Skip to main content
    Zurvek

    Venture Capital Due Diligence Checklist:The Complete 99-Point Framework.

    A structured venture capital due diligence checklist used by professional investors, family offices, and corporate venture funds to evaluate startups across seven institutional pillars — team, product, market, traction, financials, moat, and risk.

    12-minute read · Institutional framework · Decision-support, not advisory

    In short

    A startup due diligence checklist is the fixed set of items an investor verifies before committing capital. It covers seven pillars — founding team, product and technology, market opportunity, traction, financial health, competitive moat, and risk — and each item resolves to a document in the data room, a reference call, or an independent reconstruction. Seed diligence commonly runs two to four weeks; Series A and later commonly runs four to eight weeks.

    Free template

    Download the 99-point checklist as a printable PDF

    All seven pillars, the red flags for each, the phase timeline and the data room request list — with tick boxes for committee use.

    Introduction

    Every year, significant capital is deployed into startups that ultimately fail. Some collapse because the market never materialises. Others struggle with execution, governance gaps, weak financial controls, supply-chain vulnerabilities, regulatory exposure, or overestimated growth projections.

    For venture capital firms, family offices, angel investors, corporate venture funds, and innovation programs, conducting thorough due diligence is one of the highest- leverage parts of the investment process. This guide consolidates the categories professional investors examine before committing capital.

    What is venture capital due diligence?

    Venture capital due diligence is the process of evaluating a startup's viability, risks, growth potential, financial health, market opportunity, and management team before making an investment decision. The objective is not to predict the future with certainty. The objective is to identify risks, validate assumptions, and improve decision quality.

    • • Reduce avoidable investment losses
    • • Identify hidden risks and structural fragility
    • • Validate founder claims against independent evidence
    • • Compare opportunities across a consistent framework
    • • Strengthen the investment committee's audit trail

    The seven pillars of startup due diligence

    Most institutional investors evaluate startups across seven categories. Each pillar anchors a section of the checklist below.

    01

    Founding team

    Investors frequently say they back founders before products. Structural questions about background, commitment, and governance matter more than résumé polish.

    Founder background

    • Relevant industry experience
    • Prior company-building history
    • Achievements that support credibility
    • Reference availability across past employers and customers

    Founder commitment

    • Full-time engagement of each founder
    • Personal capital invested
    • Evidence of long-term commitment (vesting, lock-ups, no side ventures)

    Team structure

    • Technical leadership in place
    • Commercial leadership in place
    • Critical functions covered without single-person dependency

    Governance

    • Board structure documented
    • Voting rights clarified
    • Shareholding cap table reconciled
    • Founder vesting and reverse-vesting agreed
    How experienced investors verify this pillar
    • Ask for two references the founder did not nominate — a former manager and a former direct report. Nominated references confirm; unnominated ones calibrate.
    • Reconcile the cap table against signed instruments (SAFEs, notes, ESOP grants) rather than the deck slide. Undocumented promises surface here more often than fraud does.
    • Treat part-time status as a structural fact, not a character issue: it changes hiring speed, not founder quality.

    Questions asked in this pillar

    • ?Why this problem, and why now — what specific experience put you on it?
    • ?What has each founder shipped before, and what did you ship together under pressure?
    • ?How are equity, decision rights, and vesting split, and what happens if a founder leaves in year two?
    • ?Which two people outside your nominated references know your work best?
    Red flags
    • Active founder disputes
    • Excessive early-stage turnover
    • Missing technical leadership
    • Ambiguous ownership records
    02

    Product and technology

    The product must address a meaningful problem and survive technical scrutiny. Absence of polish is not a flag at early stage; absence of structural integrity is.

    Product validation

    • Clearly articulated customer pain point
    • Evidence of active usage
    • Returning-user behaviour

    Technology assessment

    • Architecture scalability under projected load
    • Infrastructure resilience and failover posture
    • Security controls (access, secrets, audit)
    • Data privacy and regulatory alignment

    Intellectual property

    • Patents filed or granted
    • Proprietary technology documented
    • Trade secrets and know-how protections
    • Licensing agreements reviewed

    Technical risk review

    • Third-party dependency mapping
    • Technical debt visibility
    • Single points of failure identified
    • Cybersecurity posture assessed
    How experienced investors verify this pillar
    • Watch one real user complete the core workflow unassisted. A demo run by the founder tests the founder, not the product.
    • Ask which part of the stack is owned versus rented. Third-party model or API dependence is workable, but it must be priced into the moat discussion, not hidden in it.
    • Check whether the roadmap items that justify the valuation are shipped, staffed, or aspirational.

    Questions asked in this pillar

    • ?Can a real customer complete the core workflow without you in the room?
    • ?Which parts of the stack do you own, and which are rented from a third party?
    • ?What breaks first at ten times current load, and what is the plan for it?
    • ?Which roadmap items are shipped, which are staffed, and which are still aspiration?
    Red flags
    • No technical moat
    • Heavy dependence on a single vendor
    • Unsecured customer data
    • Unclear product roadmap
    03

    Market opportunity

    Even exceptional teams compress under weak market conditions. Market sizing is most useful as a falsifiable claim, not a marketing artefact.

    Market sizing

    • Total Addressable Market (TAM) source and method
    • Serviceable Addressable Market (SAM) reasoning
    • Serviceable Obtainable Market (SOM) within plan horizon

    Industry dynamics

    • Underlying growth rate
    • Regulatory environment
    • Competitive intensity
    • Exposure to technological disruption

    Customer demand

    • Acquisition trend over the last 6–12 months
    • Retention curves
    • Expansion opportunity per cohort

    Geographic risk

    • Country concentration
    • Political and policy risk
    • Supply-chain dependencies
    How experienced investors verify this pillar
    • Rebuild the TAM bottom-up from priced units and reachable accounts. Top-down analyst figures rarely survive that reconstruction.
    • Separate market timing from market size. A correct market entered three years early behaves like a small one.
    • Ask what has to remain true externally — regulation, platform access, input costs — for the market thesis to hold.

    Questions asked in this pillar

    • ?Rebuild the market size bottom-up: how many reachable accounts, at what price?
    • ?What has to stay true externally — regulation, platform access, input costs — for the thesis to hold?
    • ?Why has no incumbent solved this, and what changes if one decides to?
    • ?What tells you the timing is now rather than three years out?
    Red flags
    • Unrealistic TAM extrapolations
    • Single-customer concentration
    • Declining underlying industry
    • Unresolved regulatory uncertainty
    04

    Traction and execution

    Traction is evidence — not promise. Quality of growth matters more than its magnitude at early stage.

    Revenue metrics

    • Monthly Recurring Revenue (MRR)
    • Annual Recurring Revenue (ARR)
    • Revenue growth rate
    • Gross margin trajectory

    Customer metrics

    • Customer Acquisition Cost (CAC)
    • Lifetime Value (LTV)
    • Churn rate by cohort
    • Net revenue retention

    Operational metrics

    • Sales efficiency
    • Conversion across the funnel
    • User engagement signals
    • Product adoption depth

    Execution quality

    • Delivery consistency across roadmap
    • Hiring throughput and quality
    • Strategic partnership progress
    How experienced investors verify this pillar
    • Define the activity that counts as usage before reading any growth chart, then re-derive the numbers under that definition.
    • Split growth into new, retained, and reactivated. Aggregate curves conceal churn that only appears in cohorts.
    • Confirm pilots and LOIs against invoices. Unpaid pilots are interest, not revenue.

    Questions asked in this pillar

    • ?Show monthly cohort retention rather than cumulative totals — what does month six look like?
    • ?What share of revenue sits with the top three customers, and when do those contracts renew?
    • ?Which acquisition channel is repeatable, and what is payback on it today?
    • ?How much of reported revenue is contracted, recurring, or pilot money?
    Red flags
    • Growth without retention
    • Unsustainable acquisition costs
    • Revenue concentration in a single account
    • Missed delivery history
    05

    Financial health

    Financial analysis tests sustainability and capital sensitivity. The objective is visibility, not forecasting precision.

    Revenue analysis

    • Revenue source mix
    • Quality and recurrence of revenue
    • Forward predictability

    Expense analysis

    • Burn rate (gross and net)
    • Runway under current burn
    • Fixed-cost base
    • Variable-cost behaviour

    Capital structure

    • Previous funding rounds and instruments
    • Outstanding debt obligations
    • Convertible instruments
    • Liquidation preferences

    Financial controls

    • Accounting systems in place
    • Audit readiness
    • Internal controls over payments and access
    How experienced investors verify this pillar
    • Reconcile reported revenue to bank statements and GST or tax filings for at least two quarters.
    • Recompute runway on trailing three-month burn rather than the plan, and again on a scenario with no new revenue.
    • Look for founder loans, related-party transactions, and unrecorded liabilities before negotiating terms.

    Questions asked in this pillar

    • ?What is current burn, runway, and the operating model behind both?
    • ?Does the bank balance reconcile to the reported cash position?
    • ?What does the plan look like if the next round is flat or two quarters late?
    • ?Which costs are fixed commitments rather than discretionary spend?
    Red flags
    • Inconsistent reporting period over period
    • Unexplained expense lines
    • Poor cash management discipline
    • Excessive dilution relative to stage
    06

    Competitive advantage and moat

    Defensibility is durable only when it survives a competitor's response. Test the moat against the next move, not the current snapshot.

    Competitive position

    • Market differentiation
    • Customer switching costs
    • Brand strength
    • Distribution channels

    Moat assessment

    • Proprietary data assets
    • Network effects
    • Intellectual property
    • Regulatory barriers

    Defensibility under pressure

    • Ease of replication by a well-funded entrant
    • Likely competitor response
    • Time-to-replicate (TTR) estimate
    How experienced investors verify this pillar
    • Ask what a well-funded competitor would need — time, capital, data, distribution — to reach parity. If the honest answer is months, the defensibility claim is a head start.
    • Distinguish data volume from data advantage: the data must measurably improve the product for the customer who generated it.
    • Check whether switching costs are contractual, technical, or habitual. Only the first two survive a price war.

    Questions asked in this pillar

    • ?What would a well-funded competitor need to replicate this, and how long would it take?
    • ?Where do switching costs actually sit — data, workflow, contract, or habit?
    • ?Is the advantage structural, or is it current execution speed?
    • ?Which IP is assigned in writing from every employee and contractor?
    Red flags
    • Commodity product framing
    • Weak differentiation
    • No defensible advantage beyond timing
    07

    Risk assessment

    Every investment carries risk. The objective is to understand the risk profile, not to eliminate it.

    Business risks

    • Market risk
    • Execution risk
    • Technology risk

    Operational risks

    • Supply-chain dependencies
    • Vendor concentration
    • Key-employee dependency

    Legal risks

    • Litigation exposure
    • Compliance posture
    • IP disputes

    Macro risks

    • Interest-rate sensitivity
    • Inflation exposure
    • Geopolitical instability

    Scenario analysis

    • Revenue falls 30%
    • Costs rise 20%
    • Supply chains disrupted
    • Capital markets tighten
    How experienced investors verify this pillar
    • Run a pre-mortem: assume the investment failed in three years and ask the team to explain why. The answers map the real risk surface faster than a questionnaire.
    • List which risks are insurable, which are diligenceable, and which are simply carried. Naming the carried ones is the point.
    • Confirm regulatory and data-protection exposure against current filings, not intended compliance.

    Questions asked in this pillar

    • ?Which single dependency would hurt most if it disappeared tomorrow?
    • ?What regulatory change is plausible in this sector in the next 24 months?
    • ?Model revenue falling 30% — what is cut, and in what order?
    • ?What is the failure path you consider most likely, in your own words?
    Red flags
    • Single point-of-failure risks
    • Open regulatory exposure
    • Geopolitical concentration

    How long due diligence takes: the stage-by-stage timeline

    Seed diligence commonly runs two to four weeks; Series A and later commonly runs four to eight weeks. The phases overlap rather than run strictly in sequence — the checklist above is worked through in the order below.

    Phase 1 — Screening

    Days 1–3

    Decide whether the deal is worth analyst time at all.

    • Thesis fit and stage fit confirmed
    • Deck claims extracted and listed
    • Obvious disqualifiers surfaced (cap table, market, regulation)
    • Pass / proceed decision recorded with a reason

    Phase 2 — Commercial diligence

    Days 4–14

    Test whether the market and the traction story hold under scrutiny.

    • Customer and pipeline references completed
    • Retention and cohort data reconciled against claims
    • Competitive map with switching-cost assessment
    • Bottom-up market sizing rebuilt independently

    Phase 3 — Technical and financial diligence

    Days 10–25

    Verify the build and the books.

    • Architecture, security, and dependency review
    • Unit economics and burn multiple recomputed
    • Runway under base and downside cases
    • Cap table, ESOP pool, and prior-round terms reconciled

    Phase 4 — Legal and confirmatory

    Days 20–35

    Close the remaining structural risk before the wire.

    • IP assignment and contractor agreements verified
    • Material contracts and change-of-control clauses reviewed
    • Litigation, tax, and compliance checks cleared
    • Conditions precedent listed in the term sheet

    Phase 5 — Investment committee

    Days 30–40

    Force the disconfirming case to be heard before capital moves.

    • Fixed-structure memo circulated in advance
    • Explicit list of what the diligence did not cover
    • Pre-mortem: the three most likely failure paths
    • Decision and dissent recorded for the audit trail

    How deep to go: seed vs Series A vs Series B

    Diligence depth should match the evidence that exists. A pre-seed company cannot produce the operating history of a Series B company, and a growth-stage company should not get a pass on revenue quality. The same seven pillars are worked at different depths.

    Due diligence depth by pillar across seed, Series A and Series B
    PillarPre-seed / SeedSeries ASeries B+
    Founding teamBackground, commitment, and equity split verified; two to three references.Reference depth widens to reports and churned customers; hiring plan tested.Executive bench, succession, and governance structure reviewed formally.
    Product and technologyWorking product and live usage observed; architecture discussed, not audited.Architecture, security posture, and dependency mapping reviewed in detail.External technical review, penetration testing, and compliance certification.
    MarketBottom-up sizing sketched; timing thesis argued.Independent market work, competitive win/loss, and switching-cost analysis.Category share, pricing power, and expansion-market feasibility.
    TractionEarly usage, pipeline, and a handful of customer calls.Cohort retention reconciled to invoices; five to ten customer references.Net revenue retention, contract quality, and concentration tested at depth.
    Financial healthBank statements, burn, runway, and a simple operating model.Unit economics recomputed; accounting review of revenue recognition.Audited statements, quality-of-earnings work, and tax exposure review.
    Legal and structureCap table reconciled to instruments; IP assignments confirmed.External counsel reviews contracts, change-of-control, and prior rounds.Full confirmatory legal, litigation, regulatory, and insurance review.

    The data room request list

    Every checklist item above resolves to a document. Send this list at the start of deep diligence so the founder assembles it once rather than in fragments across four weeks.

    Corporate

    • Certificate of incorporation and charter documents
    • Cap table with fully diluted ownership
    • Shareholder and investor rights agreements
    • Board minutes and written consents
    • ESOP pool size, grants, and vesting schedules

    Financial

    • Monthly P&L, balance sheet, and cash flow (24 months)
    • Revenue by customer and by product line
    • Bank statements reconciled to reported cash
    • Burn, runway, and the operating model behind them
    • Tax filings and outstanding liabilities

    Commercial

    • Cohort retention and churn by month
    • CAC, payback period, and channel breakdown
    • Top-20 customer contracts and renewal dates
    • Pipeline with stage, value, and close probability
    • Pricing history and discounting practice

    Technical and legal

    • Architecture overview and infrastructure spend
    • Security posture, incidents, and remediation log
    • IP assignments from all employees and contractors
    • Open-source licence inventory
    • Litigation, regulatory correspondence, and insurance

    Why traditional due diligence often misses critical risks

    Traditional venture due diligence relies on spreadsheets, fragmented research, subjective judgment, and manual review. As startup ecosystems grow more complex, investors must evaluate technology, financial, regulatory, market, supply-chain, and geopolitical risks simultaneously.

    This complexity contributes to situations where well-funded startups later encounter risks that were visible in the data — but not surfaced by the process. The friction is not analyst capability. The friction is structural: confirmation bias, recency bias, and inconsistent committee memos compound across hundreds of deals.

    Modernising venture due diligence

    The next generation of startup evaluation combines human judgment with structured intelligence systems that assess hundreds of variables in parallel. Institutional investors increasingly require standardised evaluation frameworks, repeatable scoring methodologies, faster screening workflows, clearer risk visibility, and committee memos that are comparable across deals and across weeks.

    This is the design intent behind Zurvek's SenseCore Protocol — an adversarial, multi-agent evaluation system that runs the checklist above with deterministic claim extraction and a Zero-Inference policy on missing data, and ships a committee brief with an immutable Verdict Integrity hash.

    How to work the checklist without stalling the deal

    Ninety-nine points are not ninety-nine meetings. Most investors run them in three passes, each with a different question in mind:

    1. Pass 1 — Screen (30–60 minutes)

      Work only the points answerable from the deck and public record: founder history, market definition, stated traction, obvious competitive pressure. The output is not a decision — it is whether the remaining passes are worth the calendar.

    2. Pass 2 — Verify (1–2 weeks)

      Take every quantitative claim that survived the screen and match it to a primary artefact in the data room. A point is only cleared when the evidence column, not the narrative, supports it. Unverifiable points stay open rather than being scored generously.

    3. Pass 3 — Stress (committee week)

      Argue the downside case for each pillar that cleared. Where a pillar depends on one customer, one channel, one regulation, or one founder, record the dependency explicitly so the committee debates the fragility instead of the pitch.

    Absence of data is not a negative signal at pre-seed and seed. Record it as limited visibility, and note what evidence would close it later, rather than penalising a company for the stage it is at.

    What this checklist does not capture

    Every framework has blind spots, and naming them is part of the discipline. This one does not capture:

    • Founder dynamics that only surface under pressure — co-founder disagreement, decision latency, how bad news travels inside the company.
    • Timing dependence. A structurally sound company can still be early or late to a market shift the checklist has no way to date.
    • Private information held by incumbents, regulators, or the company's largest customers, none of which appears in a data room.
    • Second-order capital sensitivity — how the round behaves if the next one is priced flat, delayed two quarters, or does not arrive.
    • Anything about the portfolio it enters. Concentration, correlation, and fund construction sit outside a single-company review.

    A completed checklist is a structured basis for committee discussion. It is not a verdict on the company, and it does not transfer the decision away from the reader.

    Frequently asked questions

    What is venture capital due diligence?+

    Venture capital due diligence is the structured process of evaluating a startup's team, product, market, traction, financial health, defensibility, and risk profile before committing capital. The objective is not to predict the future but to identify risks, validate founder claims, and improve decision quality across an investment committee.

    What does a startup due diligence checklist cover?+

    A complete startup due diligence checklist covers seven pillars: founding team, product and technology, market opportunity, traction and execution, financial health, competitive moat, and risk assessment. Each pillar contains specific items investors verify against the data room, founder calls, and independent references.

    How is the VC due diligence process structured?+

    Most firms structure due diligence as screening, deep diligence, and committee review. Screening filters for fit; deep diligence verifies claims across the seven pillars; committee review tests the case against a fixed memo structure and surfaces disconfirming evidence before capital is deployed.

    What is an investment due diligence framework?+

    An investment due diligence framework is a repeatable evaluation structure — a fixed set of categories, questions, and evidence requirements — that lets an investor compare opportunities consistently. Frameworks reduce recency bias and make committee decisions auditable.

    What questions should investors ask founders during due diligence?+

    Investors ask founders about prior building history and references, customer acquisition and retention behaviour, cap-table and governance clarity, technology dependencies and single points of failure, unit economics, capital sensitivity, and scenario response. Good questions test claims; great questions test the founder's grasp of their own risks.

    How does AI-assisted due diligence differ from manual diligence?+

    Manual diligence is analyst-dependent and prone to confirmation bias. AI-assisted diligence — when adversarial rather than descriptive — extracts every claim deterministically, argues against the deck on structure, market, capital, execution, and timing, and produces a committee package with an auditable structure. It compresses time without compressing rigour.

    How long does venture capital due diligence take?+

    At seed stage, diligence typically runs two to four weeks; Series A and later commonly runs four to eight weeks because commercial references, financial reconciliation, and legal confirmatory work run in sequence. The phases overlap: screening in days 1–3, commercial diligence in days 4–14, technical and financial work in days 10–25, legal confirmatory work in days 20–35, and committee review at the end.

    What documents should an investor request in the data room?+

    Four groups: corporate (charter documents, cap table, shareholder agreements, board minutes, ESOP grants), financial (24 months of P&L, balance sheet and cash flow, revenue by customer, bank statements, tax filings), commercial (cohort retention, CAC and payback, top customer contracts, pipeline, pricing history), and technical or legal (architecture, security incidents, IP assignments, open-source licences, litigation and insurance).

    What are the most common red flags in startup due diligence?+

    Recurring structural flags are unresolved founder disputes, an ambiguous or unreconciled cap table, revenue concentration in one or two customers, retention curves that contradict the growth narrative, IP that was never assigned from contractors, and downside scenarios the founders have visibly never modelled. Each pillar section above lists the flags specific to it.

    How does early-stage due diligence differ from later-stage diligence?+

    Early-stage diligence works with incomplete data, so absence of information is recorded as an open question rather than treated as a negative signal; the weight sits on team, market structure, and capital sensitivity. Later-stage diligence has audited history to test, so the weight shifts to unit economics, retention durability, contract quality, and regulatory exposure.

    What questions do VCs ask during due diligence?+

    Diligence questions cluster by pillar: why this problem and why now, what each founder has shipped, whether a real customer can complete the workflow unassisted, how the market size rebuilds bottom-up, what monthly cohort retention looks like, how much revenue sits with the top three customers, what burn and runway are, what a competitor would need to replicate the product, and which single dependency would hurt most if it disappeared. Each pillar section on this page lists the specific questions used for it.

    How deep should due diligence go at seed versus Series A?+

    Diligence should be proportional to the evidence that exists. At seed, the work centres on founders, a working product, a bottom-up market case, bank statements and a reconciled cap table. At Series A, cohort retention is reconciled to invoices, unit economics are recomputed, architecture and security are reviewed properly, and external counsel handles contracts. At Series B and later, audited statements, quality-of-earnings work, external technical review and full confirmatory legal work apply. The stage comparison table on this page sets this out pillar by pillar.

    Is there a free startup due diligence checklist template to download?+

    Yes — the download on this page produces the full checklist as a formatted document covering the seven pillars, the verification evidence for each, the stage timeline and the data room request list. It is intended to be worked through per deal and attached to the investment memo as a record of what was and was not checked.

    Who runs due diligence at a venture fund?+

    At most institutional funds the deal partner owns the thesis while an associate or principal runs the evidence work; external counsel handles cap table, IP and contract review; and specialist reviewers are brought in for technical or regulatory questions. At angel and solo-GP scale the same categories apply with fewer people and a shorter timeline, so scoping matters more.

    What kills a deal in due diligence?+

    Deals most often die on structural findings rather than weak metrics: an unreconciled cap table, IP that was never assigned from contractors, revenue that cannot be traced to invoices or bank deposits, retention curves that contradict the growth narrative, undisclosed litigation or tax liabilities, and founder disputes surfaced by references. Weak numbers get priced; contradicted claims end the process.

    Conclusion

    A disciplined venture capital due diligence process does not eliminate risk. It improves decision quality. The most rigorous investors combine qualitative judgment with structured analysis across founders, technology, markets, traction, financial health, defensibility, and risk. A consistent framework lets the committee compare opportunities objectively and surface hidden risks before capital is deployed.

    Run this checklist on a real deck

    See the 99-point framework applied to a live pitch

    Zurvek runs the seven pillars above as an adversarial audit on the pitch deck and data room — claim by claim, with sources cited and friction surfaced. The committee brief is auditable and comparable across deals.

    How the checklist is applied by investor type: VC firms, angel investors, family offices, and accelerators.

    Zurvek is a decision-support system. Verdicts are analytical, not advisory. Investment decisions remain the responsibility of the reader.

    Run it on a real deal

    Run your next deal through the same checks

    Upload a deck and its supporting documents. Zurvek runs the adversarial passes and returns a committee brief you can argue with.

    Five adversarial passes

    Velocity, reconciliation, defensibility, red team, and governor — each reads the same evidence separately.

    A committee brief

    Verdict, scores, and the reasoning behind each, written for an investment committee rather than a dashboard.

    Contradictions listed

    Where the deck disagrees with itself or with the supporting documents, quoted rather than summarised.

    A locked integrity record

    The output is fingerprinted and time-locked, so the version the committee read can be re-checked later.

    5 evaluations are free, no card required. Zurvek is a decision-support system — verdicts are analytical, not advisory.

    How this is used by VC firms, family offices, NBFCs, and angel investors.