Startup Due Diligence Checklist: What Investors Verify Before Funding

Before an investor writes a cheque for your startup, they spend weeks dissecting your company from every angle. The startup due diligence checklist in India covers 8 distinct areas, and any gap in any one of them can delay a deal by months or kill it entirely. Based on our experience supporting 500+ funded startups through this process, the biggest deals fall apart not on valuation, but on missing IP assignment agreements and cap table errors that should have been fixed long before a term sheet arrived. This guide walks through every area investors audit, with the exact forms, regulations, and red flags you need to know before your next fundraise.

What is Startup Due Diligence?

Startup due diligence is a structured verification process conducted by investors, venture capitalists, or acquirers to independently confirm the claims made by a startup before committing capital. It is governed by no single statute but draws on the Companies Act, 2013, the Income Tax Act, 1961, the SEBI (Alternative Investment Funds) Regulations, 2012, the Foreign Exchange Management Act, 1999, and sector-specific regulations. The objective is to verify that the business is legally sound, financially healthy, and free from undisclosed liabilities that could erode investor returns.

In the Indian startup ecosystem, the scope of due diligence has grown significantly. Post the 2020 Angel Tax clarifications and the introduction of the Digital Personal Data Protection Act, 2023, investors now check items that were not on the radar five years ago. A startup raising ₹5 crore from an angel network faces a different diligence scope than one raising ₹50 crore from a SEBI-registered Category II AIF, but both share the same foundational checklist. Think of due diligence as the investor's version of an MRI scan: it looks at what is not visible from the outside.

Area 1: Legal and Corporate Structure Verification

The first and most critical area investors examine is whether the company's legal entity is properly constituted and maintained. This starts with the Certificate of Incorporation and the company's status on MCA21. Investors verify that the startup is not struck off, dormant, or under investigation by the Registrar of Companies (RoC). Every director's DIN (Director Identification Number) is checked for active status and absence of disqualification under Section 164 of the Companies Act, 2013.

Key Legal Documents Checked

• Certificate of Incorporation: Confirms entity type (Pvt Ltd preferred), incorporation date, and CIN
• Memorandum of Association (MoA): Verifies that the startup's actual business activities fall within the objects clause
• Articles of Association (AoA): Checked for share transfer restrictions, quorum requirements, and investor-friendly amendments
• Form MGT-7 (Annual Return): Discloses shareholding pattern, director details, and related party transactions for each financial year
• Form AOC-4 (Financial Statement Filing): Confirms audited financials have been submitted to the RoC on time
• Form CHG-7 (Register of Charges): Reveals any charges (mortgages or hypothecations) created on company assets
• Form DIR-3 KYC: Verifies that all directors have completed annual KYC with MCA
• Board Resolutions: Checked for key decisions including ESOP grants, loan approvals, and previous equity allotments

Area 2: Financial Due Diligence

Financial due diligence is the area investors spend the most time on at Series A and beyond. The goal is not just to verify revenue claims, but to understand revenue quality, burn rate, unit economics, and hidden liabilities. Investors look for a disciplined finance function, not just a healthy P&L.

Financial Documents and Checks

• Audited Financial Statements: At least 3 financial years (or all years since incorporation if younger), including Balance Sheet, Profit and Loss Statement, and Cash Flow Statement signed by a CA
• Bank Statements: 12 to 24 months of all company bank accounts, cross-verified against revenue figures
• GST Returns: GSTR-1 and GSTR-3B for the last 12 months, with GSTR-2B ITC reconciliation
• Accounts Receivable Ageing: How old is the outstanding revenue? More than 90-day-old receivables raise a flag
• Burn Rate and Runway: Monthly cash outflow vs. bank balance. Most investors want to see 12 to 18 months of runway post-investment
• Related Party Transactions: Any payments to founders, their family companies, or connected entities must be at arm's length

Unit economics are scrutinised closely at pre-Series A and Series A rounds. Investors calculate Customer Acquisition Cost (CAC), Lifetime Value (LTV), gross margin, and net revenue retention for SaaS or recurring-revenue models. An LTV-to-CAC ratio above 3:1 is generally considered healthy for venture-backed startups.

Area 3: Intellectual Property Audit

For technology startups, the IP audit is often more consequential than the financial review. If the core technology was built before the company was incorporated, or by freelancers under vague contracts, the startup may not actually own its most valuable asset. Investors have walked away from multi-crore deals because IP assignment agreements were missing for two co-founders who had since parted ways.

IP Audit Checklist

• Trademark Registrations: Filed with the Office of the Controller General of Patents, Designs and Trade Marks (IP India). Investors check for granted trademarks vs. pending applications vs. objected marks
• Patent Applications: Form 1 (application) and Form 2 (provisional/complete specification) filed with the Indian Patent Office. PCT applications for international protection are noted
• Copyright Ownership: Source code, design assets, and content must be owned by the company, not by individual founders
• IP Assignment Agreements: Every founder, co-founder, early employee, consultant, and freelancer must have signed a written IP assignment transferring all work product to the company
• Open-Source Compliance: Products built on GPL or AGPL-licensed open-source code may be subject to copyleft obligations. Investors verify whether proprietary code is contaminated
• Domain Name Ownership: Company domain must be registered in the company's name, not a founder's personal account

The trademark registration process in India takes 18 to 24 months to complete, but filing date establishes priority. Investors accept a valid TM application number as sufficient for diligence. If you have not filed yet, do so immediately since you cannot retroactively protect a brand name that a competitor has already applied for.

Area 4: Cap Table and Equity Structure Review

The cap table is the single document that defines who owns what percentage of the company, and investors treat it as ground truth. A messy cap table, full of undocumented share transfers or convertible notes with unresolved terms, signals a governance problem that will compound with every future round. The cap table review cross-checks the Register of Members (maintained under the Companies Act, 2013) against Form MGT-7 filed with MCA.

What Investors Verify in the Cap Table

Founders should maintain the fully diluted cap table as a live document, updated after every equity event. Tools like Carta, Equidam, or even a carefully maintained Excel sheet with version history will satisfy due diligence. The key is that your internal cap table must match MCA records to the last share.

For more on equity compensation structures, see our detailed comparison of ESOPs vs RSUs vs SARs for Indian startups.

Area 5: Tax Compliance and Angel Tax

Tax due diligence has two dimensions in India: routine compliance (GST, TDS, income tax returns) and the structurally unique challenge of Angel Tax. Investors are acutely sensitive to any outstanding tax demands or statutory defaults, because they become part of the investment risk if unresolved before closing.

Routine Tax Compliance Checks

• Income Tax Returns (ITR-6): Filed for every financial year since incorporation. Advance tax payments verified if applicable
• TDS Compliance: TDS deducted and deposited on time under the relevant TDS sections; Form 26AS cross-checked for discrepancies
• GST Filing Status: GSTR-1 and GSTR-3B filed without defaults; no notices from the GST department under Sections 61, 73, or 74 of the CGST Act, 2017
• Tax Demand Notices: Any outstanding demands from income tax, GST, or erstwhile service tax are disclosed and quantified
• Transfer Pricing: Startups with international transactions (SaaS sales, overseas subsidiaries) must have transfer pricing documentation under Section 92 of the Income Tax Act, 1961

Angel Tax: The India-Specific Due Diligence Item

Angel Tax under Section 56(2)(viib) of the Income Tax Act, 1961 is levied when shares in a closely held company are issued at a price exceeding the fair market value (FMV) determined under Rule 11UA of the Income Tax Rules, 1962. The excess is treated as income in the hands of the company and taxed at the applicable rate (approximately 30% for companies). The 2023 amendment extended this provision to foreign investors as well, dramatically increasing its scope.

Area 6: HR and Employment Compliance

Employment due diligence is one of the most overlooked preparation areas for first-time founders. Most startups focus on the cap table and financials but forget that investors are equally concerned about who works for the company, under what terms, and whether all IP created by those people belongs to the company.

Employment Documents Investors Review

• Employment Agreements: All full-time employees must have signed agreements that include an NDA clause, an IP assignment clause assigning all work product to the company, and a non-compete or non-solicitation clause (typically 12 to 24 months post-employment)
• Contractor and Freelancer Agreements: Work-for-hire clauses ensuring IP ownership transfers to the company; particularly critical for the core technology team
• PF Registration and Contributions: Under the Employees' Provident Funds and Miscellaneous Provisions Act, 1952, companies with 20 or more employees must be registered and contributing to PF monthly
• ESI Compliance: Under the Employees' State Insurance Act, 1948, required for employees earning up to ₹21,000 per month at companies with 10 or more employees
• ESOP Scheme Documentation: ESOP grants must be made under a Board-approved scheme, vesting schedules must be documented, and exercise prices must be determined per Rule 11UA
• Gratuity Provision: Companies with 10 or more employees for at least 5 years must provide gratuity under the Payment of Gratuity Act, 1972

For a detailed breakdown of employment agreement clauses that protect both founders and the company, read our guide on employment agreement clauses every startup founder must include. Getting these right upfront costs ₹15,000 to ₹30,000 per employee in legal fees, versus ₹5 lakh or more to fix during due diligence when an investor's lawyer is on the clock.

Key Man Risk Assessment

Investors assess whether the startup's success is dangerously tied to one or two individuals. High key man risk (a single founder who controls all customer relationships, technology, and operations) is mitigated by investors through founder vesting schedules and key man insurance policies. The SHA will typically include a provision that triggers founder vesting acceleration only if the founder is terminated without cause, not if they voluntarily exit.

Area 7: DPIIT Recognition and Regulatory Readiness

DPIIT recognition is not just a government certificate. It is a financial instrument in disguise. For startups raising equity from Indian investors, DPIIT recognition is the difference between paying zero tax on the funding round and paying 30% on the premium above FMV. It also activates a 3-year income tax holiday under Section 80-IAC of the Income Tax Act once the startup achieves profitability, and reduces compliance burden on IP applications through expedited patent processing.

What Investors Verify About DPIIT Status

• Valid DPIIT recognition certificate downloaded from the Startup India portal
• Startup meets the eligibility criteria: incorporated less than 10 years ago, annual turnover below ₹100 crore in any preceding year, and working on an innovative product or scalable business model
• Section 80-IAC application status (for startups claiming the 3-year tax holiday)
• Inter-ministerial Board (IMB) certificate status for Section 80-IAC eligibility

For SEBI-registered AIF investments, additional regulatory checks apply. Category I AIFs (Venture Capital Funds) and Category II AIFs (Private Equity Funds) under the SEBI AIF Regulations, 2012 must conduct portfolio company due diligence as part of their fund governance obligations. They verify FEMA compliance, sector-specific licences, and RBI registration for fintech or NBFC startups.

Read our deep dive into the DPIIT ₹10,000 crore startup fund and SIDBI AIF capital structure to understand how government funding frameworks complement private investor due diligence requirements.

Key SHA/SSA Terms Investors Negotiate Before Closing

Once due diligence is satisfactory, investors negotiate the Shareholder Agreement (SHA) and Share Subscription Agreement (SSA). Understanding these terms helps founders know exactly what they are agreeing to before signing.

For a founder-friendly Shareholder Agreement drafted by experienced startup lawyers, IncorpX structures SHA terms that protect your interests while meeting investor expectations. The SHA and SSA, together, are the two most important legal documents your startup will sign.

Due Diligence Timeline: What to Expect at Each Funding Stage

Understanding the timeline helps founders manage the process without losing momentum on operations. Due diligence is rarely a linear process; it involves multiple rounds of queries, document uploads, and clarification calls. The investor's legal team and their CA firm work simultaneously on different tracks.

Red Flags That Kill Funding Deals

Experienced investors have seen the same patterns of failure repeated across thousands of due diligence processes. The issues below are not minor oversights, they are deal-breakers. If any of these apply to your startup, address them at least 3 months before you plan to fundraise.

1. Missing IP Assignment Agreements from Co-Founders: If a co-founder who contributed to the core technology does not have a signed IP assignment, the company's ownership of its own product is legally disputed. This is the single most common post-term-sheet deal-breaker and can take 4 to 12 weeks to resolve if the co-founder is uncooperative.
2. Cap Table Discrepancies Between Internal Records and MCA: When the startup's internal cap table shows 65% founder ownership but Form MGT-7 filed with the Registrar shows 58%, the discrepancy triggers an immediate query. Most arise from equity transfers that were not properly documented with a share transfer form and a board resolution.
3. Director Disqualification Under Section 164 of the Companies Act, 2013: Disqualified directors must be removed before any fresh equity allotment. MCA's list of disqualified directors is public. If a director at your startup is on that list, the company cannot allot shares until the situation is resolved, which requires filing petition applications with the NCLT (National Company Law Tribunal).
4. Unresolved GST or Income Tax Demands: A pending GST notice under Section 73 or 74 of the CGST Act, 2017, or an income tax demand under Section 143(3), becomes an investor liability the moment the deal closes. Investors will either require escrow arrangements to cover the demand, reduce the investment amount, or walk away entirely.
5. Undocumented ESOP Grants: ESOPs granted verbally or via informal emails, without a Board-approved scheme registered with MCA, are legally unenforceable and create phantom equity claims. Under Rule 12 of the Companies (Share Capital and Debentures) Rules, 2014, an ESOP scheme must be approved by a special resolution of shareholders at a general meeting.
6. FEMA Non-Compliance from Prior Foreign Investment: If a startup received money from a Non-Resident Indian (NRI), a foreign national, or an overseas entity in a prior round without filing Form FC-GPR with the Reserve Bank of India within 30 days of allotment, the startup is in violation of FEMA. Retrospective compounding applications can be filed with the RBI but add 4 to 12 months of resolution time.

How to Build Your Startup Due Diligence Data Room

A data room is the fastest way to demonstrate to investors that your startup is organised and diligence-ready. An investor who opens a well-structured data room and finds all documents in place moves faster through the process, asks fewer queries, and arrives at the SHA negotiation with higher confidence. A chaotic data room full of unorganised PDFs and missing documents has the opposite effect.

Data Room Folder Structure

1. Corporate Documents: Certificate of Incorporation, MoA, AoA, all board resolutions, statutory registers
2. Financials: Audited financial statements (3 years), management accounts (current year), bank statements (12 months), unit economics model
3. Intellectual Property: Trademark certificates or TM application numbers, patent filing receipts, IP assignment agreements from all founders and key employees, open-source audit report
4. Cap Table and Equity: Fully diluted cap table (as of today), Form MGT-7 for last 3 years, previous term sheets, SHA/SSA from prior rounds, ESOP scheme document
5. Tax Compliance: ITR filings (3 years), GST return summary, Form 26AS, any demand notices and responses, DPIIT recognition certificate, Rule 11UA valuation report if applicable
6. HR and Employment: Standard employment agreement template, list of employees with designation and compensation (anonymised for data room), PF registration certificate, ESOP grant letters
7. Commercial Contracts: Top 5 to 10 customer contracts, partnership agreements, SaaS agreements, supplier contracts with material terms highlighted
8. Regulatory and Licences: Sector-specific licences (FSSAI, NBFC, CDSCO, etc.), DPIIT recognition, MSME registration if applicable, any regulatory correspondence

An investor-ready pitch deck should accompany your data room but never replace it. The data room is evidence; the pitch deck is the story. Investors check the data room after the pitch, and the quality of what they find determines how quickly they move to term sheet.

Summary: Your Startup Due Diligence Checklist at a Glance

The startup due diligence checklist in India covers 8 areas: legal and corporate structure, financial health, intellectual property ownership, cap table clarity, tax compliance (including Angel Tax), HR and employment records, DPIIT recognition and regulatory status, and commercial validation. The most valuable thing a founder can do before fundraising is run a self-audit against this checklist at least 3 to 6 months before approaching investors. Address the red flags proactively, build a clean data room, and get DPIIT recognition if you qualify. Investors are not looking for perfection; they are looking for founders who understand their gaps and have a plan to fix them. Start your due diligence preparation with IncorpX to close your next funding round faster and on better terms.