You built something.Maybe it's a small Stripe project. Maybe it's an app you coded at home after work. Maybe, right now, it's only an idea you keep coming back to. That counts. Be proud of it.At some point someone serious will want a closer look: an investor, a buyer, a partner. That's when people start saying "data room". <h2>What are these things, in plain words?</h2><ol><li data-list="bullet">A data room is the place you show a serious investor, buyer or partner what you've built. It holds your story, your numbers, your agreements and how things actually work.</li><li data-list="bullet">A deal room is the same idea for one deal: one investor, one buyer, one partnership.</li><li data-list="bullet">A VDR, or virtual data room, is just the formal name. It's the one you'll hear from lawyers and bankers.</li><li data-list="bullet"> </li></ol>Different names, one job. They all answer a single question: can I trust what you've built? <h2>Why most of them go stale</h2>Take that small Stripe project.It already has a story. There's real revenue coming in, real customers paying, and terms they agreed to when they signed up. None of that is made up. It's already sitting there.Then someone asks for a data room, and there's a scramble. You export the revenue and screenshot the dashboard. You copy the customer list into a spreadsheet and dig out the terms. Folders get made, files get uploaded and links get sent. It looks great for about a week.Then the company moves. New customers sign up, revenue changes and you update your terms. The room doesn't know. By the next meeting it's out of date.So the next deal starts the scramble again.That isn't anyone's fault. It's the journey every growing company goes on. Most rooms are built as a snapshot, and snapshots don't keep up.<h2>What if yours was live?</h2>Picture it the other way round.Instead of building a room for each deal, you keep one living record of your company. You talk to it, upload to it and connect your tools to it, and it updates as the company does. When the Stripe project gets a new customer, the record already knows.Then any room, for any investor, buyer or partner, is just a view of that record. It's already current, so there's nothing to rebuild.That's the idea behind the Ethiks Living Record.<h2>From napkin to Series A, nothing rebuilt</h2>The same record can grow with you.<ol><li data-list="bullet">An idea on a napkin. The record is mostly your story: what you're building, and why you care.</li><li data-list="bullet">Your first Stripe revenue. Now there's proof someone will pay. The record picks it up.</li><li data-list="bullet">First customers and partners. Agreements and relationships join the story. A partner might see a view that shows how you work together.</li><li data-list="bullet">Seed. An investor wants a closer look. Their view shows the story, the traction and the basics they'd expect.</li><li data-list="bullet">Series A. The questions get deeper, and so does the view. It's still the same record, just further along.</li></ol>Each stage asks for a different room, but you never start from scratch. You just open a new view of something that's been growing the whole time.Wherever you are on that path, it's a good place to be. You might not need any of this today. When someone serious does ask, though, it helps to have the story already together.<h2>Questions founders ask</h2>What is a data room?A data room is the place you show a serious investor, buyer or partner what you've built, so they can decide whether to trust it.What's the difference between a data room and a deal room?A data room is for anyone serious. A deal room is the same thing for one specific deal.What is a VDR?VDR stands for virtual data room. It's the formal name for an online data room.When do I need a data room?You might need one when an investor, buyer or partner wants a closer look than a pitch can give them.Why do data rooms go out of date?Most are built in a scramble for one moment. The company keeps moving, and the room doesn't.Do I need a new data room for every stage?You don't need a new data room for every stage if each room is a view of one living record. The record grows from idea to Series A, and each view shows what that stage needs.Can a data room stay up to date on its own?It can if the room is a view of a living record that updates as your company does, rather than a pile of files you uploaded once.We'll give you what you need to decide.82/18: AI did the 82% that's boring here. The 18% (the judgment, and what we chose to leave out) is John's.

cover-living-vs-static.png

Data rooms, deal rooms and VDRs in plain words, why most go stale, and how one living record grows with you from napkin to Series A.

Data Rooms, Deal Rooms and VDRs Explained | Ethiks360

Data rooms, deal rooms, VDRs: most are static. Yours can be live.

One admin key that never expired.That's roughly what it took. Zeabur, a cloud deploy platform, kept long-lived admin credentials in plain text. They leaked, someone used them, and not long after, the company said it was shutting down.It's all public. Their <a href="https://zeabur.com/blogs/october-2026-security-incident" rel="noopener noreferrer" target="_blank">incident report</a> and <a href="https://zeabur.com/blogs/zeabur-is-shutting-down" rel="noopener noreferrer" target="_blank">shutdown notice</a> tell it in their own words.It's one story. It isn't a trend, and we're not here to pile on. It still made us pause.<h2>The boring stuff is usually the stuff</h2>When we picture what ends a small company, we tend to imagine something clever: a zero-day, a nation-state, a heist movie.More often it's quieter than that.<ol><li data-list="bullet">A key someone made years ago "just for now."</li><li data-list="bullet">A contractor who left but still has access.</li><li data-list="bullet">A secret that's never been rotated, because nothing ever broke.</li></ol>None of these are dramatic. That's why they last.<h2>Three questions for this week</h2>You might not need a project, a tool or a consultant to start. You might just need a quiet half hour with these:<ol><li data-list="ordered">Who still has keys? Think people, apps and old integrations, not just staff.</li><li data-list="ordered">Do they expire? If one never expires, is that still on purpose?</li><li data-list="ordered">Would you know if one was used? And would you know today, rather than next month?</li></ol>If the answers come easily, good. That's a house in order. If they don't, that's useful to know too, and it's usually a smaller fix than it feels.We'll give you what you need to decide.82/18: AI did the 82% that's boring here. The 18% (the judgment, and what we chose to leave out) is John's.

cover-house-in-order.png

One admin key that never expired. Three plain questions founders can ask this week about who holds keys, whether they expire, and whether you'd know.

Is your house in order?

If a long-lived admin key is stored in plain text and never expires, anyone who finds it can use it. Zeabur's own incident report describes that happening, and the company later announced it was shutting down.

Why can one old admin key end a small company?

Three questions: who still has keys (people, apps and old integrations), whether those keys expire, and whether you would know if one was used.

What should a founder check first?

Often not. A quiet half hour with those three questions is a useful start, and the fix is usually smaller than it feels.

Does this need a big security project?

What type of raise do I need: SAFE, convertible note or priced round? The jargon doesn't help. I ran investor relations for a $20m Series A. Before that, most of these words meant nothing to me. Here's the plain version. General information, not advice.<h2>The three options</h2>A SAFE is a short contract. The investor pays now and gets shares later, usually at your next priced round. <a href="https://www.ycombinator.com/safe" rel="noopener noreferrer" target="_blank">Y Combinator</a>, which created it, says a SAFE isn't debt. No interest, no maturity date, so it's "simpler, faster, and cheaper to sign" than a note.A convertible note is debt that converts. Interest builds up, and at the maturity date it's repaid or converted.A priced round sells shares now, at an agreed price. It's the most paperwork.<h2>The trade-offs</h2><ol><li data-list="bullet">Cost and speed: SAFEs are usually quickest and cheapest. Notes add debt terms. Priced rounds take the most legal work.</li><li data-list="bullet">Valuation: a priced round sets one. SAFEs and notes put it off with a valuation cap, a discount, or both. YC says discounts are commonly 10 to 20%.</li><li data-list="bullet">Dilution surprises: on a post-money SAFE, the investor's share is locked in. Stack a few before your priced round and the extra dilution lands on you.</li></ol><h2>The Australian bits</h2>YC's forms cover companies formed in the US, Canada, the Cayman Islands and Singapore. Anywhere else, it says, you'll need a local lawyer.Locally, the Australian Investment Council updated its open-source seed documents in November 2023, including a post-money SAFE. Law firm <a href="https://addisons.com/article/updated-aic-open-source-seed-financing-documents-whats-changed/" rel="noopener noreferrer" target="_blank">Addisons</a> notes the new version is "more dilutionary for existing shareholders" than the old one.Then there's ESIC. The <a href="https://www.ato.gov.au/businesses-and-organisations/income-deductions-and-concessions/incentives-and-concessions/tax-incentives-for-innovation/tax-incentives-for-early-stage-investors/qualifying-for-the-tax-incentives" rel="noopener noreferrer" target="_blank">ATO</a> says eligible investors in an early stage innovation company can get a 20% tax offset, capped at $200,000 a year, on newly issued shares. Law firm <a href="https://cowellclarke.com.au/assets/downloads/revisiting-the-esic-measures_october-2024.pdf" rel="noopener noreferrer" target="_blank">Cowell Clarke</a> says claiming it on a convertible note isn't viable, because a note isn't an equity interest. A SAFE might qualify, depending on how it's drafted. If your investors care about ESIC, check before you choose.<h2>A rule of thumb</h2>This one's mine. Small amount, from a few people who know you: a SAFE. An investor who insists on debt protection: a note, with one eye on the maturity date. A lead investor setting the price, usually in a bigger round: a priced round.Whichever you pick, record every instrument, its cap and its discount as you go. Ethiks360 keeps that alongside the rest of your company record, so your cap table holds no surprises.This is general information, not legal, tax or financial advice. Before you sign any SAFE, note or term sheet, take it to a lawyer and an accountant.82/18: machines did the boring bit. The thinking's mine.

cover-type-of-raise.png

SAFE, convertible note or priced round? A plain guide for Australian founders on cost, speed, caps, discounts, dilution and ESIC.

SAFE, Convertible Note or Priced Round?

What type of raise do I need: SAFE, convertible note or priced round?

How do I prove my startup's traction to investors? Not with a screenshot.Every deck has a chart going up and to the right. When I'm the one asking the questions, I discount it until I've seen where it came from. Most investors I know do the same.<h2>Why charts get discounted</h2>It's not personal. Charts are easy to shape. A 2015 a16z post, <a href="https://a16z.com/16-startup-metrics/" rel="noopener noreferrer" target="_blank">16 Startup Metrics</a>, lists the common tricks: no label on the Y-axis, a shrunk scale to exaggerate growth, and percentage gains without the absolute numbers.It warns about cumulative charts too, which "can go up-and-to-the-right even when a business is shrinking." And it's blunt about pipeline: "Letters of intent and verbal agreements are neither revenue nor bookings."A screenshot has the same problem. It shows one moment, cropped by the person who benefits from it. Nobody can see what's outside the frame.None of that needs bad intent. Picking the chart that looks best is only human. Investors know it, so they discount the lot.<h2>Show it from the source</h2>Your traction already lives somewhere. Payments in Stripe. Revenue and cash in Xero. Pipeline and customers in HubSpot. Those systems weren't built for your pitch, which is exactly why investors trust them more than your deck.So show the data from there. Here's what holds up:<ol><li data-list="bullet">Monthly revenue, not cumulative, straight from your payments or accounting system.</li><li data-list="bullet">Recurring and one-off revenue split out, with your definitions written down.</li><li data-list="bullet">Churn and retention by cohort, worked out the same way every month.</li><li data-list="bullet">Pipeline from your CRM, kept separate from signed revenue.</li><li data-list="bullet">Cash in the bank that matches the deck.</li><li data-list="bullet">A dated snapshot each month, so the history can't quietly change.</li></ol>That last one matters most. A number you can show was recorded in March, and hasn't moved since, is worth more than a perfect chart made last night.<h2>Keep the record as you go</h2>Traction isn't one number. It's a run of numbers, kept the same way, over time.In Ethiks360, each month's numbers sit next to the decisions and customer evidence behind them, with a date on everything. When an investor asks, you show the trail, not a picture of it.Before this month ends, export your revenue straight from your payments system and file it with today's date.82/18: machines did the boring bit. The thinking's mine.

cover-prove-traction.png

Screenshots and deck charts get discounted. Traction shown from Stripe, Xero or HubSpot and kept as a dated record holds up.

How Do I Prove My Startup's Traction to Investors?

How do I prove my startup's traction to investors?

Show your numbers from the systems they live in, like your payments, accounting and CRM tools, and keep a dated monthly record so the history can be checked.

Charts are easy to shape. a16z lists common tricks like unlabelled axes, shrunk scales, percentages without absolute numbers, and cumulative charts that rise even when a business is shrinking.

Why do investors discount traction charts?

Not as revenue. a16z says letters of intent and verbal agreements are neither revenue nor bookings. Show them as pipeline, kept separate from signed revenue.

Do letters of intent count as traction?

How do investors verify a startup's claims? Less glamorously than you'd think. Mostly we ask for the source and see if it matches the slide.At 45 I didn't know what a Series A was, let alone investor relations. Then I read Venture Capital for Dummies twice and ran investor relations for a $20m one. Now I've got an investor profile on Capital HQ, and I'm still asking the questions.<h2>What investors actually check</h2>The pitch makes claims. Diligence tests them. At the early stage that usually means:<ol><li data-list="bullet">References: people who've worked with you, including some you didn't put forward.</li><li data-list="bullet">Customer calls: a few of your customers, asked what they pay and why they stay.</li><li data-list="bullet">Bank statements: the cash in the deck should be the cash in the account.</li><li data-list="bullet">The cap table: who owns what, matched against the share issues and agreements.</li><li data-list="bullet">Metrics: revenue, churn and growth, checked against the systems they come from, not the spreadsheet built for the raise.</li></ol>Later rounds go deeper. <a href="https://www.ycombinator.com/library/3h-series-a-diligence-checklist" rel="noopener noreferrer" target="_blank">Y Combinator's Series A diligence checklist</a> runs from board minutes to share issues to every contract over $25,000. It notes that closing an A can take more than a month, "much of which is often spent tracking down documents for lawyers."<h2>Why the checking matters</h2>Most founders aren't lying. But numbers drift. A definition changes, a spreadsheet gets tidied, a churned customer stays in the count.Sometimes it's worse. Frank's founder told JPMorgan the startup had 4.25 million users. According to the <a href="https://www.fdicoig.gov/news/investigations-press-releases/startup-ceo-charlie-javice-sentenced-85-months-prison-175" rel="noopener noreferrer" target="_blank">sentencing release</a>, it had about 300,000. When the bank tried to verify, a fabricated data set went to a third-party vendor, which confirmed it had over 4.25 million rows. JPMorgan paid $175 million. The founder got 85 months in prison.The check counted rows in a copy. It never touched the source. For investors, that's the lesson: go to where the numbers live. For founders, it's the flip side: a copy is exactly what makes honest numbers look shaky.<h2>Why a live record holds up</h2>The easiest claim to verify is one that was never rebuilt. If your numbers come from where they live, and your decisions and customer evidence were written down as they happened, checking is quick. The references match the record. The bank matches the deck.Ethiks360 is built so that record already exists when the checking starts. You hand over what happened, not a version made for the raise.Pick the one number in your deck you'd least like checked, and trace it back to its source this week.82/18: machines did the boring bit. The thinking's mine.

cover-verify-claims.png

What investors actually check in diligence, from references to bank statements, and why claims backed by a live record hold up.

How Do Investors Verify a Startup's Claims?

How do investors verify a startup's claims?

They check claims against sources: references, customer calls, bank statements, the cap table, and metrics in the systems they come from. Later rounds add a full document review.

Y Combinator's checklist covers corporate records and minutes, financials, intellectual property, share issues, material contracts, disputes and employee matters.

What's on a Series A diligence checklist?

Y Combinator's checklist notes closing an A can take more than a month, much of it spent tracking down documents. Having them in one place before the term sheet can cut as much as a week.

How long does it take to close a Series A?

What documents and records does a startup need from day one? Most guides hand you a checklist and stop there.Register the company with ASIC. Get an ABN. Sort a constitution and a shareholders agreement. Assign the founders' IP to the company. Sign proper customer contracts.All needed. But all they prove is that you exist.<h2>What the law already asks for</h2>Australian companies have record-keeping duties from the start. Under <a href="https://www.austlii.edu.au/cgi-bin/viewdoc/au/legis/cth/consol_act/ca2001172/s286.html" rel="noopener noreferrer" target="_blank">section 286 of the Corporations Act</a>, a company must keep financial records that correctly record and explain its transactions, and keep them for 7 years. The <a href="https://www.ato.gov.au/businesses-and-organisations/preparing-lodging-and-paying/record-keeping-for-business/overview-of-record-keeping-rules-for-business" rel="noopener noreferrer" target="_blank">ATO</a> says you need to keep most tax records for 5 years.Then there's <a href="https://www.austlii.edu.au/cgi-bin/viewdoc/au/legis/cth/consol_act/ca2001172/s251a.html" rel="noopener noreferrer" target="_blank">section 251A</a>. A company must record the proceedings and resolutions of directors' and members' meetings in its minute books within one month.Read that one again. The law already expects you to write decisions down as they happen, not later.<h2>Existing isn't the same as credible</h2>When I was the one asking the questions, the incorporation papers took a minute to check. The real conversation was about what happened next. Why this market? Who's paying, and how do you know they're happy? Do the numbers in the deck match the books? That's where trust gets won or lost.The founders with a record could just show me. The rest had to rebuild it from inboxes and memory. And rebuilt history always looks a bit rebuilt.<h2>What to keep from day one</h2>On top of the paperwork, here's what I'd keep, as it happens:<ol><li data-list="bullet">Decisions: what you decided, who decided and why. Pricing, hires, pivots, the lot.</li><li data-list="bullet">Customer evidence: calls, feedback, orders, complaints and churn, dated and in their words.</li><li data-list="bullet">Numbers: revenue, burn, runway and the few metrics you run on, updated monthly with the assumptions behind them.</li><li data-list="bullet">Ownership changes: every share issue or transfer, logged when it happens and matching the paperwork.</li></ol>None of it is hard on the day. It's very hard to recreate two years later.<h2>Start the record now</h2>Ethiks360 is a place to keep those records from week one, so when an investor, a buyer or your accountant asks, you show what happened instead of reconstructing it.The documents prove you exist. The records show you're worth backing.Today, write down the last three decisions you made, why you made them and the date.82/18: machines did the boring bit. The thinking's mine.

cover-day-one-records.png

Most startup checklists stop at proving you exist. What Australian founders should record from day one: decisions, customers and numbers.

Startup Documents and Records From Day One

What documents and records does a startup need from day one?

The documents that prove you exist, like ASIC registration, an ABN, a constitution or shareholders agreement, founder IP assignment and customer contracts. Then records of what happens: decisions, customer evidence and numbers, kept as they happen.

Section 286 of the Corporations Act says financial records must be kept for 7 years after the transactions are completed. The ATO says most tax records must be kept for 5 years.

How long do Australian companies need to keep financial records?

Yes. Section 251A of the Corporations Act requires a company to record the proceedings and resolutions of directors' and members' meetings, and resolutions passed without a meeting, in its minute books within one month.

Do Australian startups need to keep minutes?

Dated records of key decisions, customer evidence and current numbers, kept as they happen and matching your accounts and cap table.

STARTUP & BUSINESS INSIGHTS