The Investor Due Diligence Checklist Indian Startups Fail: 9 Data Room Deal-Killers and the Companies Act Section Behind Each (2026)
By CS Sapna Malpani, Practising Company Secretary, Bangalore · Last updated 26 July 2026
A Gurgaon SaaS startup signed a Series A term sheet, then watched the round stall for six weeks. Not over valuation. Not over the market. The founders had granted ESOPs and let employees exercise them, but never filed Form PAS-3 for the first fifteen allotments. When the investor’s lawyers pulled the company’s MCA master data, the issued share capital on the cap table did not match the share capital on record with the Registrar. Every hour of that six-week delay was spent reconstructing a paper trail that should have taken one afternoon to assemble. This is what a weak investor due diligence checklist costs a founder: not a lower price, but a slower, riskier, sometimes dead deal.
Who this is for: Any Indian startup (Seed to Series C) heading into a funding round, secondary sale, or acquisition.
The trigger: A Series A data room typically holds 90–120 documents, and diligence runs 8–16 weeks. A clean data room cuts that by 30–40%.
The pain: Shares on your cap table with no matching board resolution or PAS-3 filing are legally unenforceable, and gaps in MGT-7/AOC-4 invite penalties under Section 454 plus director disqualification under Section 164(2).
Key action: Reconcile your cap table to your MCA filings and statutory registers before you circulate a term sheet, not after.
Time to act: Start the clean-up the day you decide to raise. Fixing a missed PAS-3 or an unregistered charge takes weeks, not days.
Why the data room, not the pitch, decides how fast you close
Founders spend months on the deck and minutes on the data room. Investors do the opposite. Once a term sheet is signed, the deal moves into confirmatory due diligence, where the investor’s lawyers, chartered accountants and operations team verify that the company you pitched is the company that legally exists on paper. Y Combinator puts it plainly in its Series A diligence guidance: closing a round can take more than a month, and much of that month is spent tracking down documents for lawyers. Having the data room assembled before the term sheet is signed can cut as much as a week off the closing timeline.
The work is split across six tracks that run at the same time. Understanding who is checking what tells you where the landmines sit.
The 6 concurrent due diligence tracks in a Series A
Legal / Secretarial
Investor’s lawyers: cap table, registers, resolutions, ROC filings
Financial
CA firm: audited accounts, revenue, burn, related-party flows
Tax
GST, TDS, income tax, historical valuation reports
Regulatory / FEMA
FC-GPR, FC-TRS, DPIIT, sectoral caps
Intellectual Property
IP assignments, founder & contractor deeds
HR / People
Employment contracts, ESOP grants, key-person terms
The legal and secretarial track is where most Indian startups lose time, because it is the one track founders cannot back-fill with a spreadsheet. Every allotment, every board resolution and every ROC form is time-stamped in MCA records. As one Section 42 post-mortem on SCC Online notes, PAS-3 and MGT-14 filings become the company’s permanent, dated record of how every round actually happened, and that record is exactly what a diligence team reconstructs from. If your filings and your cap table disagree, the filings win.
The problem: a founder-built cap table is not a legal record
Most early cap tables live in a spreadsheet the founder updates by hand. That spreadsheet has no legal standing. The legal position of your equity is fixed by three things read together: the board and shareholder resolutions that approved each issue, the Form PAS-3 filed with the Registrar within thirty days of allotment, and the statutory Register of Members maintained under Section 88. When a diligence team finds shares on the cap table with no corresponding board resolution, those shares are, in law, unenforceable. The holder may have paid, but the company never validly issued them. Cleaning that up mid-round means passing fresh resolutions, filing belated forms with additional fees, and in some cases obtaining shareholder ratification, all while the investor’s clock runs.
The financial cost of the underlying non-compliance is real but rarely the reason a deal dies. A failure to file PAS-3, or to maintain proper registers, attracts penalties under the Companies Act, 2013. What actually kills momentum is the loss of investor confidence: a data room that does not tie out signals weak governance, and weak governance makes an investor wonder what else is missing.
The 9 data room deal-killers and the section behind each
Here is what the legal and secretarial track hunts for, why each item stalls a round, and the exact provision you will be judged against. Fix these in order of how long they take to remedy, longest first.
1. A cap table that does not reconcile to MCA data
This is the single most common deal-killer. Every allotment must be approved by the board (and by shareholders where a special resolution is needed), then reported in Form PAS-3 within 30 days. Miss the filing and your issued capital on the cap table will not match the capital on record with the Registrar. The Gurgaon startup that missed PAS-3 for fifteen ESOP exercises lost six weeks reconstructing the trail. The governing provisions are Section 42 and Section 62 read with the PAS-3 requirement; the fallback penalty for the filing default sits in Section 450, which allows a fine up to ₹10,000 and a further ₹1,000 for each day the default continues.
2. Board and general meeting minutes with holes in them
Investors read your minute book from incorporation to date. They check that every material event, each allotment, each ESOP grant, each key contract, each change of registered office, was authorised by a properly passed and recorded resolution. Minutes are governed by Section 118 and by Secretarial Standards SS-1 (board meetings) and SS-2 (general meetings), which are mandatory. A resolution that authorised a share allotment but was never filed as Form MGT-14 where required is a visible governance gap; MGT-14 sits under Section 117.
3. Statutory registers that were never maintained
The Register of Members, Register of Charges and Register of Directors and Key Managerial Personnel are not optional paperwork. Section 88 requires them, and Section 88(5) makes non-maintenance punishable with a fine of not less than ₹50,000, extending to ₹3,00,000, plus ₹1,000 for every day the failure continues. ROC benches have imposed exactly this penalty. A missing Register of Members is a red flag precisely because it is the primary evidence of who owns the company.
4. Annual returns and financials not filed on time
Gaps in Form MGT-7 (annual return, Section 92) and Form AOC-4 (financial statements, Section 137) tell an investor that governance is weak and penalties may be outstanding. These defaults are adjudicated under Section 454. Worse for founders personally: continuous default in filing financial statements or annual returns for three financial years can disqualify a director under Section 164(2) and vacate the office under Section 167, which is a problem no term sheet can paper over.
5. ESOPs granted without proper approval or PAS-3 on exercise
A private company issues employee stock options under Section 62(1)(b) read with Rule 12 of the Companies (Share Capital and Debentures) Rules, which requires a special resolution and a compliant scheme. When an employee exercises, that allotment must be reported in PAS-3 like any other. Skipping either step is a violation under Sections 42 and 62 and can attract the Section 450 general penalty. Undocumented ESOPs are one of the classic deal-killers because they distort the fully diluted cap table the investor is buying into.
6. Historical allotments without a valuation report
Before you exhale about angel tax: Section 56(2)(viib) of the Income Tax Act was repealed for all classes of investors with effect from 1 April 2025 by the Finance (No.2) Act 2024, so fresh share issues no longer carry angel-tax risk. The catch is that diligence looks backwards. Allotments made in earlier years at a premium, without a Rule 11UA valuation report on file, can still surface as a tax exposure for those prior assessment years. Keep every historical valuation certificate in the data room, even for years you think are closed.
7. A disqualified director or a deactivated DIN
An investor will run each director against MCA data. A director carrying a disqualification under Section 164, an office vacated under Section 167, or a Director Identification Number deactivated for a missed DIR-3 KYC, cannot validly sign the very board resolutions that approve the investment. Appointment and eligibility run through Sections 152, 164 and 167. Restoring a deactivated DIN and regularising the board is not a same-day fix.
8. FEMA reporting gaps on earlier foreign money
If you have ever taken foreign investment, every tranche should have been reported to the RBI: Form FC-GPR for a fresh issue to a non-resident, Form FC-TRS for a transfer between resident and non-resident. A missed FC-GPR does not just carry a Late Submission Fee; it can block a foreign VC from participating in the new round until the historical reporting is regularised. For a startup raising from an overseas fund, this is a gating item, not a footnote.
9. Unregistered charges and undisclosed related-party deals
Any loan secured against the company’s assets creates a charge that must be registered in Form CHG-1 under Section 77 and reflected in the Register of Charges. An unregistered charge is void against a liquidator and a nasty surprise for a diligence team. In parallel, related-party transactions, loans from directors, rent paid to a promoter, services from a founder’s other company, must have been approved under Section 188 and disclosed. Hidden RPTs and unregistered charges together tell an investor the books are not the whole story.
Deal-killer to provision: what each gap is measured against
| Data room gap | Provision | Exposure |
|---|---|---|
| Cap table ≠ MCA (PAS-3 missed) | Sec 42/62; PAS-3; Sec 450 | Shares unenforceable; ₹10,000 + ₹1,000/day |
| Minutes / MGT-14 gaps | Sec 118, SS-1/SS-2; Sec 117 | Governance red flag; filing default |
| Registers not maintained | Sec 88(5) | ₹50,000–₹3,00,000 + ₹1,000/day |
| MGT-7 / AOC-4 not filed | Sec 92, 137; Sec 454 | Adjudication; director DQ u/s 164(2) |
| ESOP unapproved / PAS-3 missed | Sec 62(1)(b), Rule 12; Sec 450 | Diluted cap table distorted; penalty |
| No historical valuation report | Sec 56(2)(viib) IT Act (pre-1 Apr 2025) | Prior-year tax exposure |
| Disqualified director / dead DIN | Sec 152, 164, 167 | Resolutions invalid; board vacancy |
| FC-GPR / FC-TRS not filed | FEMA; RBI reporting | Late fee; foreign VC blocked |
| Unregistered charge / hidden RPT | Sec 77 CHG-1; Sec 188 | Charge void; disclosure failure |
Series A due diligence, by the numbers
What you must do now: a pre-raise clean-up sequence
- Reconcile the cap table to MCA first. Pull your company master data and every PAS-3 filed to date, and match issued capital line by line against your spreadsheet. Every discrepancy is a task, not a rounding error.
- File every belated PAS-3 and MGT-14. Use the additional-fee route to bring past allotments and filable resolutions onto the record before diligence starts. This is the item that takes longest, so start here.
- Rebuild the statutory registers. Members, Charges, Directors and KMP, updated and signed. If they were never maintained, recreate them from resolutions and filings and note the position honestly.
- Close the annual filing backlog. Confirm MGT-7 and AOC-4 are filed for every year, and check that no director is sliding toward a Section 164(2) disqualification.
- Regularise the ESOP scheme. Verify the special resolution, the scheme document and a PAS-3 for every exercise. Reconcile the fully diluted cap table to the granted and exercised options.
- Assemble historical valuation reports. One Rule 11UA certificate per past premium allotment, filed and indexed, even for years you assume are settled.
- Check every director and DIN. Confirm DIR-3 KYC is current, no DIN is deactivated, and no disqualification is live before you rely on board resolutions.
- Clear FEMA reporting. Every past FC-GPR and FC-TRS on record, with Late Submission Fees paid where a filing slipped, so a foreign investor is never gated by history.
- Register charges and paper the RPTs. CHG-1 for every secured loan, satisfaction filed where a loan is repaid, and Section 188 approvals documented for every related-party arrangement.
- Index the room the way lawyers read it. Folder it by track, legal, financial, tax, regulatory, IP, HR, with current documents and controlled access. A well-ordered room is what buys back those 30–40% of weeks.
The deeper implication
According to CS Sapna Malpani, the founders who raise fastest are not the ones with the cleverest deck; they are the ones whose paper matches their pitch. Diligence rewards boring accuracy. A cap table that ties to the Registrar, a minute book with no holes, and registers that a lawyer can open and trust turn a two-month confirmatory process into a formality. The forward view is that this bar is rising, not falling. As MCA data and inter-form validation on the V3 portal get sharper, the gap between what a founder remembers and what the record shows becomes harder to hide during diligence. The startups that treat secretarial compliance as a live discipline rather than a year-end scramble will keep clearing rounds while their peers renegotiate from a weaker position.
Provisions founders confuse
PAS-3 versus MGT-14. PAS-3 is the return of allotment filed after shares are issued; MGT-14 is the filing of certain board and special resolutions. An allotment can need both, and diligence teams check for each separately.
Section 42 versus Section 62. Section 42 governs private placement to identified investors, capped at 200 offerees per kind of security per financial year, with Qualified Institutional Buyers and ESOP employees excluded from that count. Section 62 governs rights issues and preferential allotments and the ESOP route under 62(1)(b). A round is often structured under one and mistakenly documented under the other.
Section 56(2)(viib) versus Rule 11UA. The former was the angel-tax charging provision, now repealed for issues on or after 1 April 2025. Rule 11UA remains the valuation methodology, and a valuation report is still worth keeping for pricing evidence and for historical years that predate the repeal.
- A Series A data room holds 90–120 documents; a clean one cuts diligence by 30–40%.
- Shares on your cap table with no board resolution or PAS-3 are legally unenforceable.
- Non-maintenance of the Register of Members draws ₹50,000–₹3,00,000 plus ₹1,000/day under Section 88(5).
- Three years of unfiled MGT-7 or AOC-4 can disqualify a director under Section 164(2).
- ESOP allotments need a special resolution under Section 62(1)(b) and a PAS-3 on every exercise.
- Angel tax under Section 56(2)(viib) is repealed from 1 April 2025, but prior-year allotments without a valuation still surface in diligence.
- A missed FC-GPR can block a foreign investor from the round, not merely trigger a late fee.
- Unregistered charges (Section 77) and undisclosed related-party deals (Section 188) read as hidden liabilities.
Sources and references
- Companies Act, 2013 — Sections 42, 62, 77, 88, 92, 117, 118, 137, 152, 164, 167, 188, 450, 454 (indiacode.nic.in; ca2013.com)
- Section 42 private placement compliance post-mortem — SCC Online Blog (scconline.com)
- Legal / investor due diligence readiness for Indian startups — Treelife (treelife.in)
- Investor Due Diligence Checklist for Indian Startups 2026 — Vakilsearch (vakilsearch.com)
- Series A diligence checklist — Y Combinator Startup Library (ycombinator.com)
- Abolition of angel tax, Section 56(2)(viib), Finance (No.2) Act 2024, effective 1 April 2025 (Business Standard; India Briefing)
- Section 88(5) register penalty orders — ROC adjudication (taxguru.in)
CS Sapna Malpani helps founders reconcile the cap table, clear ROC and FEMA backlogs, and build an investor-ready data room before the term sheet is signed.
→ Fundraising compliance support
→ Run the annual compliance check
→ MCA penalty and default handling
→ WhatsApp: +91 96208 03375
Frequently asked questions
What is an investor due diligence checklist for an Indian startup?
An investor due diligence checklist is the set of corporate, financial, tax, regulatory, intellectual property and HR documents a VC or acquirer reviews before releasing funds. For an Indian startup it centres on the legal and secretarial track: the cap table reconciled to MCA filings, board and general meeting minutes, statutory registers under Section 88, annual returns in MGT-7 and AOC-4, ESOP approvals, FEMA filings, and charge registrations. A Series A data room typically runs to 90–120 documents.
Why does a cap table need to match MCA records?
Because the MCA record, not the founder’s spreadsheet, is the legal position of the company’s equity. Every allotment is fixed by the approving resolution, the Form PAS-3 filed within 30 days, and the Register of Members under Section 88. When a diligence team finds shares with no matching resolution or filing, those shares are unenforceable in law, and reconciling them mid-round can add weeks to the close.
What are the most common due diligence deal breakers?
The recurring ones are a cap table that does not reconcile to MCA filings (often from missed PAS-3 on ESOP exercises), gaps in board and shareholder minutes, statutory registers that were never maintained, unfiled MGT-7 or AOC-4, undocumented ESOPs, director disqualification or a deactivated DIN, unresolved FEMA reporting, and unregistered charges or hidden related-party transactions.
Is angel tax still a diligence risk in 2026?
For new share issues, no. Section 56(2)(viib) of the Income Tax Act was repealed for all classes of investors with effect from 1 April 2025 by the Finance (No.2) Act 2024. But diligence looks at prior years too, so premium allotments made before that date without a Rule 11UA valuation report can still raise a historical tax question. Keep every past valuation certificate in the data room.
What is the penalty for not maintaining statutory registers?
Under Section 88(5) of the Companies Act, 2013, failure to maintain the Register of Members and other required registers is punishable with a fine of not less than ₹50,000, extending to ₹3,00,000, and a further ₹1,000 for every day the failure continues. ROC benches have imposed this penalty in real orders, and a missing register is a diligence red flag regardless of the fine.
How long does startup due diligence take, and how do I speed it up?
Series A confirmatory diligence usually runs 8–16 weeks. A well-organised data room can cut that by 30–40%, and Y Combinator notes that having documents ready before the term sheet is signed can save up to a week at closing. The fastest way to speed it up is to reconcile your cap table to MCA data and clear filing backlogs before you circulate the term sheet, not after.
Do ESOPs need separate filings during due diligence?
Yes. A private company grants ESOPs under Section 62(1)(b) read with Rule 12, which needs a special resolution and a compliant scheme. Each exercise is an allotment that must be reported in Form PAS-3. Diligence reconciles granted and exercised options into the fully diluted cap table, so undocumented ESOPs distort the very ownership picture the investor is buying.