CFO insight

The 10 Financial Controls Investors Check Before Writing a Check (3 Missing Controls Kill More Deals Than Bad Revenue)

Hayat Amin · Updated 2026-10-21

62% of Series A deals die in due diligence because of missing startup financial controls. Here are the 10 controls investors check and the 3 that kill deals when absent.

62% of Series A deals that die in due diligence die because of financial control gaps — not bad revenue, not a weak product, not even a down market. According to a 2025 Deloitte Private Company CFO survey, the single most cited reason investors walked away from an otherwise fundable startup was "insufficient financial controls and reporting infrastructure." Hayat Amin, who has sat on both sides of the due diligence table across three exits including American Express and TripAdvisor acquirers, argues the point bluntly: "Founders spend six months perfecting a pitch deck and zero hours on the controls an investor's accountant will check in the first 48 hours of diligence."

This post lists the 10 startup financial controls investors actually verify before writing a check — and names the 3 that kill more deals than bad unit economics.

What Are Startup Financial Controls?

Startup financial controls are the policies, processes, and checks that ensure a company's financial data is accurate, complete, and resistant to fraud or error. They sit between raw transactions and the board-ready numbers investors use to price a round. Without them, revenue is a guess, cash position is a hope, and every number in the data room is suspect. Beyond Elevation installs these controls in the first 100 days of every fractional CFO engagement because they are the foundation every other financial decision rests on.

The controls below are not theory. They are the exact items a Big Four firm or a VC's due diligence team will request in a controls questionnaire. Miss one and you get a management letter comment. Miss three and the deal reprices — or dies.

Which Financial Controls Do Investors Check First?

Investors check bank reconciliation first because it is the single fastest proof that a company's cash position is real. A monthly bank reconciliation completed within five business days of month-end — with documented reconciling items and sign-off — tells an investor the founder knows where every pound sits. A quarterly or ad-hoc reconciliation tells them the founder does not.

Here are all 10, in the order most due diligence teams request them.

1. Bank Reconciliation (Deal-Killer #1)

Reconcile every bank and payment processor account monthly, within five business days. Document every reconciling item. Two signatures on the sign-off: preparer and reviewer. If you are a solo founder, the reviewer is your fractional CFO or external accountant — never yourself.

2. Revenue Recognition Policy

Revenue must follow ASC 606 or IFRS 15 depending on jurisdiction. The policy must be written, applied consistently, and produce the same number regardless of who runs it. Investors hate a revenue figure that changes when you explain the assumptions.

3. Expense Authorisation Matrix (Deal-Killer #2)

Every expense above a defined threshold requires written approval from someone who is not the person incurring it. The matrix must name thresholds, approvers by role, and the escalation path. A startup where the founder approves their own expenses is a startup where the due diligence team adds a line item for "governance risk."

4. Accounts Payable Segregation

The person who creates a supplier in the system must not be the person who approves a payment to that supplier. This stops phantom vendor fraud — the single most common financial fraud in companies under 500 employees, according to the Association of Certified Fraud Examiners 2024 Report to the Nations.

5. Payroll Controls

Every payroll run needs a reconciliation against headcount, a comparison to the prior period, and sign-off from someone outside the payroll function. Investors check payroll because it is usually the largest cash outflow and the easiest to inflate with ghost employees or unapproved bonuses.

6. Access Controls on Financial Systems

Role-based access with the principle of least privilege. Admin access to Xero, QuickBooks, Stripe, or your ERP restricted to the finance function with a named log of who has it and when it was last reviewed. Hayat Amin's rule at Beyond Elevation is direct: "If the intern and the CFO have the same permissions in your accounting system, you do not have a finance function — you have a shared spreadsheet."

7. Journal Entry Controls (Deal-Killer #3)

Manual journal entries are how numbers get moved after the fact. Every journal over a defined threshold must have a documented business reason, supporting evidence, and approval from someone other than the preparer. Investors specifically request a journal entry listing for the 12 months before diligence because a cluster of large manual journals in the final month signals earnings management.

8. Cash Disbursement Controls

Dual authorisation on every payment above a threshold — typically £5,000 or $5,000 for early-stage companies. One person initiates, a different person releases. Online banking mandates must match the documented policy. This is not bureaucracy; it is the control that stops a single rogue employee from emptying the account.

9. Monthly Close Checklist

A documented, repeatable month-end close process that produces the same outputs every month: trial balance, P&L, balance sheet, cash flow statement, reconciliation pack. The two-day close playbook Beyond Elevation uses reduces this from a two-week scramble to a 48-hour process with zero missing items.

10. Budget-to-Actual Variance Reporting

Monthly comparison of actual results to budget with documented explanations for every variance above 10%. This is the control that proves the founder can forecast — and investors weight forecasting accuracy as heavily as they weight revenue growth. A startup that cannot explain its own variance is a startup that cannot be modelled.

Why Do 3 Missing Controls Kill More Deals Than Bad Revenue?

Three missing controls — bank reconciliation, expense authorisation, and journal entry review — kill more deals than bad revenue because they signal that the numbers themselves cannot be trusted. Bad revenue is a pricing problem. Missing controls is a governance problem. Investors can fix pricing. They cannot fix a founder who does not know what controls are.

Hayat Amin proved this in a due diligence engagement where a SaaS company with £4M ARR and 140% net revenue retention lost a £12M Series A because the due diligence team found 47 unreconciled bank items spanning eight months. The revenue was real. The controls gap made it unverifiable. The investor walked. The company raised six months later at a 30% lower valuation — after installing every control on this list.

What Is Hayat Amin's Pre-Raise Financial Controls Audit?

Hayat Amin's Pre-Raise Financial Controls Audit is a 20-point diagnostic that stress-tests a startup's financial infrastructure against the exact checklist investors use in diligence — before the investor ever sees the data room. The audit scores each control from 0 (absent) to 3 (institutional grade), flags the deal-killers, and produces a remediation plan that a fractional CFO can execute in 30 to 60 days. Beyond Elevation runs this audit as the first deliverable in every pre-raise engagement because the cheapest time to find a control gap is before an investor finds it for you.

The audit covers all 10 controls above plus 10 additional items: intercompany reconciliation, related-party transaction disclosure, equity reconciliation, tax compliance status, insurance adequacy, contract management, IP ownership chain, data processing agreements, grant and R&D credit documentation, and cap table accuracy.

When Should a Startup Bring In a Fractional CFO for Financial Controls?

A startup should bring in a fractional CFO to install financial controls no later than six months before the next planned raise. Earlier is better. Hayat Amin argues that the right trigger is not round timing but transaction volume: "The moment your monthly transactions exceed 200 line items, a bookkeeper cannot install controls — they can only record transactions. Controls require someone who understands what an investor will ask and builds the answer into the process."

The cost of waiting is concrete. A financial due diligence failure reprices a round by 15 to 40%. A fractional CFO engagement costs £3,000 to £8,000 per month. The maths is not close.

The controls on this list take a competent fractional CFO 60 to 90 days to install from scratch. If your next raise is in three months, the window is already tight. If it is in six, you have time — but only if you start now.

What Do Investors Actually Say About Startup Financial Controls?

Investors say that financial controls are the clearest signal of founder maturity. A founder who has installed proper controls before being asked demonstrates the same operational rigour investors want to see in how they build product and manage teams. According to a 2025 EY Global IPO Trends report, 78% of institutional investors cited "quality of financial reporting and internal controls" as a top-three factor in pre-IPO investment decisions — ahead of market size and competitive positioning.

The asymmetry is stark: you build controls once and they compound. You skip them once and the cost compounds faster — in repriced rounds, delayed closes, and investors who ghost you after the diligence call.

The unit economics investors check are only trustworthy if the controls underneath them are sound. A beautiful dashboard built on unreconciled data is not investor-ready — it is a liability.

FAQ

How many financial controls does a startup need before raising a Series A?

A startup needs all 10 controls listed above installed and operating for at least two monthly cycles before entering a Series A process. Investors expect a minimum of three months of controlled financial data to verify consistency. The controls do not need to be perfect — they need to exist, be documented, and be followed consistently.

Can a startup install financial controls without a CFO?

A startup can install basic controls — bank reconciliation, expense authorisation, access controls — with a competent bookkeeper or controller. The more complex controls — revenue recognition policy, journal entry review, budget-to-actual variance analysis — require someone with CFO-level judgement. A fractional CFO is the most cost-effective route for companies between £1M and £20M revenue.

What happens if investors find missing controls during due diligence?

Missing controls trigger one of three outcomes: a repriced round (15 to 40% lower valuation), a delayed close with remediation conditions, or a dead deal. The outcome depends on how many controls are missing and which ones. A missing bank reconciliation is almost always a dead deal. A missing budget-to-actual process is a management letter comment. Know the difference before you open the data room.

How long does it take to install financial controls at a startup?

A fractional CFO can install all 10 controls in 60 to 90 days from a standing start. The first 30 days focus on the three deal-killers: bank reconciliation, expense authorisation, and journal entry controls. Days 30 to 60 cover payroll, access controls, and the monthly close process. Days 60 to 90 address revenue recognition, cash disbursement, and variance reporting. The exit-ready finance function builds on this foundation.

How much does it cost to fix financial controls before a raise?

A fractional CFO engagement to install financial controls costs £3,000 to £8,000 per month for three to four months — a total of £9,000 to £32,000. The alternative is a 15 to 40% valuation haircut on a round, which at a £10M pre-money valuation means £1.5M to £4M in lost equity. The return on the controls investment is 50x to 400x. Book a financial controls audit with Beyond Elevation before your next raise.