Startup Due Diligence Checklist for Angel Investors (2026)

Due diligence is the structured process of verifying the claims a startup makes in their pitch deck. For angel investors, it separates informed risk-taking from blind gambling. This checklist covers all 10 critical dimensions — with explanation of what to look for, common deceptions, and specific verification methods.

In 2026, the bar for pre-investment scrutiny has risen sharply. The era of "growth at all costs" is over; investors now demand verifiable unit economics, evidence of founder integrity, and defensible technical differentiation. Startups that pass a thorough due diligence process are far more likely to use capital efficiently and deliver returns. Those that do not will eventually unravel — often after the capital is already deployed.

This checklist is organized into 10 dimensions. Work through each systematically. Some sections will take 30 minutes; others, like legal review, may require external counsel. The time invested here is the price of avoiding catastrophic write-offs later.

1. Team & Founders

• ✓ Founder background verification (employment history, education, prior exits).
• ✓ Technical vs. business skill balance within the core team.
• ✓ Founder dynamics (how long have they worked together, equity split).
• ✓ Reference checks from former colleagues or investors.
• ✓ Commitment level (are all founders full-time?).
• ✓ OSINT check: LinkedIn profile vs. public records, unexplained employment gaps.
• ✓ Criminal background check and public litigation history.

The team is the highest-leverage variable in early-stage investing. At the seed stage, the product will change, the market thesis will evolve, and the go-to-market will pivot — but the team is relatively fixed. Experienced investors spend more time here than anywhere else.

What to actually verify: LinkedIn profiles should be cross-checked against independent sources. Claimed exits should be verified — a "successful exit" claimed by a founder sometimes means they were one of 40 employees at a company that was acqui-hired for almost nothing. Ask specifically: did you personally receive proceeds from the exit? If so, how much? Prior technical founders should have verifiable GitHub or patent histories. Experienced operators should have verifiable management timelines at credible companies.

The most common mistake investors make: taking the pitch deck team page at face value. Inflated titles, claimed advisory relationships that are often just a single coffee meeting, and vague "consulting" roles filling employment gaps are all widespread. A brief OSINT check — searching the founder's name alongside their claimed employers — takes 20 minutes and regularly surfaces discrepancies.

2. Product & Technology

• ✓ Product demo and roadmap validation.
• ✓ Technical moat (patents, proprietary algorithms, or data network effects).
• ✓ Scalability of the current tech stack.
• ✓ Codebase health and GitHub activity (commits, contributors, recency).
• ✓ Third-party dependencies and vendor concentration risks.
• ✓ Is the "AI" proprietary, or a thin wrapper on OpenAI / Anthropic APIs?

Technology diligence in 2026 carries a nuance that did not exist five years ago: many startups claiming "proprietary AI" are built entirely on third-party API calls with no genuine technical differentiation. When a startup says "our proprietary AI engine analyzes X," the correct question is: what exactly makes this proprietary? If the answer is "we have a very good prompt," that is not a moat.

Genuine technical moats look like one of the following: a trained model on proprietary data that competitors cannot access; a patent-protected algorithmic approach; a feedback loop that accumulates data advantages over time (e.g., every user interaction improves the model, and the model is trained on company-owned data). Network effects also count — when the product becomes more valuable as more users join, and switching costs accumulate.

For a live product, request a screenshare demo rather than a pre-recorded video. Pre-recorded videos are trivially edited. Ask the founders to navigate to an edge case you specify. Check their GitHub organization's public repositories: consistent recent commits suggest genuine development. A repository with a burst of activity three months ago followed by nothing is a significant warning sign — it suggests the team built an MVP for fundraising and has been primarily in pitch mode since.

3. Market Size

• ✓ TAM/SAM/SOM calculations based on realistic bottom-up data.
• ✓ Market growth rate and tailwinds (PEST analysis).
• ✓ Customer persona definition and pain point urgency.
• ✓ Regulatory environment and potential hurdles.
• ✓ Market timing: why is this the right moment to build this?

Market sizing slides are among the most frequently misleading elements of pitch decks. The classic pattern is a top-down estimate: "The global healthcare market is worth $8.9 trillion. We are targeting just 0.1% of that." This is not market sizing; it is math performed on an irrelevant number. A healthcare SaaS tool for rural US pharmacies is not competing for 0.1% of global healthcare spend.

The correct methodology is bottom-up. Start with: how many specific customers exist who match your ideal customer profile? What is a realistic average annual contract value for those customers? Multiply these two numbers together, and you have a credible SAM. Your SOM — Serviceable Obtainable Market — should reflect what is achievable in 3 to 5 years given your go-to-market strategy and competitive environment. A pre-seed startup claiming a SOM of $500M in year three is almost always constructing a fantasy.

Strong market analysis also addresses timing. Why does this company need to exist now, in 2026, rather than three years ago or three years from now? The best answers reference a specific enabling change: a new regulation, a new API capability, a cost reduction in a key input, or a shift in consumer behavior. "Now" answers that cite a specific trigger are credible. "The market is growing" without identifying why is not.

4. Traction & Revenue

• ✓ MRR or ARR — request actual bank statements or Stripe dashboard screenshots.
• ✓ Customer acquisition cost (CAC) vs. lifetime value (LTV) trends.
• ✓ Churn rate and retention cohorts — request cohort data by month of acquisition.
• ✓ Sales pipeline health and conversion rates (leads to demos to closes).
• ✓ Concentration risk: what percentage of revenue comes from the top 3 customers?
• ✓ Organic vs. paid acquisition split.

Traction verification is the single most falsifiable claim in a pitch deck, and yet investors consistently fail to verify it properly. "We are doing $50K MRR" is a statement that can be confirmed or disproven in two minutes by reviewing Stripe or bank statements. Ask for it. The fact that most investors do not ask is a known pattern that some founders exploit.

Beyond the revenue number, dig into quality. A company doing $50K MRR with 80% coming from one customer has a fundamentally different risk profile than one with 50 customers at $1K each. Customer concentration above 30% in a single client is a material risk. If that client churns — or renegotiates — the company's viability changes overnight. Cohort retention data tells you whether customers are finding genuine value: healthy SaaS retention looks like 85%+ annual retention on a dollar-weighted basis. Below 70%, the business is likely refilling a leaky bucket.

Vanity metrics are another common distraction: total registered users, app downloads, social media followers, email list size. These numbers are not traction. Traction is revenue, active paying customers, month-over-month growth in revenue from those customers, and evidence that those customers will expand their spend over time.

5. Financial Projections

• ✓ P&L statement accuracy for the last 12-24 months with supporting documentation.
• ✓ Burn rate and current runway (months remaining at current spend).
• ✓ Capital efficiency (revenue generated per dollar burned to date).
• ✓ Reasonableness of future growth assumptions — model the base case, not the best case.
• ✓ Use of funds breakdown: specific hires, marketing channels, R&D milestones.
• ✓ Path to profitability or next funding round milestone.

Financial due diligence begins with the historical P&L. What has the company spent money on over the past 12-24 months, and what have they produced with that capital? Capital efficiency — sometimes expressed as the ratio of ARR growth to net burn — should be improving over time. A company that burned $2M to reach $200K ARR and now requires another $3M to reach $400K ARR is getting less efficient, not more. This needs explanation.

The financial projections deserve skeptical scrutiny. The most common problem is a growth assumption that does not derive from any model — it is simply the number the founders chose to hit the return they think investors want to see. Press for the underlying assumptions: what are the specific customer acquisition channels? What is the average monthly marketing budget, and what CAC does that produce? How many sales reps will you hire, and what is their average quota? If the founders cannot answer these questions, the financial model is not a model — it is a wish.

The "use of funds" slide matters more than most investors give it credit for. "Hiring and marketing" is not a use of funds. A credible use of funds looks like: 2 senior engineers ($280K annually), 1 head of sales ($180K + commission), Google Ads testing ($60K for 6 months), and $100K reserve for infrastructure scaling. That level of specificity signals that the founders have actually thought through the operational plan behind the fundraise.

6. Legal & IP

• ✓ Articles of incorporation — ideally a Delaware C-Corp for US-based startups.
• ✓ Capitalization table with all outstanding options, warrants, and SAFEs.
• ✓ IP assignment agreements (did founders formally assign all pre-incorporation IP?).
• ✓ Pending litigation or outstanding liabilities.
• ✓ Trademark and domain ownership — confirmed via WHOIS and USPTO search.
• ✓ Employee and contractor agreements with IP assignment clauses.

IP assignment is the legal landmine that destroys otherwise-strong deals. When a technical founder builds the core product before formally incorporating the company — often the case with solo founders building for 6-12 months before raising — the IP legally belongs to the individual, not the company. This needs to be formally assigned via an IP assignment agreement. If this has not happened, you are potentially investing in a company that does not own its own core asset.

The cap table deserves careful review as well. A messy cap table — one with complex SAFE structures, accumulated convertible notes, multiple rounds of uncapped notes, and existing investor provisions — can significantly affect the economics of your investment. Understand what happens to your ownership at exit in a range of scenarios: $10M acquisition, $50M acquisition, $200M IPO. Pro-rata rights, liquidation preferences, and anti-dilution provisions all affect the outcome. Have a lawyer review the cap table before committing capital at anything above a casual check size.

7. Competitive Landscape

• ✓ Direct and indirect competitor mapping — include "status quo" alternatives.
• ✓ Startup's unique value proposition (UVP) vs. each competitor.
• ✓ Barrier to entry for new competitors — why can't a well-funded team copy this?
• ✓ Incumbent response risk — what happens if Salesforce, Google, or Amazon enters?
• ✓ Competitor funding levels and recent product releases.

The best founders know their competition better than their investors do. When a founder can articulate in precise detail why a specific competitor's approach is fundamentally limited — not just "we are better," but "their architecture makes it impossible for them to do X, which is the core of our value proposition" — that signals deep domain expertise. When founders wave away competition with "we move faster," that signals naivety about competitive dynamics at scale.

The most dangerous competitor is usually not a direct one — it is the "status quo." For most B2B software products, the real competition is spreadsheets, existing workflows, and inertia. A startup's moat must be large enough not just to beat direct competitors, but to overcome the organizational friction of adopting a new tool. If the switching cost from the startup's product back to Excel is low, retention will always be at risk.

8. Exit Potential

• ✓ Comparable acquisition multiples in the sector (public M&A databases).
• ✓ Potential strategic acquirers list — name the specific companies and why they would buy.
• ✓ IPO window and public market sentiment for comparable companies.
• ✓ Alignment between founders and investors on exit strategy and timeline.
• ✓ Founder vesting schedules — is there a lock-up that prevents premature exit?

Exit planning at the seed stage may seem premature, but misalignment between founder and investor exit expectations is a leading cause of investment relationship breakdowns. Some founders intend to build a lifestyle business — profitable, owner-operated, not designed for acquisition. That is legitimate, but it is not a venture investment. Some founders want to build for 20 years and take the company public. Some want to flip it in 5 years. Know which type you are backing before you wire the money.

A credible exit analysis names specific potential acquirers. Not "a large tech company," but "Microsoft, because they have been acquiring companies in the workflow automation space and recently paid 8x ARR for competitors X and Y." This level of specificity demonstrates that the founders understand the landscape they are operating in and have thought concretely about value creation for investors.

9. Red Flag Scoring: How to Prioritize What You Find

Not every finding during due diligence is equally consequential. A minor inconsistency in a market sizing methodology is very different from a falsified employment claim. Use a severity framework to prioritize your findings:

CRITICAL (grounds for immediate pass): Falsified credentials or employment history. Undisclosed litigation involving the founder personally. IP that is not formally assigned to the company. A cap table that has been misrepresented. Fraudulent revenue claims.

HIGH (requires deep investigation before proceeding): Customer concentration above 50% in one client. Burn rate that puts runway at less than 6 months post-investment. A technical stack with no proprietary components. Market sizing that falls apart under basic scrutiny. Founder coachability issues — founders who cannot acknowledge mistakes or limitations.

MEDIUM (negotiate protections or price in the risk): One co-founder gap that needs to be filled. Single-channel customer acquisition with no testing of alternatives. Financial projections that are optimistic but not absurd. Minor gaps in a founder's LinkedIn history that have a credible explanation.

The purpose of this scoring is not to assemble a list of flaws and then rule out every startup that has any. Every early-stage company has flaws. The question is whether the flaws are fixable with capital, time, and the right hires — or whether they are structural to the business model, the team, or the market.

10. Building Your Due Diligence Process: Timelines and Team Structure

For a solo angel investor writing $25K-$100K checks, a practical due diligence process should take between one and three weeks and involve three phases. Phase one — the initial screen — should take no more than two hours. Review the deck, run basic OSINT on the founders (LinkedIn cross-check, domain registration, GitHub), and assess whether the market is large enough and the team credible enough to warrant deeper investigation. If both answers are yes, proceed.

Phase two — the deep dive — takes the bulk of the time. This involves at least one hour of founder interviews (ideally two separate sessions to observe consistency), reference calls with two or three former colleagues or customers, independent market research to validate the TAM, financial document review (P&L, Stripe screenshots, bank statements), and a legal document scan (cap table, incorporation documents). This phase typically takes five to ten hours across one to two weeks.

Phase three — final decision synthesis — is when you assemble your findings into a clear investment thesis or a list of unresolvable concerns. Write it down. The act of writing forces clarity. If you cannot articulate in two paragraphs why this investment makes sense and what specific risks you are accepting, the thesis is not ready.

For investors doing more than a few deals per year, a co-investment or syndication structure makes sense. Sharing the due diligence load across three to five investors — each taking a specific dimension — dramatically improves coverage without requiring each individual to spend 40 hours per deal. Dividing responsibilities (one investor handles technical review, another handles market analysis, a third handles legal) is the closest analog an angel investor has to the institutional VC analyst team.