Building an Investor Data Room for a UAE Startup

An investor data room should let a reviewer trace a claim to the record that supports it. A pitch deck might say that revenue doubled, that customers renewed or that the company owns its product. The room should show what the team counted, which documents support the answer and where a question remains open. Build it around those checks before uploading a large archive.

Imagine a Dubai startup selling inventory software through annual contracts. Its founders operate through a Dubai company and have a separate Abu Dhabi entity. Their deck shows contract value, paying locations and cash runway. A reviewer needs to know which company signs the contracts, which company owns the software, what period the revenue figure covers and how many customers actually paid. A useful room makes those distinctions easy to find while keeping sensitive records available only to the people who need them.

Start with a map of claims and records

Write down the claims an investor is likely to check first. For each, identify the period, entity, definition, owner and underlying record. A revenue claim could link to a dated schedule that reconciles to management accounts. A renewal claim could link to a cohort view and signed agreements or billing records. A claim about ownership should lead to corporate records and the instruments that change ownership, rather than stopping at a spreadsheet someone updated after a call.

Give every document a clear date and status. Distinguish a signed agreement, a draft and a summary. If a document has been superseded, retain it in the internal archive and show which version the reviewer should use. When an item is missing, say what is missing and who is responsible for resolving it. A short note explaining a gap is more useful than a folder containing several near-identical files with unclear dates.

Reconcile the entity and ownership records first

Create a one-page entity map showing the legal names, jurisdictions and roles of each company. Mark the entity that is raising, the one that employs staff, the one that owns or uses the technology and the one that enters customer contracts. Where those functions sit in different entities, identify the agreements or authorizations that connect them. Ask counsel to check the map against current records and the proposed transaction. A funding presentation can use the group brand while the investment documents need the correct legal party.

Collect constitutional documents, relevant licences or registry records, shareholder and board approvals and any changes that affect the proposed raise. Check the current requirements of the actual registration authority. ADGM, for example, distinguishes annual confirmation statements and accounts and provides separate information on event-driven filings. Use the relevant evidence for the entities in the room and record the status of any outstanding update. The ADGM guidance addresses its own regime. ADGM annual filings · ADGM event-driven filings

Build the cap table from the records that give rise to it. Show the issued shares by class and the date of the calculation. Separately identify options, convertible instruments and any commitments to issue securities. Explain what your fully diluted view includes and retain the calculations used for scenarios. If the amount or ownership changes when an instrument converts, let the reviewer see the assumption and the document behind it. A correction to a spreadsheet should be traceable to the underlying record or reviewed legal position.

An Abu Dhabi Department of Economic Development Instagram post uses a document graphic to introduce a voluntary reporting service. It provides local context for keeping business records current. An investor room has its own job. Show the source, date and version behind the claims made for this company, including records that need updating and documents the founders can share only in a later review.

Make the financial and commercial numbers tie out

Start with the latest closed financial period and state whether the figures are management accounts, filed accounts or audited statements. Include the period after it only where you can explain the cut-off and status. Give the reviewer a clear bridge from financial statements to important operating figures. Show whether a number covers one entity or a group, whether it includes one-time services and what the team did with discounts, refunds and tax. Ask the finance owner to review the treatment before circulating the schedule.

For example, suppose a hypothetical startup signs an AED 120,000 subscription for 12 months and separately bills AED 20,000 for setup. If the subscription has begun and a simple illustrative schedule assumes three months of evenly delivered subscription service, that schedule attributes AED 30,000 of subscription value to those months. The signed subscription remains AED 120,000. The amount invoiced and the amount collected depend on the billing and payment records. Keep setup separate and have the actual accounting treatment reviewed. This example illustrates why the deck, income statement and bank receipts may show different numbers for the same customer.

Add a customer schedule with a documented unit. A group may have one contract, three locations and ten active users. Label each count and state which one is used for growth or retention. Record the period covered, how you treated trials and the point at which you consider a customer active. Attach a redacted sample of the evidence where appropriate. Keep the link between an anonymised line and its underlying record available to an authorized reviewer at a later stage.

Show revenue concentration and renewal conditions where they matter. A single customer might contribute a large share of sales or have an agreement that can end early. Include the relevant terms and separate standard revenue from work that required special implementation or support. If a large deal is still being negotiated, put it in the pipeline with its stage and expected decision. The cash forecast should distinguish that expectation from contracted and collected amounts.

Include the evidence that explains delivery risk

Investors will often ask whether the company can deliver what it is selling. Provide an overview of the product, key dependencies and what customer implementation requires. If the system relies on a particular provider, summarize the relevant term, renewal date and exit conditions. If a founder or contractor built part of it, identify the agreements and permissions that support its current use. Give an appropriate technical reviewer enough to understand the issue without exposing production credentials or unrestricted customer data.

Document significant open items. A customer migration may require approval, a contract may need renewal or an agreement may still be under review. Note the effect, next action and owner. Keep the room factual about unresolved questions. If the founder has a plan to fix an issue, show the plan separately from any evidence that the fix has already happened. This gives investors a basis for follow-up and gives the team a record it can update consistently.

Release sensitive material in stages

Prepare an initial view with a deck, high-level metrics and an index of evidence. Add more detail as a reviewer has a defined diligence need and the company has checked permissions. Contracts, staff records and identity documents can contain personal data or confidential terms. Check the applicable data protection regime and agreements before sharing. Articles 5 and 7 of the UAE federal personal data protection law address controls including clear purpose, limiting processing and protecting personal data within scope. Work with the appropriate adviser to identify which rules apply to the actual entities and disclosures. UAE Federal Decree-Law No. 45 of 2021

Review each disclosed copy. Remove information that is unnecessary for the question and check whether the underlying text, comments, revision history or embedded content still exposes it. Retain the original in a restricted internal location. Make it clear when a copy is redacted. If a full contract is needed, confirm that the recipient and disclosure are authorized and record what was released. Use the smallest group that can complete the review.

Test permissions from a recipient account before invitations go out. Google Drive, for example, documents restricted access and viewer, commenter and editor roles. Its Workspace guidance also explains that expiration of temporary file access can revert to permissions inherited from a parent folder. Whatever tool the company uses, test whether a reviewer can reach only the intended records and whether removing one invitation removes the access you meant to revoke. Restrictions on download and copying can reduce some risks while a recipient may still retain information already received. Google Drive sharing controls · Google Workspace access expiration guidance

Keep one version of the answers through closing

Assign a room owner and a person for each major evidence area. Keep an index with the current document, period, entity, access tier and last review. Put investor questions in a log with the answer, source and date. Where a new question reveals that a prior answer was wrong or incomplete, correct the record and decide who needs the update. A reliable answer in one place is easier to maintain than several copies circulating in email.

Run a mock review before opening access. Ask a colleague to trace three claims without help. For the Dubai software example, they could identify the entity behind the largest contract, reconcile one subscription to the appropriate schedules and check how many customer locations used the product again. If they have to ask which month or version you meant, fix the index or the definition. Use the same approach to test sensitive access and to confirm the correct contact handles questions.

Freeze a dated copy of the schedules used for a material decision. If revenue, ownership or cash changes during diligence, add a bridge from the old figures to the new ones and keep the supporting record. A reader may have downloaded an earlier copy, so mark the new version clearly and route material updates through the agreed contact. Ask the finance and legal owners to confirm the closing figures and open conditions against the signed documents, rather than against a copy of the deck.

Close access for people who no longer need it, record which permissions changed and retain the relevant internal record under the applicable terms. Keep the ownership, revenue and customer schedules current for the next board or fundraising review. The room earns its keep when someone can follow a claim from the presentation to a dated record and understand what that record proves.