Part 2 ended on a claim: the company with boring, documented processes wins the term sheet over the one with the better pitch. Diligence is where that gets proven. It is the moment all the quiet governance work from Parts 1 and 2 either pays off in minutes — or turns into weeks of reconstruction, awkward explanations, and a quietly falling valuation.
Most founders walk into diligence still in pitch mode, trying to impress. That is the wrong posture, and investors can feel it. Diligence is not a sales meeting. It is a verification exercise. The question on the other side of the table is no longer "is this a great business?" — they have already decided it might be. The question is now colder: "can I trust what I've been told, and what risk am I taking on that I can't yet see?"
The mindset shift: from "impress" to "verify"
The single most useful reframe before a diligence process is this: stop trying to be impressive and start being verifiable. An impressive claim with no supporting document is a liability in diligence, because the gap between the claim and the evidence is exactly what the investor's analysts are paid to find. A modest claim backed by a clean trail is worth more than a bold one backed by a story.
This is why diligence rewards companies that look, on paper, almost boring. Predictable numbers that reconcile, contracts that exist, a cap table that ties to the last share — none of it is exciting, and all of it is what lowers perceived risk. And perceived risk is the only thing diligence actually moves. The upside is already in the pitch; diligence can only confirm it or discount it.
What diligence is actually testing
Strip away the document requests and the data-room logistics, and a financial and legal diligence is testing five things. Everything an analyst asks for maps back to one of them.
1. Can the numbers be trusted?
Before anyone debates your growth rate, they're checking whether your reported numbers are real. This is the "quality of earnings" question. Do your monthly books reconcile to your bank statements? Does revenue in the MIS tie to revenue in the GST returns and the income-tax filings? Are there manual journal entries near period-ends that move the result? A company that closes its books monthly and can reconcile MIS-to-bank-to-returns passes this in an afternoon. A company that maintained books for tax only, annually, spends two weeks rebuilding history while the investor watches — and every reconstruction erodes trust in the number that finally emerges.
2. Is the revenue real, and will it last?
Reported revenue and durable revenue are different things, and diligence separates them. Analysts test whether sales convert to cash (the aged-receivables question again — see Part 2), whether revenue is concentrated in a few customers who could leave, whether it's recurring or one-off, and whether recognition is aggressive. A founder who can produce signed contracts, a clean revenue-recognition policy, cohort retention, and customer-wise collection history is describing a business. A founder who can only produce a top-line number is describing a hope.
3. Is the cap table clean and the ownership unambiguous?
The cap table is where small governance sins compound into deal risk. ESOPs granted over email with no board resolution, share certificates issued without the right filings, FEMA filings missed on a foreign angel's allotment, a co-founder who left with an undocumented equity understanding — each is a question mark over who actually owns the company the investor is buying into. A cap table that reconciles to board resolutions, share certificates, and statutory filings is a non-event. One that doesn't is a legal workstream the investor now has to fund and wait for.
4. Are there liabilities hiding off the radar?
Investors price what they can see and fear what they can't. Diligence hunts for the unbooked: unpaid statutory dues (GST, TDS, PF/ESI), pending tax assessments, undisclosed related-party transactions, litigation, unrecorded liabilities, non-compliant contracts. The danger here isn't usually the liability itself — it's discovering it late. A disclosed ₹20 lakh tax exposure is a number to negotiate; the same exposure discovered by the investor's team, undisclosed, is a trust event that colours everything else they find.
5. Does the team's story match the documents?
Underneath the financial and legal checks runs a quieter one: consistency. Does what the founders said in the pitch match what the data room shows? Does the headcount in the deck match the payroll register? Do the marquee customers in the narrative appear in the revenue ledger? Inconsistency between story and documents is the most damaging finding of all, because it makes the investor re-examine everything else with suspicion — exactly the dynamic the SEBI order in our forensic case study turned on, at a very different scale.
The data room — and what each gap signals
The data room is where these five tests are run. What investors ask for is predictable; what's revealing is not the documents themselves but what a missing document tells them.
| What they ask for | What a gap signals |
|---|---|
| Monthly management accounts (2–3 years) reconciling to bank and returns | If books are annual-only or don't reconcile: numbers can't be trusted without rework |
| Cap table reconciling to board resolutions, share certificates, ROC and FEMA filings | Gaps signal ownership risk and a legal clean-up the investor must fund |
| Customer contracts, revenue-recognition policy, cohort/retention data | Missing contracts signal revenue that may not be real, durable, or recognised correctly |
| Statutory compliance record (GST, TDS, PF/ESI, ROC, income tax) | Gaps signal unbooked liabilities and a reactive compliance culture |
| Related-party transactions, with approvals and arm's-length basis | Undisclosed RPTs signal governance risk and possible value leakage |
| Board minutes and resolutions for material decisions | Verbal-only approvals signal decisions that can be challenged later |
| Litigation, notices, and contingent-liability summary | Surprises here are the ones that re-price or pause deals |
Notice the pattern: in every row, the document is easy to produce if it was created when the event happened, and nearly impossible to produce convincingly if it has to be reconstructed afterwards. Diligence doesn't reward the company that scrambles well. It rewards the company that never had to scramble.
The findings that kill deals vs the ones that just re-price them
Not every diligence finding is fatal, and founders panic about the wrong ones. It's worth separating the two categories, because they behave very differently.
Re-pricing findings are quantifiable problems with a known cost. An unpaid tax liability, a customer-concentration risk, a missing ESOP resolution that can be ratified — these don't end deals. They get priced in: a lower valuation, an indemnity clause, an escrow or holdback against the specific risk, a condition to be cleared before closing. Annoying, value-eroding, but survivable. Most diligence findings are these.
Deal-breaking findings are different in kind. They are the findings that destroy trust rather than just cost money: a revenue number that can't be substantiated, a related-party transaction that was hidden, a cap table dispute with no clean resolution, a story that materially contradicts the documents. These don't get negotiated — they make the investor walk, because once one material thing turns out to be untrue, diligence stops being verification and becomes a search for what else is wrong. Founders rarely get told this is why; the calls simply stop.
Why clean diligence changes the price, not just the answer
Founders tend to think of diligence as a pass/fail gate. It's better understood as a dial. A clean process protects the valuation you negotiated; a messy one quietly turns it down, even when the deal still closes. The mechanisms are specific: every unverifiable number invites a more conservative assumption, every uncovered liability becomes an indemnity or a holdback, every gap that needs post-close clean-up becomes a condition or a discount. None of these are dramatic on their own. Together, they're the difference between closing at the headline number and closing at eighty cents on that rupee with half the founders' proceeds in escrow.
This is the part that most rewards the work from earlier in this series. The monthly close, the compliance calendar, the documented approvals, the clean cap table — in normal operations they feel like overhead. In diligence they are, quite literally, money: they're what lets you hold your price while the company across town that "moved fast and would fix governance later" watches their valuation get whittled down clause by clause.
How to be diligence-ready before you raise
The single biggest lever is also the simplest to state and the hardest to fake at the last minute: keep a data room that is always true. Not a folder you assemble in a panic when a term sheet arrives — a living set of records that reflects reality continuously, so that "starting diligence" means sharing access rather than building history.
Concretely, the founders who breeze through diligence tend to have done five unglamorous things long before raising:
- Closed the books monthly, so the numbers always reconcile and there's nothing to rebuild.
- Kept the cap table reconciled to resolutions and filings after every grant, allotment, and transfer — not at raise time.
- Documented decisions as they happened — board resolutions for material spends, ESOPs, RPTs, and allotments, created contemporaneously.
- Run compliance on a calendar, so the statutory record has no gaps to explain.
- Maintained the contract and customer record, so revenue can be substantiated on request.
If that list looks familiar, it should — it is the same governance and process discipline Parts 1 and 2 argued for, now viewed from the buyer's side of the table. Diligence doesn't ask for anything a well-run company isn't already doing. It just checks whether you've been doing it.
Five questions to ask yourself before you open a data room
Before you send a single investor a folder link, sit with your CFO or advisor and answer these honestly:
- Do my last 24 months of monthly accounts reconcile to bank and to my GST/income-tax filings? If not, that's the first thing diligence will find.
- Does my cap table tie, to the share, to board resolutions and statutory filings? Including every ESOP grant and any foreign investor's FEMA filings.
- Can I substantiate my revenue with contracts and collections, customer by customer? Top-line alone won't survive.
- Do I know my own bad news — every unpaid due, pending notice, RPT, and contingent liability — and have I prepared to disclose it? Surfaced first, it's a negotiation.
- Does everything in my pitch reconcile to a document in the room? Any claim that doesn't is a question waiting to be asked.
If any answer is "not yet," you've just found your pre-raise to-do list — and it's far cheaper to work through it now than under a signed term sheet with a clock running.
The bottom line
Diligence feels like judgment, but it's really verification. Investors aren't trying to decide whether you're talented; they decided that before the term sheet. They're trying to find the distance between what you told them and what your records can prove — and then price it. The smaller that distance, the closer you close to your number.
You cannot pitch your way through diligence, and you can't reconstruct your way through it convincingly either. You can only have already done the work. The company that wins the clean term sheet isn't the one with the best diligence performance; it's the one for whom diligence held no surprises, because the records were true all along.
The pitch earns you the offer. The records let you keep it.
That raises the obvious next question: what, concretely, should a founder build so the records are true from the start? In Part 4, we get specific — the first ten controls every founder should implement, in order, to make a company diligence-ready long before anyone asks for a data room.
Raising soon — or want to be diligence-ready before you do?
We help founders build and maintain investor-grade records: monthly close, reconciled cap tables, a clean compliance record, documented approvals, and a data room that's always true. So when a term sheet arrives, diligence is a confirmation, not a fire drill.
Schedule consultationThis series: Part 1 — India Isn't Hard to Start a Business In, It's Hard to Run One Responsibly · Part 2 — Why Most Startup Problems Are Process Problems · Part 3 — What Investors Actually Look For During Due Diligence (you're here) · Part 4 — The First 10 Controls Every Founder Should Implement (coming soon)
Disclaimer: This article reflects general practitioner observations as of June 2026 and is not a substitute for tailored professional advice. Diligence scope and requirements vary by investor, deal stage, sector, and structure. Consult a qualified Chartered Accountant or legal adviser for situation-specific guidance.