Legal Risk Audit Before Fundraising in India: Investor Due Diligence Readiness Checklist 2026
A pre-investment legal readiness framework for promoters and companies that want to find and fix issues before investors, funds or lenders discover them in due diligence.
Fundraising due diligence is rarely the best time to discover that the cap table is inconsistent, key intellectual property is owned by a founder, material customer contracts can terminate on change of control, employee equity promises are undocumented, statutory filings are incomplete or historic foreign-investment reporting has gaps.
A pre-fundraising legal risk audit reverses the sequence. Instead of waiting for the investor’s lawyers to issue a red-flag report, the company conducts its own legal readiness review, corrects curable defects, prepares disclosure positions and organises evidence before the data room opens.
This is especially useful before venture capital, private equity, strategic investment, family-office investment, pre-IPO institutionalisation, structured equity or any transaction in which an investor will expect formal legal due diligence.
1. Why legal readiness matters before fundraising
Investors are not only buying growth. They are buying a legal position: ownership, governance rights, future exitability, IP, contracts, regulatory permissions, workforce stability and the ability to enforce negotiated protections.
A legal defect therefore has several possible transaction consequences:
- valuation reduction;
- specific indemnity;
- escrow or holdback;
- condition precedent;
- founder undertaking;
- enhanced investor veto rights;
- additional representations and warranties;
- post-closing remediation covenant;
- deal delay; or
- withdrawal from the investment.
For the buyer-side version of this analysis, see our Hidden Liabilities in M&A Deals in India.
2. Start with the proposed funding structure
The legal audit should begin by asking what is actually being raised: fresh equity, preferential allotment, rights issue, convertible instrument, debt, secondary sale or a combination. The structure determines approvals, documents, valuation, reporting and investor rights.
The Companies Act, 2013 contains the core corporate framework. Depending on structure, sections such as section 42 on private placement and section 62 on further issue of share capital may become relevant, together with applicable rules and the company’s Articles.
3. Cap table and share-title reconciliation
Before the investor sees the cap table, reconcile it against legally operative records. Review:
- register of members;
- share certificates;
- allotment and transfer records;
- historic ROC filings;
- shareholder agreements;
- convertible securities;
- options, warrants and ESOPs;
- beneficial ownership declarations where applicable;
- pledges and encumbrances;
- founder vesting or buyback arrangements;
- informal promises of equity.
A spreadsheet cap table is not enough if the statutory and contractual records do not support it.
4. Articles, shareholder rights and investor conflicts
Read the Articles and every existing shareholder agreement before negotiating new investor rights. Identify pre-emption, ROFR, tag, drag, anti-dilution, veto, information rights, reserved matters, founder restrictions, transfer restrictions and consent requirements.
Existing rights may prevent the company from delivering what a new investor expects. They may also require waivers, amendments or termination agreements as conditions precedent.
5. Corporate and secretarial compliance clean-up
Investors commonly request incorporation documents, statutory registers, Board minutes, shareholder minutes, annual returns, financial statements, charges, director records and key ROC filings. The pre-fundraising audit should test:
- whether material filings were made;
- whether filings match underlying resolutions;
- whether Board and shareholder approvals exist;
- whether statutory registers are current;
- whether director disclosures are complete;
- whether old charges have been satisfied;
- whether related-party transactions were properly documented;
- whether historic share issuances are legally traceable.
For a broader operational review, see our Legal Compliance Audit for Private Limited Companies in India.
6. Foreign-investment readiness
If the proposed investor is a person resident outside India, the company should review the transaction under FEMA, the Foreign Exchange Management (Non-Debt Instruments) Rules, 2019 and applicable RBI directions and reporting requirements.
The RBI’s Master Direction – Foreign Investment in India explains the broader framework and should be read with current notifications and the NDI Rules. The RBI reporting regulations provide, among other things, for reporting qualifying fresh issues to non-residents in Form FC-GPR within the prescribed period. The RBI’s FIRMS / Single Master Form portal is used for relevant foreign-investment filings.
A readiness review should test historic foreign investment as well as the new round: sectoral eligibility, approval route where applicable, pricing, issue and transfer history, reporting, downstream investment and any prior delays or contraventions.
7. Investor and fund-side regulatory context
Where investment is coming from a regulated fund, investor-side regulation can affect diligence, approvals, conflicts and documentation. SEBI’s AIF framework is current and actively evolving; the SEBI Alternative Investment Funds regulatory materials should be checked where relevant. The AIF Regulations were last amended on 14 July 2026, and SEBI issued additional AIF circulars in 2026.
The investee company should not assume that a signed term sheet means the investor’s internal or regulatory diligence is complete.
8. Material contracts: identify consent and revenue risks
Investors will focus on the agreements that make the business valuable. Review:
- top customer contracts;
- major vendor and supplier agreements;
- technology and cloud agreements;
- leases and property arrangements;
- distribution and franchise contracts;
- government contracts;
- financing arrangements;
- IP licences;
- outsourcing agreements.
Flag change-of-control clauses, assignment restrictions, termination rights, exclusivity, unusual indemnities, uncapped liability, weak IP terms, data-processing obligations, long-overdue receivables and informal relationships that generate material revenue.
Use the detailed Contract Risk Audit where contract exposure is material.
9. Intellectual property ownership
One of the most damaging diligence findings is that the company does not own the assets on which its valuation depends. Review:
- founder-created code and content;
- employee IP assignment;
- consultant and freelancer assignments;
- trademarks and domain names;
- patents and designs where applicable;
- open-source software obligations;
- third-party licences;
- group-company or promoter ownership of brands and technology.
If critical IP sits outside the company, consider pre-closing assignment or a properly structured licence rather than relying on a broad warranty.
10. Employment, founders and key-person risk
Investors typically examine whether the people driving the business are legally tied to it. Review founder and key-management agreements, employment documentation, confidentiality, IP assignment, notice periods, non-solicitation where legally appropriate, incentive arrangements, ESOPs, historic equity promises and employee disputes.
Also test statutory workforce compliance and contractor arrangements. In 2026, labour review should reflect the operative Labour Codes and applicable rules and state requirements. The Ministry of Labour’s official Labour Codes resource is the appropriate primary reference.
11. Data protection and cyber diligence
For data-intensive companies, investors increasingly examine how the company obtains, uses, shares, protects and retains personal and commercial data. Review:
- privacy notices and consent architecture;
- customer and employee data inventory;
- processor/vendor contracts;
- security incidents and breach history;
- privileged-access controls;
- employee offboarding;
- retention and deletion;
- cross-border processing where relevant;
- customer contractual security obligations.
MeitY notified the Digital Personal Data Protection Rules, 2025 with staged commencement. A 2026 diligence file should distinguish current legal obligations from transition-readiness work.
12. Litigation, notices and regulatory proceedings
Prepare a complete dispute schedule before the investor asks for it. For each material matter capture:
- parties and forum;
- claim or demand amount;
- procedural stage;
- interim orders;
- next deadline;
- management assessment;
- external counsel;
- provision or contingent exposure;
- settlement discussions;
- business impact.
Also include threatened claims and material notices. An investor will be more concerned by an undisclosed dispute than by a properly documented and commercially understood dispute.
For acquisition-style dispute review, see our Litigation & Regulatory Due Diligence Checklist.
13. Related-party and promoter transactions
Investor diligence should not discover hidden value leakage. Review promoter loans, group-company payments, related vendors, leases, management fees, guarantees, personal assets used by the company, company assets used personally and business IP held outside the company.
Where promoter integrity and dependency are central to the round, use our Promoter Due Diligence in India framework.
14. Licences and regulatory permissions
Identify every licence, registration and permission required for the current business—not only those held. For each one test validity, renewal, conditions, inspections, notices, geographic scope, transferability and impact of a change in ownership or control.
If the business cannot legally operate without a licence, that item should be treated as a transaction-critical condition rather than routine compliance.
15. Build the data room before the investor does
A structured data room reduces diligence delay and exposes missing evidence internally. Suggested top-level folders include:
- Corporate and constitutional documents.
- Share capital and cap table.
- Board and shareholder records.
- Financial and tax.
- Material contracts.
- Employment and ESOP.
- IP and technology.
- Litigation and notices.
- Regulatory and licences.
- Property and leases.
- Data protection and cybersecurity.
- Insurance.
- Related parties.
- Foreign investment / FEMA.
Use consistent naming, dates and version control. Do not bury unfavourable documents in unrelated folders; disclosure strategy should be deliberate and transparent.
16. Red-flag grading before fundraising
| Level | Meaning | Pre-round response |
|---|---|---|
| Critical | Threatens legality, ownership or investment thesis | Fix before diligence or reconsider structure |
| High | Material deal or valuation exposure | Remediate, quantify and prepare disclosure |
| Medium | Manageable but relevant | Correct before closing where feasible |
| Low | Documentation or process defect | Routine clean-up |
17. Which defects should be fixed before the term sheet?
Where possible, fix defects that could alter negotiation leverage: unclear share title, missing founder IP assignment, critical licence expiry, unresolved investor consent, major customer contract lapse, undocumented employee equity and easily curable corporate-record defects.
Some matters cannot be cured immediately—for example pending litigation or historic tax disputes. Those should be quantified and prepared for transparent disclosure rather than concealed.
18. From diligence finding to investment-document response
Every material finding should be mapped to a transaction response:
Finding → remediation → disclosure → valuation impact → condition precedent → representation/warranty → indemnity → post-closing covenant.
This is the same discipline described in our From Legal Due Diligence to SPA guide, adapted to an investment round.
19. 30-day fundraising legal-readiness plan
Days 1–7: confirm round structure, investor profile, cap table and legal-universe scope. Build the data-room index.
Days 8–15: audit corporate, contracts, employment, IP, regulatory, litigation, data and foreign-investment records.
Days 16–23: classify red flags; remediate curable defects; obtain missing approvals, assignments and evidence where legally possible.
Days 24–30: prepare disclosure schedule, management Q&A, unresolved-risk memo and transaction action list.
Frequently asked questions
When should a company start legal readiness before fundraising?
Ideally before the investor’s formal diligence begins, so management has time to correct curable defects and assemble evidence without transaction pressure.
Is a cap table enough to prove ownership?
No. It should reconcile with statutory registers, share certificates, allotment and transfer records, contractual rights and other legally operative documents.
Do foreign investors require a separate legal review?
Yes. FEMA, NDI Rules, sectoral eligibility, pricing, approvals and RBI reporting may become relevant depending on the investor and transaction.
Should pending litigation be disclosed?
Material disputes and notices should be handled through a legally appropriate disclosure process. Concealment can create greater transaction risk than a well-understood disclosed matter.
Can a company fix every diligence issue before fundraising?
No. Some risks are inherently ongoing. The objective is to cure what can be cured, quantify what cannot and ensure the investment documents allocate remaining risk clearly.
Related resources
- Corporate Risk & Compliance Resources
- Corporate Legal Risk Audit in India
- M&A Due Diligence Checklist for Private Companies
- Corporate Risk Register in India
Companies seeking a preliminary discussion about legal readiness before fundraising, investment or strategic transactions may use the corporate enquiry form for information exchange.
Author: Adv. Govind Bali, Fastrack Legal Solutions LLP.