Due Diligence for Startups: A Founder's Guide to Passing Investor Scrutiny

I'm a Chartered Accountant and Company Secretary, and over 14+ years in practice, I've sat on both sides of a due diligence for startups process more times than I can count: helping a founder get their company ready to be reviewed, and helping an investor or acquirer do the reviewing. India had roughly 2.12 lakh DPIIT-recognised startups as of end January 2026 (PIB, retrieved 2026-09-22), and in a funding market where total capital raised is down and investors are pickier about where it goes, diligence has only gotten more thorough, not less. I've watched term sheets get pulled, not because the business was bad, but because the paperwork behind it wasn't.

This is what I actually walk founders through when a funding round, an acquisition, or even a vendor or co-founder relationship is about to be diligenced: what legal, financial, and HR reviewers look for, the mistakes that keep showing up, and the checklist I'd want ready if I were in your seat. For the incorporation basics this all sits on top of, see our guide to company incorporation in India.

🔑 Key Takeaways

• Due diligence for startups falls into three buckets: legal (incorporation, cap table, IP, contracts, litigation), financial (books, tax compliance, GST/TDS, related-party transactions), and HR/compliance (employment agreements, ESOP paperwork, PF/ESIC registration).

• A cap table that doesn't reconcile with your ROC filings and share certificates is the single most common reason a diligence process stalls, not the business fundamentals.

• Angel tax under Section 56(2)(viib) no longer applies to any class of investor from FY2024-25 onward, a change worth knowing if you're still budgeting for it or reading older guides that assume it applies.

• Missing IP assignment agreements, especially for pre-incorporation work, are one of the cheapest problems to fix early and one of the most expensive to fix once an investor's lawyer has already flagged it.

• ESOP grants need a minimum one-year gap between grant and first vesting under company law; get the paperwork wrong and the whole pool can come under question during a round.

• The single most useful thing a founder can do before diligence starts is assemble the document checklist below, organised the way reviewers will actually ask for it.

Why Due Diligence for Startups Has Gotten Tougher, Not Easier

India's startups raised about $10.5 billion in 2025, down 17% from the year before, and funding fell a further 26% in Q1 2026 compared with the same quarter a year earlier (BW Disrupt; Analytics Insight, both retrieved 2026-09-22). In my experience, that kind of market doesn't just mean fewer deals. It means the deals that do happen get picked over more carefully, and the bar for what counts as "diligence-ready" keeps rising. A seed round that might have closed on a term sheet and a data room folder three years ago now gets the same forensic cross-checking that used to be reserved for Series A.

SEBI tightened its own end of this recently too. A September 2025 circular changed how specific due diligence thresholds apply to angel funds, moving the trigger from the overall fund corpus to each individual investment (Aristo Legal, retrieved 2026-09-22). Practically, that means the fund manager on the other side of your term sheet is now under more regulatory pressure to actually do the diligence properly, deal by deal, rather than once at the fund level. That pressure flows straight through to how many documents your company gets asked for.

None of this is a reason to panic. It's a reason to get organised before the process starts rather than during it, which is really the whole point of this guide.

Who Actually Diligences a Startup, and When

Founders sometimes think of "due diligence" as something that only happens once, right before a big funding round. In practice I see it come up in several different situations, and the underlying documents are largely the same each time:

• A funding round, where the lead investor's lawyers and accountants review the company before wiring money.

• An acquisition, where the buyer diligences the target far more deeply, since they're taking on the whole entity, not just a minority stake.

• The startup itself acting as the diligencer, reviewing a vendor before a material contract, a target company before an acquisition, or, less formally but just as importantly, a prospective co-founder before splitting equity with them.

Timelines vary with deal size. In my experience seed and angel rounds typically run 2 to 4 weeks of diligence, Series A rounds run 4 to 6 weeks, and Series B and beyond can run 6 to 8 weeks or longer (Vakilsearch, retrieved 2026-09-22). A messy data room doesn't just risk the deal falling through. It stretches the timeline, and a stretched timeline is its own risk when a term sheet has a closing-date clause attached to it.

Legal Due Diligence: What Gets Checked

Legal diligence is usually where a deal either moves smoothly or grinds to a halt, because it's where ownership questions live. I usually break it into five areas.

Incorporation Documents and Corporate Existence

Reviewers start with the basics: Certificate of Incorporation, the Memorandum and Articles of Association, and the SPICe+ filing history from when the company was first registered. They'll check that the company actually exists in good standing with the ROC, that there's no pending strike-off notice, and that every subsequent amendment to the MOA/AOA was properly filed. If you've changed your registered office, altered your authorized capital, or amended your object clause since incorporation, each of those needs a corresponding ROC filing on record. Our company incorporation in India guide covers what the initial paperwork should look like if you're setting this up for the first time.

Cap Table Cleanliness

This is, in my experience, where deals get delayed more than anywhere else. Investors now cross-check your cap table against your ROC registry filings, your share certificates, and your statutory share transfer register, and if those don't reconcile, the assumption isn't "clerical error." It's "undisclosed obligation" or "ownership dispute," and that assumption is hard to talk your way out of once it's formed.

The underlying legal issue is usually Section 42 of the Companies Act, 2013, which governs private placement of shares. Every round of shares you've allotted needs a board resolution, a private placement offer letter (Form PAS-4), and a return of allotment (Form PAS-3) filed with the ROC within 15 days of allotment. Get this wrong and the consequences aren't hypothetical: non-compliant private placement is deemed a public offer, which drags in the Securities Contracts (Regulation) Act and SEBI Act provisions that were never meant to apply to you, and the penalty for the company can run up to the amount raised or ₹2 crore, whichever is lower, with promoters and directors separately liable for up to ₹25 lakh each (TaxGuru, retrieved 2026-09-22). I've seen founders discover, during diligence for their next round, that an earlier friends-and-family raise was never properly filed. It's fixable, but it's not fixable overnight, and it's the kind of thing that makes an investor's lawyer nervous about what else might be missing.

IP Ownership and Assignment

Here's a fact that surprises a lot of first-time founders: writing code, designing a logo, or building a product for your own company doesn't automatically make the company the legal owner of that work. Indian IP law, across the Copyright Act, Patents Act, and Trade Marks Act, defaults to the individual creator owning what they create, unless there's a written assignment transferring it to the company (Bhavya Sharma & Associates, retrieved 2026-09-22). This bites hardest with pre-incorporation work, which is extremely common: most startups build a first version of the product before the company legally exists, and if there's no assignment agreement signed once it does, that IP can technically still sit with the individual founders or an early contractor, not the entity an investor is about to put money into.

Getting this fixed before diligence starts is cheap: a properly drafted assignment agreement covering all founders, employees, and contractors who've touched the codebase, brand, or any patentable process. Getting it fixed after an investor's counsel has flagged it is a different exercise entirely, often involving tracking down people who've since left the company and asking them to sign something retroactively, from a position of much weaker leverage. We handle trademark filing and IP protection work through our Trademark services if this is something you haven't formalised yet.

Material Contracts

Reviewers want to see every contract that materially affects the business: customer agreements above a certain size, vendor and supplier contracts, lease agreements, loan or debt instruments, and anything with a change-of-control clause that could be triggered by the deal itself. A change-of-control clause matters more than founders usually expect. If a major customer contract lets the counterparty terminate on a change of control, and that clause gets missed until late in diligence, it can materially affect how the investor prices the deal, or whether they proceed at all.

Litigation History

Any pending, threatened, or resolved litigation involving the company, its directors, or its founders gets disclosed and reviewed, including labour disputes, IP disputes, consumer complaints, and contractual disputes. Non-disclosure here is worse than the underlying litigation itself in most cases I've seen; investors generally understand that businesses get sued, but discovering an undisclosed lawsuit during diligence reads as a trust problem, not a legal one.

Financial Due Diligence: What Gets Checked

Financial diligence confirms that the numbers behind your pitch deck are real and that your tax position doesn't have a landmine in it.

Books and Financial Statements

Reviewers want audited (or at minimum, professionally reviewed) financial statements, management accounts if the audited ones lag behind the business's current state, and a clear reconciliation between your bank statements, your accounting records, and whatever revenue numbers appear in your pitch deck. If your bookkeeping has been inconsistent, project this out: a diligence team doing forensic-level cross-checking will find the gaps faster than you'd like. Our Business Accounting team handles exactly this kind of ongoing bookkeeping cleanup, and our Audit Services team can get your financials into a state that reads clean to an outside reviewer before you're in the room with one.

Tax Compliance History

This is where I still see genuinely outdated information circulating. If you're preparing a data room based on an older guide that talks about VAT registration or service tax filings, that guide is describing India's pre-2017 indirect tax system. VAT and service tax were both replaced by GST on 1 July 2017. Today, GST registration is mandatory once your turnover crosses ₹40 lakh for goods or ₹20 lakh for services in most states, with a lower ₹10 lakh threshold in special category states like Manipur, Mizoram, Nagaland, and Tripura (Razorpay, retrieved 2026-09-22). Diligence teams will pull your GST returns and reconcile them against your books directly, so this isn't a section to get wrong or leave stale.

Alongside GST, expect a full review of your TDS (tax deducted at source) compliance history: whether TDS was deducted correctly on payments to employees, vendors, and professionals, deposited on time, and reported through the correct quarterly returns. Advance tax payment history and income tax return filing history round out this section.

Related-Party Transactions

Any transaction between the company and its directors, founders, or their other entities (a related company invoicing yours, a founder's personal loan to the business, office space rented from a director's family) needs to be disclosed and, under Section 188 of the Companies Act, 2013, properly approved through board and sometimes shareholder resolutions depending on the transaction's size. Investors read undisclosed related-party dealings as a governance red flag even when the underlying transaction was perfectly reasonable; the problem is almost always the lack of disclosure and approval paperwork, not the transaction itself.

HR and Compliance Due Diligence: What Gets Checked

This is the section founders most often underestimate, partly because it doesn't show up in a pitch deck the way revenue or product metrics do.

Employment Agreements

Every key employee, not just founders, should have a signed employment agreement covering compensation, confidentiality, IP assignment, and ideally a reasonable non-compete or non-solicit clause. Reviewers check whether contractor relationships have been correctly classified, since a "contractor" who's functionally a full-time employee is a compliance and tax exposure issue, not just an HR one.

ESOP Documentation

If you've issued or promised employee stock options, expect close scrutiny of the paperwork. Under Rule 12 of the Companies (Share Capital and Debentures) Rules, 2014, there has to be a minimum one-year gap between the grant date and the first vesting date; grants that don't respect this aren't valid as structured (EquityList, retrieved 2026-09-22). Private companies can approve an ESOP scheme by ordinary resolution rather than the special resolution public companies need, but the resolution still has to exist and be properly filed. I've seen ESOP pools get held up during diligence simply because the underlying scheme was never formally board-approved, even though individual offer letters had gone out to employees.

Statutory Registrations: PF, ESI, and Related Filings

Here's another place the original threshold gets misquoted often enough that it's worth stating plainly. Provident Fund (EPF) registration becomes mandatory once an establishment employs 20 or more people, and that obligation doesn't reverse if headcount later drops below 20 (EPFO/PIB, retrieved 2026-09-22). ESI (Employees' State Insurance), though, kicks in at a different and lower threshold: 10 or more employees, with coverage applying to employees earning up to ₹21,000 a month (Harun Raaj & Associates, retrieved 2026-09-22). These aren't the same number, and I still see startups treat them as one combined 20-employee trigger, which means some companies register for PF on time but miss ESI registration by several employees and several months. Diligence teams check both separately.

The Founder's Pre-Diligence Document Checklist

This is the single most useful thing I can hand a founder before a diligence process starts: a checklist organised the way reviewers will actually ask for it, not the order you happened to create the documents in.

Sources: Section 42 filing requirements, TaxGuru; ESOP vesting rule, EquityList; PF/ESI thresholds, EPFO/PIB and Harun Raaj & Associates; GST thresholds, Razorpay. All retrieved 2026-09-22.

I'd rather a founder spend a weekend building this folder before a term sheet is even on the table than scramble to assemble it in week two of a six-week diligence window.

Common Mistakes I See Founders Make

Treating the cap table as a spreadsheet, not a legal record. The spreadsheet needs to match the ROC filings and share certificates exactly, not just look internally consistent.

Skipping IP assignment because "we're all founders anyway." Founders leave, co-founder relationships sour, and without a signed assignment, a departed founder can technically still hold rights to IP the company thinks it owns outright.

Assuming ESOP offer letters are enough without the underlying board-approved scheme. Individual grants sitting on top of an informally-approved pool is one of the more common ESOP problems I see surface during diligence.

Still budgeting around angel tax. Section 56(2)(viib), the provision behind angel tax, no longer applies to any class of investor for shares issued from FY2024-25 onward (Business Standard; India Briefing, both retrieved 2026-09-22). I still meet founders structuring rounds around a tax exposure that was removed by the Finance Act, 2024.

Not distinguishing the PF and ESI thresholds. As covered above, they're 20 and 10 employees respectively, not one combined number.

Trade-offs Worth Knowing

Getting diligence-ready isn't free, and it's worth being honest about what it costs before you commit resources to it.

• Cleaning up historical paperwork takes real time and, often, real legal fees. Retroactive IP assignments and corrected PAS-3 filings aren't instant, and starting this the week before a term sheet arrives is late.

• A too-thin data room slows the deal down, but an over-engineered one can too. I've seen founders over-prepare documents no reviewer actually asked for, at the cost of time that could have gone into the items that actually matter, like the cap table reconciliation.

• Disclosure sometimes surfaces problems you'd rather not surface. An undisclosed related-party loan or a missing ESOP resolution feels worse to reveal than to hide, but the alternative, an investor finding it independently, is worse still. Fix what you can before diligence starts; disclose what you can't.

Getting Started

Due diligence isn't a hurdle designed to trip founders up. It's what lets an investor or acquirer trust that the company they're about to fund or buy is actually what it appears to be, and the founders who treat their document hygiene as an ongoing habit rather than a pre-round scramble consistently have smoother, faster rounds. Start with the cap table and IP assignments; they're the two items most likely to slow you down, and the two easiest to get right well before you need to.

If you'd like help getting your legal, financial, and compliance paperwork diligence-ready before your next round, my team at VenturEasy works with founders on exactly this, from company incorporation in India through ongoing Business Accounting, Audit Services, and Trademark protection. Get in touch with where you are in the process.

This guide is educational and doesn't replace deal-specific legal or tax advice; have counsel review your actual data room and transaction documents before a funding round or acquisition closes.

- Nikita Bhatia, FCA, Company Secretary, Co-founder of VenturEasy