Building a Data Room

A data room is the indexed set of documents an investor's lawyers review before money moves. For a Pakistani startup it is also something more specific: it is the company's account of itself, and it will be checked line by line against the public record — the SECP's filings, the charge register, the trademark register, the banking channel. The position described here is as of July 2026; filing periods and fees change, and points that turn on current SECP practice are flagged for verification.

Founders tend to think of the room as an administrative chore that begins when the term sheet arrives. That is the expensive way to do it. The room is really an audit you run on yourself, and the only question is whether you run it on your own timetable or on an investor's.

What the room is for

Three things happen through a data room, and each shapes how you should build it.

First, verification. The investor's counsel confirms that the company exists as described: that the shares on the cap table were actually allotted and filed, that the IP the pitch deck claims is actually owned, that the contracts generating revenue are actually signed. Second, pricing and terms. Findings do not usually kill deals; they move valuation, add conditions to closing, or produce specific indemnities. Third, disclosure. In the eventual subscription agreement you will give warranties — statements of fact about the company — and those warranties are qualified by what the room disclosed. Documents you put in the room protect you later. Documents you left out do not.

Understood this way, the room is a legal instrument of the round, not a filing cabinet. Build it with the same care as the shareholders' agreement.

The index

A workable index for a Pakistani startup runs to about ten folders. Number them, and number every document within them, because the Q&A process and the disclosure letter will refer to documents by index number.

Corporate. Certificate of incorporation, the memorandum and articles as currently in force with every amending special resolution, board and general-meeting minutes, and the statutory registers — members, directors, and the record of ultimate beneficial ownership the Companies Act, 2017 requires companies to maintain [CURRENT UBO RECORD-KEEPING AND FILING REQUIREMENTS — TO BE VERIFIED BY REVIEWING LAWYER].

Cap table and securities. The cap table itself, and beneath it the source documents: subscription forms, allotment resolutions, returns of allotment filed with the SECP, transfer instruments, and share certificates. Include every instrument that could become shares — SAFEs, convertible notes, option grants, advisor letters — with the shareholder authority for each. Under section 83 of the Companies Act, 2017 new shares go first to existing members unless that right has been properly departed from, so every future equity promise in this folder needs its approval sitting next to it.

Financing and security. Loan agreements, related-party loans (documented — founder loans usually are not), and any charges over assets, matched against the SECP charge register kept under section 100 of the 2017 Act.

Intellectual property. Assignments from founders, employees, contractors, and agencies; registration certificates and pending applications at the Trade Marks Registry under the Trade Marks Ordinance, 2001, the Copyright Office under the Copyright Ordinance, 1962, and the Patent Office under the Patents Ordinance, 2000 — all within IPO-Pakistan; and domain and account ownership records.

Material contracts. The revenue-generating and business-critical agreements in final signed form: customer contracts, supplier and platform agreements, leases, and partnership arrangements. Flag change-of-control, assignment, and exclusivity clauses yourself before counsel does.

Employment. Template and signed employment contracts, contractor agreements, the ESOP scheme and grant letters, EOBI and provincial social security registrations, and any disputes.

Tax and regulatory. FBR and provincial revenue authority registrations, filed returns, withholding statements, assessments and appeals, and sector licences — PSEB registration for IT exporters, and any State Bank or sector-regulator authorisation the business model requires.

Banking and exchange control. For any past foreign investment: the remittance records through the banking channel, the authorised dealer's confirmations, and the reporting of share issues to the State Bank under the Foreign Exchange Regulation Act, 1947 and the FE Manual [CURRENT REPORTING REQUIREMENTS FOR ISSUES TO NON-RESIDENTS — TO BE VERIFIED BY REVIEWING LAWYER]. This folder decides whether the incoming investor believes its money can leave Pakistan one day.

Litigation. Everything, including the small claims and the tax notices. An investor discovering an undisclosed case independently is worse than any case you disclose.

What the room will be checked against

The distinctive feature of diligence in Pakistan is the distance that can open between a company's own records and the public registers. Investor counsel will independently pull the SECP filing history, search the charge register, check the IP registers, and, for foreign-money history, trace the banking record. The room should be reconciled against those sources before it opens, because the gap between the two is where findings live.

The recurring mismatches are predictable. Allotments made but never filed. Directors changed at a meeting nobody minuted. A repaid bank facility whose charge was never satisfied on the register. A trademark registered to a founder personally in 2021 and never moved. Agreements signed but never stamped under the provincial stamp law, which invites an admissibility objection precisely when the document matters. Each of these is ordinary, and each is far cheaper to fix in the quarter before the raise than in the week before closing.

The strongest version of this exercise is vendor diligence in miniature: have your own counsel review the assembled room as an investor's counsel would, before anyone outside sees it. The review produces two things — a repair list you work through on your own schedule, and a draft disclosure position for the issues that cannot be fixed in time. Sellers and founders who arrive at the negotiation already knowing their findings keep control of both the fix and the narrative.

Running the room

Once the room opens, discipline is the whole game. One person owns uploads and permissions. Only final, signed, dated versions go in; drafts are poison, because a draft in the room is a fact you may be taken to have disclosed. Every investor question goes through a written Q&A log with numbered answers — no substantive answers by call or chat, because the disclosure record is built from what is written. When a document is added or replaced, the log says so.

Stage access to protect the business. The first stage carries corporate, cap table, IP, and anonymised commercial information; customer names, pricing, and anything competitively sensitive open only after the term sheet, under the non-disclosure agreement, and where necessary on a counsel-only basis. Electronic execution of the NDA and most room documents is generally effective under the Electronic Transactions Ordinance, 2002, subject to its exceptions [SCOPE — TO BE VERIFIED BY REVIEWING LAWYER], but stamping obligations under the provincial stamp regimes still apply to instruments and are not excused by signing electronically.

Finally, keep the room after closing. It is the disclosure record against your warranties for as long as they run, it is the starting point for the next round's diligence, and it is the discipline that stops the same gaps reopening. Companies that maintain the room as a living archive raise faster each round; companies that let it decay rebuild it from scratch every eighteen months, at term-sheet speed, under someone else's deadline.