A data room is where a company keeps the documents an investor needs to review before committing capital. Founders who build one before they raise can answer diligence requests quickly, and they find their own gaps while there is still time to fix them. This guide covers what a data room is, how to structure it, and how to manage access and versions. It is general information, not legal, tax or investment advice, so work through the specifics with your own attorney and accountant.
What a data room is and when investors ask for it
A data room is a secure, organized online space that holds the company's key documents. The term comes from the physical rooms where buyers once reviewed paper records during a deal. Today it is almost always a virtual data room: a shared set of folders with controlled access, where investors and their advisors review the same files.
Investors rarely ask for the data room at a first meeting. The usual order is a deck, then conversations, then serious interest. Once an investor wants to move toward a term sheet, or has issued one, diligence begins, and that is when the request for the data room arrives.
Build it before you need it. Pulling documents together under a deadline is when mistakes happen, and when founders discover a missing signature or a filing that was never made.
How to structure the folders
A good data room reads like a table of contents. An investor should be able to find any document in a few clicks without asking where it is. Number the top-level folders so they always sort in the same order, and keep that structure for the life of the company.
- 01 Corporate documents
- 02 Cap table and equity
- 03 Financials
- 04 Material contracts
- 05 Intellectual property
- 06 Team and employment
- 07 Product
- 08 Legal and compliance
Use the same numbering inside each folder, such as 03.1 for historical financials and 03.2 for projections. Add an index document at the top level that lists every folder and file with a one-line note on what each contains. If you are still gathering the underlying paperwork, start with the documents you need before you raise.
What goes in each folder
Corporate documents
The certificate of incorporation or formation, bylaws or operating agreement, board and shareholder consents, meeting minutes, and certificates of good standing. Include any qualifications to do business in other states, and the documents behind any subsidiary or past change in entity type.
Cap table and equity
The current cap table, stock purchase agreements, the equity incentive plan and every grant made under it, vesting schedules, 83(b) elections where they apply, and all convertible instruments such as SAFEs and convertible notes. Every number on the cap table should trace back to a signed document in this folder.
Financials
Historical financial statements, tax returns, the current budget, and the financial model with its key assumptions stated plainly. A pre-revenue company will have less here, and that is expected. A clear model and an accurate picture of current cash and monthly spend matter more than volume.
Material contracts
Significant customer and supplier agreements, partnership agreements, leases, and loan or financing documents. Flag any agreement with exclusivity, change of control or unusual termination terms, since investors and their counsel will look for those clauses.
Intellectual property
Patent and trademark filings and registrations, plus signed invention assignment and confidentiality agreements from every founder, employee and contractor who has built anything for the company. Investors want to confirm that the company, not an individual, owns what it sells.
Team and employment
An organization chart, offer letters, employment and contractor agreements, advisor agreements, and the employee handbook if one exists. Summarize compensation by role at first rather than uploading individual payroll records.
Product
A product overview, the roadmap, a summary of the technical architecture, the metrics the company tracks, and any customer research. This folder should let a reviewer understand what has been built without needing a call.
Legal and compliance
Any pending or threatened litigation, licenses and permits, privacy policies and data practices, insurance policies, and correspondence with regulators. In a regulated industry this folder carries more weight, and an attorney should confirm what belongs in it.
Access and permissions
A data room should never be an open link that anyone can forward. Give each investor individual access tied to their own email address, and decide what each person can see.
- Set access to view only by default, and turn off downloading and printing for the most sensitive files.
- Open folders in stages. Early interest may justify the corporate, financial and product folders, while contracts and employee details can wait until diligence is underway.
- Turn on activity tracking so you can see who opened which files and when.
- Ask for a confidentiality agreement before sharing sensitive material. Some investors decline to sign one at an early stage, which is another reason to stage access.
- Remove access promptly when a conversation ends.
Version control and naming
Few things undercut confidence faster than three files with "final" in the name. Pick one naming convention and apply it to every file in the room.
A simple format works well: the folder number, the document name, and the date written year first, such as "02.1 Cap table 2026-09-30". Dates written that way sort correctly. Upload executed copies of signed documents, never drafts, and mark them as signed in the file name.
Keep only the current version of each document in the room, and store older versions in an archive outside it. When a document changes during diligence, replace it, record the change in the index, and tell the investor. A data room that changes without notice invites questions.
What not to put in too early
A data room is not a place for everything the company has ever produced. Some material should wait until a serious investor is in diligence, and some should never be shared in raw form.
- Source code and trade secrets. Describe the technology instead, and if a technical review is needed, set the terms with your attorney first.
- Customer lists with names and contact details. Share anonymized summaries until later in the process.
- Personal information about employees, such as individual salaries, home addresses and identification numbers.
- Drafts, internal discussions and anything you have not reviewed. Every file in the room should be one you are prepared to explain.
- Documents you are bound to keep confidential. Some contracts prohibit disclosure without the other party's consent, so check before you upload them.
How the data room connects to diligence
Diligence is the investor's process of confirming that what the company has said is accurate. Most of that work happens in the data room. Investors and their counsel compare the deck to the financials, the cap table to the signed equity documents, and the product claims to the contracts and metrics.
Investors often send a diligence request list. Map each request to a folder and file in your index, and answer any gaps in writing instead of leaving them blank. A missing document with a clear explanation reads far better than a silence the investor has to chase.
Building the room early also works as an internal review. Assembling it may surface unsigned agreements, missing IP assignments or a cap table that does not match the documents behind it. These are the kinds of issues covered in red flags that kill a raise, and they are much easier to fix before an investor finds them.
Preparing for your raise
If you are preparing for a raise and want a data room that holds up to diligence, SugarTime can help you get the pitch deck, data room and company structure ready before you meet investors. Start your application.