Profil » Knowledge base » For investors » Due-diligence checklist and data-room request list
Investing

Due-diligence checklist and data-room request list

Diligence opens with corporate and share matters, because a company whose earlier round was never registered cannot execute the transaction at all. What to request from a Norwegian early-stage company, in what order, and which documents the public registers will give an investor without anyone being asked.
Reference10 min readLast reviewed 2 september, 2026From the founder’s perspective

Requesting in the right order

Send the request in category order. Corporate and share matters decide whether the company can execute the transaction at all, and there is no point diligencing customer contracts in a company whose earlier round was never registered.

Run three columns against every item (provided, not applicable, comments) and keep them open for the whole process. The tracker is the working document, and at the end of due diligence (selskapsgjennomgang) it is also the finding list.

Anything still outstanding is either a document that does not exist or a document nobody wants to hand over, and both are findings. Mark items not applicable deliberately, with a reason, so that an empty cell always means outstanding.

Scope the list before sending it. A pre-revenue company with two founders and no employees will legitimately mark half of it not applicable; a company with customers, staff and third-party code will not.

Ask for documents, not for answers. A founder’s description of a customer agreement is not the agreement. Date every request, because a certificate issued eight months ago describes a company that no longer exists in that form.

How much of the list you own depends on your role in the round. Settle it before anything is sent.

  • A first-time angel, or a follower pulls the public-register documents personally, reads the corporate and share block in full, and reads every other block’s findings. The rest of the list is the lead’s to send.
  • The lead scopes and sends the whole list, holds the tracker and the question log, and decides when the room is closed.
  • An angel with a sector focus owns the block that needs the domain: the intellectual property and code items for a software company, the customer agreements and pipeline for a sales-led one.
  • A syndicate agrees who owns which block before the list goes out, and keeps one tracker for everyone, so the company answers each item once.

What you can retrieve yourself, and what you must ask for

Pull the public-register documents before the request list goes out. Asking the company for material you can retrieve yourself wastes goodwill and slows the process.

SourceWhat it gives you
Register of Business Enterprises (Foretaksregisteret), via BrønnøysundregistreneCompany certificate (firmaattest), articles of association (vedtekter), registered share capital, board and signatory roles, role history
Register of Company Accounts (Regnskapsregisteret), via BrønnøysundregistreneFiled annual accounts (årsregnskap), and whether they were filed on time
Register of Bankruptcies (Konkursregisteret)Bankruptcy and role history for the company and its officers
Skatteetaten’s shareholder register (aksjonærregisteret)Shareholdings as reported in the company’s annual shareholder statement, open to anyone
The company, on demand under aksjeloven § 4-6The share register (aksjeeierbok). Everyone has a right of access. Since 1 February 2025 the company must as a main rule send an electronic copy by e-mail within three working days, free of charge; only the choice of an alternative delivery channel needs objective grounds.
Only from the companyBoard and general-meeting minutes, shareholders’ agreements, option and convertible-loan agreements, customer and supplier contracts, management accounts, tax returns (skattemelding), employment contracts

The share register is the cheapest verification in the process and the one most often skipped. Compare it against the cap table you were shown before anything else, because a mismatch changes what the rest of the diligence is looking for.

Corporate and share matters

Reconcile every row here to the share register you already pulled. The resolutions and the articles are what make the register right, and a defect in this block cannot be priced, only fixed.

RequestWhat to look forCommon gap
Founding documents (stiftelsesdokument) and the articles of association in forceShare classes, consent requirements, pre-emption rights, any transfer restriction that binds your exitArticles never updated after earlier rounds
Board and general-meeting minutes, three yearsResolutions authorising issues, options, loans and material contractsDecisions taken in a chat thread and never minuted
Share capital history: every issue with its resolution and registrationEach round registered; nominal values and subscription prices consistentAn earlier round resolved but never registered
Options, warrants, convertible loans and any pledge over sharesThe fully diluted position and every conversion mechanicVerbal option promises to early employees with no document
Shareholders’ agreement and any side lettersConsent rights and pre-emption that must be waived before your roundConsent requirements discovered after the term sheet
Related-party agreements with founders, shareholders and their companiesArm’s-length terms; consultancy invoicing to founder-owned companiesUndocumented founder loans to or from the company
Confirmation of whether the company is a pure holding company or has subsidiariesGroup structure, intra-group agreements, where the assets actually sitAssets held in a founder’s separate company

Organisation, operations and contracts

This block tests whether the people and the revenue in the model exist on paper. It also tells you which counterparties your round lets walk away.

RequestWhat to look forCommon gap
Organisation chart, key roles and management CVsWho does the work, and what happens if any one of them stopsRoles on the chart held by unpaid friends
Board composition, board instructions, any advisory arrangementsGovernance that matches the company’s stage and your expectationsNo board meetings held for a year
The ten largest customer agreements and the standard termsCommitted volumes, term, termination, liability capsA named “large customer” that is one non-binding letter of intent
Order backlog and pipeline reconciled to signed agreementsThe revenue in the model traced to documentsPipeline counted as revenue
Supplier, reseller and partnership agreementsSingle-source dependencies and exclusivity that limits an exitOne critical supplier with no written contract
Change-of-control clause inventory across all agreementsWhich counterparties your round gives a right to terminate or renegotiateThe inventory has never been made

Financial position

Read this block against the runway you were shown. A gap here changes the size of the round, and often the price.

RequestWhat to look forCommon gap
Annual accounts with notes, three years, and the auditor’s correspondenceGoing-concern notes, related-party notes, any qualificationLate filings, which are public and tell you about the company’s discipline
Current-year management accounts, monthlyRunway to the next milestone against the plan you were shownManagement accounts that do not reconcile to the filed accounts
Budget and cash-flow forecast with assumptionsThe assumptions your investment is buying, stated separately from the arithmeticA budget with no cash-flow view
Debt: loans, overdrafts, leases, public loans, guarantees and covenantsRepayment profiles that fall inside your runway; personal guaranteesFounder loans treated as equity in the pitch
Encumbrances over assets, receivables and sharesWhat is already pledged, and to whomA factoring or receivables pledge nobody mentioned
Grants and public funding with their award conditionsRepayment and clawback triggers, including a change of controlGrant conditions that the round itself breaches

Assets and intellectual property

Real property is usually a lease. Intellectual property is where early-stage companies fail diligence most often, so this block carries the most items and deserves the most time.

RequestWhat to look forCommon gap
Leases and material equipment, with any lease-end obligationsTerm, notice, relocation cost
Registered rights: patents, trade marks, designs, with register extracts and renewal datesOwnership in the company’s name, fees paid, territories heldAn application filed in a founder’s name
Unregistered rights: know-how, databases, trade secrets, and how they are protectedConfidentiality obligations that actually cover the materialNo confidentiality terms with contractors
Licences in, including all open-source and third-party componentsCopyleft obligations that affect the product; per-seat or revenue triggersNo inventory of open-source dependencies
Licences out, with exclusivity, territory and termRights already granted away, and what they cost an acquirerAn exclusive granted to an early customer
Software development history: who wrote which parts, when, and under what agreementAn unbroken chain from every author to the companyCode written before incorporation, never assigned
Source-code custody, repositories and third-party access rightsWho controls the repository and the credentialsSource code in a founder’s personal account
Domains, brand accounts and app-store listings with ownership evidenceRegistrations in the company’s name, not an agency’sDomain registered privately by a founder
Employee and contractor IP assignment confirmationsA signed assignment for every person who has contributedContractor work with no assignment clause
Infringement and breach history, three years, including claims received and sentLive disputes and dormant onesAn unanswered cease-and-desist

People

Founders who can leave at no cost are the largest single risk in this block. Read their terms first, and reconcile every incentive promise to the cap table.

RequestWhat to look forCommon gap
Employment contracts for all employeesEveryone employed on a written contract, with confidentiality and IP termsEmployees with no contract at all
Founder employment terms: role, salary, notice, vesting or lock-upWhether the founders are committed for the period you are fundingFounders on no contract and no vesting
Incentive schemes: options, bonus, phantom shares, with the scheme rulesAwards inside a documented scheme, reconciled to the cap tablePromises made outside any scheme
Consultant and contractor agreementsAssignment of work product; genuine contractor statusLong-term contractors doing employee work
Occupational pension and insurance obligationsObligations in place and paidArrears
Key-person exposure: who could not be replaced within six monthsConcentration of knowledge, customer relationships and codeFounder dependence nobody has planned for

Compliance, IT and data protection

Small companies skip these, and the cost lands after your money is in. Each item is cheap to check and expensive to fix later.

RequestWhat to look forCommon gap
Licences, authorisations and registrations required for the businessHeld, current, and in the operating entity’s nameTrading ahead of an authorisation
Processing overview, data-processor agreements, and any transfers outside the EEAA processing record that matches what the product actually doesProcessor agreements never signed with subprocessors
IT systems, hosting arrangements and administrator accessWho holds the keys, and whether the company can revoke themAdmin rights held only by one departed developer
Insurance policies with sums insured and exclusionsCover proportionate to the risks the business runsNo professional liability cover
Beneficial owner (reelle rettighetshavere) registrationRegistration made and current, including a nil resultNever registered

Disputes, tax and VAT

Tax and VAT arrears are the liabilities most likely to crystallise after closing. None of this is public, so it all has to be requested.

RequestWhat to look forCommon gap
Disputes, claims and threatened claims, three years, with counsel’s assessmentProvisions in the accounts matching the exposureA dispute described as “resolved in principle”
Tax returns and business specifications, three yearsConsistency with the filed accounts; carried-forward lossesThe returns are not public, so they must be requested
Tax settlement notices (skatteoppgjør)Assessments differing from what was filedOpen assessments
Certificate for tax and value added tax (attest for skatt og merverdiavgift, form RF-1316, from Skatteetaten)Nothing outstanding as at a recent dateA certificate more than a few months old
VAT registration and any joint registration (fellesregistrering)Registration status matching the actual activity; group registrations documentedLate or missed registration
Payroll withholding and employer’s national insurance statusPayments current, client account fundedWithheld tax used as working capital
Correspondence with Skatteetaten on any open questionAnything unresolved that could crystallise after closingCorrespondence not disclosed

Running the data room

The data room (datarom) mirrors the request list, one folder per category, numbered as the list is numbered, so an item and its documents share an address. A room organised by whoever uploaded each file cannot be tracked against a checklist. Set the following at the start, because they are hard to impose once the room is open.

  • Access is per person. Name every user, and remove them when their workstream closes.
  • Keep every version of a document, so a finding raised against an early draft can still be traced.
  • Keep one numbered follow-up question log, held by the lead investor, with each question tied to a list item and each answer recorded against it. Questions asked in individual e-mail threads disappear.
  • Agree at the start what may be downloaded or printed and what stays on screen. Founders are more forthcoming with sensitive customer and salary data when the rule is written down first.
  • Record the closing state of the room at signing (what was disclosed, in which version, on which date). The warranties in the investment agreement are given against that record.

Findings belong in the tracker, in the investor group’s own hands, with the decision attached to each one: accepted, priced, made a condition of closing, or fatal.

Key takeaways

  • Request in category order. Record every item as provided, not applicable or outstanding, and the tracker is then the finding list.
  • Anyone may demand access to the share register (aksjeeierbok) under aksjeloven section 4-6, and since 1 February 2025 the company must normally send an electronic copy by e-mail within three working days, free of charge.
  • Foretaksregisteret data, filed annual accounts and Skatteetaten's shareholder register are retrievable without asking the company; board and general-meeting minutes, shareholders' agreements, contracts and tax returns are not.
  • A gap is a finding. An item the company cannot produce is information about the company, whatever the reason given.
  • The data room follows the request list, folder by folder, and one numbered question log keeps the answers attached to the items they belong to.

Invest with NorBAN

NorBAN members see screened deal flow, invest alongside experienced angels, and have the templates and tools referenced throughout this knowledge base.

Become a member

Skroll til toppen