What goes in a data room: a complete document checklist

An investor asks for your data room. You have 24 hours. This is exactly what should be in it - organized, ready, and nothing missing.

What is a data room

A data room - or virtual data room (VDR) - is a secure online space where you store and share confidential company documents. It's used during fundraising, due diligence, M&A, and any situation where sensitive information needs to go to an outside party in a controlled way.

Before data rooms existed, founders would email PDFs around or hand over physical folders. Some still do. That's a mistake - you lose all visibility into who saw what, and you can't revoke access if a deal falls through.

A proper data room gives you access controls (who sees which documents), audit trails (who opened what and when), and security features like NDA gating and watermarking. Investors expect this now. Not having one signals disorganization at exactly the wrong moment.

A data room is not the same as a Google Drive folder or a Dropbox link. Drive gives you file storage. A data room gives you controlled access, tracking, and security - which is what investors and acquirers actually need when they're reviewing sensitive information.

What is included in a data room

Most data rooms for startups cover six core areas. Think of these as the folders inside your room. Some investors will want to see all of them. Others will focus on two or three depending on stage. Either way, you want to have everything ready so you're not scrambling when they ask.

Here's what a complete data room includes:

You don't need every single document in this table for every situation. A seed-stage room is lighter than a Series B room. We'll cover that breakdown by stage a bit further down.

Data room documents for due diligence

Due diligence is the process where an investor, acquirer, or lender goes through your company in detail before committing. Your data room is how you enable that process without sending 40 email attachments or giving everyone raw access to your Google Workspace.

The due diligence request list you'll typically receive will map to these five areas. Here's what each one actually means in practice.

1. Corporate and legal documents

This is the foundation. These documents prove your company is properly incorporated, equity is cleanly allocated, and there are no legal landmines.

• Certificate of incorporation
• Company bylaws or articles
• Shareholder agreements
• Board resolutions & meeting minutes
• Previous financing documents (SAFEs, convertible notes, term sheets)
• Any pending or past litigation

If your equity structure is messy - missing founder agreements, unclear IP assignments, or cap table errors - fix it before opening a data room. Investors find these things. It's better to know and fix than to have it surface mid-diligence.

2. Financial documents

This is usually where investors spend the most time. Everything here should be accurate and internally consistent - meaning your P&L matches your cash flow, which matches what you said in your deck.

• Profit and loss statement (2-3 years or since founding)
• Balance sheet
• Cash flow statement
• Financial model (3-5 year projection)
• MRR / ARR breakdown if SaaS
• Bank statements (last 3-6 months)
• Revenue by customer or cohort
• Audited financials (if applicable)

3. Cap table and equity

Your cap table is the single document most likely to raise a question. Keep it clean and up to date. If you're using a cap table management tool like Carta or Pulley, export the current state before adding it to the room.

• Full cap table with ownership percentages
• SAFE agreements
• Option pool overview
• Warrants and convertible instruments
• 409A valuation report (if done)
• Vesting schedules for founders and key hires

4. Intellectual property and key contracts

IP assignments are the most commonly forgotten document in early-stage rooms. Every founder should have signed one at company formation. If they haven't - fix it before diligence starts. This is non-negotiable for most investors.

• IP assignment agreements (all founders)
• Patent filings or pending patents
• Trademark registrations
• Customer contracts (material ones)
• Vendor and supplier agreements
• Software licenses (in and out)
• NDAs with significant parties
• Regulatory approvals or licenses (if applicable)

5. People and team documents

Investors are backing the team as much as the business. This section confirms who's actually on board, how they're compensated, and whether key roles are filled.

• Org chart (current)
• Founder and key executive bios
• Employment agreements (key employees)
• Advisor agreements
• Compensation structure overview
• Open headcount plan (optional but useful)

Venture capital fund due diligence document checklist

If you're raising from VCs specifically, the checklist gets slightly more structured than angel-stage diligence. VCs typically run a formal process with a defined request list. Here's what a typical VC due diligence checklist covers, and roughly how each document maps to their decision-making process.

VCs move faster than founders expect once they're in diligence. Have everything in the room before you share the link. Don't send a half-built room and say "more coming soon" - that erodes confidence at the worst time.

How to organize your data room

A data room with 60 unorganized files is almost as bad as no data room. Investors are looking through a lot of rooms. If yours is clean and logical, it signals the same about how you run the company.

Here's a folder structure that works for most fundraising data rooms:

01_Company overview
  └─ Pitch deck (latest)
  └─ Executive summary
  └─ One-pager
02_Financials
  └─ P&L 2022-2024
  └─ Balance sheet (current)
  └─ Cash flow statement
  └─ Financial model (3-year)
  └─ MRR tracker
03_Legal and corporate
  └─ Certificate of incorporation
  └─ Bylaws
  └─ Board meeting minutes
  └─ Prior financing docs (SAFEs)
04_Cap table and equity
  └─ Cap table (current)
  └─ Option pool summary
  └─ Vesting schedules
05_Intellectual property
  └─ IP assignment agreements
  └─ Patent filings
  └─ Trademark registrations
06_Customers and commercial
  └─ Key customer contracts
  └─ Revenue by customer
  └─ Churn and retention data
07_Team
  └─ Org chart
  └─ Founder bios and LinkedIn
  └─ Key employment agreements
08_Product and technology
  └─ Product roadmap
  └─ Tech stack overview
  └─ Security and compliance docs

A few naming rules that save time: use dates in file names where relevant ("P&L_2022-2024" not "financials_final_v3"), number your folders so they stay in order, and don't use abbreviations that only make sense internally.

What to include at each stage

The depth of your data room should match the stage of the conversation. A seed round data room is lighter than a Series B room. Here's how to think about it.

For a seed round, you don't need 100 documents. A well-organized room with 20-30 accurate documents beats a bloated room with 80 outdated ones. Quality over quantity.

What not to put in a data room

Founders often over-share. Some documents create more risk than they're worth including, especially early in a conversation. Others are just unnecessary noise.

Setting up your data room with Ellty

Once you know what documents go in your data room, you need a place to actually put them. Here's how Ellty fits into this.

Ellty is a virtual data room and secure file sharing platform built for teams. It's not trying to be an enterprise M&A tool - it's designed to help you share sensitive documents securely, track engagement, and move faster during fundraising and early-stage due diligence.

You can set up a room in under an hour. No onboarding calls. No contract. No per-user fees eating into your budget as your investor list grows.

Where Ellty works well: seed to Series C fundraising, focused due diligence rooms with a defined set of reviewers, and secure deck sharing where you want page-level analytics on investor engagement.

Where it's not the right fit: large M&A transactions with hundreds of parties, processes that require enterprise compliance certifications (like ISO 27001), or situations where your legal team needs built-in Q&A workflow tools. For those, enterprise-tier platforms are more appropriate.

What the analytics actually show you

This is where Ellty is different from just uploading files somewhere. When you share a data room link, you can see who accessed it, which documents they opened, which pages they spent the most time on, and when they came back.

If an investor spent 18 minutes on your financial model and two seconds on the team page, that tells you something. You know exactly what to address on the follow-up call. That kind of signal is the difference between a reactive pitch process and a confident one.

Real-time notifications mean you know when someone is actively in your room - not three days later when you follow up and they've already moved on to something else.

Stop guessing which investors are actually serious. Set up a trackable data room on Ellty and see exactly who's engaging with your documents - start free, no credit card needed.

Frequently asked questions

What is a data room in simple terms?

A data room is a secure online space where you store and share confidential company documents with investors, acquirers, or legal teams. Think of it as a controlled filing cabinet that tracks who accesses what - with features like NDA gating, access permissions, and document watermarking that normal cloud storage doesn't have.

What documents should go in a data room for due diligence?

The core documents are: corporate formation papers, financials (P&L, balance sheet, cash flow, financial model), cap table, IP assignments, key customer contracts, employment agreements for key people, and your pitch deck. The exact list depends on your stage - a seed round needs fewer documents than a Series B or M&A process.

What is a due diligence request list?

A due diligence request list (sometimes called a diligence checklist or DDQ) is a document an investor or acquirer sends you listing every document and piece of information they need before closing a deal. Your data room is where you fulfill that request. Having your data room organized in advance means you can respond in hours instead of days.

Do I need a data room for a seed round?

Yes - but it doesn't need to be elaborate. At seed stage, a clean room with your pitch deck, basic financials, cap table, certificate of incorporation, SAFE documents, IP assignments, and founder bios is usually enough. The key is having it ready before an investor asks, not scrambling to build it mid-conversation.

What's the difference between a data room and Google Drive?

Google Drive is file storage. A data room is a secure sharing environment. Drive doesn't give you view analytics, NDA gating, watermarking, granular access permissions, or audit logs. For sharing sensitive financial and legal documents with investors, those missing features create real gaps - especially if a deal falls through and you want to revoke access.

When should I share my data room with investors?

Don't share it at the first meeting. Share your pitch deck first. Reserve data room access for when there's genuine interest - typically after a first or second meeting when the investor signals they want to go deeper. Sharing a full data room too early with unvetted investors is a security risk.

What is NDA gating in a data room?

NDA gating means that before anyone can access your data room, they must read and digitally accept a non-disclosure agreement. It's automated - you don't have to chase signatures manually. Ellty Data Room plan includes NDA gating as a built-in feature.

What are dynamic watermarks in a data room?

Dynamic watermarks automatically overlay each document with the viewer's name, email, and a timestamp. If someone screenshots or forwards a page, the watermark travels with it and identifies exactly who had access. This is a strong deterrent against unauthorized sharing of sensitive documents.

How much does a data room cost?

Pricing varies significantly. Enterprise platforms like Intralinks or Datasite don't publish pricing - expect $1,000-$3,000+ per month for large M&A deals. For startup fundraising and early-stage due diligence, flat-rate platforms are more practical. Ellty offers a free plan for basic document tracking and secure sharing, with the core data room plan (NDA gating, granular permissions, watermarking) at $149/month with no per-user fees.

What's the difference between a pitch deck and a data room?

A pitch deck is a short visual presentation you use to generate investor interest. A data room is a comprehensive document collection you share during due diligence. You share the deck first. You share the data room once an investor is seriously interested. They serve different purposes at different stages of the process.