12 Documents Every Series B Data Room Needs Before You Send the Link
A Series B lead has a 400-item request list, but they judge you on the first 12 documents. If those are ready on day one, the associate writing the memo moves fast. If they are not, the memo stalls, the partner cools, and the term sheet arrives two weeks later at a lower number.
This is the checklist that keeps that from happening.
What are the 12 documents that must be in the room on day one?
Not aspirationally. Actually loaded, versioned, and permissioned before you send the first invite.
| # | Document | Folder | Sensitivity |
|---|---|---|---|
| 1 | Three-year financial model | Financials | Lead only, watermarked |
| 2 | Monthly historicals, 24 to 36 months | Financials | Diligencing, watermarked |
| 3 | Cohort and net revenue retention data | Financials | Diligencing, watermarked |
| 4 | Cap table with pro forma | Legal | Diligencing, watermarked |
| 5 | Most recent 409A | Legal | Lead only |
| 6 | Top-10 account revenue concentration | Customers | Anonymized for Diligencing, named for Lead |
| 7 | Product roadmap, 12 months | Product | Diligencing |
| 8 | Org chart plus 6-month hire plan | Team | Diligencing |
| 9 | Standard MSA and DPA templates | Legal | Diligencing |
| 10 | Prior financing docs and SAFEs | Legal | Diligencing |
| 11 | Security posture summary or SOC 2 | Security | Diligencing |
| 12 | Last 4 board decks with minutes | Board and Governance | Lead only |
Twelve documents. Six of them in Financials or Legal. That distribution tells you where investor attention lands.
What does a serious three-year model contain?
Not just topline revenue. Serious leads open the model and look for six specific tabs.
- Revenue build. Segmented by product line, customer segment, and geography. Monthly through year one, quarterly through year three.
- Cohort waterfall. Every customer cohort from at least 12 months back, showing net revenue retention over time.
- P&L. Monthly historicals plus forward, gross margin by product line, opex by function.
- Cash and burn. Monthly cash balance, gross burn, net burn, and forecasted runway.
- Headcount plan. Hires by function and month, tied to opex.
- Sensitivity. At minimum a plus and minus 20 percent revenue case with corresponding runway.
Models that ship as a single revenue tab with hardcoded growth assumptions get dismissed as unready. Models with these six tabs get a serious IC memo.
Why does cohort data matter so much at Series B?
Because it is the one dataset that either proves or disproves the story. A Series B round is not a bet on your pitch. It is a bet on the shape of your existing customer base extending forward.
The specific numbers a lead pulls out of cohort data:
- Net revenue retention. Above 110 percent for SMB SaaS, above 120 percent for mid-market and enterprise SaaS. Below either, the round narrative needs a strong reason.
- Gross revenue retention. Above 85 percent for SMB, above 90 percent for enterprise. Churn below the line here is the flag.
- Cohort acceleration. Are newer cohorts retaining better than older ones? That is a leading indicator of product-market fit deepening.
- Time to payback. Below 18 months for SMB, below 24 months for enterprise on new logo CAC.
If your cohort data cannot produce these numbers, you have a Series A raise, not a Series B. Best to know that before you send the room.
How should you present customer concentration?
Two tables in the customer folder. Both watermarked. One anonymized for Diligencing, one named for Lead.
- Top-10 by ARR. Each row: customer identifier, industry, segment, ACV, start date, expansion history, contract term.
- Concentration percentages. Top-5 as percent of total ARR, top-10 as percent of total ARR, top-20 as percent of total ARR.
A lead will diligence a customer concentration above 20 percent from a single account. Below 15 percent, they will accept concentration as normal for stage. Between 15 and 20 percent, they will ask hard questions about renewal risk. Have your answer ready.
What legal documents does a Series B lead read first?
Three, in order:
- Cap table pro forma. Do the math work with what they intend to invest? Any surprises in the option pool?
- Prior financing documents. What rights do prior investors have? Any protective provisions that make this round painful?
- MSA and DPA templates. How exposed are you on customer-side reps? Any indemnification patterns that indicate hidden liability?
Include these three in the Legal folder as final PDFs. Do not upload Word drafts with comments still visible, which happens more often than founders realize. Counsel on the other side will read the metadata.
What security posture is expected at Series B?
A one-page summary if you have not done a SOC 2 yet. A completed audit if you have. The document should cover:
- Encryption. At rest and in transit. AES-256 and TLS 1.3 are the expected floor.
- Access controls. SSO, role-based access, MFA required for admin roles.
- Backup and recovery. RPO and RTO commitments if you sell to enterprise.
- Incident response. Written runbook. Named on-call rotation.
- Third-party audits. SOC 2 Type II status, penetration test cadence.
For B2B SaaS companies at Series B selling to mid-market or enterprise, this is table stakes. Consumer companies get more latitude but still need the encryption and access control detail.
How should board materials be redacted?
Redact three categories, keep everything else.
- Pending customer deals. Names redacted, aggregate numbers preserved.
- Personnel discussions. Individual performance notes removed entirely.
- Non-unanimous board votes. If a board member dissented, remove the dissent detail, keep the outcome.
Board decks reveal governance patterns leads want to see. How prepared is the CEO. How direct is the board dialogue. How well are risks named early. Keep enough that a reader can judge those patterns.
What is the day-one loading order?
Load in this sequence so folders inherit permissions correctly.
- Create groups first: Teaser, Diligencing, Lead, Passed.
- Create folders next, with group permissions assigned per the matrix.
- Upload all 12 core documents.
- Enable dynamic watermarks on Financials, Customers, and Legal folders.
- Test by logging in as each tier and confirming what is visible.
- Only then send the first invites.
Founders who upload first and permission second create a window, sometimes hours long, where sensitive documents are visible to the wrong groups. That window is enough for a leak.
The mistake to avoid
The 12-document checklist is not a bureaucratic exercise. It is the specific set of artifacts a partner walks through before writing an IC memo. Missing one is not a fatal problem. Missing three is. And missing one in the wrong category, usually cohort data or cap table pro forma, will end a diligence process quietly, without a clear reason ever landing in your inbox. Prepare the twelve, ship them with real permissions and watermarks, and the associate can move fast. Everything else in your raise gets easier when they do.
Frequently asked questions
What is different about a Series B data room versus Series A?
Depth and specificity. Series A leads accept forward projections and small historicals. Series B leads want two to three years of monthly financials, real cohort data, top-account concentration analysis, and evidence that revenue is defensible. The room grows from roughly 40 documents at Series A to 200-plus at Series B, and the folders on Security and Board Governance become mandatory rather than optional.
Should we include drafts or only final documents?
Only final versions in the main folders. If you have working drafts, keep them in an internal folder that no investor group can access. Investors reading a draft assume it is your position and will hold you to it in later negotiation. The exception is the model, which should be labeled with the current version date so investors know they are looking at the most recent iteration.
How do we handle sensitive customer names at Series B?
Two-tiered. Diligencing groups see the customer list with names anonymized to industry and revenue band. Leads see named customers under watermarked view-only. Do not name customers publicly in the deck. The named list is a diligence reveal, not a marketing item, and treating it that way protects your customer relationships during a raise.
What board materials should we include?
The last four board decks and the last four sets of board minutes. Redact any references to specific pending customer deals, any personnel discussions, and any board member votes that were not unanimous. Include the current board composition and any observer rights held by prior investors. Leads use these to understand governance patterns before signing a term sheet.
Do we need SOC 2 for Series B?
Not necessarily audited, but a documented security posture is expected. A SOC 2 Type II in progress with a target completion date is acceptable. A one-page summary of encryption, access controls, backup, and incident response covers most Series B expectations. Enterprise-selling companies at Series B should have a Type II completed or a hard timeline to completion.
Run your next raise in a real room
Quilaron gives founders and CFOs a data room with templates, per-folder permissions, watermarking, and page-level analytics that read the room for you.
Request early access