AS | Ankit Sarawagi|Founder, CFOmatrix·June 2026·13 min read | Updated Jun 2026 |
- Pre-DD is preparation, not paperwork. It is everything you do before formal due diligence so the process is fast and finds no surprises.
- The cap table is the first thing investors check: it must reconcile exactly to share certificates, resolutions and ROC filings.
- Compliance gaps differ by country. India: ROC, GST, TDS, FLA, STPI. US: Reg D, PIIAs, SALT nexus. UAE: trade licence, ESR, Corporate Tax.
- A well-indexed virtual data room (VDR) is the single biggest lever on how smoothly DD runs.
- Run vendor due diligence on yourself first. Find and fix or disclose red flags before the investor’s team does it for you.
| 2-12 wks Typical pre-DD prep time, depending on how clean your records are | 8 steps From cap table to management prep, the full pre-DD checklist | 3 areas Finance, Tax and Legal, the three diligence streams you must cover |
To keep this concrete we will follow one company: Brewly, a D2C coffee brand raising a ₹40 crore Series A. Brewly runs its main entity in India, a small US sales subsidiary (Delaware) and a UAE trading entity in a free zone. We will use Brewly to show what pre-DD looks like across all three jurisdictions.
01What Pre-Due-Diligence Is (and Why It Decides the Round)
Pre-due-diligence (pre-DD) is the preparation a company does before an investor or acquirer starts formal due diligence. It means getting your cap table, financials, contracts, intellectual property and compliance into a state where an outsider can verify them quickly, then running your own review to catch problems first. The formal DD that follows should mostly confirm what you have already organised.
Due diligence (DD) is the structured investigation an investor or buyer runs to verify your business before wiring money. It usually splits into three streams: Finance, Tax and Legal (with commercial and tech reviews on top for larger deals). Pre-DD is simply doing each of those streams to yourself, in advance.
Why does it decide the round? Because diligence is where trust is won or lost. A founder who hands over a clean, indexed data room and answers questions in hours signals a company that is well run. A founder who scrambles for documents and discovers problems live signals risk, and risk gets priced in: a lower valuation, tighter reps and warranties in the SSA, a bigger indemnity, or a deal that quietly dies.
Pre-DD is the partner to the master diligence checklist. The eight steps below map to the downloadable Finance, Tax and Legal checklists for India, the US and the UAE in our due diligence checklist post. Use that as your working tool while you read this.
02Step 1: Clean Up the Cap Table
Clean up the cap table means making your ownership record reconcile exactly to the signed documents behind it. The cap table is almost always the first thing an investor checks, and any gap between what your spreadsheet says and what your filings say is an instant credibility hit.
In India, your cap table must tie out to: share certificates, the register of members, every board and shareholder resolution, the SH-7 (alteration of share capital) and PAS-3 (return of allotment) filings with the Registrar of Companies (ROC), and your ESOP grant letters and exercise records. If you have issued Compulsorily Convertible Preference Shares (CCPS), confirm the conversion ratio and that any FEMA pricing and reporting was done.
What to reconcile
- Equity Shares by holder, matched to share certificates and the register of members.
- Preference shares (CCPS): terms, conversion ratio, and FC-GPR filing where a foreign investor subscribed.
- ESOP pool: board-approved size, grants issued, vested vs unvested, and what is still unallocated.
- Convertibles: SAFEs, CCDs or notes, and exactly how they convert in this round.
- For US/UAE entities: the cap table of each subsidiary and how it rolls up to the parent.
The classic founder trap: an ESOP grant promised verbally, a SAFE that was never recorded, or shares allotted but never filed in PAS-3. When Brewly first built its data room, the ESOP spreadsheet showed 9 percent allocated but the board had only approved 7 percent. Two percent of the company was a phantom. Fix every mismatch before an investor finds it, because the cap table feeds straight into the valuation and the new SSA.
03Step 2: Get Financials and MIS in Order
Getting financials in order means assembling numbers that reconcile across every source an investor can check. The fastest way to lose a diligence team’s confidence is for your revenue in the model to not match your GST returns, your bank statements or your audited accounts.
Pull together a clean pack: audited financial statements (typically the last three years where available), a monthly management information system (MIS), management accounts, and a financial model that an investor can trace back to source. Then reconcile across systems before anyone else does.
The reconciliations diligence teams always run
- Revenue: billing or CRM data vs accounting vs GST/VAT returns vs bank receipts. They must agree, or you must be able to explain the difference.
- Cash: book balances vs bank statements vs the runway number you quote to investors.
- Payroll: headcount vs payroll cost vs TDS (India) or withholding (US) deposits.
- Related-party transactions: any payments to founders, directors or their entities, fully listed and explained.
For Brewly, the India entity has audited accounts, the US subsidiary files on a calendar year and the UAE entity prepares IFRS accounts for Corporate Tax. The pre-DD job is to consolidate these into one view and reconcile inter-company billing, the area most cross-border startups get wrong.
Build a one-page reconciliation bridge for revenue: top line in the model, adjustments, and the GST/audited figure at the bottom. Hand it over before they ask. Doing the investor’s work for them is the strongest possible signal that your numbers are real, and it removes the single most common DD back-and-forth.
04Step 3: Organise Contracts and Complete IP Assignments
Organising contracts means collecting every signed agreement and flagging the clauses an investor will care about; completing IP assignments means making sure the company, not a person, owns its intellectual property. These two together are where legal diligence lives.
Contracts to gather
- Customer contracts, especially your largest accounts, with attention to term, exclusivity and termination.
- Vendor and supplier agreements that are material to operations.
- Employment and consultant agreements, plus the offer letters and ESOP grant letters.
- Leases, loans and any financing or guarantee documents.
- Change-of-control clauses: flag every contract that an investor can terminate or renegotiate when ownership changes. This is a top diligence question.
IP assignments: the silent deal-killer
Investors need to see that the company owns its core asset. That means every founder, employee and contractor has assigned their work to the company in writing. In India, use a clear assignment clause in employment and consultant contracts. In the US, this is the PIIA (Proprietary Information and Inventions Assignment agreement), and a missing PIIA from an early engineer is a genuine red flag. Confirm trademarks, domains and code repositories sit in the company name, not a founder’s personal account.
The freelancer who built your first app and was never asked to assign the IP. The domain registered on a co-founder’s personal email. The GitHub organisation owned by an ex-employee. Each of these means the company may not legally own what investors think they are buying. Track them down in pre-DD and get clean assignments signed, because retro-fixing this during a live round is slow and gives the investor leverage.
05Step 4: Fix Compliance Gaps in India, the US and the UAE
Fixing compliance gaps means closing every statutory filing and registration that is overdue or missing, before diligence exposes it. Compliance is the most jurisdiction-specific part of pre-DD, and for cross-border startups it is where most time goes. Here is what to check in each country.
| Jurisdiction | What diligence checks | Common gap |
|---|---|---|
| India | ROC annual filings (AOC-4, MGT-7), GST, TDS, FLA return to RBI, STPI returns (if registered) | Missed FLA return on foreign investment; lapsed ROC filings; ESOP perquisite TDS |
| United States | Reg D filing (Form D) for the prior raise, signed PIIAs, federal and state tax, SALT nexus | No Form D filed; state sales-tax (SALT) nexus triggered but not registered |
| UAE | Valid trade licence, Economic Substance Regulations (ESR) filings, Corporate Tax registration and returns, VAT | Corporate Tax not registered; ESR notification missed for a free-zone entity |
India: ROC, GST, FLA and STPI
Check that all Registrar of Companies (ROC) annual filings are up to date, GST and TDS returns are filed and paid, and the FLA (Foreign Liabilities and Assets) return has been filed with the Reserve Bank of India for any year you received foreign investment. If you are a software exporter registered with the Software Technology Parks of India (STPI), confirm your STPI and SOFTEX filings are current.
US: Reg D, PIIAs and SALT nexus
Confirm a Form D was filed with the SEC under Regulation D (Reg D) for any prior US fundraising, that every employee and contractor signed a PIIA, and check your SALT (state and local tax) position. Remote employees or significant sales in a state can create a tax nexus (a taxable presence) that you must register for, a very common gap for India-headquartered startups selling into the US.
UAE: trade licence, ESR and Corporate Tax
Verify the trade licence is valid and covers your actual activity, that ESR (Economic Substance Regulations) notifications and reports have been filed where required, and that the entity is registered for UAE Corporate Tax (now 9 percent on profits above the threshold) and VAT where applicable. Free-zone entities have their own substance and qualifying-income rules that diligence teams now check carefully.
India = filings, US = forms, UAE = licence + substance. India diligence is about whether you filed (ROC, GST, FLA). US diligence is about the right forms and tax footprint (Form D, PIIA, SALT). UAE diligence is about a valid licence plus real economic substance (ESR, Corporate Tax).
06Step 5: Build the Data Room
A data room, today almost always a virtual data room (VDR), is a secure online repository holding every document an investor needs, organised so they can find anything in seconds. A clean, well-indexed data room is the single biggest lever on how fast and smoothly due diligence runs.
Use a folder structure that mirrors the diligence streams, with an index at the top of each. A standard structure looks like this:
| Folder | What goes inside |
|---|---|
| 01 Corporate | Incorporation docs, MOA/AOA, cap table, resolutions, prior SHA/SSA |
| 02 Financials | Audited accounts, MIS, model, bank statements, reconciliations |
| 03 Tax | GST/VAT, TDS, income tax, FLA, Corporate Tax, SALT positions |
| 04 Legal | ROC filings, licences, litigation summary, regulatory approvals |
| 05 Commercial | Customer and vendor contracts, key partnerships |
| 06 HR | Employment agreements, ESOP plan and grants, org chart |
| 07 IP and Tech | IP assignments, PIIAs, trademarks, domains, key tech docs |
Control access and keep a log. A good VDR lets you see who viewed what, set permissions, and watermark sensitive files. Do not email confidential documents around in pre-DD; use the data room from day one so disclosure is deliberate and traceable.
07Step 6: Run a Vendor-Led Pre-DD to Find Red Flags Early
Vendor due diligence (VDD) is when the company being invested in or sold runs due diligence on itself, before the investor does. You can do this internally with a disciplined review, or hire an adviser to produce a formal vendor due diligence report. Either way, the goal is the same: find the red flags first, on your own terms.
Run through the same checklist an investor would, and grade yourself honestly. The point is not to look perfect; it is to know exactly what they will find so nothing surprises you in the room.
The red flags pre-DD almost always surfaces
- A cap table that does not match ROC filings or share certificates.
- Missing IP assignments from founders, early employees or contractors.
- Unfiled or unpaid statutory dues: GST, TDS or ROC in India, Corporate Tax in the UAE.
- Revenue that does not reconcile across accounting, GST and bank.
- Customer contracts with change-of-control or unusual termination clauses.
- Related-party transactions that were never formally disclosed.
For each red flag you find, decide on one of two paths: fix it (file the overdue return, sign the missing assignment, correct the cap table) or disclose it with a clear explanation and, where possible, a plan. The downloadable due diligence checklists for India, the US and the UAE are built to be run exactly this way.
When Brewly ran its own pre-DD, it found a missed FLA return and an unregistered UAE Corporate Tax position. Neither was fatal. Brewly filed both and added a one-line disclosure note. Because the founders raised the issues themselves, the investor treated them as housekeeping, not as risk. The same two issues found by the investor’s team would have triggered a deeper, slower review.
08Step 7 and 8: Prepare Management and Disclose Well
Preparing management means briefing the founders and key people so the team answers diligence questions consistently, owns its sections of the data room, and discloses known issues clearly. Diligence is not only about documents; investors read how the team handles pressure and questions.
| Assign an owner to each data room section |
Finance owns financials and tax, legal or your company secretary owns corporate and legal, the founder owns commercial and strategy. One person should coordinate all responses so the investor gets a single, consistent voice.
| Rehearse the hard questions |
List the ten questions you least want to be asked (churn, a lost customer, the related-party loan, the missed filing) and agree the honest answer in advance. A confident, prepared answer to a hard question builds more trust than a perfect business with evasive founders.
| Disclose, do not hide |
Investors expect imperfections. A known issue, disclosed early with a fix or a plan, is a negotiation. The same issue hidden and then discovered is a credibility problem that can cut your valuation, tighten the reps and warranties and indemnity in the SSA, or kill the round. When in doubt, disclose.
“The best due diligence is the one you ran on yourself first. By the time the investor’s team arrives, there should be nothing in your company you have not already found, fixed or disclosed.”
Ankit Sarawagi, CFOmatrix
|
09Frequently Asked Questions
What is pre-due-diligence?
Pre-due-diligence (pre-DD) is the preparation a company does before an investor or acquirer begins formal due diligence. It means cleaning the cap table, getting financials and MIS in order, organising contracts, completing IP assignments, fixing compliance gaps and building a data room, often after running your own internal or vendor-led review to find red flags first. Good pre-DD makes the formal process faster and surfaces fewer surprises.
How long does pre-due-diligence preparation take?
For an early-stage startup with clean records, pre-DD prep can take two to four weeks. For a growth-stage company with multiple entities, cross-border operations or messy history, it can take six to twelve weeks. The biggest variable is compliance clean-up, such as missing ROC filings in India or unregistered Corporate Tax in the UAE, which can take time to remediate.
What is a data room in due diligence?
A data room, today almost always a virtual data room (VDR), is a secure online repository where you organise every document an investor needs to review: corporate records, financials, tax filings, contracts, IP, HR and compliance. A well-indexed data room is the single biggest lever on how fast and smoothly due diligence runs.
What is vendor due diligence?
Vendor due diligence (VDD) is when the company being invested in or sold runs due diligence on itself, usually through an independent adviser, before the investor or buyer does. The output is a report that surfaces issues early so the founders can fix or disclose them on their own terms, rather than having the buyer find them and reprice or renegotiate the deal.
What are the most common red flags found in startup due diligence?
The most common red flags are a cap table that does not match filings, missing IP assignments from founders or contractors, unpaid or unfiled statutory dues (GST, TDS, ROC in India), revenue that does not reconcile across systems, contracts with change-of-control clauses, and related-party transactions that are not disclosed. Most of these are fixable in pre-DD if you find them first.
Should I disclose problems before due diligence or hope they are not found?
Disclose. Investors expect imperfections; what destroys trust and deals is a problem the founder hid that the diligence team then discovers. A known issue, disclosed early with a plan to fix it, is a negotiation; a hidden issue found in diligence is a credibility problem that can collapse the round or trigger a price cut and tighter indemnities in the SSA.
Do I need a clean cap table before raising?
Yes. The cap table is the first thing most investors check, and it must reconcile to your signed share certificates, board and shareholder resolutions, ROC filings (in India, SH-7 and PAS-3) and ESOP grants. A cap table that does not tie out to documents is one of the fastest ways to lose investor confidence early in due diligence.
Compliance and tax requirements referenced here are general guidance for India, the US and the UAE as of 2026 and change often. This is general information, not financial, tax or legal advice. Indian deals involve CCPS, FEMA and pricing rules; cross-border structures add further complexity. Have your specific situation reviewed by a qualified adviser.
- Due Diligence Explained: The Complete Guide for Indian FoundersDue Diligence · CFOmatrix Series
- The Due Diligence Checklist: Free Finance, Tax & Legal Templates (India, US, UAE)Due Diligence · CFOmatrix Series
- SHA & SSA Explained: Reps, Warranties, Indemnity and DisclosureDue Diligence · CFOmatrix Series
AS | Founder, CFOmatrix | Finance Strategy & Equity Compliance CFOmatrix is a knowledge platform focused on how finance actually works inside growing companies. Every insight is shaped by real operating experience across startups and growth-stage companies, including cross-border setups. |