The standard structure
Organize the data room into clear folders: Corporate (formation, bylaws, board minutes, consents), Cap Table (current cap table plus history), Financial (statements, bank statements, tax returns), Contracts (customer, vendor, employment), Legal (IP, litigation, disputes), and Operating (metrics, product documentation, team).
Within each folder, use consistent naming conventions. "2024-Q4-Board-Minutes.pdf" is better than "Board 10.15.pdf" or "minutes.pdf". When investors see hundreds of files, clear names let them find what they need without asking. Poor naming adds friction that slows diligence.
Include a README or index document at the top. One page that describes what is in each folder, whom to contact for questions, and any notable context. This saves investors from having to ask basic orientation questions and demonstrates operational maturity.
What must be in it
Three years of financial statements (P&L, balance sheet, cash flow), bank statements for the same period, and tax returns. For pre-revenue companies, bank statements and any available operating financials. Investors want to see the actual financial history, not a summary.
The cap table with complete issuance history. Every round, every option grant, every conversion. Carta exports are ideal because they include the history automatically. Spreadsheets with manual updates are acceptable but suggest less rigor.
Customer contracts for revenue companies. Investors will pick samples to verify revenue recognition, terms, and any unusual provisions. Have all signed contracts readily available. Missing contracts for claimed revenue is a diligence red flag.
What often gets missed
Employment agreements including IP assignment for every employee. A gap here is a material legal issue that investors will require fixing before close. Check all employees past and present have signed documents. This is often the most time-consuming cleanup during a raise.
Documentation for every equity grant. Offer letters, grant notices, board approvals, 409A valuations. If any step is missing, the grant may be invalid from a tax perspective. Cleanup requires filing and potentially board consents.
Board minutes for every meeting. Decisions made at board meetings need to be documented with minutes. Gaps in board minutes are common and usually require reconstruction. Reconstructing 2 years of minutes is painful; keeping them current is easy.
The timing question
Start building 6-12 months before you expect to raise. This is long enough to find and fix the issues that will surface in diligence, not so long that documents become stale. The alternative is building the data room during the raise, which produces delays and sometimes walks from investors.
Refresh the data room quarterly. Financial statements need updating, new contracts get added, board minutes accumulate. A data room that was complete in Q1 is incomplete by Q4 unless someone owns keeping it current. Usually this falls to the CFO or the lead operations person.
Privacy and access matter. Use a proper virtual data room tool (DocSend, Box, Google Drive with careful permissions) rather than sharing folders casually. Track who accesses what. Revoke access when investors decline. Data hygiene during the raise is part of operational rigor.