Fundraises fail open: every associate forwards the folder, every update becomes v9_final_REALLY.pdf, and six months later a stale cap table is still sitting in someone’s Downloads.
This checklist is for founders and ops running a sealed document sharing workflow before and during diligence—without pretending you need a Fortune-500 VDR on day one.
Pre-raise: classify before anyone asks
- Public / okay to email — teaser, one-pager, non-confidential deck
- Sealed packet — financials, customer lists, security answers, full data room exports
- Counsel-only — legal strategy, privileged notes (separate share, tighter audience)
If it would hurt to see it forwarded, it is not an email attachment. See stop emailing sensitive attachments.
Checklist: stand up the room
- Freeze versions—label date and source system on each export
- Upload via client-side encryption into a vault (not a living sync folder)
- Mint firm-specific sealed shares (do not reuse one mega-link for every process)
- Default expiry to the active process window; password out of band if used
- Notify with the link only—no ZIP in the thread
- Log who received which packet; revoke when the process ends
Compliance Locker is built for that sealed-packet job. For room-style patterns, also read diligence rooms without shared Drive.
Packet map (typical early round)
Financials & metrics
Monthly packs, ARR bridges, cohort exports—version-dated, short expiry, separate from the marketing deck.
Legal & cap table
Cap table exports and key agreements as discrete sealed sets. Prefer counsel review before mass distribution.
Security & privacy
Questionnaire answers plus supporting PDFs as sealed links—not a single unprotected dump. Encryption answers guide.
Anti-patterns
- One Dropbox/Drive folder shared to “all interested parties”
- Password-protected ZIP as the standing diligence policy
- Updating files in place without telling anyone the link changed
- Leaving last round’s room open “just in case”
Close-out
When you pick a lead—or walk away—revoke open shares, archive your activity export, and start clean for the next process. Expiry policy help: share expiry policy.
FAQ
When should we set up a sealed fundraise room?
Before the first serious data request—not after you’ve already emailed a living Drive folder to three firms. Stage materials once, then mint audience-specific sealed sets.
Can investors keep collaborating in Drive?
Draft and iterate in your collaboration suite. Deliver frozen packets (financials, cap table exports, security answers) as sealed shares with expiry.
How long should fundraise shares stay open?
Match the active diligence window—often 7–30 days—then revoke or expire. Re-mint if a process restarts rather than leaving last quarter’s folder live.
Does this replace a virtual data room (VDR)?
For many early rounds, a sealed vault covers packet control without enterprise VDR overhead. Large later-stage processes may still use a dedicated VDR—evaluate scope and buyer expectations.
What about NDAs before materials?
Keep NDA execution in your legal workflow; use sealed links for follow-on packets. See the NDA secure sharing checklist.
Related: startup sharing playbook, NDA checklist.