Virtual CFO Services
Building the Financial Section of a Data Room: What Investors Check First
Lekha Editorial Team
CA-reviewed · Published
The financial section of a data room is where the pitch deck's claims are either confirmed or undermined. Investors who see a clean, complete financial data room move faster. Those who see missing documents, inconsistent numbers, or unexplained gaps move slower or not at all.
Folder Structure and Document Organisation
A standard financial data room section has this structure:
01_Financials/ 01_01_Audited_Accounts/ FY2022_Audited_Financial_Statements.pdf FY2023_Audited_Financial_Statements.pdf FY2024_Audited_Financial_Statements.pdf 01_02_Management_Accounts/ Monthly_MIS_Jan2023_to_Dec2024.xlsx (or individual monthly files) FY2025_Management_Accounts_YTD.xlsx 01_03_Financial_Model/ 3Year_Financial_Model_v3.xlsx Financial_Model_Assumptions_Documentation.pdf 01_04_KPIs_and_Metrics/ Monthly_KPI_Dashboard.xlsx Cohort_Analysis.xlsx 01_05_Bank_Statements/ Bank_Statement_Company_Current_Account_12M.pdf 01_06_Cap_Table/ Cap_Table_Fully_Diluted_Current.xlsx Cap_Table_Fully_Diluted_Post_This_Round.xlsx 01_07_Compliance/ DPIIT_Recognition_Certificate.pdf Merchant_Banker_Valuation_Certificate.pdf TDS_Certificate_Last_Quarter.pdf GST_Return_Last_Quarter.pdf
Naming convention: consistent, dated, clearly labelled. Investors navigate dozens of data rooms; clear naming reduces the friction of finding documents and signals organisational discipline.
The Specific Documents That Get Scrutinised
Audited financials: the statutory auditor's report, particularly the 'emphasis of matter' section (any qualifications or material uncertainties the auditor has flagged). Investors read the notes to the financial statements carefully — related-party transactions, contingent liabilities, accounting policy choices, and ESOP disclosures are all in the notes.
Management accounts: investors will compare MIS to the audited accounts for the most recent year. Any material differences (possible if the MIS uses different accounting policies than the audit) must be explained. Investors lose confidence when the management accounts and the audited accounts tell a different revenue story.
Financial model: investors will stress-test the revenue model by changing assumptions. They'll typically drop revenue growth by 30–50% and see what happens to runway. If the model shows the company runs out of cash under moderate stress, they'll either pass or price the risk into the valuation negotiation.
Bank statements: investors look for: cash balance consistency with the financial model, large one-time transfers (what were these?), related-party payments (paying founders' personal expenses), payroll amounts consistent with the headcount, and any significant payments to parties not visible in the vendor list.
Common Data Room Financial Gaps That Delay Closing
Missing audit for one year: many startups have the audit pending for the most recent year ('the auditor hasn't finished yet'). This is a red flag — it suggests either non-compliance (audit should be done before the AGM, which must be held by September 30) or bookkeeping that isn't ready for audit. Complete the audit before opening the data room.
MIS that doesn't reconcile to audited accounts: if FY2023 revenue in the MIS is ₹4.2 crore but the audited accounts show ₹3.8 crore, the investor's counsel will ask for a reconciliation. If you can't produce one, it suggests either the MIS or the accounts (or both) are unreliable. Fix this before the data room opens.
Missing cap table documentation: every line in the cap table must have a corresponding document — board resolution authorising the allotment, shareholder resolution if required, PAS-3 filing with the ROC. If the cap table shows 5 shareholders but the ROC shows 4, there's a gap that must be resolved.
Stale merchant banker valuation: if the last valuation certificate is more than 18 months old and a new round is being raised at a significantly higher price, investors' counsel will question whether the certificate is relevant. A fresh certificate aligned with the proposed round valuation is expected.
Key takeaway
The data room is your company's financial credibility test. A complete, well-organised data room with no unresolved inconsistencies gives investors confidence to close quickly. An incomplete or inconsistent data room creates questions that each take a week to answer, extending the process indefinitely.
Frequently asked questions
Should a startup use a purpose-built VDR or shared drive for the data room?
For seed rounds: a well-organised shared Google Drive or Dropbox folder is sufficient. It's familiar, easy to set up, and has adequate access control (view-only sharing at the folder level). For Series A and beyond: a purpose-built Virtual Data Room (VDR) like Datasite, Intralinks, or Ideals adds: audit trails (you can see which investor opened which document and for how long), document-level access control, automatic watermarking, and Q&A management. The audit trail is particularly valuable — knowing that the investor's counsel spent 90 minutes on the financial model signals serious diligence intent.
How many investors can have simultaneous access to the data room?
As many as your technology allows, but exercise strategic judgment about who gets access. Sending the full data room to 20 investors at once reduces the perceived scarcity and negotiating leverage. Standard practice: send the data room to 2–4 serious investors who have shown strong interest after initial meetings, not to every investor you've pitched to. Once you have a signed term sheet, you might allow the lead investor's legal counsel full access while other interested investors get limited access.
What do investors do with the data room after declining to invest?
Investors should delete or return data room access. Most term sheets and data room access agreements include a confidentiality clause requiring this. In practice, confidential financial information provided to investors is rarely misused, but best practice is to revoke data room access for investors who pass, remove view access after a defined period (30–60 days after the round closes), and for sensitive documents (customer contracts, employee data), provide the option to view in-person or in a secure manner rather than downloadable files.
Should the data room include current client names and contracts?
Typically yes, in a restricted section for serious investors. Customer names and contracts provide evidence for the revenue numbers. For data room sections containing customer names: consider whether any customers have signed NDAs that prohibit disclosure of the relationship, whether any customer is in a competitive relationship with the investor (VCs sometimes invest in competitors), and whether you have the customer's permission to share their contract with third parties. Many companies anonymise customers in the initial data room (Customer A, Customer B) and share actual names only after an NDA with the investor is in place.
How long should a data room take to prepare?
If books are in order: 1–2 weeks to organise and upload documents. If there are compliance or accounting gaps to fix: 4–12 weeks. The most time-consuming elements are: getting the audited accounts from the auditor (if they're behind schedule), reconciling management accounts to audited accounts, preparing the financial model if one doesn't exist, and building the KPI dashboard from historical data that wasn't tracked systematically. Start data room preparation at least 6 weeks before you plan to start investor conversations.