You're raising a round. An investor says they're interested and asks to see your data room. You say "sure, sending it over" - and then you spend the next three days scrambling to find documents, rename files, and figure out what a cap table is supposed to look like.
That's the wrong way to do this.
A data room isn't something you build when a deal is happening. It's something you build before, so that when the moment comes, you're ready. This guide covers everything: what goes in a data room, how to organize it, what investors are actually looking for, and how to set it up without overcomplicating it.
What is a virtual data room?
A virtual data room (VDR) is a secure online space where you store and share confidential documents with investors, acquirers, or partners during due diligence. Think of it as a locked digital filing cabinet - but one where you control who sees what, for how long, and whether they can download or share anything.
For startups, a data room usually means one of two things:
- A due diligence data room - used during a funding round or M&A process to share legal, financial, and operational documents with serious investors
- A general investor data room - a lighter version with your pitch deck, financials summary, and team info, shared earlier in the funnel
The difference matters. You don't hand over your full legal and tax history to someone who just heard your pitch. Start with a lighter data room for early conversations, and deepen access as a deal gets more serious.
Why your data room matters more than you think
Investors see hundreds of decks. When one decides to dig deeper, how you manage that process sends a signal about how you run the company.
A messy, incomplete, or disorganized data room slows everything down. It creates more back-and-forth. It raises questions about how buttoned-up your operations actually are. And in competitive rounds, delays can cost you.
A clean, well-structured data room does the opposite. It builds confidence. It shows you've thought ahead. It makes the investor's job easier - and investors remember that.
It also protects you. With a proper VDR, you know exactly who viewed what, when, and for how long. You don't accidentally send the wrong file to the wrong person. You don't lose track of which version of your financials someone is looking at.
What is a DD checklist?
DD stands for due diligence. A DD checklist is a list of documents and information that an investor or acquirer requests to verify what you've told them about your business.
It's their way of saying: "We believe your pitch. Now prove it."
Due diligence covers your legal structure, finances, IP, contracts, team, and anything else that affects the value or risk of investing in you. Different deal types (seed, Series A, M&A) have different depths, but the categories are largely the same.
Having a DD checklist before an investor asks for one means you're not surprised by anything. You know what's coming, you've prepared for it, and you're not scrambling during the most important weeks of your fundraise.
What are the 4 P's of due diligence?
The 4 P's are a framework for thinking about what due diligence actually covers. Different people define them slightly differently, but a useful version for founders is:
People - Who's on the team, what's their background, are there any gaps or red flags, what does your cap table look like, are there any key-person dependencies?
Product - What does your product actually do, how defensible is it, what's the IP situation, where are you in development, what do customers say?
Performance - What do the numbers say, is revenue real, is growth real, what are the unit economics, are you burning efficiently?
Potential - What's the market size, who are the competitors, what's the path to scale, is there a real reason you win?
Investors aren't just checking boxes. They're stress-testing your story against reality. A good data room answers the questions in each of these categories before they're even asked.
What should be included in a data room?
Here's where most founders either over-include (dumping everything they've ever made) or under-include (sharing three slides and a cap table). Neither is right.
Below is a full breakdown by category. Not every startup will have everything here - especially at earlier stages. But you should have a clear reason for anything that's missing.
Company overview
- Executive summary (1-2 pages max)
- Pitch deck - current version
- Company one-pager
- Mission, vision, and business model summary
Legal and corporate documents
- Certificate of incorporation
- Bylaws and amendments
- Board meeting minutes (at least the last 12 months)
- Shareholder agreements
- Founder agreements and vesting schedules
- Option pool and equity plan documents
- Any previous investor side letters
Cap table and ownership
- Current cap table (fully diluted)
- Convertible notes, SAFEs, warrants outstanding
- List of all shareholders with ownership %
- Option grants - issued and unissued
Financial documents
- Income statements (last 2-3 years or since founding)
- Balance sheets
- Cash flow statements
- Current financial model / projections (12-36 months)
- Monthly burn rate and runway calculation
- Revenue breakdown by product, channel, or customer
- Key financial metrics (ARR, MRR, LTV, CAC, churn)
Tax and accounting
- Tax returns (last 2-3 years if available)
- Current year tax filings or estimates
- Audited financials (if applicable)
- Accounting software and method in use
Customers and contracts
- Top customer list (anonymized if needed)
- Sample customer contracts or MSAs
- Churn data and retention metrics
- NPS or customer satisfaction data
- Pipeline overview
Intellectual property
- Patent filings or granted patents
- Trademark registrations
- Copyright assignments
- Trade secret policies
- IP assignment agreements from founders and employees
Product and technology
- Product roadmap
- Tech stack overview
- Architecture diagram (simplified)
- Any third-party dependencies or licenses
- Security practices summary
Team
- Org chart
- Key hire bios / LinkedIn profiles
- Employment agreements for key hires
- Contractor agreements (if relevant)
- Open roles
Fundraising history
- Previous round summary (amounts, dates, valuations)
- Existing investor names and contact info
- Previous pitch materials (optional)
- Terms of existing instruments (SAFEs, notes)
Data room for investors checklist template
Here's a condensed version you can use as a working template. Adapt it to your stage.
How to set up a data room, step by step
Setting up a data room doesn't have to take a week. Here's a practical process.
Step 1: Decide what type of data room you need
If you're doing early investor outreach, start with a lighter room: pitch deck, executive summary, financials overview, team bios. Don't share everything upfront.
If you're in active due diligence with a serious investor, build the full room using the checklist above.
Step 2: Choose your platform
Your options generally fall into three buckets:
- Shared folders (Google Drive, Dropbox) - free, easy, but no analytics, no access controls, no audit trail. Fine for casual sharing, not for due diligence.
- Enterprise VDR platforms (Intralinks, Datasite, Firmex) - built for M&A and complex transactions, very feature-rich, typically priced from $400-$1,000+/month with per-user fees. Overkill for most startups.
- Modern startup-focused tools - platforms like Ellty that offer data room features, document analytics, and secure sharing at a fraction of the cost, with no per-user fees.
Ellty Data Room plan starts at $149/month and includes granular permissions, NDA gating, dynamic watermarking, and restricted visitor access. The Data Room Plus plan at $349/month adds group permissions, audit logs, and support for up to 4,000 assets per data room. If you're a pre-seed, seed, or growth stage startup, that covers all of what you'll actually need.
For simpler use cases - sharing a pitch deck with trackable links and seeing who's viewed what - Ellty Standard plan at $69/month includes analytics and data room features. There's also a free plan for basic document tracking.
Step 3: Build your folder structure
Use a clean, numbered folder hierarchy. Something like:
01 - Company overview
02 - Legal and corporate
03 - Cap table
04 - Financials
05 - Tax
06 - Customers and revenue
07 - IP and technology
08 - Team
09 - Previous fundraising
Keep file names clear and consistent. "Revenue model v3 FINAL USE THIS.xlsx" is not a file name. "05 - Financial model - Q1 2025.xlsx" is.
Step 4: Upload and organize documents
Upload in batches by category. Don't upload random files as you find them - it creates clutter. Review each document before uploading. Make sure you're sharing the right version.
Step 5: Set permissions
This is where a proper VDR earns its value over a shared folder. You'll want to:
- Control who can view vs. download
- Set expiry dates on access links
- Require an NDA before accessing sensitive documents
- Apply watermarks to financial documents so any leak is traceable
- Restrict access to certain folders for different investor stages
Step 6: Test before sharing
Open your own data room as if you were an investor seeing it for the first time. Is it organized? Are all the files named properly? Do the links work? Is everything there?
Check from mobile too. Investors review materials everywhere.
Step 7: Monitor who's looking
One of the most useful things a VDR gives you is visibility. With Ellty, you can see which investors viewed your room, which pages they spent time on, and when they were active. That's real signal for your follow-up strategy.
If an investor opened your pitch deck three times but hasn't responded to your last email, you know they're still engaged. If they haven't opened anything in two weeks, you know.
Start your data room today and see how investors are engaging with your documents - set it up on Ellty in under 30 minutes and get real-time visibility from day one.
Data room folder index template
A folder index is a document that lists everything in your data room and where to find it. Some investors will ask for this. It's also useful for keeping track yourself.
Here's a simple format:
Keep this updated whenever you add or update a document. It shows investors you're on top of things.
Free data room for startups: what you actually get
"Free" in the VDR world usually means limited - and that's fine for some use cases. Ellty free plan lets you track documents, see real-time analytics on who viewed your pitch deck and which pages they spent time on, and create secure sharing links. That's genuinely useful for early investor outreach when you're not yet in formal due diligence.
What the free plan doesn't include: NDA gating, granular permissions by visitor, watermarking, or full audit logs. Those features live in the paid data room plans. If you're in active fundraising with multiple investors in a real due diligence process, you'll want the paid plan.
The honest answer: if you're pre-seed sharing a deck with 10 angels, the free plan does the job. If you're Series A with institutional investors running formal DD, invest in a proper data room plan. $149/month against a $3M+ round is not a meaningful cost.
Common data room mistakes founders make
You probably won't make all of these, but most founders make at least a few.
Sharing the same link with everyone - You lose visibility into who's viewed what. Use individual links per investor.
Not setting an expiry date - Old links stay live forever unless you manually revoke them. Set expirations or revoke access after a deal closes or goes cold.
Uploading draft documents - If it says "DRAFT" or "DO NOT SHARE" in the file name, it shouldn't be in the data room. Review everything.
Dumping files without structure - A folder called "Stuff" with 47 files in it is not a data room. Organize properly.
Sharing too much too early - Don't share your full legal and tax history on a first-touch. Stage your disclosures.
Not updating documents - Financial models from 8 months ago are worse than no financial model. Investors notice stale dates.
Ignoring the analytics - If you're using a platform that shows you who's viewing, actually use that data to drive your follow-ups.
What investors look at first
You built a complete data room. What does an investor actually open first?
Most experienced investors follow a pattern:
- Pitch deck - they've seen this already, but they'll check the version
- Cap table - immediately. This tells them a lot about the deal structure and founder dilution
- Financial model - specifically the assumptions, not just the output
- Top customer list - to understand whether your revenue is real and concentrated
- Legal docs - usually later in the process, or handed to their counsel
The pitch deck and cap table together determine whether an investor keeps digging. If those two are clean and credible, everything else becomes a validation exercise rather than a discovery exercise.
This is why having your cap table and financial model investor-ready before you start outreach matters. They're the first places experienced investors go.
Data room for M&A vs. fundraising: what's different?
Most of this guide is written for fundraising. M&A due diligence is similar in structure but goes deeper.
For fundraising (seed to Series B), you're generally sharing:
- Core financial and legal documents
- Product and customer proof points
- Team background
- Cap table and deal terms
For M&A, an acquirer will also want:
- Full customer contracts
- All employment and contractor agreements
- IP assignments for every founder and employee
- Detailed tech documentation
- Any litigation history
- Full tax compliance history
- Integration-related documents (systems, vendors, tools)
M&A data rooms also tend to be longer processes with more back-and-forth. An enterprise VDR with audit logs, version control, and advanced permissions becomes more valuable there. Ellty Data Room Plus tier handles most growth-stage M&A needs. For complex public company transactions, you may need a more specialized platform.
FAQ
What is a virtual data room used for?
A virtual data room is used to securely share confidential business documents with investors, acquirers, or partners during processes like fundraising, due diligence, or M&A. It gives you control over who sees what, tracks document activity, and provides an audit trail.
How long does it take to set up a data room?
If your documents are organized and ready, you can set up a basic investor data room in a few hours. A full due diligence data room - with all legal, financial, and operational documents - typically takes a few days to a week depending on how prepared you are. Using a platform like Ellty with fast setup means the technical side takes under 30 minutes.
What documents should a startup include in a data room?
At minimum: pitch deck, executive summary, cap table, financial statements, financial model, incorporation documents, shareholder agreements, and team overview. For full due diligence, add customer data, IP documents, tax returns, employment agreements, and board minutes. See the full checklist above.
What is the difference between a data room and Google Drive?
Google Drive is a file storage tool. A virtual data room is purpose-built for secure, controlled document sharing. VDRs give you features like visitor-level access controls, NDA gating before entry, watermarking, document analytics (who viewed, which pages, time spent), and audit logs. Google Drive has none of that.
Do I need a data room for a seed round?
Not always a full due diligence data room - but you should have an investor-ready folder with your pitch deck, financials, cap table, and incorporation docs. Using a trackable link (rather than a plain PDF attachment) also gives you visibility into whether investors are engaging with your materials.
What is an NDA gate in a data room?
An NDA gate requires visitors to agree to a non-disclosure agreement before they can access the data room. This is useful for protecting sensitive information like financial details, customer lists, or proprietary technology. Ellty Data Room plan includes NDA gating.
What are audit logs in a data room?
Audit logs are a record of every action taken in the data room - who viewed a document, when, for how long, and whether they downloaded it. This is important for compliance, for tracking investor engagement, and for protecting yourself if there's ever a dispute about what was shared. Audit logs are included in Ellty Data Room Plus plan.
How do I know which investors are most interested?
With a VDR that includes analytics, you can see which investors opened your data room, which specific documents they viewed, how long they spent on each page, and whether they've returned multiple times. This is significantly more useful than sending a PDF attachment and hearing nothing. Ellty shows this data in real time.
What's the difference between a data room for investors and a pitch deck?
A pitch deck is a presentation you use to introduce your company and make the case for investing. A data room is where you put the supporting evidence - financial statements, legal documents, cap table, customer data - that backs up what the pitch deck claims. You share the deck first; the data room comes when someone wants to go deeper.
Can I have different access levels for different investors?
Yes, and you should. Early-stage investors or angels might get access to the pitch deck, financials summary, and team info. A lead investor in formal due diligence gets access to the full room. With Ellty Data Room plans, you can set permissions per visitor or group, so each person only sees what they should.
Is there a free data room for startups?
Ellty offers a free plan that includes document tracking, real-time analytics, and secure sharing links - which covers the basics for early investor outreach. For a full due diligence data room with NDA gating, permissions, and watermarking, you'll need a paid plan. Most startups find the $149/month Data Room plan covers their fundraising needs.
What is a data room index?
A data room index is a document (usually a simple table) that lists every file in your data room, which folder it's in, and when it was last updated. It helps investors navigate the room and shows you're organized. Some investors request one at the start of due diligence.
Final thoughts
A data room isn't just a document dump. It's a controlled, organized, trackable environment that makes due diligence faster, cleaner, and safer for everyone involved.
The founders who close deals faster are usually the ones who were prepared before the deal started. That means having your documents ready, your structure clean, and your platform set up before an investor asks.
If you're starting from scratch, use the checklist in this guide. Pick a platform that gives you visibility, not just storage. Stage your disclosures as the deal gets more serious. And keep your data room updated - a stale data room is almost as bad as no data room.
Don't wait for an investor to ask before you start building. Set up your data room on Ellty today and be ready when it matters most.
