Co-Investment Data Room Checklist for GPs and Deal Teams

A co-investment data room must support two connected processes: investment diligence on the underlying opportunity and onboarding or closing for the co-investment vehicle. The room may serve existing limited partners, prospective co-investors, advisers, lenders, counsel, and internal teams with different information rights and timelines. To understand the operational lifecycle of buyout and growth equity transactions, see our guide on private equity data room workflow.

The safest design stages disclosure. A recipient who receives an opportunity overview does not automatically need portfolio-company customer data, another investor’s allocation, subscription documents, or personal onboarding information.

Disclosure: VDR Directory is affiliated with the SendNow team. Controlled document sharing can support early opportunity distribution, while detailed multi-investor diligence and subscriptions usually require granular groups, Q&A, workflow records, and secure archives. This checklist is educational, not legal, tax, securities, or investment advice.

Define the co-investment process first

Document:

• sponsor, fund, deal entity, and proposed co-investment vehicle;
• eligible recipient population;
• conflict and allocation framework;
• NDA and wall-crossing process;
• indication-of-interest deadline;
• investment committee and diligence timetable;
• expected allocation and scaling process;
• subscription and KYC/AML workflow;
• funding, closing, and post-close reporting; and
• archive, retention, and deletion responsibilities.

The room structure should reflect those phases. Do not mix investment diligence and investor personal data in one broad folder tree.

User groups

Potential groups include:

Use separate groups for each investor organization. Maintaining strict segregation between prospective co-investors and sensitive fund records requires disciplined governance; review our investor document management guide for repository segregation principles. Q&A, documents, activity, and allocation should not reveal other investors unless the process expressly requires shared material.

Phase 0: internal preparation

Create a restricted staging area containing:

• opportunity thesis and internal investment memorandum drafts;
• preliminary financial model and sensitivities;
• sponsor diligence and portfolio-company materials;
• conflicts analysis and approvals;
• allocation policy and capacity assumptions;
• draft terms and structure;
• recipient eligibility and contact register;
• disclosure and source verification notes;
• risk register; and
• release checklist.

Assign owners and reviewers. Reconcile claims in the opportunity materials to evidence. Mark forecasts, assumptions, and third-party information clearly. Remove internal commentary before external release.

Phase 1: opportunity screening

Provide enough information for an eligible investor to decide whether to sign an NDA or allocate diligence resources.

Possible documents:

• concise opportunity overview;
• sector and business description;
• high-level transaction structure;
• indicative economics and sponsor commitment where approved;
• expected timetable;
• key risks and conflicts summary;
• recipient eligibility statement; and
• process contact.

Avoid unsupported performance claims and do not imply that an allocation is guaranteed. If prospective participants require standardized due diligence responses alongside the opportunity overview, teams can streamline their LP DDQ document workflow to maintain version consistency. State that terms and availability can change. If engagement tracking is used, treat it as an operational signal, not proof of investment intent.

Controlled document tracking from SendNow may be relevant for a narrow screening package. Define when recipients must move into the full co-investment room—for example, after NDA execution or when detailed company information is released.

Phase 2: NDA and access approval

Record recipient organization, authorized contacts, sponsor, eligibility basis, NDA status, adviser access, group, start, and expiry. Use named accounts and multi-factor authentication where supported.

The NDA may not resolve every disclosure obligation. Review confidentiality owed to the portfolio company, customers, employees, lenders, and other third parties. Determine whether a clean team or specialist channel is required.

Test one account from each group before release. Confirm search, direct links, notifications, downloads, watermarks, and Q&A segregation.

Phase 3: investment diligence materials

Business and strategy

• company overview and legal structure;
• products, services, markets, and go-to-market model;
• management presentation;
• value-creation plan and operating initiatives;
• market and competitive analyses with source notes; and
• key dependencies and risks.

Financial

• historical financial statements and management accounts;
• quality-of-earnings or vendor reports where available;
• budget, forecast, and assumptions;
• revenue, margin, working capital, and cash-flow analyses;
• debt and debt-like items;
• capitalization and sources-and-uses model; and
• base, upside, and downside cases clearly labeled.

Explain adjustments and definitions. Protect formulas, links, and hidden content in spreadsheets. Distinguish sponsor calculations from company-reported figures and third-party analyses.

Commercial

• customer concentration and retention analyses;
• pipeline and backlog methodology;
• unit economics;
• pricing and channel information at an approved level;
• supplier and partner dependencies; and
• market studies.

Use aggregation, anonymization, redaction, or a clean team for competitively sensitive information. Co-investors do not automatically need customer-level raw data.

Legal, regulatory, and tax

• material contracts and contract register;
• corporate and ownership records;
• litigation, claims, and investigations;
• regulatory licenses and compliance summaries;
• tax structure and material exposures;
• intellectual-property ownership and licenses;
• insurance; and
• transaction structure documents.

Counsel should decide privilege and third-party confidentiality treatment.

People, technology, and cybersecurity

• management biographies and approved organization data;
• incentive and retention framework;
• product and technology overview;
• intellectual-property and open-source summaries;
• security program and approved assessment evidence;
• material incident disclosure as advised; and
• privacy and data-processing overview.

Minimize employee personal data and restrict detailed security evidence to qualified reviewers.

Phase 4: sponsor underwriting and alignment

Co-investors often evaluate both the asset and the sponsor’s underwriting. Consider including approved versions of:

• investment thesis and key assumptions;
• valuation framework;
• leverage and financing assumptions;
• value-creation plan;
• governance rights;
• exit scenarios;
• sponsor commitment;
• fees and expenses;
• carried interest or promote arrangements;
• allocation method;
• conflicts and related-party matters; and
• downside cases.

State which terms are indicative and which are final. Ensure calculations reconcile across the memorandum, model, and legal documents.

Phase 5: Q&A and management access

Define question submission, triage, assignment, company involvement, legal review, approval, response audience, and export. Investor-specific questions should not expose the investor or its strategy to others.

Use a controlled response library for repeated questions, but revalidate every response. Maintain one authoritative answer and link it to source documents. Record unanswered questions at the decision deadline.

Management sessions should have an agenda, participant approval, and follow-up record. Do not permit ad hoc disclosure that bypasses the data room review process.

Phase 6: indication of interest and allocation

Keep indications, requested amounts, internal assessments, allocation decisions, and communications in restricted groups. The portfolio company and other investors usually do not need access.

Record:

• investor and vehicle;
• requested and minimum acceptable amount;
• conditions and approvals;
• currency and timing;
• internal relationship owner;
• allocation decision and rationale;
• scaling method; and
• communication date.

Allocation and conflicts should follow the sponsor’s documents, policies, and applicable obligations. Avoid creating expectations before approvals and final capacity are known.

Phase 7: subscription and investor onboarding

Separate sensitive onboarding data from the general diligence room. The workflow may include:

• subscription agreement;
• investor questionnaire and representations;
• tax forms;
• beneficial ownership and control information;
• AML/KYC evidence;
• sanctions and eligibility checks;
• side-letter requests;
• electronic signatures;
• bank and funding instructions; and
• final acceptance.

Use structured status fields rather than emailing personal documents. Restrict onboarding staff and counsel to the minimum necessary access. Verify bank instructions through an independent process; do not rely on a single email change.

Phase 8: closing and funding

Provide approved final documents, capital-call or funding notice, verified instructions, closing timetable, conditions, and contact channels. Track receipt and resolve exceptions securely.

Maintain a closing checklist by investor without exposing other investors. Separate draft, signed, accepted, and funded statuses. Preserve evidence of authorization for changes.

After closing, create the authoritative investor record and transfer ongoing reporting to the appropriate portal or process. The diligence room should not become an unmanaged permanent repository.

Permission and release controls

Use a permission matrix covering groups, folders, view, download, print, upload, Q&A, and administration. Separate:

• internal drafts;
• general opportunity material;
• detailed portfolio-company diligence;
• clean-team or expert information;
• investor-specific Q&A;
• allocation;
• subscription and personal data;
• banking and funding; and
• closing archive.

Require two-person review for high-risk releases. Record individual exceptions with expiry. Review access at NDA, shortlist, allocation, closing, and termination.

Evidence and source quality

For each material claim, record source, period, owner, calculation, reviewer, and limitations. Third-party studies should include date and scope. Forecasts should show assumptions and sensitivity.

Do not manufacture precision. If information is not available, state the gap and expected resolution. A transparent limitation is more useful than an unsupported number.

Keep an information-parity register

When several potential co-investors participate, maintain a register of material documents and answers released to each organization. The goal is not necessarily identical access in every circumstance; an investor’s role, geography, adviser, or clean-team status can justify differences. The goal is to make those differences deliberate, approved, and explainable.

Record the document or answer, audience, release time, reason for any restriction, approver, and whether a later common update is required. If management gives new material information during one call, route it through the review process and decide whether other eligible recipients should receive an approved version. This reduces accidental information asymmetry without exposing one investor’s confidential questions or strategy.

At the decision deadline, reconcile the parity register to the room’s group-level activity and Q&A export. Investigate gaps before allocations are finalized. The register should remain restricted because it can reveal investor identities, interests, and negotiation positions.

Conflicts and disclosure

Potential issues can include sponsor allocation, related-party arrangements, fees, expenses, cross-fund participation, follow-on rights, stapled commitments, existing portfolio conflicts, and differing investor rights. Counsel and compliance should determine disclosure and approval.

Keep a conflicts register with issue, affected parties, analysis, approval, disclosure, and status. Do not rely on a general disclaimer to cure incomplete information.

Security and fraud prevention

Require named accounts, multi-factor authentication, approved devices where appropriate, access expiry, and administrator review. Monitor bulk downloads, new administrators, failed access, and changes to banking documents.

Bank-detail fraud is a specific closing risk. Verify instructions using a known contact and independent channel. Lock approved instructions, record changes, and require dual authorization.

Prepare an incident playbook for misdirected access, compromised accounts, malicious files, or payment-instruction changes.

Close or terminate the room

At closing or abandonment:

• freeze content and resolve open Q&A;
• export the index, versions, users, permissions, activity, Q&A, and approvals;
• separate diligence, allocation, onboarding, and privileged archive layers;
• verify files and reports;
• revoke investor, adviser, company, and temporary access;
• obtain return or deletion confirmations where required;
• assign custodian and retention; and
• request vendor deletion when permitted.

If an investor declined, apply NDA and retention terms. Do not leave accounts active merely because future opportunities may arise.

Co-investment room checklist

• Eligibility, NDA, and access approvals are recorded.
• Each investor organization has a separate group.
• Screening, diligence, allocation, and subscription data are separated.
• Claims and models link to approved evidence and assumptions.
• Sensitive commercial data uses staged or clean-team release.
• Q&A protects investor identity and internal drafts.
• Conflicts, fees, allocation, and indicative terms are disclosed appropriately.
• Onboarding and banking information has restricted access.
• Funding-instruction changes require independent verification.
• Archive, retention, revocation, and deletion are assigned.

Sources and verification notes

• U.S. Securities and Exchange Commission, private funds resources: https://www.sec.gov/investment/private-funds
• SEC Investment Adviser Public Disclosure: https://adviserinfo.sec.gov/
• Institutional Limited Partners Association principles and resources: https://ilpa.org/
• Financial Action Task Force standards: https://www.fatf-gafi.org/en/topics/fatf-recommendations.html
• FinCEN customer due diligence resources: https://www.fincen.gov/resources/statutes-and-regulations/cdd-final-rule
• NIST Cybersecurity Framework 2.0: https://www.nist.gov/cyberframework

The availability and interpretation of regulatory materials can change. Sponsors should obtain legal, tax, compliance, and investment advice for the offering, investors, structure, and jurisdictions.