Home » Knowledge base » For startups » The data room: complete contents checklist
Fundraising

The data room: complete contents checklist

Investors usually ask for the same categories of documents during due diligence. Gather them in a data room before the request arrives. This gives you time to find missing records and makes the review easier to manage.
Reference11 min readLast reviewed 2 September, 2026From the investor’s perspective

How investors will read your data room

The request list an investor sends in due diligence (selskapsgjennomgang) is standard. The same category structure has circulated in Norwegian angel and venture practice since the late 2010s, so you can build to it before it arrives.

Build the data room (datarom) in the list’s own order, one folder per category. This gives each requested item a clear location and makes follow-up questions easier to track.

The room’s organisation helps investors assess how the company is run. Producing the corporate history within a day inspires more confidence than taking three weeks to find your own board minutes.

Scope the list honestly. A pre-revenue company with two founders and no employees will legitimately mark half of these lines as not applicable. Mark them deliberately, with a reason, and leave none blank.

Where to start, by raise

Use the same checklist whatever your stage. Your situation determines where the gaps are likely to be and who will send the request list.

  • First raise. Collect corporate and accounting records, and start examining product rights and working arrangements early. Check code created before incorporation, founder employment terms and contractor rights.
  • Second raise. Start with the previous data room. Add the resolutions, registration confirmation, updated share register, shareholders’ agreement and side letters from the last round. Refresh dated information.
  • With a committed lead investor. Map the lead’s or adviser’s request list to your folders. Use a shared question log and agree which data-room version the warranties will refer to.
  • Without a lead investor. Give investors individual access and coordinate answers in the question log. Update information on a set schedule so investors assess the same material.

Ground rules before you share

  • Agree confidentiality before sharing sensitive information. An NDA may be needed before the data-room stage if the information warrants it. Make it mutual when both sides disclose protected information. Decide whether the talks themselves are confidential and how an investment may be announced.
  • Match the terms to the information. Set a suitable duration; trade secrets may need protection for as long as they remain secret. Agree workable return, deletion and backup provisions, subject to mandatory retention and privacy duties.
  • Give access per person. Record who has access and remove it when no longer needed.
  • Limit personal and sensitive data. Confirm the lawful basis for disclosure, redact unnecessary details and agree download and printing controls. An NDA does not by itself supply a data-protection basis.
  • Keep a numbered question log. Give authorised recipients consistent answers, with restricted access where necessary.
  • Date documents and maintain an index. Record status and versions.

The checklist

Work through the checklist by category. For each item, upload the document or explain why it does not apply. Check the common gaps first so you can start resolving delays early.

Corporate

DocumentWhat it isCommon gap
Formation document (stiftelsesdokument)The document establishing the company, with the founding subscriptionsNever located after the accountant who filed it changed firm
Articles of association (vedtekter) in forceThe company’s constitution: share classes, consent and pre-emption rules, board compositionNever updated after later rounds changed the share structure
Company certificate (firmaattest)Proof from the Register of Business Enterprises (Foretaksregisteret) that the company is registered and who may sign for it. Order it freshA certificate months old, ordered for something else
Register transcript (registerutskrift)The entry in the Central Coordinating Register for Legal Entities (Enhetsregisteret)Registered activity codes that no longer describe the business
Board minutes (styreprotokoll), three yearsSigned minutes of every board meeting, including written proceduresDecisions taken in a message thread and never minuted
General meeting minutes (generalforsamlingsprotokoll), three yearsEvery ordinary and extraordinary meeting, with the resolutions passedAnnual general meetings held informally, with no record
Group structure, if anyParent, subsidiaries, and any intra-group agreementsAssets or contracts sitting in a founder’s separate company
Beneficial owner registration (reelle rettighetshavere)The registration made to Brønnøysundregistrene, including a nil resultNever registered at all

Share capital and ownership

DocumentWhat it isCommon gap
Share register (aksjeeierbok)The company’s own record of shareholders and holdings. It is the company’s duty to maintain it, and anyone may demand accessMaintained as a spreadsheet that disagrees with the registered capital
Share capital historyEvery issue with its resolution, subscription price and registration confirmationA round resolved but never registered
Options, warrants and incentive schemes with their rulesEvery award, its strike, vesting and expiry, reconciled to the cap tableVerbal option promises to early employees, with nothing signed
Convertible loans and any similar instrumentThe agreements and their conversion mechanicsA founder loan everyone describes as convertible, with no document
Pledges or other security over sharesAnything encumbering existing sharesA pledge given to a bank and forgotten
Shareholders’ agreement (aksjonæravtale) and side lettersConsent rights, pre-emption, transfer restrictions, governanceSide letters not filed with the main agreement
Related-party agreementsAny agreement with founders, shareholders or their companiesConsultancy invoiced from a founder-owned company, unpapered
Fully diluted cap tableOne sheet reconciling shares, options, convertibles and the round being raisedThree versions in circulation, none of them dated

Organisation and people

DocumentWhat it isCommon gap
Organisation chart with key rolesWho does what, and who reports to whomRoles held by unpaid friends who are shown as staff
Management CVsBackground of the people the investment is backing—
Employment contracts, all employeesWritten contracts with confidentiality and intellectual-property termsEmployees working with no contract at all
Founder employment termsRole, salary, notice, and any vesting or lock-upFounders on no contract and no vesting
Consultant and contractor agreementsScope, fees, assignment of work productLong-term contractors doing employee work
Pension scheme documentationThe mandatory occupational pension arrangement and its providerSet up late, with arrears
Payroll summary and salary levelsCurrent payroll cost, including employer’s national insurance contributionsFounder salaries agreed but never resolved by the board

Operations and contracts

DocumentWhat it isCommon gap
Ten largest customer agreements and the standard termsThe contracts the revenue rests onA named large customer that is one non-binding letter of intent
Supplier and subcontractor agreementsTerms with anyone the business depends onA critical supplier with no written contract
Reseller, distribution and partnership agreementsExclusivity, territory, termExclusivity granted years ago and never reviewed
Change-of-control clause inventoryA list of every agreement a change of ownership lets the counterparty terminate or renegotiateThe inventory has never been made
Lease and other property agreementsTerm, notice, restoration obligations—
Order backlog and pipeline reconciled to signed agreementsWhat is contracted against what is hoped forPipeline presented as backlog

Financial

Separate filed accounts from the current financial position. Investors need both and will compare the historical filings with today’s bank statement and ledger.

DocumentWhat it isCommon gap
Annual accounts with notes, three yearsFiled accounts, plus the annual report where required, available from the Register of Company AccountsLate filings, visible in the public record
Auditor’s report or the resolution to opt out of auditWhether the accounts are audited, and any qualification—
Current-year management accounts, monthlyThe ledger position for the months since the last filed accountsManagement accounts that do not reconcile to the filed accounts
Last month’s bank statement, cash position and burn rateThe live numbers. These are asked for as at now, not as at the last filingA cash figure two months old, contradicted by the statement
Budget and cash-flow forecast with the assumptions sheetThe forward model, with its drivers visibleA budget with no cash-flow view
Debt: loans, overdrafts, leases, public loans, guaranteesRepayment profiles, covenants, personal guaranteesFounder loans presented as equity
Grants and public funding with award conditionsAward letters, reporting duties, repayment and clawback triggersGrant conditions the round itself would breach
Aged receivables and payablesWho owes the company, and whom the company owesPayables stretched, with suppliers on stop

Assets and real property

DocumentWhat it isCommon gap
Fixed-asset registerEquipment owned, with book values—
Property leases and any owned propertyTerms and obligations—
Encumbrances over assets and receivablesAnything pledged, including factoring arrangementsA receivables pledge nobody mentioned

Intellectual property

Start gathering the intellectual-property documents early. This is the longest section on investor lists and the one where early-stage companies most often struggle to produce the records requested.

DocumentWhat it isCommon gap
Registered rights: patents, trade marks, designsRegister extracts, renewal dates, territoriesAn application filed in a founder’s own name
Unregistered rights: know-how, databases, trade secretsWhat they are and how they are protectedNo confidentiality terms with contractors
Licences in, including open-source componentsEvery third-party component the product depends on, with its licenceNo inventory of open-source dependencies
Licences outRights granted to others, with exclusivity, territory and termAn exclusive granted to an early customer
Software development historyWho wrote which parts, when, and under what agreementCode written before incorporation and never assigned
Source-code custody and repository accessWhere the code lives and who controls the credentialsThe repository in a founder’s personal account
Domains, brand accounts and app-store listingsOwnership evidence in the company’s nameA domain registered privately, or by a former agency
Evidence of rights from employees and contractorsDocument whether rights arise by law, assignment or a sufficient licence, and the permitted usesMissing or inadequate rights to important work
Infringement and breach history, three yearsClaims received and sentAn unanswered cease-and-desist

Licences and public authorities

DocumentWhat it isCommon gap
Licences, authorisations and registrations the business requiresHeld, current, and in the operating entity’s nameTrading ahead of an authorisation
Correspondence with supervisory authoritiesAnything open or unresolvedCorrespondence not disclosed

IT and data protection

DocumentWhat it isCommon gap
Data processing agreementsWritten, including electronic, binding terms for each processor relationship; authorised subprocessors with equivalent dutiesMissing terms or unapproved subprocessors
Records of processing activities (protokoll over behandlingsaktiviteter)The processing record required under the General Data Protection Regulation. The small-business exemption is narrow and falls away for regular processingNever made, on the assumption the exemption applies
Transfers of personal data outside the EEAWhich transfers happen, and the basis for eachStandard contractual clauses assumed rather than signed
Privacy notice (personvernerklæring)What the company tells data subjectsA notice describing a product the company no longer sells
Personal-data breach procedure and logDocument all breaches. The controller notifies the authority without undue delay and, where feasible, within 72 hours of awareness, unless risk to individuals is unlikely. Processors notify the controller without undue delayNo procedure or record of the assessment
IT systems, hosting and administrator accessWhich systems the business runs on, and who holds the keysAdmin rights held only by a departed developer

Insurance

DocumentWhat it isCommon gap
Policies in force with sums insured and exclusionsLiability, property, professional indemnity, key person, travelNo professional liability cover in a company selling services
Claims historyClaims made in the last three years—

Disputes

DocumentWhat it isCommon gap
Disputes, claims and threatened claims, three yearsEach with its status and any counsel assessmentA dispute described as resolved in principle, with nothing in writing
Correspondence with counsel on live mattersThe exposure, as advisedProvisions in the accounts that do not match the exposure

Tax and VAT

DocumentWhat it isCommon gap
Tax returns (skattemelding), three yearsFiled annually by 31 May through the year-end system, even in a year with no activity. Not public, so it is requested hereReturns filed late, or not at all in a dormant year
Tax settlements (skatteoppgjør)Skatteetaten’s assessment for each completed yearAssessments differing from what was filed, unexplained
Company tax and duty information (opplysninger om skatt og avgift, form RF-1507)Skatteetaten’s dated certificate of registered company information, including overdue unpaid taxes and duties. It does not cover all possible liabilitiesA certificate ordered a year ago for a tender
VAT returns (mva-melding) since the last annual accountsNormally six periods a year; enterprises with taxable turnover below a limit, currently around NOK 1 million a year, may apply to report annuallyPeriods missed while the company was between accountants
VAT registration statusWhether and when the company registered, and any joint registrationRegistration missed after the threshold was passed
Payroll withholding and employer contribution statusPayroll and a-melding reconciled; withholding paid by the applicable deadline, any approved exception documented, and employer contributions checked separatelyWithheld tax used as working capital
Carried-forward lossesThe tax position the company brings forward—

Other

DocumentWhat it isCommon gap
Business plan and current investor materialsThe deck and plan as presented, datedA deck in the room that contradicts the model beside it
Board and management reporting packWhat the board actually sees each monthNo reporting pack exists
Anything material that no category above coversOther material information investors need to assess the companyKnown problems left out, then found

Keeping it current through the raise

Use the index to track each checklist item, its folder, whether it applies, its status and any comments. Keeping it current lets investors see what is available and what remains outstanding.

An outdated index can make an incomplete room look finished. Maintain it throughout the raise:

  • Preserve an appropriate record of versions and disclosures, so earlier answers remain traceable. Set retention and access rules that also meet privacy obligations.
  • Refresh financial information on an agreed schedule. Update bank statements, cash and burn; consider a fresh tax certificate if the review runs on.
  • Record what was disclosed at signing, including versions and dates. Agree how those disclosures qualify the warranties. Uploading a document alone does not necessarily protect against a claim; the contract determines the disclosure standard.

Key takeaways

  • Organise your folder tree in the request list's order. This makes each requested document easy to locate and avoids having to reconcile two different structures.
  • Completeness and order are themselves evidence. A document that cannot be produced is information about the company.
  • The financial folder splits in two. Filed accounts cover history; a current-month bank statement, cash position and burn rate cover now.
  • Intellectual property is where early-stage companies fail diligence most often. The assignment confirmations are the items least likely to exist.
  • Keep an index with a status column per item, current through the raise; it does more for credibility than any single document in the room.

Present your company to NorBAN

NorBAN introduces investment-ready companies to its member angels. Submitting your company is the route into that process.

Submit your startup

Scroll to Top