What Belongs in a Startup Data Room (Free Checklist)

Short answer

A startup data room for fundraising needs eight folders: company overview, financials, cap table and equity, legal and corporate, team and HR, product and tech, commercial traction, and prior funding documents. At seed, 25-35 well-labelled documents are enough; a Series A diligence room typically runs 50-70. Keep it current and access-controlled.

Nearly 60% of executives blame failed deals on due diligence that missed critical issues, according to Bain & Company's Global M&A Report — and a chaotic document set is where most of those misses start. For founders, the stakes are simpler: a term sheet is not money, and the stretch between the two runs straight through your data room. This startup data room checklist gives you the complete folder structure and document list, ready to copy into whatever virtual data room you use, plus a staging strategy that protects your most sensitive numbers from the funds that were never going to invest.

What should be in a startup data room for fundraising?

Everything an investor needs to verify the claims in your pitch — and nothing that creates questions you don't need to answer yet. The checklist below is the full set. Items marked [Seed] belong in every room from the first raise onward; unmarked items can wait until Series A unless an investor asks.

Folder 1 — Company overview

• [Seed] Current pitch deck
• [Seed] One-page executive summary
• [Seed] Use-of-funds breakdown for this round
• Business plan or strategy memo (if one genuinely exists — don't write one for the room)

Folder 2 — Financials

• [Seed] Monthly P&L since founding (or 24-36 months)
• [Seed] Balance sheet and cash flow statements
• [Seed] Financial model with 3-year projections and labelled assumptions
• [Seed] Current runway and burn summary
• Budget vs actuals for the last 4-8 quarters
• Tax returns / annual filings
• Audited or reviewed statements, if you have them

Folder 3 — Cap table and equity

• [Seed] Current cap table, fully diluted, including every SAFE and convertible
• [Seed] Option pool size and grants issued
• Vesting schedules for founders and key employees
• 409A or comparable share valuation (US), or last priced-round documentation

Folder 4 — Legal and corporate

• [Seed] Certificate of incorporation / commercial register extract (Handelsregisterauszug for German entities)
• [Seed] Bylaws, articles of association or Gesellschaftsvertrag
• [Seed] Shareholder agreements
• Board minutes and written consents
• Good-standing certificates, licences, regulatory permits
• Litigation summary — even if it just says "none"

Folder 5 — Team and HR

• [Seed] Founder bios and org chart
• [Seed] Founder employment/service agreements and vesting status
• Standard employment contract template and offer letter
• Key-employee agreements
• ESOP/VSOP plan documents
• Hiring plan tied to the use of funds

Folder 6 — Product and technology

• [Seed] IP assignments from every founder, employee and contractor — the single most common seed diligence failure
• [Seed] Patents, trademarks, domain ownership
• Product roadmap
• Technical architecture overview
• Open-source and third-party licence inventory
• Security/data-protection summary (GDPR posture matters to EU funds)

Folder 7 — Commercial traction

• [Seed] Metrics dashboard: revenue, retention, cohorts, pipeline
• [Seed] Top 3-5 customer contracts (redacted where NDAs require)
• Customer concentration analysis
• Case studies or referenceable customers
• Market sizing and competitor analysis
• Marketing performance and CAC by channel

Folder 8 — Prior funding

• [Seed] All previous SAFEs, convertible loans (Wandeldarlehen) or priced-round documents
• [Seed] Any existing investor rights: pro-rata, information rights, MFN clauses
• Grant agreements and any conditions attached to public funding

That's the whole room. A seed-stage company ticking every [Seed] item lands at roughly 25-35 documents; the full list runs 50-70, which matches what diligence teams expect against the Series A checklist.

How should you organise and stage access?

Structure beats volume

Papermark's 2026 checklist and startupdatarooms.com's guidance converge on the same rules: shallow folder trees (two levels, three at most), consistent file names with dates (2026-06_PnL_monthly.pdf), a top-level index document, and a designated owner who updates the room weekly during an active raise. startupdatarooms.com suggests a test worth stealing: someone outside your team should find any key document in under ten minutes. If they can't, restructure.

The three-layer room (the part most checklists skip)

Here's the mistake we see most often: founders build one monolithic room and send the same link to forty funds. Now your churn cohorts, customer names and salary data sit on the screens of thirty-eight investors who will pass — some of whom will diligence your competitors next quarter. Stage access in three layers instead:

Layered access also keeps you honest about momentum: if nobody has requested Layer 2 in three weeks, the market is telling you something your inbox isn't. Use whatever virtual data room you already have — permissions, watermarking and view tracking are standard features; picking one is a separate decision we cover in choosing and setting up the data room itself.

Assume a machine reads it first

Increasingly, the first "reader" of your data room is a model: many funds now run AI-assisted due diligence that extracts terms, flags inconsistencies and cross-checks numbers across documents. That raises the cost of sloppiness — a revenue figure that differs between deck and P&L gets caught in minutes, not weeks. Consistency across documents is now a diligence feature, not a nicety.

Why does the data room decide closing speed?

Because everything after the handshake is verification. Carta's Winter 2025 State of Seed data shows SAFE-based rounds can sign in days — but only when the underlying documents check out quickly. Priced rounds and Series A deals stack diligence on top: per Bain's research, deals fail on what diligence misses, so investors have learned to dig, and they dig fastest through clean, current, well-labelled rooms.

The pattern from both 2025-26 checklist publishers is consistent: missing core documents, outdated versions, and messy structure are the red flags that stall deals — not the existence of problems. Investors expect skeletons like customer concentration or a co-founder departure. What they punish is discovering them late. Disclose known issues in the room, with one paragraph of context, before someone finds them without it.

What this means for you

Build the room the week you decide to raise, not the week someone asks. Practical order: tick off every [Seed] item above, fix what's missing (unsigned IP assignments and stale cap tables top the list), set up the three layers, then assign one owner and a weekly update slot. Budget two focused days for a seed room and one to two weeks for a Series A room. Against a raise that consumes months — see what raising a seed round in 2026 actually involves — it's the cheapest credibility you'll buy all year.

Frequently asked questions

When should I set up my data room — before or after investor interest?

Before outreach, always. Diligence effectively starts at the first meeting, and a request you answer in an hour signals operational discipline. Founders who assemble documents reactively add weeks to closing and make avoidable errors under pressure. Build the room during raise preparation, assign one owner, and update it weekly while the round is open.

Should I put my pitch deck in the data room or send it separately?

Both. Send the deck directly in outreach — it's a marketing document and should travel freely. Keep a copy in the data room's overview folder so diligence teams see the claims you made, alongside the evidence backing them. Anything you'd happily post publicly belongs in the deck; anything requiring context belongs deeper in the room.

What should NOT go in a startup data room?

Customer-identifying data that breaches contracts or GDPR, individual salaries at first contact (share bands, disclose detail later), unredacted contracts with active NDAs, and half-finished drafts. Also skip aspirational documents — a five-year vision memo invites diligence questions you don't need. Share sensitive detail progressively as investor commitment deepens.

Do seed investors really check data rooms, or is this a Series A thing?

Seed diligence is lighter but real — expect your lead to verify incorporation, cap table, key contracts and financial basics before wiring. SAFE rounds can close in days precisely because verification is quick when documents are ready. At Series A the room becomes central: four to eight weeks of structured review against a request list.

Sources

1. startupdatarooms.com — What Should Be in a Data Room: A Complete Startup Checklist for Fundraising and M&A, July 24, 2025. https://startupdatarooms.com/startup-data-room-checklist/
2. Papermark Blog — The Ultimate Startup Data Room Checklist: What to Include in 2026, updated June 14, 2026. https://www.papermark.com/blog/startup-data-room-checklist
3. Bain & Company — Due Diligence: Global M&A Report, 2020. https://www.bain.com/insights/due-diligence-global-ma-report-2020/
4. Carta & a16z speedrun — State of Seed Report: Winter 2025. https://carta.com/data/resources/state-of-seed-2025/