder’s local drive, in shared Google Drive folders, sent to existing investors, referenced in the pitch deck. Compare version dates and the core outputs (Year 1 revenue, gross margin, and runway endpoint) across every version.

If there is more than one version, consolidate to a single master before any other validation work begins. A model that changes between the due diligence request and the data room upload, even innocuously, is a credibility problem. Fix this first.

Step 2: Assumption isolation and documentation

Every input must live on a single, clearly labelled assumptions tab. Run an audit of every calculation sheet: find every cell containing a number rather than a formula referencing the assumptions tab. List each one. Determine whether it is intentional (rare) or a drift error (almost always). Fix the errors and move every legitimate input to the assumptions page.

Each assumption on that tab must carry four pieces of information: what it measures, its value, its unit (monthly versus annual, percentage versus absolute), and its source (historical average, industry benchmark, management estimate). An assumption documented as “monthly new customer growth: 3%, based on trailing six-month cohort data, February to July 2026” is auditable. An assumption documented as “growth: 3%” is not.

Assumptions that are management estimates rather than data-derived must be explicitly flagged as such. Investors do not penalise founders for estimates. They penalise founders for presenting estimates as data.

Step 3: Model-to-pitch-deck coherence check

Place the pitch deck and the model side by side. Reconcile every number referenced in the deck against the model. Focus on:

  • ARR or revenue projection (Year 1, Year 2, Year 3)
  • Gross margin
  • Burn rate and runway
  • Market size and implied market share at exit

The pitch deck was likely updated at different times than the model. Wherever the two diverge, decide which is correct and align both before the data room opens. Investors will find every discrepancy. The question is whether it is found with an explanation ready or without one.

Step 4: Actuals-to-model historical reconciliation

If the model includes historical columns, reconcile them against the actual MIS reports and audited accounts. Three line items matter most: revenue, gross margin, and net cash.

Pull the last 12 months of MIS data (which at an investor-grade startup should already be available; if it is not, the MIS discipline problem is more urgent than the model validation problem). Compare month by month against the model’s historical section. Flag any month where revenue or gross margin diverges by more than 5%. Trace the discrepancy to its source: timing, classification, or a genuine error in the model’s historical build.

This reconciliation is not optional for the data room. The Treelife financial due diligence checklist notes that investors cross-verify model figures against MIS reports and audited accounts as a standard procedure. A clean reconciliation note in the data room eliminates the question before it is asked.

Step 5: Cross-statement reconciliation

Three mechanical checks are mandatory and must pass for every period in the model, not just annually.

Cash tie-out. Ending cash on the cash flow statement must equal cash on the balance sheet for every month or quarter in the model. Build a check row in a dedicated checks tab that flags any period where the two differ.

Balance sheet balance. Total assets must equal total liabilities plus equity for every period. A check formula of (Assets) minus (Liabilities plus Equity) must equal zero across every column. Any non-zero result has a structural error that must be traced.

Working capital flow. Accounts receivable, accounts payable, deferred revenue, and inventory movements must flow correctly from the P&L into the cash flow statement. A business billing ₹50 lakhs in Month 3 but collecting it in Month 4 must show an accounts receivable build in Month 3 and a receipt in Month 4 on the cash flow. If the model shows cash equalling revenue in every month regardless of payment terms, working capital has been assumed away.

Step 6: India-specific regulatory reconciliation

This step has no direct equivalent in global financial model validation guides. It addresses the regulatory complexity specific to Indian startup models.

GST-revenue reconciliation. Book revenue in the model must be reconcilable to GST-declared turnover in GSTR-1 and GSTR-3B. Prepare a formal reconciliation note documenting every difference: export revenue exempt from GST, advance receipts treated on cash basis for GST but accrual for book purposes, credit note timing, or multi-state supply classification differences. This note must be included in the data room alongside the financial model, not prepared in response to the investor’s question. The Treelife financial due diligence checklist confirms that an investor’s CA treats an unexplained GST-revenue delta as a revenue recognition risk that can result in an escrow arrangement or valuation reduction.

TDS receivables on the balance sheet. For businesses with domestic professional or technical services revenue, TDS at 10% is deducted at source under Section 194J of the Income Tax Act 1961. The TDS credit builds up as an asset (recoverable via Form 26AS and eventual ITR filing). If your business has ₹30 lakhs or more in unrecovered TDS credit, its absence from the balance sheet is a material omission. Add it, reconcile it against Form 26AS, and document the recovery timeline.

ESOP expense under Ind AS 102. Employee Stock Option Plans create an accounting charge from the date of grant under Ind AS 102 (Share-Based Payments). Most in-house models carry no ESOP expense at all. The ESOP cost must appear in OPEX from the grant date of each tranche, calculated using the Black-Scholes model at fair value on grant date, amortised over the vesting period. Its absence understates the cost base and inflates EBITDA. An investor-side CA who knows to look for it, and they do, will ask for the adjustment. Add it before the question is asked.

Ind AS 115 revenue recognition (SaaS and subscription businesses). For companies billing annually upfront, revenue must be recognised over the subscription period under Ind AS 115 (Revenue from Contracts with Customers), not at the point of cash receipt. The model must carry a deferred revenue balance on the balance sheet and show monthly revenue recognition from that balance. A model that books ₹12 lakhs of cash received in Month 1 as ₹12 lakhs of revenue in Month 1, when that annual subscription should be recognised at ₹1 lakh per month, has a revenue recognition error. This is not a projection issue. It is an accounting error that contradicts the audited financials and the company’s stated Ind AS compliance. If you need the mechanics, the Treelife Ind AS 115 guide for SaaS businesses covers recognition, contract liabilities, and disclosure requirements.

FEMA pricing compliance for inbound FDI. If the current or planned round involves foreign investors (including NRI investors and foreign venture capital investors), the share issuance price in the model’s cap table section must comply with Rule 21 of the Foreign Exchange Management (Non-Debt Instruments) Rules, 2019. The price to a non-resident cannot be less than the fair market value determined by a SEBI-registered Category I Merchant Banker or a Chartered Accountant using any internationally accepted pricing methodology. A cap table model that shows a share price below the registered valuation report’s concluded value creates a FEMA compliance risk. Verify the cap table price against the most recent valuation report. If they diverge, the model is wrong.

Provident Fund and ESIC on headcount costs. Every headcount assumption must use fully loaded costs including the employer PF contribution (12% of basic, subject to ceiling under the Employees’ Provident Funds and Miscellaneous Provisions Act 1952) and Employee State Insurance where applicable. Models that use gross salary without employer statutory contributions understate headcount costs by 15-20%. This is one of the most common errors in founder-built Indian models.

India-specific itemLocation in modelConsequence if missing or wrong
GST-revenue deltaRevenue tab + reconciliation note in data roomRevenue recognition risk, potential escrow or valuation cut
TDS receivablesBalance sheetAsset understated, balance sheet does not reconcile to 26AS
ESOP expense (Ind AS 102)OPEX, from grant dateEBITDA overstated, immediate investor query
Deferred revenue (Ind AS 115)Balance sheet + revenue scheduleRevenue overstated in early periods, audited accounts do not match
FEMA pricing complianceCap table modelFEMA violation risk blocking allotment
PF/ESIC on payrollHeadcount/OPEX scheduleHeadcount costs understated by 15-20%

Step 7: Benchmark pre-emption

Investors compare the implied unit economics in your model against sector benchmarks before raising questions. Run this comparison yourself first so you know where the gaps will appear.

For an Indian SaaS company at Series A, the benchmarks investors typically apply are: gross margin in the 65-75% range for software-only revenue (lower for mixed software and services), burn multiple below 1.5 for efficient capital deployment, CAC payback under 18 months for SMB-focused businesses and under 24 months for enterprise, and NRR above 110% for expansion-led growth. These are not fixed thresholds; they are conversation anchors. If your model implies a 58% gross margin, you need a clear explanation of why (higher services revenue, India-specific delivery cost structure, intentional decision to invest in CS capacity ahead of revenue) rather than discovering the gap when the analyst asks.

Run the following six calculations on your own model before sharing it:

  • Gross margin percentage for each of the three modelled years
  • Burn multiple (net cash burned divided by net new ARR or revenue added in the same period)
  • Implied CAC (sales and marketing spend divided by new customers acquired)
  • CAC payback period (implied CAC divided by gross margin per customer per month)
  • Rule of 40 (revenue growth percentage plus EBITDA margin percentage, for mature SaaS businesses)
  • Headcount efficiency (revenue per full-time equivalent at each annual period end)

If any output is a significant outlier against sector norms, either the model is wrong or there is a legitimate business reason for the deviation. Prepare the explanation before the investor asks.

Step 8: Scenario mechanism and presentation audit

Scenario mechanism test. Switch the model from base case to downside. Verify that every output (revenue, gross margin, OPEX, cash, runway, and every KPI) updates consistently. If any output stays static when the scenario changes, the mechanism is broken. Investors test this in the first session.

The downside scenario must also include a cost response: which hires get delayed, which discretionary spend is cut, and how that changes runway. A downside scenario that reduces revenue but holds costs at base case levels is not a stress-test. It is a pessimistic revenue projection with no management response built in. Investors read the cost response as evidence that the founder has thought through what they would actually do.

Navigation audit. The model must be usable by someone who has never seen it before. Check for:

A README or model guide tab explaining scope, time period, currency, version date, and where inputs live. Without it, an investor’s analyst will spend the first hour orienting themselves rather than reviewing the model.

A checks tab confirming all three-statement reconciliations pass (visually green when clean, red when a check fails). This tab tells the investor that the validation has been done and documented.

Consistent sign conventions (all outflows negative or all outflows in brackets, one convention only). Consistent date format (DD/MM/YYYY for Indian entities). Consistent currency (₹ in lakhs or crores, not a mix of both in different tabs).

Version date visible on the cover sheet or the model guide tab. If the model is updated during diligence, the version date must change and the data room index must be updated accordingly.

What validation typically finds

Based on model review engagements run at Treelife before data room openings, the most common material findings fall into six categories.

The multi-version model. Three or more versions exist, with different revenue and margin outputs. The data room is uploaded with an outdated version. Investors find the discrepancy against the pitch deck in the first session.

Missing working capital. For businesses with B2B contracts and 30-60 day payment cycles, cash timing in the model is wrong. The model shows cash arriving the same month as revenue. The bank account shows a different pattern entirely. The discrepancy is material when DSO is 45 days or longer.

ESOP expense absent. The model carries no ESOP expense despite active grants. The audited accounts (or the next audit) will show the charge under Ind AS 102. The model understates OPEX and overstates EBITDA. Investors with India experience check for this specifically.

Pitch deck and model misalignment. The deck states 2.5x revenue growth in Year 1. The model shows 1.9x. The founder updated the deck narrative after the model was built. The investor finds the discrepancy without warning, which is a worse situation than the founder flagging it proactively.

Circular references. Introduced accidentally when modelling interest income on cash balances or debt repayment schedules. Circular references must be identified and resolved before sharing, as they cause calculation errors in Excel that produce different results on different machines depending on iteration settings.

Assumption-driven valuation, not business-driven. The model’s projections appear to have been calibrated to support a target pre-money valuation rather than built from the business’s actual drivers. Revenue growth ramps to whatever multiple produces the target, not to what the headcount, sales capacity, and market assumptions would actually support. Investors recognise this pattern and it damages credibility across the entire model, not just the valuation section.

How long does validation take?

The timeline depends on the model’s starting state.

Model stateTypical validation timelinePrincipal blocking issue
Single master version, assumptions isolated, three statements linked, checks tab present3-5 business daysDocumentation, India-specific regulatory reconciliation notes
Working model, scattered assumptions, no checks tab, one consistent version8-12 business daysAssumption consolidation, linkage fixes, reconciliation notes
Functional revenue model, no full three-statement link, no working capital mechanics12-18 business daysBalance sheet build, cash tie-out, deferred revenue mechanics
Multiple versions, no master model, historical section inconsistent with MIS20+ business daysModel consolidation before validation can begin

The reliable rule: start validation at least four weeks before the planned data room opening date. Founders who begin the day the data room is being indexed will not finish before investor diligence opens. The consequence is not a delay. It is defending the model while investors are already in it.

Common mistakes that cost founders time and negotiating leverage

Sharing a draft with investors before validation. Once the model is in an investor’s hands, any errors found belong to the diligence record. A model shared as a draft is treated as final. Recovering from “that version had some issues” after a sophisticated analyst has already mapped them is nearly impossible.

Treating the model as a standalone document. It will be cross-referenced against the audited accounts, MIS reports, GST returns, bank statements, and the cap table. Every inconsistency between the model and any other data room document is a diligence question. Validation must include a cross-document consistency check, not only an internal model review.

Calibrating projections backward from a valuation target. If the revenue assumptions were chosen to support a pre-money valuation rather than built from the business’s actual operating drivers, a sophisticated investor will find it. The pattern is recognisable: growth rates that happen to produce exactly the multiples required, with no operational logic connecting the assumptions to the projections. This destroys credibility across the entire model.

Ignoring the ESOP pool mechanics in the CCPS-to-equity conversion. For companies with Compulsorily Convertible Preference Shares outstanding, the cap table model must show both the pre-conversion ownership structure and the fully diluted post-conversion view including ESOP pool. Founders often model only the fully diluted view. This obscures the liquidation preference waterfall, which matters in any M&A or secondary sale scenario and which investors will model independently.

Skipping the downside cost response. A downside revenue scenario without a corresponding cost adjustment is not a stress-test. It tells the investor that the founder has not thought through what they would actually do if growth underperforms. The downside must show the cost levers that get pulled (specific hiring delays, specific discretionary cuts) and the revised runway that results.

Not reconciling before the room opens. The GST-revenue reconciliation, TDS asset balance, and ESOP charge are the three items most likely to generate formal investor queries within the first week of diligence. Preparing them before the data room opens eliminates those questions. Preparing them in response to the questions costs 5-10 business days of diligence time and signals reactive rather than proactive financial management.

In the model validation engagements we have run at Treelife

The pattern is clear. The models that create the least diligence friction share three characteristics: the revenue logic is built from a small number of genuine operating drivers that the founder can explain from memory, the three statements reconcile cleanly without exception, and the assumptions page is honest about which numbers are data-derived and which are management estimates.

The models that create the most friction are not the ones with wrong projections. Investors expect projections to be uncertain. The models that stall diligence are the ones where an analyst cannot determine which numbers are real, which are estimates, and which are errors. That ambiguity is what validation removes.

One pattern specific to India: the gap between book revenue and GST-declared turnover is the first thing a knowledgeable investor’s CA looks for, not the last. We have seen data room processes stall for 10-12 business days while a reconciliation note was prepared that should have been in the room at opening. That delay is not a technical problem. It is a negotiating leverage problem. Every additional week of diligence is a week in which the investor has more time to find issues and apply conditions to the term sheet.

The investment in validation (typically four to six weeks of structured preparation) pays back directly in a shorter diligence timeline, fewer investor queries, and a negotiating position where the conversation stays on strategy rather than descending into spreadsheet forensics.

FAQs

Q: What is the difference between financial model validation and financial due diligence?
A: Validation is what you run before the data room opens, on your own model, to find and fix errors before investors see them. Financial due diligence is what investors run after the data room opens, to verify your claims. Validation is founder-controlled and proactive. Due diligence is investor-controlled and reactive. Running a thorough validation directly reduces the findings that surface in diligence.

Q: Can we do validation internally, or does it require external review?
A: The structural checks (reconciliations, assumption isolation, scenario testing) can be run internally. The checks that benefit most from external review are assumption defensibility (familiarity with the model creates blind spots), India-specific regulatory reconciliation (GST bridge, TDS asset, ESOP calculation), and benchmark comparison. A founder who built the model is the least reliable person to identify where its logic is unclear to an outsider, not because of dishonesty but because they already know the assumptions behind every number.

Q: How do we handle a gap between our book revenue and GST-declared turnover?
A: The gap must be explained in a formal reconciliation note attached to the data room, not buried or ignored. Common legitimate explanations include export revenue exempt from GST, advance receipt timing (cash-basis GST versus accrual-basis book revenue), credit note adjustments, and multi-state supply classification differences. The note should quantify each category and cite the relevant provision. If the gap cannot be fully explained, that is a problem to resolve before the data room opens, not a question to answer during diligence.

Q: How should the model treat ESOP expenses?
A: Under Ind AS 102 (Share-Based Payments), the fair value of options at grant date is recognised as an expense over the vesting period, with a corresponding credit to a share-based payment reserve. The fair value is typically calculated using the Black-Scholes model. The model must include this charge in OPEX from the grant date of each tranche. Many investor-side analysts add it back for EBITDA normalisation purposes, but it must appear in the model, not be excluded silently, so the investor can make that normalisation explicitly rather than discovering the omission.

Q: Does FEMA pricing apply if we are raising from an NRI investor?
A: Yes. NRI investment on a non-repatriation basis falls under the NDI Rules 2019. On a repatriation basis, it constitutes FDI and is subject to Rule 21 pricing guidelines. In either case, the price cannot be below the fair value determined by a registered valuer. The cap table model must reflect a price at or above the most recent registered valuation. If the model shows a price below that level, the allotment risks being in breach of FEMA, which requires post-close rectification and RBI reporting.

Q: What happens if the investor finds a model error after the data room has opened?
A: Update the model immediately, version-date it, replace it in the data room, and proactively notify the investor with a clear explanation of what changed and why. A founder who says “we identified and corrected an error in the deferred revenue mechanics, here is the updated version with a change log” is demonstrating operational discipline. A founder who waits for the investor to raise the issue is creating a trust problem that is difficult to recover from in negotiation.

Q: Should the model include the current fundraising round in its projections?
A: Yes, with two distinct views: one assuming the round closes (showing use of proceeds and the resulting growth plan), and one showing runway without the raise. The no-raise scenario is not pessimism. It shows investors whether the business can survive a failed or delayed close. A business that requires the current round to remain operational is a different risk profile from one that has 6-9 months of buffer without it. Investors read the no-raise scenario carefully.

Q: What is the burn multiple and does it need to appear in the model?
A: Burn multiple is net cash burned divided by net new ARR added in the same period. For a SaaS company, a burn multiple below 1.5 is generally considered efficient at Series A. The model should surface this as a KPI in the dashboard, calculated from the model’s own outputs, so investors read the Treelife-calculated version rather than deriving their own with potentially different inputs. Leaving investors to calculate a metric from scratch creates risk that they use a different numerator or denominator than intended.

Q: How far back should historical data in the model go?
A: At minimum, 12 months of monthly actuals reconciled against the most recent MIS and management accounts. For a Series A raise, investors typically want 18 months of actuals to assess growth trajectory and identify anomalies. The historical section must be locked against accidental formula overwrite and clearly distinguished from the projection section by colour coding or tab separation.

Q: What does a “checks tab” look like in practice?
A: A dedicated sheet with named check rows, each of which returns a zero or a “PASS” when the reconciliation holds and a non-zero number or “FAIL” when it does not. Typical checks: balance sheet balances (assets minus liabilities minus equity = 0), cash tie-out (balance sheet cash minus cash flow ending cash = 0), three-statement link integrity (P&L net income equal to cash flow start point), and scenario switch (base case revenue not equal to downside revenue when scenario toggle is set to downside). The tab should be easy to read at a glance. An investor or their analyst who opens it should be able to confirm within 30 seconds that all reconciliations are clean.

Q: Is Ind AS 115 applicable to all Indian startups, or only certain companies?
A: Ind AS 115 applies to companies that are required to follow Indian Accounting Standards (Ind AS), which includes all listed companies and all unlisted companies with net worth of ₹250 crore or more. Most early-stage startups are therefore not formally required to apply Ind AS 115 and may follow AS 9 under IGAAP instead. However, investors with institutional backgrounds (particularly those investing from an AIF or following global fund standards) will apply Ind AS 115 logic when evaluating the model’s revenue recognition treatment, regardless of whether the company is formally required to follow it. The practical validation recommendation is to apply the Ind AS 115 treatment in the model (and document the choice) regardless of formal applicability. It produces a more conservative and defensible revenue figure and avoids diligence questions about timing.

Q: How does angel tax abolition affect the financial model?
A: Section 56(2)(viib) of the Income Tax Act was abolished from 01 April 2024 (AY 2025-26 onwards) by the Finance Act 2024. Share issuances after that date are no longer subject to angel tax, and the financial model does not need to carry a provision or risk disclosure for it on new rounds. Any pending assessments for prior years (AY 2023-24 or AY 2024-25) remain and must be separately addressed. FEMA pricing compliance for foreign investors continues independently of the angel tax abolition.

Q: What is a “use of proceeds” section and where does it live in the model?
A: A breakdown of how the capital raised will be deployed, by category and approximate timing: product and engineering headcount, go-to-market and growth spend, general and administrative, working capital buffer, and contingency (typically 10-15% of the raise). It should sit on the cap table or fundraising tab and connect to the operating assumptions, so investors can read the use of proceeds and trace each category to specific hiring plans, marketing assumptions, or cost line items in the OPEX build. A use of proceeds section that lists categories without connecting to the model’s underlying assumptions is decoration, not analysis.

Legal Due Diligence Checklist for Indian Startups: What Investors actually check

Every founder who has been through a funding round remembers the moment the investor’s lawyer sends the DD checklist. It lands in your inbox as a forty-item spreadsheet and your first instinct is to start pulling documents. That instinct is correct, but it is only half the picture. Legal due diligence is not a document collection exercise. It is a structured investigation with a defined output: a findings memo that feeds directly into the term sheet’s Conditions Precedent and ultimately into Schedule A of your Shareholders’ Agreement. Understanding what investors are looking for in each category, and what they do with what they find, changes how you prepare and changes the terms you end up signing.

How legal due diligence fits into the funding process

Legal DD does not begin when a founder decides to raise. It begins when a term sheet is signed. Understanding the three phases tells you which one actually determines your deal outcome.

Phase 1: Preliminary scan (pre-term-sheet)

Before committing to a term sheet, most institutional investors run a light scan. They check MCA filings for the company, look at the cap table on paper, verify DPIIT recognition status if applicable, and do a basic Google search on founders and directors. This phase takes two to five days and its purpose is to identify existential issues, not to conduct a thorough review. If something breaks a deal at this stage it is usually a corporate structure issue or an undisclosed director disqualification.

Phase 2: Full legal DD track (post-term-sheet)

This is the phase that matters. The investor engages a law firm, which runs a parallel track alongside financial and commercial DD. The legal track covers six workstreams: corporate and governance, cap table and securities, contracts and obligations, intellectual property, regulatory compliance, and litigation. Each workstream ends with a findings memo. These memos are aggregated and presented to the investor’s investment committee. Every finding is classified as either a closing condition (must be fixed before funds transfer), a disclosure item (disclosed and accepted by investor), or a noted risk (acknowledged but not a blocker).

Phase 3: Closing conditions and documentation

Legal DD findings that become closing conditions show up in the SHA/SSA as Conditions Precedent. The Disclosure Schedule to the SHA captures everything the founder has disclosed and the investor has accepted. Any item that was not disclosed but surfaces later is a breach of representation and warranty, which can trigger indemnification obligations. This is why experienced founders over-disclose rather than under-disclose.

DD timeline by funding stage

StageTypical durationLegal DD depth
Angel / Pre-Seed1 to 2 weeksBasic corporate records, founders’ agreement, cap table
Seed2 to 4 weeksCorporate, cap table, key contracts, IP ownership, basic FEMA check
Series A4 to 6 weeksFull legal track across all six workstreams
Series B and above6 to 10 weeksInstitutional-grade review, 90 to 120 documents, third-party reference checks

Corporate records and statutory registers

The first workstream in any legal DD is the corporate records review. Investors are checking two things: that the company exists and is properly governed, and that the statutory records match what the founder has represented.

The core documents requested are the Certificate of Incorporation, Memorandum of Association (MOA) and Articles of Association (AOA) including all amendments filed with the Ministry of Corporate Affairs (MCA), SPICe+ incorporation filings, all board resolutions from incorporation to date, all general meeting resolutions, the statutory registers maintained under Sections 88 to 92 of the Companies Act 2013, and the last three years of annual returns filed in Form MGT-7.

The investor’s lawyer is not just checking that these documents exist. They are checking that the board resolutions authorising each material event (an allotment, an ESOP grant, a key contract, a change in registered office) are present, properly passed, and filed with the MCA where required. A board resolution that authorised a share allotment in 2021 but was never filed as Form MGT-14 is a governance gap. It does not automatically kill a deal but it creates a Condition Precedent to ratify and file before closing.

Statutory registers under Section 88 (register of members), Section 170 (register of directors and key managerial personnel), and the register of charges under Section 85 must be current. Discrepancies between the register of members and the allotment filings on MCA are one of the most common findings in a Series A legal DD and are always treated as a closing condition.

What investors check: corporate records

DocumentSection / formWhat a gap triggers
Certificate of IncorporationCompanies Act 2013Deal pause pending verification
MOA / AOA with all amendmentsSection 4, 5 Companies Act 2013Object clause reviewed for business compatibility
All board resolutionsSection 117 Companies Act 2013Each unresolved gap = one Condition Precedent
Annual returns MGT-7Section 92 Companies Act 2013Late filings flagged as governance risk
Statutory registersSections 85, 88, 170 Companies Act 2013Discrepancy with MCA = closing condition
Director DIN and disqualification checkSection 164 Companies Act 2013Director disqualification = deal-breaker

Cap table, securities history, and angel tax legacy

The cap table workstream is where most rounds slow down. The investor’s lawyer reconciles the cap table against four independent sources: PAS-3 filings on MCA for every allotment, physical or digital share certificates, board and shareholder resolutions authorising each allotment, and the register of members. If these four do not reconcile to the same number for every shareholder, the round cannot close until they do.

What investors check in the cap table workstream

Every allotment of equity shares, Compulsorily Convertible Preference Shares (CCPS), Compulsorily Convertible Debentures (CCDs), SAFEs, or convertible notes must have a corresponding Form PAS-3 filed with the MCA within 15 days of allotment under Section 39 of the Companies Act 2013. Stamp duty on share certificates must have been paid at the time of issuance. The investor’s lawyer checks the stamp paper dates and amounts. Backdated or unstamped certificates are a red flag because they raise enforceability questions about the allotment itself.

Shareholder approvals for each allotment must be on record. A preferential allotment under Section 62(1)(c) requires a special resolution passed at a general meeting. If a CCPS allotment to an early angel investor was done without the required special resolution, it creates a defect in title that must be cured before the new investor takes shares in the same class.

The angel tax legacy issue (Section 56(2)(viib))

Section 56(2)(viib) of the Income Tax Act 1961, the provision commonly called angel tax, was removed for DPIIT-recognised startups from 01 April 2024 under the Finance Act 2024. The removal applies prospectively. Any allotment to an Indian resident investor made before 01/04/2024 without a Rule 11UA valuation report creates a legacy tax exposure. The investor at the new round will raise this as a closing condition because the valuation gap creates a potential tax liability on the company or the earlier investor that could affect the new round’s pricing. A retrospective valuation from a registered valuer and a legal opinion resolves it, but it adds two to four weeks to the timeline if not prepared in advance.

ESOP pool in the cap table

The ESOP pool on the cap table must match the scheme document and the total grants issued. Granted but unvested options must be disclosed separately from vested-but-unexercised options, and both must be reconciled to the PAS-3 filings for exercised options. A cap table that shows a 10% ESOP pool but has no EGM resolution authorising it is a common finding at Series A. See the ESOP section below for the full compliance checklist.

Contracts and commercial agreements

The contracts workstream is wide. Investors look at six categories of agreements, in order of materiality.

Founders’ agreement

This is the first document reviewed. Investors check for vesting schedules on founder equity (standard is a four-year vest with a one-year cliff), IP assignment from each founder to the company, non-compete and non-solicitation clauses, exit and buyback mechanics, and good leaver / bad leaver definitions. A founders’ agreement that is missing the IP assignment clause is a significant finding because it creates ambiguity over who owns the core technology or product if a founder leaves. This is covered in the IP section below but originates in the founders’ agreement.

Employment contracts

Every employee above a threshold (typically all full-time employees in a Series A review) must have a signed appointment letter or employment agreement. The investor’s lawyer checks for IP assignment and work-for-hire clauses, non-disclosure obligations, non-compete restrictions (note: blanket non-competes are unenforceable in India under Section 27 of the Indian Contract Act 1872, so the drafting matters), and confidentiality terms. Offer letters issued without IP assignment clauses are common at early stage and create an IP ownership gap.

Key customer and revenue contracts

Top five to ten customer agreements are reviewed. Investors look for change-of-control clauses that would allow a customer to terminate on a funding event or acquisition, auto-renewal terms, payment terms and whether receivables are genuinely earned, exclusivity obligations that restrict the company’s ability to serve competing clients, and liability caps. A customer contract with an uncapped liability clause in a B2B SaaS startup is a negotiation issue at Series A.

Vendor and third-party agreements

Material vendor contracts, technology agreements, and payment gateway agreements are reviewed for similar change-of-control issues and assignment restrictions. A key vendor contract that cannot be assigned without the vendor’s consent creates a risk in any future M&A scenario.

NDAs

The investor checks that NDAs are in place with all parties who have had access to confidential information, including potential investors from prior rounds, strategic partners, and senior candidates interviewed for roles. Missing NDAs with parties who have seen the cap table, product roadmap, or financial model are flagged.

Lease and premises agreements

Office lease agreements must be valid, registered where required under the Registration Act 1908 (leases above 11 months typically require registration), and free from restrictive covenants. The investor also checks that rent is current and there are no notices from the landlord.

Intellectual property ownership

Investors in technology-led startups treat IP as a valuation input, not just a compliance box. The question they are asking is not “is it registered” but “does the company unambiguously own it.”

The ownership chain

For every piece of IP that is material to the business, the investor’s lawyer traces ownership from creation to the company. For software, this means checking that every developer who wrote production code (including contractors, freelancers, and co-founders before incorporation) has signed an IP assignment agreement transferring all rights to the company. For product designs, the same logic applies to design consultants. An IP assignment that was never executed, or was executed after the relevant work was completed, creates a defect that is difficult to cure retrospectively if the person has left.

Registration status

IP categoryRegistryRelevant lawWhat investors check
TrademarkTrade Marks RegistryTrade Marks Act 1999Application filed, objections pending, classes covered
PatentIndian Patent OfficePatents Act 1970Provisional vs complete specification, grant status, ownership
CopyrightCopyright Office (optional)Copyright Act 1957Ownership chain more than registration status
Domain and brandICANN / registrarIT Act 2000Registered in company name, not personal name

A trademark that is filed in a founder’s personal name and not assigned to the company is a closing condition. Domain names registered in a founder’s personal Gmail account rather than a company account are flagged as a governance issue.

Open source and third-party software licences

Technology startups are checked for open source licence compliance. Use of GPL-licensed components in commercial software can create a licence contagion issue. Investors at Series A increasingly ask for a software composition analysis or at minimum a declaration of open source components used and the applicable licences.

Regulatory and sector-specific compliance

Every startup operates under at least two regulatory regimes: the base corporate law regime and the sector-specific regime for its industry. Both are checked.

DPIIT recognition

DPIIT recognition under the Startup India scheme unlocks Section 80-IAC tax exemption (three consecutive years out of ten from incorporation), angel tax exemption under Section 56(2)(viib) (prospectively from 01/04/2024), and self-certification under six labour laws. Investors check the recognition certificate, that the startup is within the ten-year and ₹100 crore turnover limits, and that the annual self-certification filings are current. A DPIIT-recognised startup that has crossed the turnover threshold but has not updated its status creates a false representation risk.

Sector-specific licences

Missing or lapsed licences that are material to the business are treated as closing conditions.

SectorKey licences and registrationsRegulator
Fintech / lendingNBFC registration, payment aggregator authorisationRBI
Healthtech / diagnosticsClinical Establishments Act registration, drug licenceState health authority / CDSCO
EdtechNone mandatory at present, but check UGC norms if degree-linkedUGC
Foodtech / D2C foodFSSAI licenceFSSAI
Import / exportImport Export Code (IEC)DGFT
Environment-impacting manufacturingEnvironmental clearance, Consent to OperateMoEFCC / SPCB
Insurance distributionIRDAI registrationIRDAI

GST and income tax registration

GST registration is mandatory where turnover exceeds ₹20 lakh (₹10 lakh for special category states) under the Central Goods and Services Tax Act 2017. Tax Deduction and Collection Account Number (TAN) must be obtained and TDS must be deducted and deposited correctly on salary, contractor payments, and rent. Investors check that GST returns are filed and that TDS challans reconcile to the TDS returns. Arrears or notices from the tax department are disclosed in the litigation section.

FEMA and RBI compliance

This is the section that trips up the largest number of startups at Series A because almost every growth-stage company has received some foreign investment, but few have tracked their FEMA filings systematically.

Foreign Exchange Management Act (FEMA) 1999 applies from the first rupee of foreign investment. The Foreign Exchange Management (Non-Debt Instruments) Rules 2019 govern the reporting obligations on every foreign investment event.

Form FC-GPR

Any startup that has received Foreign Direct Investment (FDI) through issue of equity shares, CCPS, or CCDs to a non-resident must file Form FC-GPR with the Authorised Dealer (AD) bank within 30 days of the date of allotment. The AD bank forwards the filing to the Reserve Bank of India (RBI). A late or missing FC-GPR is a compoundable offence under FEMA. Penalties under Section 13 of FEMA can be compounded at up to 300% of the transaction amount, though practical compounding orders for technical delays on FC-GPR are typically a fraction of that ceiling. Investors check FC-GPR compliance without exception because a missing filing creates an RBI liability that the company carries into the new round.

Annual Return on Foreign Liabilities and Assets (FLA)

Any company with outstanding foreign investment or overseas direct investment must file the FLA return with the RBI by 15 July of each financial year. This is a mandatory RBI filing under FEMA. A missing FLA return is treated as a serious governance gap by investors because it signals that the company has been managing regulatory compliance reactively. The FLA return is checked against the FC-GPR history to verify that all foreign investment is properly captured.

Form FC-TRS

If any existing non-resident investor has sold shares to a resident or to another non-resident, Form FC-TRS must be filed within 60 days of the transfer. Secondary share sales in angel rounds without FC-TRS filings are a common finding.

Key FEMA checklist items

  • FC-GPR filed for every foreign investment allotment within 30 days
  • FLA annual return filed for every FY where outstanding foreign investment exists, by 15 July
  • FC-TRS filed for all secondary transfers involving non-residents
  • Pricing guidelines complied with: FDI pricing must not be less than fair market value under Rule 11UA for unlisted companies
  • Sectoral caps and prohibited sectors verified (FDI policy, updated periodically by DIPP/DPIIT)
  • AD bank correspondence on record

ESOP compliance

ESOPs sit at the intersection of corporate law, tax law, and employment law. Investors treat the ESOP compliance workstream as a standalone category because gaps here are extremely common and the consequences range from tax liability to employee disputes.

Corporate law compliance

An ESOP scheme must be approved by the shareholders through a special resolution under Section 62(1)(b) of the Companies Act 2013. The resolution must be filed as Form MGT-14 with the MCA within 30 days. Many early-stage startups issue ESOP grant letters without the underlying special resolution because the scheme was set up informally. Every such grant is technically unauthorised. Investors treat this as a closing condition requiring ratification.

The ESOP scheme document itself must specify the exercise price, vesting schedule, the total pool size (as a percentage of fully diluted equity), and the treatment of options on termination, resignation, and death.

Tax compliance on ESOPs

ESOPs are taxed at two points under the Income Tax Act 1961. At exercise, the difference between the Fair Market Value (FMV) on the date of exercise and the exercise price is taxed as a perquisite under Section 17(2)(vi), and the employer must deduct TDS on this amount. At sale, the gain is taxed as capital gains. DPIIT-recognised startups are eligible for deferral of the perquisite tax at exercise for a period of up to 48 months from the end of the FY of exercise, or until the employee leaves, or until the shares are sold, whichever is earlier, under Section 192(1C) of the Income Tax Act 1961.

Investors check that TDS was correctly deducted on exercised options, that perquisite values were computed at FMV using the prescribed methodology (Rule 3(8) for unlisted shares, using a Category I merchant banker valuation), and that Form 12BA was issued to exercising employees.

ESOP compliance checklist

  • Special resolution for ESOP pool under Section 62(1)(b) filed as MGT-14
  • ESOP scheme document with all required terms
  • Individual grant letters for every optionee with exercise price, vest date, and expiry
  • Vesting schedule and cliff documented per grant
  • PAS-3 filed for every batch of exercised options converted to shares
  • FMV valuation report from registered valuer for each exercise event
  • TDS deducted and deposited on perquisite at exercise
  • Form 12BA issued to employees who have exercised

Labour law and POSH Act compliance

Labour law compliance is one of the most underestimated areas in legal DD. Treelife regularly finds labour law gaps even in well-organised startups because the applicability thresholds change with headcount and founders do not always track them.

Key labour law thresholds

LawApplicability thresholdKey compliance
Employees’ Provident Funds and Miscellaneous Provisions Act 195220 or more employeesPF registration, monthly contributions, ECR filing
Employees’ State Insurance Act 194810 or more employees (in notified areas)ESIC registration, monthly contributions
Maternity Benefit Act 196110 or more employeesPolicy, paid leave, creche facility above 50 employees
Shops and Establishments ActAll commercial establishments (varies by state)Registration, working hours, leave policy
Professional TaxVaries by stateEmployer registration, monthly deduction from salary

Investors check PF and ESIC registration certificates, monthly ECR filings for the last 12 months, and that the contribution amounts reconcile to the payroll. Arrears on PF contributions are a closing condition because they attract interest under Section 7Q of the EPF Act at 12% per annum and damages under Section 14B that can run to the same amount again.

POSH Act compliance

The Prevention of Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act 2013 (POSH Act) requires every employer with 10 or more employees to constitute an Internal Complaints Committee (ICC). The ICC must submit an annual report to the District Officer by 31 January each year. Non-compliance carries a penalty of ₹50,000 under Section 26 of the POSH Act, and repeated non-compliance can result in cancellation of the business licence. Investors ask for the ICC constitution order, the most recent annual report submission, and confirmation that at least one external member is on the ICC. This is a live closing condition in a significant number of Series A transactions where the founding team has been focused on growth and overlooked the annual reporting obligation.

DPDPA 2023 and data compliance

The Digital Personal Data Protection Act 2023 (DPDPA) is not yet fully enforced. The Rules under the Act were notified in January 2025 and the enforcement date is expected in FY2026. Investors are already treating DPDPA readiness as a legal DD item, particularly for B2C startups, SaaS companies processing customer data, and healthtech or edtech platforms with significant user bases.

What investors check for DPDPA readiness

  • Privacy policy updated to reflect DPDPA 2023 language on consent, purpose limitation, and data principal rights
  • Consent mechanism on the product: active and explicit opt-in, no pre-checked boxes, consent for each processing purpose separate
  • Data processor agreements (DPA) in place with third-party vendors who process personal data on the company’s behalf
  • Data retention and deletion policy documented
  • Breach notification process defined (DPDPA requires notification to the Data Protection Board within 72 hours of a breach)
  • Cross-border data transfer restrictions: personal data of Indian residents cannot be transferred to countries on a negative list to be notified by the Central Government

DPDPA compliance is currently treated as a disclosure item rather than a closing condition in most rounds because enforcement is pending. However, investors in consumer-facing or health data startups are increasingly requiring a compliance roadmap as a Condition Subsequent (a commitment to achieve compliance within a defined period post-investment). It is better to have a documented compliance programme than to raise it for the first time in the data room.

Litigation, notices, and regulatory actions

Every pending or threatened legal matter must be disclosed in the legal DD. The investor’s lawyer specifically reviews:

  • Litigation initiated by or against the company in any court, tribunal, or arbitration forum, including the National Company Law Tribunal (NCLT) and consumer forums
  • Notices from the Income Tax department, GST authorities, Enforcement Directorate (ED), and sector-specific regulators
  • Labour disputes and claims filed before the Labour Commissioner or Industrial Tribunal
  • Pending show-cause notices, even where no response has been filed
  • Matters involving directors or promoters personally, even if not naming the company, where the outcome could affect their ability to act as directors under Section 164 of the Companies Act 2013
  • Resolved matters within the last five years, including settlement agreements and consent orders

Materiality and disclosure strategy

Investors distinguish between material and non-material disputes based on financial exposure and reputational risk. A ₹2 lakh consumer forum complaint is not material. A ₹50 lakh tax demand under scrutiny assessment is. Founders should resist the instinct to omit smaller disputes on the assumption they are irrelevant. The investor’s representation and warranty clause in the SHA will cover all known disputes, and a dispute that surfaces post-closing that was not disclosed gives the investor grounds for indemnification.

The correct approach is to disclose everything and provide context. A clear one-page summary of each dispute with the current status, the company’s position, and the estimated maximum exposure demonstrates governance maturity, not legal weakness.

How legal DD findings become deal conditions

This is the mechanism most founders encounter for the first time mid-round, and it is the one that most determines your final deal terms.

The three categories of findings

Every finding in a legal DD memo is classified into one of three categories:

A Condition Precedent (CP) is something that must be fixed before the investor transfers funds. CPs appear in Clause 3 of a standard SHA or in the closing conditions section of the SSA. Common CPs include: filing missing Form FC-GPR, executing IP assignment agreements from founders or contractors, ratifying an ESOP scheme through a special resolution, constituting the ICC under the POSH Act, and registering trademarks in the company name. The investor will not transfer funds until every CP is satisfied or formally waived. Fixing CPs after the term sheet is signed adds four to eight weeks to the closing timeline in a typical transaction.

A Disclosure Item is a finding that the investor has accepted as part of the risk profile of the investment. It is entered into the Disclosure Schedule, which is attached to the SHA as a schedule. By disclosing an item, the founder ensures they are not in breach of the representation and warranty that covers that area. The Disclosure Schedule is negotiated: investors try to narrow what is disclosed, founders try to broaden it.

A Noted Risk is a finding that neither party treats as a blocker but that is reflected in the investment terms. A noted risk might result in a lower valuation, a larger warranty and indemnity clause covering the specific risk, or a requirement for insurance. Pending tax scrutiny assessments frequently end up as noted risks with an indemnity obligation on the founders.

What this means practically

A founder who has done an internal legal audit before the term sheet can identify which items will become CPs, fix them in advance, and negotiate from a cleaner position. The difference between a startup that opens a data room with complete documentation and one that opens it with gaps is not just time. It is the negotiating leverage that determines the final valuation and the scope of the warranty and indemnity clause.

Five legal DD red flags that restructure or kill rounds

Based on Treelife’s transaction experience, the following five findings are the ones most likely to result in a CP that delays closing, a valuation adjustment, or in the worst case a deal falling apart.

1. Cap table does not reconcile to PAS-3 filings

When the cap table in the data room does not match the allotment filings on MCA, the investor cannot determine who owns the company. This is almost always caused by ESOP grants that were authorised by the board but never converted through a proper allotment resolution and PAS-3 filing, or by an early angel investment that was received as a convertible but never formally converted. This is a deal-pausing finding.

2. IP ownership is in a founder’s name, not the company’s

Core technology built before incorporation, or by a co-founder who has since left, often sits in a personal name. If the company’s product is built on IP it does not legally own, the investor is buying equity in a company whose core asset belongs to someone else. Getting an assignment executed after the fact is possible but requires the cooperation of the person who owns the IP, which becomes very difficult if that person has left on bad terms.

3. Missing FC-GPR filings on prior foreign investment

As noted above, late or missing FC-GPR filings require a compounding application to the RBI. The compounding process typically takes three to six months and results in a monetary penalty. Investors at the new round carry this as a CP because the liability sits with the company. Running a compounding application in parallel with a funding round is expensive and disruptive.

4. ESOP scheme without shareholder approval

An ESOP pool that was set up by a board resolution alone, without the required special resolution under Section 62(1)(b), means that every option grant under that scheme is unauthorised. The fix requires calling an EGM, passing the special resolution, and filing MGT-14 with the MCA. If the company has employees who have been granted options and are mid-vesting cycle, this finding creates both a legal issue and an employee relations issue.

5. Undisclosed disputes or regulatory notices

Any dispute or notice that surfaces after the SHA is signed and was not in the Disclosure Schedule is a breach of the founder’s representation. Under a standard SHA, the investor can seek indemnification for the loss caused by the breach. In extreme cases, it gives the investor grounds to rescind the transaction. Founders who discover a dispute mid-DD should disclose it immediately and provide context, rather than hope it resolves before closing.

Case study

Situation: Seed-stage B2B SaaS startup based in Bengaluru. Two technical co-founders. Had raised ₹3.5 crore from three angel investors (two Indian, one NRI). Received a Series A term sheet from a mid-sized domestic VC at ₹80 crore pre-money valuation.

Challenge: FC-GPR for the NRI angel’s investment had never been filed. The NRI had invested through a CCPS structure in FY2022. ESOP scheme existed in a board resolution but had never gone to shareholders. IP assignment clause was missing from one co-founder’s founders’ agreement because the agreement was signed informally.

What Treelife did: Ran a pre-DD internal audit before opening the data room. Filed the late FC-GPR through the compounding route with the AD bank. Drafted and passed the ESOP special resolution at an EGM before the investor’s lawyers began their review. Executed a supplementary IP assignment with the co-founder.

Outcome: Data room opened 45 days after the term sheet. Legal DD completed in 22 days with zero Conditions Precedent. Round closed at the original valuation. Estimated time saved versus addressing CPs mid-DD: 8 to 10 weeks.

FAQs on Legal Due Diligence for Startups in India

Q: What documents do investors always request in legal DD regardless of stage?
A: Certificate of Incorporation, MOA/AOA, all board and shareholder resolutions, current cap table reconciled to PAS-3 filings, founders’ agreement with IP assignment, ESOP scheme document and all grant letters, key customer contracts, IP ownership documentation, and all FEMA filings. At seed stage this is typically 25 to 35 documents. At Series A it expands to 90 to 120.

Q: Does legal DD happen before or after the term sheet?
A: Full legal DD happens after the term sheet is signed and before definitive agreements are executed. A light preliminary scan often happens before the term sheet. However, founders should prepare for full legal DD before they begin fundraising, not after they receive the term sheet.

Q: What is the difference between a Condition Precedent and a representation and warranty?
A: A Condition Precedent is a specific action that must be completed before funds are transferred. A representation and warranty is a statement of fact made by the founder in the SHA that is confirmed to be true at the time of signing. Anything not disclosed in the Disclosure Schedule but covered by a representation and warranty creates an indemnification obligation if it turns out to be false.

Q: Is FEMA compliance checked even for fully Indian-invested startups?
A: If all investors are Indian residents investing Indian rupees, FEMA does not apply to the investment itself. However, FEMA becomes relevant if the company has any NRI, OCI, or foreign entity as an investor, or if it has made any payments to foreign vendors under specific instrument types. Most startups above seed stage have at least one non-resident investor.

Q: What happens if an FC-GPR was never filed for a past foreign investment?
A: The company must file a compounding application with the RBI through its AD bank under Section 15 of FEMA 1999. The compounding process takes three to six months and results in a monetary penalty that is calculated based on the amount of the contravention, duration of delay, and the company’s cooperation. The investor at the new round will typically make resolution of the compounding application a Condition Precedent.

Q: Can an ESOP scheme set up without a special resolution be ratified retrospectively?
A: Yes. The company must call an EGM, pass a special resolution under Section 62(1)(b) of the Companies Act 2013 ratifying the scheme, and file Form MGT-14 with the MCA within 30 days of the resolution. All existing grants remain valid after ratification. The ratification should be completed before the data room is opened to avoid the finding becoming a formal CP.

Q: Does DPDPA 2023 apply to startups during the current enforcement gap?
A: The DPDPA 2023 has been enacted. The Rules were notified in January 2025. Full enforcement is pending, but the law is in force and investors are already checking for basic compliance in Series A+ rounds, particularly for consumer-facing startups. Starting compliance preparation now avoids a rushed exercise when enforcement begins.

Q: What does a POSH Act ICC need to have to be compliant?
A: The ICC must have a minimum of four members: a presiding officer who is a woman employed at a senior level, two members from among employees, and one external member from an NGO or association committed to the cause of women or a person familiar with issues relating to sexual harassment. The external member must be present for the committee to be validly constituted. The committee’s annual report must be submitted to the District Officer by 31 January each year.

Q: How long does legal DD typically take at Series A?
A: Four to six weeks from data room opening to delivery of the legal DD memo, assuming the data room is well-organised and there are no significant gaps. Gap-ridden data rooms take six to ten weeks and sometimes longer if FEMA compounding or MCA filings need to be completed during the process.

Q: Is there a standard data room format for legal DD?
A: There is no single standard, but investors consistently expect the folder structure to mirror the DD workstreams: Corporate, Cap Table and Securities, Contracts, IP, Regulatory and Licences, FEMA and RBI, ESOP, Labour and HR, Data and Privacy, and Litigation. Each folder should have a document index. Version control and named access protocols (not open shareable links) are expected at Series A.

Q: What is the typical cost of a pre-DD legal audit?
A: This varies by the complexity of the company’s history, the number of prior funding rounds, and the number of jurisdictions involved. The cost is significantly lower than the value of the time and negotiating leverage lost by addressing CPs after the term sheet is signed.

Q: Does angel tax still apply in FY26?
A: Section 56(2)(viib) angel tax was removed for DPIIT-recognised startups from 01/04/2024 under the Finance Act 2024. For unrecognised startups, angel tax still applies on allotments to Indian resident investors where the issue price exceeds fair market value. Legacy allotments to Indian residents made before 01/04/2024 without a Rule 11UA valuation report remain a potential exposure even for DPIIT-recognised startups and should be reviewed before the data room opens.

Q: How does legal DD differ for a fundraising round versus an acquisition?
A: In a fundraising round, the investor takes a minority stake and the DD is focused on ownership clarity, governance, and risk. In an acquisition, the buyer assumes all liabilities and the DD scope expands significantly to cover every employee contract, all regulatory licences (including non-material ones), environmental history, and all vendor obligations. The Disclosure Schedule in an acquisition is typically ten times the length of a minority investment round.

Regulatory references:

  • Companies Act 2013: Sections 4, 5, 39, 62, 85, 88, 89, 92, 117, 134, 164, 170
  • Income Tax Act 1961: Sections 17(2)(vi), 56(2)(viib), 80-IAC, 192(1C); Rule 3(8), Rule 11UA
  • Foreign Exchange Management Act (FEMA) 1999: Section 13, Section 15
  • Foreign Exchange Management (Non-Debt Instruments) Rules 2019: Rule on FC-GPR (30-day filing), FC-TRS (60-day filing), FLA annual return (15 July deadline)
  • Indian Contract Act 1872: Section 27 (restraint of trade)
  • Trade Marks Act 1999: Sections 9, 13, 14
  • Patents Act 1970: Sections 3, 48
  • Copyright Act 1957: Sections 13, 14
  • Prevention of Sexual Harassment of Women at Workplace (Prevention, Prohibition and Redressal) Act 2013: Sections 4, 21, 26
  • Digital Personal Data Protection Act 2023
  • Employees’ Provident Funds and Miscellaneous Provisions Act 1952: Section 7Q, Section 14B
  • Employees’ State Insurance Act 1948
  • Central Goods and Services Tax Act 2017
  • Registration Act 1908
  • Finance Act 2024 (angel tax amendment)

External sources:

  • mca.gov.in (MCA21 filing portal, Companies Act 2013)
  • rbi.org.in (FEMA, FC-GPR, FLA return guidelines)
  • startupindia.gov.in (DPIIT recognition criteria, Section 80-IAC)
  • ipindia.gov.in (trademark, patent, copyright registry)
  • incometaxindia.gov.in (Section 56(2)(viib), Rule 11UA, Section 192(1C))

Investor Due Diligence Readiness and Checklist: For Startups

Most founders treat due diligence as a document collection exercise that starts when the investor sends a checklist. That framing costs them weeks, and sometimes costs them the deal. By the time a term sheet lands and a 45 to 60 day exclusivity clock starts ticking, you have no time to fix structural problems. You only have time to explain them, and investors price gaps they discover themselves very differently from gaps a founder discloses upfront.

The pattern of what goes wrong is consistent across deals: a cap table that lives in a spreadsheet with no supporting board resolutions, IP built by founders before the company was incorporated and never formally assigned, FC-GPR filings that were never made to the RBI after early angel rounds, ESOP schemes that were approved by the board but never ratified by shareholders. None of these are unusual. All of them are fixable. The difference between a founder who closes a round in eight weeks and one who watches it drag to six months, or watches it reprice, is almost always preparation that happened before the data room opened.

This guide covers what investors actually verify across every DD track, what causes deals to stall or reprice, the investor-side mechanics that most founders never see, and how to get your company genuinely data-room-ready before the term sheet arrives.

What is investor due diligence and why do founders need to prepare for it

Investor DD is the structured verification process an investor or acquirer runs before closing a transaction. It covers legal title to shares, corporate governance, tax and regulatory compliance, IP ownership, key contracts, and financial health.

For founders, preparing for DD means auditing your own company the way an investor’s lawyer would. You are looking for the same gaps they will find, so you can address them before the data room opens rather than explaining them mid-process.

The stakes are specific. A cap table discrepancy does not just slow the deal. It raises questions about who actually owns the company. An undisclosed tax demand under Section 156 of the Income Tax Act 1961 can trigger a price adjustment clause. A founder who has not assigned IP to the company gives every subsequent investor a live argument that the core asset is not owned by the entity they are buying into.

How due diligence depth changes by funding stage

Not all investor due diligence looks the same. The depth, timeline, and document count scale sharply with round size and investor type. A founder preparing for a seed round needs roughly 40 documents in the data room. A Series A or Series B round expects 90 to 120 documents, including at least three years of audited financial statements, multiple sets of board minutes, and employment agreements for every employee.

Due diligence timeline and depth by funding stage

Funding stageTypical full DD durationDepth of reviewApprox. data room documents
Angel / Pre-Seed1 to 2 weeksTeam credibility, basic legal hygiene, cap table20 to 30
Seed2 to 4 weeksLegal, basic financials, team, product, IP35 to 50
Series A4 to 8 weeksComprehensive: legal, financial, IP, commercial, HR90 to 120
Series B+6 to 12 weeksInstitutional-grade across all categories with full audit trails120+

The 45 to 60 day exclusivity period written into most term sheets assumes a clean, pre-populated data room. Founders who start gathering documents after the term sheet is signed routinely lose 3 to 4 weeks before investors lose patience. A seed round term sheet signed in early March, with a clean data room, typically closes by end of May. The same round with a scrambled data room often drags to July or August, by which point investor appetite can shift.

What happens inside investor DD: the six parallel tracks

Most founders think of DD as a document request. It is actually six workstreams running simultaneously, each staffed by a different team on the investor side, each producing a formal memorandum of findings.

TrackWho runs itWhat it produces
LegalInvestor’s lawyersLegal DD report: corporate records, contracts, IP, litigation
FinancialChartered accountant retained by investorFinancial DD report: revenue quality, cash, working capital, debt
TaxCA (same or separate firm)Tax DD report: direct tax, GST, TDS, transfer pricing, notices
RegulatoryLawyers and CA in combinationRegulatory compliance status, sector-specific licences
IPLawyers and technical reviewersIP ownership, assignment completeness, open-source risk
HRInvestor’s operations or legal teamEmployment agreements, PF/ESI compliance, ESOP records, POSH

After each track concludes, the responsible adviser compiles a memorandum of findings. These memoranda collectively feed the disclosure schedule, which becomes Schedule A of the share subscription agreement (SSA). Every gap that surfaces during DD and is not addressed before closing must appear in the disclosure schedule. Gaps disclosed after signing but before closing may give the investor rights to renegotiate. Founders who understand this structure know exactly what each team is looking for and can populate the data room accordingly.

What founders must fix before the data room opens

Your term sheet is in. The investor has sent a DD checklist. And your first instinct is to start gathering documents.

That is already too late. Founders who treat investor due diligence as a document collection exercise lose weeks to back-and-forth, watch valuations reprice on findings they could have fixed in advance, and sometimes lose deals entirely. Investor DD readiness is the work you do before the investor asks.

  • Investor DD covers cap table, corporate records, tax compliance, contracts, IP ownership, and regulatory status
  • Most deal delays come from fixable gaps: missing board resolutions, unissued share certificates, GST defaults, or undocumented founder IP assignments
  • A structured DD readiness exercise takes 3 to 4 weeks and saves multiples of that in deal time

Cap table and corporate records: the most common deal blocker

The cap table must be clean, current, and defensible. Investors will verify it against the Register of Members, every allotment resolution, every share transfer form, and every ESOP grant.

What to check:

  • Register of Members matches the cap table exactly, including fractional shares and partly paid shares
  • Every allotment has a board resolution and, where required, a special resolution filed with the Registrar of Companies (ROC)
  • Share certificates have been issued and are in the possession of the correct holders
  • ESOPs are documented with a scheme approved by special resolution under Section 62(1)(b) of the Companies Act 2013 read with Rule 12 of the Companies (Share Capital and Debentures) Rules 2014, and a registered valuer’s report at each grant date
  • Convertible instruments (CCPS, CCDs, SAFEs, or convertible notes) have corresponding board resolutions and shareholder approvals, and the conversion terms are unambiguous
  • Any previous share transfers have SH-4 forms filed and stamp duty paid in the relevant state
  • All prior allotments to Indian residents have a Rule 11UA valuation report under the Income Tax Rules 1962 to address any historical Section 56(2)(viib) exposure

A cap table that exists only in a spreadsheet, with no underlying corporate records to support it, is not a cap table an investor can rely on. The SHA and prior SSA must reconcile with the cap table. Investors frequently find shares on the cap table with no corresponding board resolution; those shares are legally unenforceable.

Corporate secretarial compliance: ROC filings and board records

An investor will pull your MCA21 filing history on day one. Any gap in annual return filings (MGT-7), financial statement filings (AOC-4), or event-based filings tells them two things: the governance is weak, and there may be penalties outstanding under Section 454 of the Companies Act 2013.

What to check:

  • MGT-7 and AOC-4 filed for every financial year since incorporation
  • All charge registrations (CHG-1) and charge satisfactions (CHG-4) filed within prescribed timelines
  • Director appointments and resignations filed in DIR-12
  • Board meeting minutes and shareholder resolutions maintained in a bound minute book, not loose folders
  • Statutory registers (register of directors, register of charges, register of contracts) updated and available

The most common gap is minutes that were never formally approved or are missing entirely for key decisions. Investors routinely request certified copies of board resolutions for ESOP grants, key contracts, and funding rounds. If they do not exist, the corporate action is unenforceable or disputed.

Tax compliance: what the income tax and GST checks reveal

Tax gaps are the second most common deal-killer after cap table issues. Investors check both direct tax and GST compliance as part of standard DD.

Income tax checks:

  • Form 26AS and AIS current and reconciled
  • No outstanding demands under Section 156 of the Income Tax Act 1961
  • TDS deducted and deposited correctly, particularly on salaries (Section 192), professional fees (Section 194J), and rent (Section 194I)
  • Transfer pricing documentation in place if the company has related-party international transactions (Sections 92A to 92F of the Income Tax Act 1961)

GST checks:

  • GSTR-1 and GSTR-3B filed for all periods since GST registration
  • ITC claimed matches GSTR-2B; no unreconciled mismatches
  • No show cause notices or adjudication orders outstanding
  • If the company operates across states, all required GST registrations in place

A company with two years of clean income tax returns but six months of unfiled GST returns is a yellow flag that investors will price in.

IP ownership and assignment: the gap most founders miss

Most early-stage companies are built on code, product, or content created by founders, freelancers, or early employees before formal employment agreements were in place. If that IP was never formally assigned to the company, the investor is buying a company that may not own its core asset.

What to check:

  • Founder IP assignment agreements in place, covering all work done before formal employment or directorship
  • Employee invention assignment clauses in all employment agreements (not just recent ones)
  • Freelancer and consultant contracts include IP assignment language, not just confidentiality
  • Any third-party libraries, open-source components, or licensed software used in the product are documented and compliant with the relevant licence terms
  • Trademarks filed in the company’s name (not a founder’s name) and renewed

The specific risk: if a founder built the core product before the company was incorporated or before a formal agreement was signed, that IP may belong to the founder individually. An investor’s lawyers will ask for the assignment. If it does not exist, the fix requires a retroactive agreement, a valuation of what was assigned and a tax analysis covering potential capital gains in the founder’s hands and Section 56(2)(x) implications in the company’s hands, depending on how consideration is structured.

Key contracts: what investors read and why

Investors review key commercial contracts for three things: change of control provisions, assignment restrictions, and revenue concentration risk.

Change of control clauses in customer agreements, SaaS contracts, or distribution agreements may give the counterparty a right to terminate or renegotiate on a change of ownership. In a funding round this may not trigger. In an acquisition it almost certainly does.

Assignment restrictions in vendor or technology licence agreements may prevent the company from transferring the benefit of the contract to an acquirer’s entity without consent.

Revenue concentration is a financial risk marker. Best practice is no single customer above 20 to 25% of total revenue. Where a customer exceeds this threshold, the investor will examine the contract length, minimum commitment clauses, and notice period. A 60%+ concentration with a 30-day termination clause can reprice a deal significantly or require a risk mitigation plan as a closing condition.

Check every contract above INR 25 lakhs annual value for these provisions before the data room opens.

Running a funding round? Our transaction advisory team has closed 250+ deals Let’s Talk

What the investment due diligence checklist covers

The investor’s CA runs a financial DD track separately from the legal track. This section covers what that track examines. For the full depth of financial statement analysis, QoE adjustments, P&L line-by-line review, burn rate and runway calculations, and sector-specific financial checks, see our financial due diligence checklist for startups.

The financial track in an investment due diligence checklist focuses on three questions: are the numbers real, are they sustainable, and does the story in the management accounts match the story in the audited statements?

Documents the investor’s CA will request:

  • Audited financial statements for the last 2 to 3 years (balance sheet, P&L, cash flow, notes to accounts)
  • Monthly management accounts for the last 12 to 24 months in the same internal format founders use
  • Bank statements for all operating accounts for the last 12 months
  • Revenue breakdown by customer, product, geography, and channel (monthly)
  • Debt schedule: all outstanding loans, credit lines, founder loans, and convertible notes with all terms and outstanding balances
  • Statutory dues schedule: all outstanding GST, TDS, PF, and ESI with evidence of most recent payment
  • 3 to 5-year financial projections with monthly breakdowns for year one, quarterly thereafter, and explicit underlying assumptions listed separately

What triggers a yellow flag vs a red flag:

A delta of more than 10% between management accounts and audited statements is a yellow flag. A delta above 20% triggers a full additional workstream into revenue recognition. Investors also cross-verify reported revenue against GST returns and bank statements. Any material discrepancy between these three sources can derail a deal entirely. Reconcile all three before the data room opens.

Key metrics investors benchmark in the investment due diligence checklist:

MetricWhat investors look forRed flag threshold
MRR growth (SaaS)Consistent upward trend verified against bank statementsDeclining for 2+ consecutive months
LTV/CAC ratio3x or higherBelow 2x
Gross marginHealthy and trending upward; SaaS benchmark 65%+Declining quarter on quarter
Net revenue retention100%+ indicates expansion revenueBelow 80% signals churn risk
Burn multipleRevenue added per rupee burned; below 1.5x is efficientAbove 2x at Series A stage
Customer concentrationNo single customer above 20 to 25%Single customer above 40%
Management vs audit deltaBelow 10%Above 20%

Commercial DD: market, customers, and competition

Commercial due diligence validates whether the business opportunity is as large and defensible as presented. Investors run this alongside legal and financial tracks, often using their own network rather than founder-provided documents alone.

What investors examine:

  • TAM, SAM, and SOM estimates with credible, citable data sources (not founder-estimated market sizes)
  • Competitive landscape covering direct and indirect competitors, pricing comparisons, and switching costs
  • Customer reference calls: investors speak directly with 3 to 5 key customers to validate retention, satisfaction, and likelihood of expansion
  • Product-market fit signals: NPS scores, usage data, cohort retention curves, and net revenue retention
  • Sales pipeline: qualified leads, conversion rates, and average sales cycle length
  • Regulatory moat or tailwinds: any regulatory advantage, required licence, or barrier to entry that structurally protects the position

How to prepare:

Brief your key customers before the investor calls them. They will be asked about contract value, renewal intention, whether they would recommend the product, and whether they depend on the startup as a critical supplier. A customer who says “we are evaluating alternatives” in a reference call is a more damaging red flag than most financial gaps.

Prepare a market sizing memo with citable sources. Investors do not expect perfection, but they do expect a coherent methodology. Bottom-up calculations tied to real customer data are more credible than top-down TAM slides.

HR and operational DD: what investors check beyond IP

The HR track is often under-prepared by founders because it feels administrative. Investors check it for two reasons: employment agreements are where IP ownership either gets secured or gets lost, and PF/ESI defaults create contingent liabilities that need to be priced.

Employment and contractor records:

  • Complete employee list with roles, joining dates, and compensation
  • Employment agreements for every employee containing both an IP assignment clause and a confidentiality clause
  • Contractor and consultant agreements with IP ownership clauses, not just scope-of-work terms
  • ESOP grant letters, vesting schedules, and exercise price documentation for every optionee
  • Any pending employee disputes, claims, or threatened labour action disclosed

Labour law compliance:

  • PF monthly ECR filings current and No Default Certificate obtained from the EPFO portal
  • ESI monthly contribution filings current
  • Professional Tax registration and payment evidence in each state where employees are based
  • Shop and Establishment Act registration for each office location
  • POSH Act 2013 compliance: Internal Committee formed, annual report submitted by 31 January to the District Officer; non-compliance carries a penalty of INR 50,000 and repeated non-compliance can result in licence suspension

Sector-specific regulatory licences:

Missing or lapsed licences that are material to the business are treated as closing conditions. The investor will require them to be reinstated or substituted before funds transfer.

SectorLicence or registration investors check
Fintech / paymentsRBI authorisation (PPI, PA, NBFC as applicable)
Food and beverageFSSAI registration and licence
Import / exportIEC (Importer Exporter Code) from DGFT
EdTech (certain categories)State-specific approvals
Pharma / medtechCDSCO licences
DPIIT-recognised startupsRecognition certificate and Section 80-IAC exemption status
MSME-registered companiesUdyam registration certificate

FEMA and cross-border compliance

For companies that have raised foreign investment, received ODI funding from a foreign parent, or have cross-border intercompany arrangements, FEMA compliance is a mandatory DD area.

What to check:

  • All foreign investment received has corresponding FC-GPR filings with the RBI within the prescribed timeline (30 days of allotment for equity)
  • Annual return on foreign liabilities and assets (FLA return) filed every year since the first foreign investment
  • Any external commercial borrowings (ECB) have RBI reporting compliance under the FEMA 3(R) framework
  • Downstream investments, if any, have the required approvals and filings
  • No contraventions outstanding under FEMA 1999 that have not been compounded
  • FC-TRS filed for any secondary share transfers involving a foreign investor

An FEMA contravention does not prevent a deal from closing but it does need to be disclosed, and compounding the violation before closing is cleaner than leaving it as a disclosure item.

What investors do when DD uncovers issues

This is the mechanics most guides skip. Finding a gap is not automatically a deal-breaker. What matters is the nature of the gap, when it surfaces, and whether the founder discloses it proactively.

The three outcomes when DD finds something:

  1. The investor demands remediation as a closing condition. The deal proceeds once the gap is fixed. Common for compoundable FEMA violations, late ROC filings, and missing IP assignments that can be documented retroactively.
  2. The investor reprices. A material adverse finding, typically defined as remediation cost above 5% of the round size, gives the investor the right under the term sheet’s DD clause to adjust valuation, reduce the cheque, or require additional escrow or indemnity provisions in the SSA.
  3. The investor walks away. Structural issues that cannot be fixed, such as a genuine dispute over who owns the core IP, a pre-existing undisclosed debt, or a regulatory licence that cannot be reinstated, can kill a deal even at late stages.

What typically triggers a price adjustment:

  • Unreconciled GST and book revenue where the delta cannot be explained by timing or accounting treatment
  • TDS defaults that create an unknown tax liability for the company and potentially the investor’s entity post-closing
  • Undisclosed related-party transactions, particularly founder loans not on arm’s-length terms
  • Customer contracts with change-of-control clauses that require consent before the investment closes
  • Outstanding tax notices or assessments where the quantum is uncertain and cannot be estimated

What proactive disclosure achieves:

Every disclosure schedule item that a founder puts in before the investor finds it independently is treated very differently from one that surfaces during DD. A disclosed gap with a remediation plan reads as competent governance. A gap the investor discovers independently, particularly one the founder knew about, reads as bad faith and can reprice aggressively or end the process.

Investor DD readiness timeline: 6 weeks to data room ready

Week 1: Cap table audit. Verify shareholding, option pools, and issuances against the Register of Members. Identify all allotments without supporting board resolutions and Rule 11UA valuation reports.

Week 2: Secretarial review. Statutory registers, minutes, and MCA filings. File all pending forms and obtain DIN KYC acknowledgements for all directors.

Week 3: Tax and IP audit. Income tax compliance, GST filings and ITC reconciliation, transfer pricing documentation. IP portfolio verification and assignment agreement review for founders, employees, and contractors.

Week 4: Contracts and FEMA. Material contracts review for change-of-control and assignment clauses. FEMA filings audit and compounding initiation where needed.

Week 5: Gap remediation. Address audit findings, update documentation, execute retroactive agreements, secure board approvals for previously undocumented actions, obtain sector-specific licence renewals.

Week 6: Data room ready. Indexed data room with version control. Secure access configured for investor team. Management presentation and financial projection model with stated assumptions finalised.

How to structure your data room and what investor DD costs

A well-organised data room is your first opportunity to demonstrate operational discipline. It also reduces DD timeline because the investor’s team spends less time chasing documents.

Recommended data room folder structure:

FolderContents
01. CorporateCertificate of incorporation, MOA/AOA, board minutes, shareholder registers, ROC filings
02. Cap table and equityCap table, share certificates, previous funding docs, ESOP scheme and grant register, Rule 11UA valuation reports
03. FinancialAudited financials, management accounts, bank statements, projections with assumptions
04. TaxITR, GST returns, TDS records, Form 26AS, AIS, tax notices and replies
05. LegalMaterial contracts, litigation details, regulatory licences, DPIIT certificate
06. HR and teamEmployee list, employment agreements, PF/ESI records, POSH documentation, org chart
07. IPTrademark and patent records, IP assignments, domain ownership, open-source documentation
08. Product and technologyArchitecture docs, security assessments, uptime records, third-party dependencies
09. CommercialMarket sizing, customer references, competitive analysis, sales pipeline
10. FEMA and foreign investmentFC-GPR filings, FLA returns, ECB reporting, FC-TRS records

Use version control and maintain an index file. At seed stage, Google Drive with folder-level access controls is adequate. Series A and above typically warrant a purpose-built virtual data room with audit trails showing which documents were viewed and when.

What DD costs and who pays:

The lead investor pays its own lawyers and CAs, typically deducted from the cheque at closing. For Series A, this runs INR 15 to 40 lakhs, capped in the term sheet. For angel and seed rounds, INR 3 to 8 lakhs. The founder pays separately for their own counsel and CA, typically INR 5 to 20 lakhs depending on deal complexity. A DD readiness engagement run before the term sheet is a separate, earlier cost, almost always recovered many times over in deal timeline and valuation protection.

Common mistakes founders make before investor DD

1. Treating DD as a document collection exercise. Documents without underlying corporate records are not enough. An investor asking for the ESOP scheme wants the original board resolution, the shareholder approval, the scheme document, each individual grant letter, and the valuation report used to determine exercise price. Producing a spreadsheet summary and saying “the documents are being prepared” costs two weeks and raises questions about governance quality.

2. Fixing things mid-process. Retroactive fixes made after a DD request has been sent are a red flag. A board resolution backdated after the investor asked for it is discoverable and creates trust issues. Fix gaps before the data room opens, not after.

3. Not knowing what is in your own contracts. Founders routinely do not know whether their top three customer contracts have change of control clauses. The discovery of a termination right in a key contract mid-DD can reprice a deal by 15 to 20% or kill it. Read your contracts before your investor does.

4. Assuming the cap table is fine because the spreadsheet adds up. A cap table spreadsheet that adds up to 100% but is not backed by corporate records, allotment resolutions, and issued share certificates is not clean. The Register of Members is the legal record of ownership, not the Excel file.

5. Leaving FEMA filings for later. FC-GPR filings made late or not at all are a common gap in early-stage companies that raised small angel rounds without structured legal support. The RBI compounding process for FEMA violations is available and well-used, but it takes time. Identify and compound late filings before the data room opens.

Investor due diligence checklist [Updated 2026]

Show Image

AreaItemStatus
Cap tableRegister of Members matches cap table exactly, including fractional and partly paid shares
Cap tableEvery allotment backed by a board resolution and, where required, a special resolution filed with ROC
Cap tableShare certificates issued and held by correct shareholders
Cap tableESOP scheme approved by special resolution under Section 62(1)(b), Companies Act 2013, with registered valuer report at each grant date
Cap tableRule 11UA valuation report in place for all allotments to Indian residents (historical rounds)
Cap tableConvertible instruments (CCPS, CCDs, SAFEs, convertible notes) have board and shareholder approvals with unambiguous conversion terms
Cap tableSH-4 forms filed and stamp duty paid for all prior share transfers
Corporate secretarialMGT-7 and AOC-4 filed for every financial year since incorporation
Corporate secretarialCHG-1 and CHG-4 filed within prescribed timelines for all charges
Corporate secretarialDirector appointments and resignations filed in DIR-12
Corporate secretarialBoard minutes and shareholder resolutions in a bound minute book, not loose folders
Corporate secretarialStatutory registers (directors, charges, contracts) updated and available
Income taxForm 26AS and AIS current and reconciled
Income taxNo outstanding demands under Section 156, Income Tax Act 1961
Income taxTDS correctly deducted and deposited: salaries (Section 192), professional fees (Section 194J), rent (Section 194I)
Income taxTransfer pricing documentation and Form 3CEB in place for related-party international transactions (Sections 92A to 92F)
GSTGSTR-1 and GSTR-3B filed for all periods since registration
GSTITC claimed reconciles with GSTR-2B with no unresolved mismatches
GSTNo show cause notices or adjudication orders outstanding
GSTGST registrations in place for all states where the company operates
IP ownershipFounder IP assignment agreements cover all work done before formal employment or directorship
IP ownershipEmployee invention assignment clauses in all employment agreements
IP ownershipFreelancer and consultant contracts include IP assignment language, not just confidentiality
IP ownershipThird-party libraries, open-source components, and licensed software documented and licence-compliant
IP ownershipTrademarks filed and renewed in the company’s name, not a founder’s name
Key contractsAll contracts above INR 25 lakhs annual value reviewed for change of control clauses
Key contractsVendor and technology licence agreements reviewed for assignment restrictions
Key contractsRevenue concentration assessed: no single customer above 20 to 25% without minimum commitment
HR and operationsEmployment agreements for all employees with IP assignment and confidentiality clauses
HR and operationsPF monthly ECR filings current, No Default Certificate from EPFO portal
HR and operationsESI monthly filings current
HR and operationsPOSH Internal Committee formed and annual report filed by 31 January
HR and operationsShop and Establishment Act registration for each office location
HR and operationsAll sector-specific licences current: RBI, FSSAI, IEC, DPIIT recognition, Udyam as applicable
Financial (investment DD)Audited financials for last 2 to 3 years with notes to accounts
Financial (investment DD)Monthly management accounts for last 12 to 24 months
Financial (investment DD)Management accounts reconciled to audited statements (delta below 10%)
Financial (investment DD)Revenue reconciled across books, GST returns, and bank statements
Financial (investment DD)Debt and statutory dues schedule current
Financial (investment DD)Financial projections with explicitly stated assumptions for 3 to 5 years
FEMAFC-GPR filed with RBI within 30 days of allotment for every foreign investment round
FEMAFLA return filed by 15 July every year since first foreign investment
FEMAECB reporting compliant under FEMA 3(R)
FEMAFC-TRS filed for secondary share transfers involving foreign investors
FEMANo uncompounded contraventions outstanding under FEMA 1999

FAQs on Investor Due Diligence

Q: What does investor due diligence cover in India?

A: It covers six areas: cap table and share ownership, corporate secretarial records, tax compliance (income tax and GST), IP ownership, key contracts, and FEMA/regulatory compliance. Institutional investors running an investment due diligence checklist also run a financial track covering revenue quality, management account reconciliation, and debt structure. Acquirers run all of the above plus a deeper review of financial representations and contractual liabilities.

Q: How long does DD readiness preparation take?

A: Three to four weeks for a company with reasonably clean records. Six to eight weeks if there are gaps in ROC filings, FEMA compliance, or IP documentation. The earlier you start, the more options you have for fixing issues before the investor finds them.

Q: What documents go into a data room?

A: At minimum: certificate of incorporation, MOA/AOA, all board and shareholder resolutions, cap table with supporting allotment documents, last three years of audited financials, ESOP scheme and grant register, key customer and vendor contracts, IP assignment agreements, all FEMA filings, sector-specific licences, and a litigation summary. For acquisition processes, add all employment agreements, lease agreements, and a statutory dues schedule.

Q: Does DD differ for fundraising versus acquisition?

A: Yes. In a fundraising round, the investor is buying a minority stake and focuses on ownership clarity, governance, and growth risk. In an acquisition, the buyer is assuming all liabilities and runs a deeper review of contracts, employee obligations, regulatory licences, and financial representations. Acquisition DD typically takes three to four times longer and involves more negotiation on representations and warranties.

Q: What are the cross-border FEMA requirements investors check?

A: Investors check: FC-GPR filings for every foreign investment round (filed with RBI within 30 days of allotment), annual FLA returns (filed by 15 July each year), any ECB reporting under FEMA 3(R), FC-TRS for secondary transfers, and whether any downstream investments have the required approvals. Missing FC-GPR filings are the most common FEMA gap in early-stage companies.

Q: What happens if my ESOP scheme was never properly filed?

A: An ESOP scheme not filed as required under Section 62(1)(b) of the Companies Act 2013 can be regularised through the ROC’s compounding process. The company needs to pass the requisite resolutions, file the relevant forms, and pay the applicable late filing fees. Investors will accept a disclosed-and-resolved finding more readily than an open item.

Q: What is angel tax and does it affect investor DD?

A: Angel tax under Section 56(2)(viib) of the Income Tax Act 1961 was abolished with effect from 01/04/2025 via the Finance (No. 2) Act 2024. It no longer applies to share issuances by unlisted companies. For rounds completed before that date, Rule 11UA valuation reports are still required because historical assessments may be pending, and those create a closing condition for new investors.

Q: What if a co-founder left without a formal exit?

A: A co-founder departure without a formal buyout, vesting acceleration waiver, and share transfer documentation is a significant gap. Depending on how much equity the departing co-founder held, they may still be a shareholder of record, entitled to information rights and potentially blocking certain corporate actions. The fix requires a formal SH-4 transfer, a separation agreement, and board documentation. This is one of the most time-consuming gaps to clean up mid-DD.

Q: What does the investment due diligence checklist look for in financial projections?

A: Investors look for internal consistency (growth rates that tie to stated headcount plans and CAC assumptions), a clearly stated revenue recognition policy, scenario analysis (base, bull, bear), and a use-of-funds breakdown. Projections not grounded in unit economics or that assume growth rates inconsistent with historical cohort data will be challenged in management meetings. For full financial DD preparation including QoE, P&L line-by-line review, and burn rate analysis, see our financial due diligence checklist for startups.

Q: Who pays for due diligence in an Indian fundraise?

A: The lead investor pays its own DD lawyers and CAs, typically deducted from the cheque at closing (INR 15 to 40 lakhs for Series A, capped per the term sheet). The founder pays separately for their own counsel and CA (INR 5 to 20 lakhs). A DD readiness engagement before the term sheet is a separate, earlier cost that typically saves multiples of its fee in deal time and valuation protection.

Q: Can a startup receive investor DD readiness support before they have a term sheet?

A: Yes, and Treelife recommends it. Companies that run a DD readiness exercise 6 to 12 months before a planned fundraise have time to fix structural issues without time pressure. Companies that start when the term sheet arrives are fixing things with an investor watching.

Q: What is a disclosure schedule and why does it matter?

A: The disclosure schedule is Schedule A of the SSA. It contains every exception to the representations and warranties the company makes to the investor. Every DD gap that cannot be fixed before closing must be disclosed here. A gap disclosed in the schedule limits the investor’s ability to claim a warranty breach post-closing. A gap not disclosed that later surfaces can trigger indemnity obligations and, in serious cases, rescission of the investment.

Regulatory references

  • Companies Act 2013: Section 62(1)(b), Section 92, Section 134, Section 164(2), Section 248, Section 454
  • Companies (Share Capital and Debentures) Rules 2014: Rule 12
  • Income Tax Act 1961: Sections 56(2)(viib), 56(2)(x), 92A to 92F, 115BAA, 156, 192, 194I, 194J, 271B, 271F, 234A/B/C, 234E, 80-IAC
  • Income Tax Rules 1962: Rule 11UA
  • Finance (No. 2) Act 2024: abolition of angel tax w.e.f. 01/04/2025
  • FEMA 1999 and FEMA (Non-Debt Instruments) Rules 2019: FC-GPR, FC-TRS, FLA return
  • FEMA 3(R): ECB framework
  • GST Act 2017: GSTR-1, GSTR-3B, GSTR-9, GSTR-9C
  • POSH Act 2013
  • EPF Act 1952 and ESI Act 1948
  • Digital Personal Data Protection Act 2023

External sources

  • mca.gov.in (MCA21 filings)
  • rbi.org.in (FEMA/FIRMS portal)
  • incometaxindia.gov.in
  • startupindia.gov.in

For Customer Support

Mumbai | Delhi |
Bangalore

Speak to Us!

We respond within 60 minutes.

    Your information is confidential and secure


    Let's talk.

    We've seen most founder problems before. Tell us yours.

    Error: Contact form not found.

    Typically responds within 4 hours
    Or reach out directly