What to Look for in a Startup Data Room Before You Invest as an Angel

Most angels never get a real framework for what to look for in a startup data room, and they learn the hard way, after the check clears, exactly what they skipped.

A founder sends you a Dropbox link two days before the round closes, and you have maybe an hour before the next call. That is the real test of what to look for in a startup data room, not some leisurely afternoon with a checklist and a cup of coffee. Most first-time angels never learn this under pressure. They learn it after wiring $25,000 into a company whose cap table turned out to have three undisclosed convertible notes stacked ahead of them.

A data room is not a formality the founder's lawyer insists on. It is the clearest window you will ever get into how a founder actually runs the business, before the pitch-deck gloss and the demo-day polish take over. Read it right and it tells you more than the founder will say out loud.

Start with the cap table, because everything else in the room is downstream of it. You want to see who owns what, at what price, and under what terms, going back to the first SAFE or priced round. Look specifically for the fully diluted number, not just the headline ownership split. Convertible notes and SAFEs are cheap to issue and easy to forget, and a founder who has stacked five of them at different valuation caps without telling later investors is not being deceptive so much as sloppy, but the effect on you is the same: your ownership percentage is smaller than the pitch implied. Carta, which now handles cap tables for more than 40,000 private companies according to its own published figures, has made this document far more standardized than it was a decade ago. If a founder still hands you a cap table built in a spreadsheet from 2021 with tracked-changes comments in the margins, that alone is worth asking about.

Pay attention to the option pool too, and specifically when it was last refreshed and how big it is relative to the company's stage. A pool that gets expanded right before your round, and carved out of the pre-money valuation rather than the post-money, quietly dilutes existing shareholders, including you, before the ink is dry. It's a standard mechanic, not a scandal on its own, but it should be visible in the room and explained, not something you have to reconstruct from the numbers after the fact.

Financials come next, and here the instinct to relax because it's early is the wrong one. Early-stage companies do not need audited financials, but they do need a clean, current bank statement, a burn rate you can actually calculate from real numbers, and a runway estimate that matches the math rather than the founder's optimism. Ask for the last three months of actuals, not a twelve-month projection with a hockey stick in month nine. Projections tell you how a founder wants the story to go. Bank statements tell you how the company is actually spending money.

Corporate formation documents are the boring part of an angel investor due diligence checklist, and boring is exactly why people skip them and exactly why skipping them is a mistake. Certificate of incorporation, bylaws, board consents, IP assignment agreements from every founder and early contractor. That last one matters more than it sounds. If a founder built the first version of the product while still employed somewhere else, and never signed an IP assignment transferring that work to the new company, the company may not actually own its own code. This is not a hypothetical clause lawyers invented to justify their fees. It is close to the exact issue at the center of the early Winklevoss-versus-Zuckerberg dispute over Facebook's origins, where who owned what code and when became the entire legal fight.

Customer contracts and the pipeline behind them tell you whether the traction slide is real. If a startup claims $80,000 in monthly recurring revenue, the data room should have actual signed contracts or Stripe exports that add up to something close to that number, not a screenshot of a dashboard with no way to verify what is behind it. Watch for revenue concentration too. A company with three customers, one of which accounts for 70% of revenue, is not a SaaS business yet. It is a services business with a subscription invoice template, and that changes what you are actually buying into.

Then there is the founder employment and vesting documentation, which most angels never bother reading and probably the single most underrated document in the room. Check whether the founders themselves are on a standard four-year vesting schedule with a one-year cliff, the same terms they would demand from any employee. A founder who carved themselves fully vested shares at incorporation is telling you, in writing, how they think about commitment. It's a small detail with an outsized signal.

Red Flags That Should End the Conversation

Some things in a data room are annoyances. Others are reasons to walk. Here is where most angel investing red flags actually live, and it is rarely in the financial projections, which everyone knows are aspirational. It is in the documents that are supposed to be dry and factual and turn out not to be.

A missing or incomplete cap table, where the founder cannot produce a clean current ownership breakdown on request, is the clearest signal you will get before you sign anything. If they cannot tell you precisely who owns what today, they either don't know or don't want you to know, and neither is a good sign.

Watch for prior litigation or unresolved disputes that show up in board minutes but never made it into the founder's narrative. Theranos kept investors from independently verifying its core blood-testing technology, a gap in disclosure that later reporting and the SEC's own complaint tied directly to the fraud charges against Elizabeth Holmes. You don't need a scandal that size to get burned. You just need a founder who quietly excludes the one document that would complicate the story.

Undisclosed related-party transactions are another one. If the company is paying rent to a building the founder's family owns, or contracting engineering work to a firm the co-founder also runs, that needs to be in the room and flagged, not buried in a footnote of an expense report you have to go digging for.

A data room that changes documents between two of your visits without telling you is its own answer. Version control should be traceable, and a founder who quietly swaps out a cap table or a term sheet mid-diligence is not managing your experience, they're managing your perception of it.

How to Evaluate a Startup Before Investing, in Practice

The honest answer to how to evaluate a startup before investing is that you are not grading a business plan. You are grading whether the documentation matches the pitch, line by line. If the founder said $200,000 in ARR on the call and the Stripe export shows $140,000, that gap is the entire due diligence process in miniature. Everything else is detail.

Angel investors who skip this step usually get away with it, right up until the round where they don't. The data room is slow, unglamorous, and easy to defer to the idea that the lawyers will check it. But you are the one writing the check, and a spreadsheet full of promise is not the same thing as a company you have actually looked inside of. Read the boring documents first. The exciting ones will still be there when you're done.

Also read: How to Calculate Startup Dilution Before Your Next Funding Round • How to Build a Vendor Due Diligence Checklist Before You Sign an Enterprise Contract • How to Read a Cash Flow Statement Before You Buy a Stock

Source