Get your data room ready for due diligence.

• Certificate of Incorporation KeyAnd name-change certificates, if any.N/A
• Memorandum and Articles of Association (current, with all amendments) KeyN/A
• Company PAN and TAN N/A
• DPIIT Startup India recognition certificate And Section 80-IAC approval, if obtained.N/A
• Udyam (MSME) registration certificate, if registered N/A
• Registered office proof (rent agreement or NOC, utility bill) N/A
• Shops and Establishment registration for each office N/A

Download the master data and filed forms from the MCA portal; investors check for late fees and gaps.

• MCA company master data printout KeyN/A
• Annual returns: AOC-4 and MGT-7/7A for every year since incorporation KeyN/A
• INC-20A commencement of business declaration N/A
• ADT-1 auditor appointment N/A
• DIR-3 KYC for every director, DIN details and DIR-12 for changes N/A
• PAS-3 return of allotment for every share issue KeyN/A
• SH-7 (capital increase) and MGT-14 (special resolutions) where applicable N/A
• BEN-2 significant beneficial owner filings N/A
• CHG-1 charge filings for any loans and satisfaction of charges N/A

• Fully diluted cap table (shares, CCPS, options, convertibles) KeyN/A
• Register of members (MGT-1) and share certificates or demat records N/A
• ISIN and demat status of shares Private companies other than small companies must hold securities in demat form.N/A
• Valuation reports for every past issue (registered valuer / merchant banker) KeyN/A
• FEMA filings for foreign investment: FC-GPR, FC-TRS, and the annual FLA return Only if you have foreign shareholders.N/A
• Convertible notes, iSAFE notes and warrant agreements N/A
• Board and shareholder meeting minutes and resolutions KeyN/A

• Shareholders’ Agreement (SHA) with all amendments KeyN/A
• Share Subscription Agreements (SSA) for every round KeyN/A
• Founders’ agreement, vesting and lock-in terms N/A
• Waivers and consents from existing investors for this round N/A
• Side letters and any investor information rights N/A

• ESOP plan document and shareholder approval (special resolution) KeyN/A
• Grant letters, vesting schedules and ESOP register N/A
• Appointment/offer letters for all employees and key consultants N/A
• PF and ESI registrations and challans (if thresholds are met) N/A
• Professional Tax registration and returns (state-wise) N/A
• POSH policy and Internal Committee constitution (10+ employees) N/A
• HR policies: leave, code of conduct, notice period N/A

• Income-tax returns and computations for every year KeyN/A
• Tax audit reports (if applicable) N/A
• GST registration certificates for each state N/A
• GST returns (GSTR-1, GSTR-3B, GSTR-9) with reconciliation KeyN/A
• TDS returns (24Q, 26Q) and Form 16/16A issued N/A
• Tax notices, demands and responses (income tax and GST) N/A
• Records of share premium and any angel tax (Section 56(2)(viib)) exemption for older rounds N/A

• Audited financial statements for all completed years KeyN/A
• Monthly MIS for the last 12–24 months (P&L, cash flow, burn) KeyN/A
• Bank statements for all accounts (last 12 months) N/A
• Loan agreements, sanction letters and venture debt documents N/A
• Financial model and budget for the next 18–24 months N/A
• Ageing of receivables and payables N/A

• Top customer contracts, MSAs and order forms KeyN/A
• Key vendor, supplier and outsourcing agreements N/A
• Partnership, distribution and reseller agreements N/A
• Office lease and leave-and-licence agreements (stamped and registered where needed) N/A
• Sector licences and approvals (FSSAI, drug, RBI, IRDAI, etc.) N/A

• IP assignment agreements from every founder, employee and contractor who wrote code or content KeyN/A
• Trademark applications and registrations (with class) N/A
• Patent and design filings, if any N/A
• Domain names and app-store accounts held in the company’s name N/A
• Open-source licence inventory for your code N/A

The Digital Personal Data Protection Act, 2023 and its Rules apply to personal data of people in India.

• Privacy policy and terms of use (current and past versions) KeyN/A
• Consent notices and records of how consent is collected and withdrawn N/A
• Data inventory: what personal data you hold, where, and why N/A
• Data processing agreements with vendors (cloud, analytics, SMS, payments) N/A
• Security policies and breach-response plan; CERT-In incident reporting contact N/A
• Grievance officer details and complaint handling process N/A

• Pending or threatened litigation, legal notices and consumer complaints KeyN/A
• Compliance certificate or checklist signed by a CS or CA N/A
• Insurance policies (D&O, cyber, group health, property) N/A