A CFO-level walkthrough of the four rooms investors check in due diligence — financial, legal, commercial, people & tech. With a 12-week timeline

The shorthand version: investors have less money to deploy and more time to deploy it. With longer fundraising cycles and tighter mandates, sophisticated funds in 2026 will diligence three companies for every one they fund. The bar for "we've reviewed everything" has gone up. AI-assisted diligence platforms now flag inconsistencies — cap table vs deck, model vs books, and GSTR-2B vs ITC claimed — in the time it takes you to read this paragraph.
A clean diligence pack used to be a competitive edge. It's now a baseline. Founders who can't produce one in five working days get politely pushed to the back of the queue, while founders who can move forward into negotiation.
So, it pays to walk the four rooms yourself.
This is where most diligence starts and where most rounds quietly stall. Investors aren't looking for perfect numbers — they're looking for a story that holds up across the books, the model, the deck, and the data room. The moment one of them disagrees with another, trust starts leaking.
What investors actually open in this room:
The financial room takes the longest to prepare and to walk through. If you only have time to clean one room before diligence opens, clean this one.
The room that quietly kills more rounds than founders realise. Investors aren't looking for litigation as much as they're looking for governance maturity. The two questions are essentially, hashas this company been run like a company? And can the next investor inherit it cleanly?
The list:
What founders consistently underestimate: the time it takes to assemble all of this. Even for a clean five-year-old startup, gathering and indexing the legal room takes 3–4 weeks. The fix is not to do it in a rush — it's to maintain it continuously and produce the index in 48 hours.
This is where investors decide whether the numbers in your deck are actually true. They're not just checking ARR – they're checking quality of ARR. Customer concentration. Contract terms. Churn cohorts. Pricing power. Pipeline conversion. Whether the top 10 customers are renewing or just paused.
The artefacts they'll want:
Where founders trip in this room: aggregating numbers in ways that hide structural problems. "75% gross margin" is meaningless if 40% of your revenue is from one customer who's about to churn. Always cut by cohort, segment, and channel. Investors will, and the questions surface in week three of diligence either way.
The newest of the four rooms, and increasingly the most weighted. Investors in 2026 don't just want to know if your tech works. They want to know:
For deeptech, SaaS, or AI-first startups, expect a technical diligence layer on top — code review, architecture interviews, and security questionnaires. Be ready for it: the most painful weeks of an otherwise clean diligence are usually the ones where engineering wasn't briefed on it.
You don't prepare for diligence the week the term sheet arrives. You prepare 12 weeks earlier—or, more accurately, you maintain a state of readiness that lets you produce the data room in five working days. Here's a realistic timeline:
The four-weeks-out mock diligence is the highest-leverage exercise on this list. It surfaces gaps when there's still time to fix them, instead of when there isn't.
Most data rooms are bad. They're either four files in a folder named "DD" or 800 files with no index. Neither helps an investor work fast — and a slow investor is one whose conviction quietly drops with every passing week.
A clean data room has six top-level folders:
Inside each, use a numbered index file (a one-page document listing what's where) so an investor's analyst can find anything in under 30 seconds.
Five recurring failure modes from the last 24 months of deals we've seen close — or not close:
The first is the unconverted instrument. A SAFE, a convertible note, and an angel cheque that was "papered later" but never actually papered. It shows up in the cap table reconciliation and produces a 3-week negotiation about ownership math.
The second is transfer pricing without contemporaneous documentation. Inter-company agreements written 18 months after the transactions they govern don't survive. Form 3CEB scrutiny. Investors notice.
The third is founder vesting on paper but not in the SHA. Investors expect 4-year vesting with a 1-year cliff in writing. If it's not, they'll ask for it as a condition — and the conversation gets awkward when one founder has been there 6 years and one has been there 6 months.
The fourth is customer concentration disguised as growth. A 100% revenue growth quarter where 90% came from a single anchor customer who's about to renegotiate. Investors will cohort the revenue. Always do it first.
The fifth is a GST notice nobody mentioned. Open GST scrutiny, even if administratively minor, is a flag. Disclose it, explain it, and propose the remediation. Hiding it doesn't work — investors find it through the GSTN portal in 20 minutes.
For founders raising their earliest rounds where many of these systems aren't yet built, our guide on raising funds from friends and family explains how to keep the paperwork simple but clean from Day 1.
If you don't already have a senior CFO running the function, the answer in 2026 is almost always yes. The pattern that works: a fractional or outsourced CFO like Jordensky joins six to eight weeks before the planned fundraise, runs the mock diligence, fixes the gaps, builds the data room, and stays on through investor negotiation.
Our 9-step checklist for raising funds for startups in India walks through the broader fundraise prep alongside diligence specifically.
A founder running diligence alone, while still running the company, is the single most preventable cause of dropped rounds.
Before you tell the lead investor you're ready for diligence, answer these three honestly – out loud, with your CFO:
1. Can I produce, in 24 hours, a cap table that reconciles to ROC filings and FC-GPR submissions? If no, you have 2–4 weeks of work before the term sheet should be signed.
2. Can I explain the gap between my book gross margin and the gross margin in my pitch deck — in two sentences? If not, your model needs reconciling to your books before diligence opens.
3. Can I name the top three risks an investor will find in week three of diligence? If not, you haven't done your mock diligence yet. Do it before the data room is shared.
Three yeses, and you're ready. Anything else, and you're underwriting the dropped-round risk yourself.
If you're 6–12 weeks from a fundraise and the cap table reconciliation question above made you pause, that's the signal to bring in a CFO partner. Jordensky's Virtual CFO team runs mock diligence, builds the data room, and supports founders through investor negotiation. Talk to a Virtual CFO →. 30 minutes, no commitment.
1. How long does due diligence take for an Indian startup fundraise?
For Series A, typically 6–12 weeks pass from the term sheet to closing. For Series B+, 8–16 weeks. Diligence that drags past 16 weeks is usually a signal that conviction is cooling—and the lead is looking for a graceful exit more than a closing path.
2. What's the difference between financial, legal, and commercial diligence?
Financial diligence verifies your numbers (books, model, and tax). Legal diligence verifies your governance (entity, contracts, IP). Commercial diligence verifies your business (customers, contracts, pipeline, churn). All three run in parallel; each is run by different team members from the investor's side.
3. Do early-stage startups need to prepare for due diligence?
Yes. Seed and pre-seed rounds still involve a compressed diligence — 1–3 weeks usually — but the standards are similar. A clean cap table, a defensible model, and a basic governance trail make a real difference even at Seed.
4. What's a virtual data room, and do I need one?
A virtual data room is a secure, indexed online folder where investors review your documents. Tools like Drooms, iDeals, DocSend, or even a well-structured Google Drive work fine. The discipline is the structure (the six-folder model above), not the tool.
5. How do I handle a GST notice during diligence?
Disclose it upfront, in the first call. Explain the issue, the response filed, and the expected resolution. Investors penalise hidden issues much more harshly than disclosed ones. A senior CFO partner should be helping you draft this disclosure.
6. What if my cap table doesn't reconcile to ROC filings?
Pause the diligence. Spend two to four weeks reconciling board resolutions, PAS-3 filings, FC-GPR records, and share certificates before resuming. A cap table reconciliation gap is not the place to be discovered by your lead investor.
7. Should I use the same CA firm for audit and for diligence support?
For most ₹5–50 Cr revenue startups, a CFO-led outsourced firm running both is cleaner. For ₹50 Cr+ businesses or pre-IPO companies, separating audit (often Big 4) from diligence support (a CFO advisory firm) reduces conflict-of-interest concerns from the buyer's side.
8. How is diligence different for foreign investors versus Indian investors?
Foreign investors typically dig harder on FEMA compliance, transfer pricing documentation, and FC-GPR reconciliation. Indian investors push more on GST, MSME 43B(h), and statutory audit completeness. The data room needs to be ready for both.
9. What's the biggest mistake founders make in diligence?
Treating it as a series of investor questions to answer instead of as a continuous walk through their own company that they should have done first. The founders who survive diligence cleanly are the ones who ran the same exercise four weeks earlier.
10. Can a CFO partner come in just for the diligence period?
Yes — and it's one of the highest-ROI engagements a founder runs. Six to eight weeks before the fundraise, the CFO partner runs the mock diligence, fixes gaps, builds the data room, supports investor negotiations, and stays on for handover. Total cost ₹3L–₹15L; valuation impact usually 10–30%.
Due diligence isn't a test. It's a tour. Investors are walking through four rooms of your company — financial, legal, commercial, people's and tech — looking for the seams. Either the rooms are clean and the tour moves forward, or they aren't and the conversation drifts to "Let's stay in touch."
The founders who close rounds at strong valuations in 2026 are the ones who walked through the four rooms themselves first, with a CFO who knew where the seams usually are. The rest underwrite the dropped-round risk personally — and they often pay for it.
If you're 6–12 weeks from a fundraiser, this week is the right week to start.