A well-organized data room signals operational maturity. A messy or incomplete one raises questions before you even start reading. Here's what investors expect to see and why each document matters.
Corporate documents
- Certificate of incorporation
- Articles of association or operating agreement
- Board resolutions and meeting minutes
- Shareholder agreements
Why it matters: These establish that the company is properly formed and governed. Missing incorporation documents or unsigned shareholder agreements are surprisingly common at the early stage.
Cap table
The cap table should show:
- All issued shares by class
- Option pool size and grants
- SAFE notes or convertible instruments with terms
- Pro forma cap table showing post-investment ownership
Why it matters: A clean cap table means everyone knows who owns what. A messy cap table - missing grants, unclear SAFE terms, or unaccounted shares - creates legal risk that gets worse with every subsequent round.
Financial documents
- Historical financial statements (even if unaudited)
- Current bank statements showing runway
- Financial model with assumptions clearly documented
- Monthly burn rate breakdown
Why it matters: Financials tell you whether the startup's story matches reality. If the pitch says "growing 20% month over month" but the financials show flat revenue, that's a conversation to have.
IP and technology
- IP assignment agreements (founders assigned IP to the company, not held personally)
- Patent filings (if any)
- Key software licenses
- Third-party technology dependencies
Why it matters: If the founders haven't assigned their IP to the company, the company technically doesn't own its own product. This is one of the most common and most serious issues we see in early-stage data rooms.
Contracts and agreements
- Key customer contracts
- Vendor and supplier agreements
- Employment agreements for key team members
- Advisor agreements with equity terms
Why it matters: Customer contracts reveal revenue quality. Are they annual or month-to-month? Do they have termination clauses that could wipe out the ARR number in the pitch?
Compliance
- Privacy policy and terms of service
- GDPR compliance documentation (if handling EU data)
- Industry-specific licenses or certifications
- Insurance policies
Why it matters: Compliance gaps become expensive problems later. A startup handling health data without HIPAA compliance or EU user data without GDPR processes is carrying hidden liability.
What absence signals
A startup that can produce all of these documents quickly has its house in order. A startup that takes weeks to gather basic corporate documents is telling you something about how the business is run.
Missing documents aren't always deal-breakers at the early stage. But they should be addressed before closing - and the founder's response to "can you provide X" tells you a lot about their operational discipline.
