Due Diligence Checklist: 47 Documents to Have Ready
Due diligence is the verification phase between a signed term sheet and the money arriving: investors test every claim in your pitch against the underlying documents. A due diligence checklist of 47 documents, organised into eight groups, turns a six-week question mark into a smooth close — and the founders who have it ready move first.
Why the due diligence checklist matters
Deals rarely die on the handshake; they die in the data room. Investors have limited patience, short exclusivity windows and sharp lawyers, and every missing document adds a day to the process and a question to their minds. A founder who delivers a complete due diligence checklist in days signals organisation, maturity and nothing to hide — three of the strongest signals an early-stage fund can see.
The gap between prepared and unprepared founders is visible immediately. The prepared founder answers every request within 48 hours; the unprepared one spends the exclusivity period hunting for signed copies and old filings while the deal’s momentum cools. Most GCC funds will tell you the same thing: they have never lost a deal to a document that was there, only to documents that were missing.
The 47 documents on the due diligence checklist
The checklist splits into eight groups: corporate, financial, cap table and equity, legal and contracts, IP, product and tech, people and HR, and commercial and sales. Together they cover everything an investor needs to verify ownership, money, risk and momentum. Work through them group by group:
| Group | Documents | Count |
|---|---|---|
| Corporate | Certificate of incorporation; memorandum and articles; register of shareholders and directors; board minutes and resolutions; business licence and commercial registration; tax registration certificates; government approvals and sector permits | 7 |
| Financial | Audited financial statements; management accounts; bank statements; tax filings and VAT returns; budgets and forecasts; accounting policies; debt schedule; insurance policies | 8 |
| Cap table and equity | Fully diluted cap table; option pool plan; share issue records; convertible notes and SAFEs; founder vesting schedules; shareholders’ agreement | 6 |
| Legal and contracts | Material customer contracts; supplier agreements; employment contracts; lease agreements; partnership agreements; litigation register; sector licences; terms of service; IP assignment records | 9 |
| IP | Patent and trademark registrations; IP assignment agreements; domain and brand registrations; source code access; open-source licence review | 5 |
| Product and tech | Product roadmap; technical architecture; cloud and security audit; uptime and performance metrics; data protection and privacy documentation | 5 |
| People and HR | Org chart and headcount; payroll and end-of-service records; HR policies and handbooks; visa and sponsorship compliance | 4 |
| Commercial and sales | Sales pipeline and forecast; churn and retention metrics; pricing and go-to-market plan | 3 |
| Total | Forty-seven documents ready before you start pitching | 47 |
Every document should be the latest signed version, scanned to PDF, and named with a date so there is one unambiguous source of truth. If a document does not exist yet, that is a finding, not a failure: better to know now, while you can fix it, than during exclusivity.
How long due diligence takes in GCC deals
Plan for three to six weeks for a typical early-stage round in the GCC, from the first document request to the final sign-off. A founder with a complete due diligence checklist can compress that to two or three weeks; a founder who is scrambling can stretch it past eight, and the delay itself becomes a risk factor. Regulated sectors — fintech, healthtech, wealth — add time for licence verification and compliance reviews.
Due diligence runs inside the term sheet’s exclusivity window, usually 30 to 60 days, so the clock is always visible. Expect a formal request list within days of signature, a management call with the fund’s analyst or associate, and reference checks with your customers, co-founders and sometimes your previous investors. Faster delivery does more than save time: it reduces the window in which market conditions, other opportunities or second thoughts can change the deal.
How to prepare a data room with the due diligence checklist
Start the data room the week you start pitching, not the week the term sheet lands. Mirror the eight groups in your folder structure so every request maps to a folder instantly. Google Drive or Notion is fine at pre-seed; as rounds grow, funds expect a structured room in DocSend, Datasite or FirmRoom with view tracking, and most GCC firms now run their due diligence on these platforms.
Three rules keep the room credible. First, one index file that lists every document with its date, so the investor’s analyst never has to hunt. Second, a naming convention — 2026-08-01_financials_Q2 — that makes versions obvious. Third, controlled permissions: give the fund access to the room, not to your whole company drive. Keep the room current even when you are not raising: most documents renew annually, and a founder who can hand over a fresh data room in 48 hours wins trust that no pitch can buy. Our startup legal documents guide and startup accounting checklist cover the two groups founders most often leave thin.
What investors check first in the due diligence checklist
Investors read in a fixed order, and every fund in the GCC starts with the same five checks. The cap table is always first: any mismatch with the percentages in your pitch, even by a fraction, is an instant red flag. Next comes the founder story — the shareholders’ agreement and vesting schedules — because nobody funds a company whose own founders have not agreed how equity works.
Then the contracts: your top five customer agreements and any exclusive or onerous supplier terms. Then the numbers, comparing audited accounts, management accounts and bank statements against the metrics in your deck, line by line. Finally, IP and licences: whether the company actually owns what it sells, whether employees signed assignments, and whether the sector licences are current. Get these five right and the rest of the due diligence checklist is a formality; get one wrong and everything else is read with suspicion. The same documents underpin pre-seed funding in the GCC, so building them early pays off at every stage.
Common due diligence checklist failures
The failures that kill GCC deals are rarely dramatic fraud; they are paperwork neglect. Unsigned contracts with your largest customer. Financials that contradict the pitch deck. Verbal agreements that never made it to paper. A cap table that drifted from the share register. Founders without a signed founder agreement. Stale filings with the commercial registry. A data room that takes weeks to answer. Any one of these converts a supportive investor into a cautious one.
Hiding a problem is the only unforgivable failure. A missing licence, an unresolved dispute or a dilution surprise found late kills the deal and the relationship; the same issue disclosed in week one becomes a manageable finding. Run the room past an adviser — an accountant for the financial group, a lawyer for the legal group — before any investor sees it, and treat every gap they find as the reason the dry run was worth it. Check counterparties too: Companies House for UK customers and suppliers, and EDGAR for listed ones.
Using the due diligence checklist after the term sheet
Once the term sheet is signed, due diligence runs in parallel with the legal work on the investment documents. Expect a formal request list, a management call, reference checks, and a closing condition that the documents stay materially accurate until completion. Every question should be answered in writing within 48 hours, and every answer should be consistent with what you pitched — investors compare notes, and the analyst’s spreadsheet is longer than your deck.
For the full sequence from signature to funds received, our guide to what happens after signing a term sheet walks through it stage by stage. The diligence itself follows IFRS conventions in most regional funds, so clean, standards-based accounts halve the questions.
Here is the action checklist, ready to start today:
| Action | Time needed | Do it by |
|---|---|---|
| Build the data room structure mirroring the eight groups | Half a day | Before you start pitching |
| Gather corporate and legal documents, signed and scanned | One week | Before the term sheet |
| Reconcile financials against your pitch metrics | Three days | Before the term sheet |
| Clean the cap table and option pool | One day | Before the term sheet |
| Register IP and collect assignments from every employee | One week | Before the term sheet |
| Run a dry run with your accountant and lawyer | One day | As soon as a term sheet looks likely |
| Answer every request within 48 hours during exclusivity | Ongoing | Throughout due diligence |
Frequently asked questions about due diligence
How long does due diligence take for a GCC startup?
Three to six weeks is typical for an early-stage round, compressing to two or three weeks with a complete data room. Regulated sectors take longer for licence and compliance checks, and the work runs inside the term sheet’s exclusivity window.
Which documents do investors ask for first?
The cap table, the shareholders’ and founder agreements, the top customer contracts, financial statements against the pitch, and IP ownership. Get those five right and the rest of the checklist usually flows without friction.
What happens if due diligence finds a problem?
Most findings are fixable — a missing signature, a stale filing, a licence renewal — and funds expect a few in every round. The only serious problem is a hidden one: disclose early, fix fast, and the finding becomes a point in your favour.
Should I prepare the data room before or after the term sheet?
Before. Build the room the week you start pitching, keep it updated monthly, and hand over the index the moment the term sheet arrives. A data room that opens in 48 hours is itself a signal that closes deals.
Due diligence is not a hurdle to survive; it is the proof phase where prepared founders pull away. Gather the 47 documents, build the room, run the dry run, and answer fast when the requests arrive. The due diligence checklist does the talking, and it talks convincingly.
