Startup Diligence
Diligence report Financial technology / private-capital infrastructure / equity management / fund administration Late-stage private unicorn

eShares, Inc. dba Carta, Inc.

Carta Diligence Research Report

Underwrite Carta only if data-room materials substantiate durable ARR growth, improving gross margins in fund administration/legal services, low churn after the 2024 trust incident, strong security/data governance, clean regulatory/legal exposure and a current capitalization that supports attractive risk-adjusted ownership despite valuation compression from prior peaks.

Company profile

Carta Diligence Research Report

Carta passed the public-source eligibility screen for this report: public sources show active operations, large private-market scale and valuation references above $1B, while no verified IPO, acquisition or shutdown was found in reviewed sources. The diligence profile is high-potential but high-trust-sensitivity: Carta appears to have scaled revenue/ARR and a broad private-capital platform, yet financial statements, current cap table, retention, product margins, legal exposure and data-governance evidence remain private.

Website
carta.com
Sector
Financial technology / private-capital infrastructure / equity management / fund administration
Geography
United States headquarters; public locations in the United States, Canada, Brazil, United Kingdom and Denmark
Stage
Late-stage private unicorn
Known aliases
Carta, Carta, Inc., eShares, Inc., eShares, Carta Law, CartaX
Report version
1.0
Timezone
America/Los_Angeles

Executive summary

Strengths

  • Active operations and unicorn/private eligibility are supported by current company pages plus 2021 and 2024 independent valuation references.
  • Carta publicly offers broad Equity Suite, Fund ERP, transfer-agent and Carta Law products.
  • Company-controlled sources claim 50,000+ companies, large security-holder/equity-holder scale and recognizable customer/fund logos.
  • Security/trust pages list encryption, least privilege, logging, DR/BCP, audits, pen testing and AI data-use constraints.

Risks

  • Audited financials, cash runway, margins and product economics are not public.
  • Valuation compression from public high marks to a reported possible $2B secondary and private preference stack.
  • Customer-data conflict/trust risk after Linear/CartaX allegations and secondary-trading exit.
  • SEC transfer-agent and Carta Law regulatory footprint requires specialist review.
  • Reputational/employment litigation overhang could affect retention and sales.

Gaps

  • Audited financial statements, management accounts, revenue recognition, product-level gross margins, burn and cash runway.
  • Current cap table, financing documents, liquidation preferences, option pool, debt/warrants, 409A and secondary-sale close/price details.
  • Top customers, active definitions, ARR concentration, GRR/NRR, churn, support quality and trust-incident impact.
  • SOC/ISO reports, pen tests, access logs, incident history, AI governance, data maps, DPAs and subprocessor details.
  • Regulatory correspondence/exams, litigation dockets, employment matters, settlements/reserves and insurance coverage.
  • Sales funnel, CAC/payback, quota productivity, discounting, partner economics and acquisition integration metrics.

Recommended next steps

  • Reconfirm immediately before any committee decision that Carta has not IPO’d, been acquired or shut down.
  • Request CFO package: audited financials, management accounts, KPI dashboard, product-level P&L, board plan and cash/debt schedule.
  • Request cap table and financing package with preference/waterfall analysis and secondary-sale documents.
  • Run customer diligence across active, churned and competitor-migrated customers after the 2024 trust incident.
  • Have securities, privacy, employment and UK legal-regulatory counsel review registrations, dockets, incidents and insurance.
  • Conduct security/AI technical review of SOC/ISO reports, access logs, model governance and data-use controls.

Risk register

high high likelihood

R-001: Financial statements and unit economics are private

Public sources disclose scale signals and estimates, but audited financials, margins, burn, cash runway, revenue mix, taxes and ARR methodology are not public.

Diligence request: Obtain audited statements, management accounts, KPI dashboard, revenue waterfall, gross margin by product and cash/debt schedule.

high medium likelihood

R-002: Valuation compression and private capital structure

Public valuation references range from $7.4B/$8.5B highs to a reported possible $2B 2024 secondary, with preferences and current ownership private.

Diligence request: Request current cap table, financing docs, secondary documents, 409A, preference stack and waterfall under downside exits.

high medium likelihood

R-003: Profitability pressure in fund administration and platform expansion

Press reported 2023 loss and fund-admin gross-margin issues while Carta expands into ERP/legal/professional services.

Diligence request: Review product-level P&L, services utilization, gross margins, implementation costs and fund-customer retention.

high medium likelihood

R-007: Customer scale is public but concentration, churn and satisfaction are private

Carta reports large company/security-holder scale and named logos, but public materials do not disclose active definitions, revenue concentration, retention or complaints.

Diligence request: Request top-customer schedule, active definitions, NRR/churn cohorts, CSAT/NPS, support metrics and permissioned references.

high medium likelihood

R-008: Data asset creates conflict-of-interest and privacy sensitivities

Carta’s proprietary cap-table/investor data is core to the business and to customer trust; prior secondary-market allegations show the sensitivity of perceived data misuse.

Diligence request: Review data-use policies, access controls, product separation, customer consents, audit logs and remediation from the Linear/CartaX incident.

high medium likelihood

R-009: Security controls are public but underlying audits and incidents are not

Carta publicly describes encryption, logging, DR and audits, but actual SOC/ISO reports, test findings, vulnerabilities and incident history require restricted access.

Diligence request: Obtain SOC 1/2, ISO certificate/scope, pen-test summaries, incident register, cyber insurance and vendor-risk reports.

high medium likelihood

R-010: Regulated transfer-agent and legal-services footprint requires specialist review

Carta publicly claims SEC transfer-agent status and Carta Law UK SRA-regulated ABS status, increasing regulatory, supervision and claims-risk diligence.

Diligence request: Have securities/regulatory counsel review registrations, exams, complaints, correspondence, legal-services scope and jurisdictional permissions.

high medium likelihood

R-011: AI and sensitive personal-data governance needs validation

Carta uses AI/data workflows in Fund ERP and Carta Law while processing financial, transactional and AML/KYC identifiers.

Diligence request: Request AI model inventory, vendor contracts, data-flow maps, DPAs, privacy impact assessments, model evaluations and client-data isolation evidence.

Chapter 01

01Financial Information

Public sources support Carta as an active private unicorn with meaningful revenue/ARR scale, but audited financial statements, capitalization, projections, margin, cash runway and valuation support are not public.

I.A Annual and quarterly financial information for the past three years

not publicly verifiable confidence: medium

Carta discloses company-controlled ARR and press/analyst estimates exist, but no audited statements or management accounts were public.

Evidence gaps

  • Audited financials, management accounts, revenue recognition memo, cash runway, debt, tax positions and KPI dashboards.

Hidden risks

  • ARR/revenue scale could mask weak gross margin, services-heavy delivery costs, burn or debt.

Follow-up questions

  • Provide audited statements, monthly management accounts, KPI dashboard, budget-vs-actuals and cash/debt schedules.
Public financial signals versus underwriting gaps
Metric or documentPublic signalVerification statusMissing for underwriting
ARR / revenue scaleCarta About: $500M ARR crossed in 2025; Sacra: $442M ARR in 2024; TechCrunch: $380M revenue and $65M loss in 2023.Partially verifiedARR definition, audited revenue, product mix and revenue recognition.
Gross marginTechCrunch reported fund-admin gross-margin challenges.Partially verifiedProduct-level COGS, services utilization and margin bridge.
Cash runway and burnNo public cash, debt, burn or runway schedule found.Not publicly verifiableCash/debt schedule, budget-vs-actuals and board plan.
Backlog / deferred revenue / ARNo public operational finance package found.Not publicly verifiableBacklog, deferred revenue, billing, collections and AR aging.

Company ARR and third-party revenue estimates should not be treated as audited financial statements.

Public valuation and revenue anchors Bar chart of selected public valuation/revenue anchors; not a complete financial history.

Revenue/ARR and valuation are plotted on same USD-million scale for context only.

I.B Financial projections

not publicly verifiable confidence: medium

No board-approved forecast, pipeline-backed model or downside case was publicly available.

Evidence gaps

  • Three-year plan, assumptions, pipeline, scenario cases, hiring plan, product-level P&L and board materials.

Hidden risks

  • Forecast may rely on unproven AI/legal/fund-admin margin expansion or rebound in private-market fundraising.

Follow-up questions

  • Provide board-approved plan with SKU/segment/geography build and downside liquidity cases.

I.C Capital structure

partially verified confidence: medium

Historical financing and valuation references are public, but current cap table, preference stack and current common value are private.

Evidence gaps

  • Current cap table, financing docs, 409A, secondary close status, debt/warrants/options and investor rights.

Hidden risks

  • Structured preferences, secondary discounts or employee liquidity pressure could materially affect common equity value.

Follow-up questions

  • Provide full capitalization and financing package; confirm no pending IPO/acquisition/shutdown event.
Eligibility and private-unicorn screen
Eligibility testPublic evidenceStatusDiligence implication
Active operationsCarta About page reports current products, 50,000+ companies, $500M ARR crossed in 2025 and 1,900+ employees.Passed public-source screenActive-company evidence; verify with corporate records.
Unicorn valuation2021 Series G at $7.4B; 2024 reported secondary at possible $2B.Passed public-source screenStill above $1B in reviewed public sources, but valuation compressed.
No IPO/acquisition/shutdownReviewed active company pages and independent press references; no verified disqualifying event found in those sources.Partially verifiedReconfirm immediately before investment committee.

Eligibility conclusion is based on public evidence available as of the accessed date, not legal confirmation.

Capitalization, financing and valuation diligence asks
TopicPublic anchorRiskFollow-up request
Series G$500M Series G at $7.4B valuation led by Silver Lake per TechCrunch/Sacra.Preference stack and investor rights unknown.Full financing docs, investor rights, side letters and waterfall.
Secondary valuationTechCrunch reported contemplated $2B 2024 secondary after $8.5B late-2022 claim.Mark-to-market compression and employee/investor liquidity pressure.Secondary documents, participant list, clearing price and board approvals.
Total fundingTechCrunch 2021 says $1.29B; Carta About says $1.2B+ raised by Carta.Round count/terms and dilution unknown.Cap table, option pool, convertible notes/warrants and debt.
409A and common valueCarta sells 409A products but its own 409A not public.Common value may differ materially from preferred/secondary marks.Latest 409A, common FMV history and valuation memo.

Carta’s own market position in valuation products heightens conflict and methodology diligence.

Carta milestone and valuation timeline Chronological view of founding, major product milestones, financing marks, reputational events and strategic expansion.

Dates without day precision are represented as month-level public milestones.

I.D Other financial information

partially verified confidence: medium

Public reporting highlights valuation pressure, 2023 loss estimate and secondary-business exit; accounting/tax policies and product economics remain private.

Evidence gaps

  • Revenue recognition, tax policies, segment gross margin, professional-services utilization and acquisition accounting.

Hidden risks

  • Fund administration and legal services may carry lower software margins and professional-liability exposure.

Follow-up questions

  • Provide product-level P&L, tax/accounting memos and board materials on secondary-business shutdown.
Chapter 02

02Products

Carta publicly offers a broad private-capital platform spanning issuer equity management, fund operations, transfer-agent workflows and Carta Law; product economics, adoption and delivery quality remain private.

II.A Description of each product

verified confidence: high

Public pages substantiate Equity Suite, Fund ERP and Carta Law product lines.

Evidence gaps

  • SKU revenue, active users, module attach rates, roadmap, uptime and product-level margin.

Hidden risks

  • Product breadth may hide uneven adoption, margins or support quality.

Follow-up questions

  • Provide product telemetry, SKU P&L and customer references by product line.
Equity Suite product modules
ModulePublic descriptionPotential moatRequired diligence
Cap Table ManagementView, track and issue equity on a secure platform.System of record and transfer-agent workflows create switching costs.Active issuers, uptime, accuracy, migration churn and support tickets.
Total CompensationStartup-specific benchmarks to forecast, hire and retain talent.Dataset scale may improve benchmarks.Data rights, benchmark methodology, customer adoption and accuracy.
Equity AdvisoryTax strategies from experts to help employees understand equity.Services attachment to software.Margins, compliance, liability and staffing utilization.
Liquidity / tender offersRun tender offers while maintaining full control of cap table.Cap-table integration.Scope after secondary-trading exit, conflict controls and broker/dealer dependencies.
QSBS / 409AQSBS attestation and audit-ready 409A valuations.Compliance workflow with cap-table data.Accuracy, audit challenges and customer claims.

Product claims are company-controlled; revenue/adoption by module remains private.

Fund ERP and Carta Law product surface
OfferingPublic componentsStrategic rationaleDiligence flags
Fund ERP front officeDeal CRM and LP CRM.Acquire fund customers earlier in workflow.CRM adoption, data quality and competition with fund CRMs.
Fund ERP middle officePortfolio analytics, valuations and fund reporting.Increase data connectivity and reporting value.Accuracy, auditability, integrations and methodology.
Fund ERP back officeEquity management, fund administration/financials, tax/compliance and LP portfolio management.Broader share of private-capital operations.Service margins, staff leverage and tax/compliance liability.
Carta LawCompliance, contracts and fund services, attorney-verified AI workflows.Outcome-based legal/compliance revenue and tighter workflow lock-in.Regulatory scope, professional liability and AI governance.

Fund ERP and Carta Law may improve customer value but add operational and regulatory complexity.

Carta product architecture map Publicly disclosed product stack across issuers, funds, legal/compliance, data/AI and security controls.

Architecture is inferred from public pages, not internal system architecture.

II.B Product pricing and packaging

verified confidence: high

Public pricing shows tiers from free Launch to Scale with advanced compliance features.

Evidence gaps

  • Net pricing, discounts, attach rates, gross margins and regulated-service economics.

Hidden risks

  • Public feature breadth could increase implementation/support costs and compliance exposure.

Follow-up questions

  • Provide bookings/pricing waterfall, cohort upgrades and transfer-agent compliance files.
Pricing tiers and compliance escalation
PlanPublic eligibility/featuresCommercial implicationDiligence question
LaunchFree first cap table; up to 25 stakeholders and $1M raised.Top-of-funnel acquisition and early standardization.Free-to-paid conversion and support cost.
BuildUp to 50 stakeholders plus onboarding, priced-round modeling and deal closings.Monetizes fundraising/complexity.Attach rate to round support and price realization.
GrowFlexible stakeholder limit, board meetings, Form 3921 and 409A valuations.Compliance upsell as companies mature.409A margin, audit outcomes and renewal lift.
ScaleASC 718/US GAAP, Rule 701, IFRS, exit modeling, IPO Advisory and SSO.Enterprise compliance tier.Enterprise discounting, win/loss and implementation burden.

Public tiers do not reveal contracted prices, discounting or renewal mechanics.

Pricing tier complexity escalation Bar chart showing approximate count of distinctive public incremental features by plan.

Counts are analyst-normalized from public feature lists and should not be used as exact SKU economics.

II.C Product roadmap, defensibility and limitations

partially verified confidence: medium

Carta’s product evolution suggests network/data integration ambitions but also conflict and trust constraints.

Evidence gaps

  • Roadmap, product sunset plan, M&A integration status, data-use approvals and product risk assessments.

Hidden risks

  • Data-rich workflows may be constrained by customer permissions and conflict optics.

Follow-up questions

  • Provide product roadmap, integration scorecards and data-use governance committee materials.
Chapter 03

03Customer Information

Carta publicly claims substantial customer/data scale and displays notable logos, but top-customer schedules, concentration, retention, churn, product adoption and customer satisfaction are private.

III.A Top customers by application

partially verified confidence: medium

No top-customer schedule is public; only scale metrics and curated logos/testimonials are visible.

Evidence gaps

  • Top 25 customers, active definition, ARR by product, concentration, retention, opt-outs and customer complaints.

Hidden risks

  • Logo/metric inflation, dormant accounts and undisclosed concentration could misstate customer quality.

Follow-up questions

  • Provide customer schedule by ARR/product/segment and customer-data opt-out audit.
Customer and dataset scale claims
ClaimSourceWhat it supportsWhat remains unknown
50,000+ companies in 160+ countriesCarta AboutBroad issuer/company footprint.Active definition, paying status, segment mix and churn.
85% of US unicorns using Carta cap tableCarta AboutPenetration among high-value venture-backed companies.Currentness, definition and revenue concentration.
Over 50,000 private companies and 2.5M security holders use CartaData methodologyDataset scale for Data Desk/benchmarks.Opt-outs, duplicate users, dormant accounts and data quality.
Trusted by over 1.7M equity holdersEquity pageEquity-holder footprint.Active users, satisfaction and incident history.

Company-controlled scale metrics should be reconciled to billing and product telemetry.

Customer diligence gaps and hidden risks
GapWhy it mattersRisk if adverseRequest
Top customers by revenue and productIdentifies concentration and cross-sell.A few fund-admin/late-stage accounts may drive outsized ARR.Top 25 customer schedule with ARR, products, tenure and renewal dates.
Retention cohorts and churn reasonsTests switching costs and satisfaction after trust incidents.Logo count may hide high SMB churn or enterprise migrations.GRR/NRR cohorts by segment and churn interviews.
Customer data-use consent and opt-outsData Desk and AI features depend on customer trust and rights.Privacy/contract limitations may constrain data monetization.DPA, opt-out logs, data-use policy and consent audit.
Support and implementation metricsProfessional-services-heavy products can create margin and satisfaction risk.Fund-admin quality issues can cause churn and reputational harm.SLA performance, ticket aging, implementation backlog and CSAT/NPS.

Customer diligence is the highest-priority non-financial workstream.

Customer and data scale claims Chart of public scale claims from Carta About, Data Desk and Equity pages.

Mixed units are plotted for dashboard-style illustration; use table detail for interpretation.

III.B Customer references and testimonials

verified confidence: medium

Equity Suite and Fund ERP pages show recognizable logos and testimonials, but curated references are not independent satisfaction evidence.

Evidence gaps

  • Logo permission, current customer status, ARR contribution, reference-call notes and churn history.

Hidden risks

  • Named logos may be old, non-paying, low-ARR or subject to limited usage rights.

Follow-up questions

  • Conduct independent calls with active and churned customers across Equity Suite, Fund ERP and Carta Law.
Named customer/logo surface
SegmentPublic names/examplesEvidence typeDiligence use
Equity Suite companiesBetterment, Brex, Demostack, iSpot, Perkville, Radar, Double A Labs, Guide.Company page logos/testimonials.Reference targets; verify active/current status and ARR contribution.
Fund ERP / fundsBase10, Delta-v, Kayne Anderson, QED, Sagewind, Shore, DataTribe, Emergent, Pelion.Company page logos/testimonials.Segment reference targets; test fund-admin satisfaction and switching risk.
Security/trust center logosCalendly, Puppet, Samsara, Brex, Menlo Ventures, Base10, Tribe Capital.Trust center trusted-by logos.Confirm logo permissions and role as security-review users/customers.
Carta Law clients200+ clients, no named list on reviewed page.Company scale metric.Request customer list, retention and claims/complaint history.

Logo evidence is useful for sampling, not concentration analysis.

III.C Customer concentration, churn and satisfaction

not publicly verifiable confidence: medium

Revenue concentration, retention, churn reasons and support quality were not publicly verifiable.

Evidence gaps

  • GRR/NRR, churned ARR, support SLAs, NPS/CSAT, complaint logs and churn-interview notes.

Hidden risks

  • Trust-sensitive customers may churn or restrict data use after perceived conflicts.

Follow-up questions

  • Provide retention cohorts, churn waterfall and impact analysis from January 2024 controversy.
Legal, privacy and reputation risk heatmap Heatmap of legal, privacy, regulatory and reputation risks surfaced in public diligence.

Risk placement is not a legal conclusion.

Chapter 04

04Competition

Carta competes across several markets rather than a single category: cap tables/409A, fund administration/SPVs, late-stage equity/liquidity and global compensation.

IV.A Competitor identification

verified confidence: high

Public competitor pages identify Pulley, AngelList, Morgan Stanley at Work/Shareworks and Ledgy as relevant alternatives.

Evidence gaps

  • Win/loss, churn-to-competitor, competitive pricing and market-share by segment.

Hidden risks

  • Competitors may win on focus, trust, price, global compliance or enterprise relationships.

Follow-up questions

  • Provide competitive intelligence, migration data and customer reasons for switching.
Competitive landscape by segment
CompetitorPublic positioningOverlap with CartaCarta diligence angle
PulleyCap table management for founders/finance leaders; explicitly targets Carta switchers.Cap tables, 409A, compliance/SBC, fundraising, SAFEs, liquidity and employee experience.Migration friction, pricing and trust after Linear/CartaX incident.
AngelListTools for private funds, venture funds, SPVs and digital subscriptions.Fund administration, investor management and private-fund workflows.Fund ERP differentiation and fund-manager retention.
Morgan Stanley at Work / ShareworksPrivate-company equity administration, liquidity and 409A, with enterprise financial-services breadth.Late-stage/private-company equity plans and liquidity.Enterprise migrations and partnership economics.
LedgyGlobal equity and executive compensation from incorporation to post-IPO.Equity administration and global compensation.International/localization pressure in Europe and post-IPO workflows.

Competitor pages are self-promotional; independent win/loss needed.

Competitive market map Map competitors by breadth of private-capital workflow and enterprise/lifecycle orientation.

Coordinates are analyst qualitative estimates from public positioning.

IV.B Market share and competitive moat

partially verified confidence: medium

Carta’s public scale suggests leadership, but market share, retention and defensibility are not independently verifiable.

Evidence gaps

  • Market share, switching costs, migration timelines, NRR by segment and customer willingness-to-pay.

Hidden risks

  • Moat can erode if customers perceive data conflicts or experience poor service quality.

Follow-up questions

  • Run customer references focused on switching costs and competitor alternatives.
Moat and switching-cost assessment
Moat vectorEvidenceDiligence strengthFailure mode
System of record / transfer agentCarta says it is SEC-registered transfer agent and manages electronic securities.Potentially high switching cost.Trust incident or poor support can motivate painful migration.
Network data and benchmarks50,000+ companies, 2.5M security holders and Data Desk methodology.Differentiated dataset.Privacy/contract limits and customer opt-outs constrain use.
Product breadthEquity Suite, Fund ERP and Carta Law.Cross-sell and integrated workflows.Breadth creates operational complexity and margin drag.
Brand/category leadership85% of US unicorns using Carta cap table; recognizable logos.High awareness in VC ecosystem.Reputation damage and competitor founder-friendly positioning.

Moat must be tested with customer references and churn/migration data.

Competitive and market risk heatmap Risk heatmap for competition and market/financing risks.

Risk placement is analyst judgment based on public evidence.

IV.C Competitive threats and substitutes

partially verified confidence: medium

Substitution risk is highest where competitors exploit trust, price, localization, or professional-services quality.

Evidence gaps

  • Segment churn, competitor win/loss, product quality and renewal pricing.

Hidden risks

  • Late-stage customers may graduate to banks; early-stage customers may migrate to newer cap-table vendors after trust incidents.

Follow-up questions

  • Provide segment-specific churn-to-competitor and pricing analyses.
Competitive risk register by use case
Use caseLikely alternativesSubstitution riskEvidence needed
Early-stage cap table and 409APulley, law-firm/admin spreadsheets, regional providers.Medium-high if price/support/trust weakens.Early-stage win rates, free-to-paid conversion and migrations.
Fund admin / SPVsAngelList, fund administrators, banks, accounting firms.High because workflows include services and compliance.Fund cohort retention, gross margin and customer references.
Late-stage equity and liquidityMorgan Stanley Shareworks, banks and broker-led tenders.Medium-high at enterprise/post-IPO inflection.Late-stage churn, partnership economics and IPO handoff process.
Global equity/executive compLedgy and local/regional providers.Medium in Europe/global compensation.Localization roadmap, compliance coverage and international ARR.

Competitive risk is concentrated where trust, localization and services quality matter most.

Chapter 05

05Marketing/Sales/Distribution

Carta’s public GTM combines self-serve/free entry, sales-led paid tiers, fund/enterprise demos, data-content authority, customer references and strategic partnerships, but CAC/payback and channel economics are private.

V.A Sales and marketing channels

partially verified confidence: medium

Public evidence shows free Launch/self-serve, paid pricing tiers, request-demo motions, Data Desk content and customer stories.

Evidence gaps

  • Lead sources, conversion, CAC, payback, pipeline and campaign attribution.

Hidden risks

  • Content and free tiers may generate low-quality leads or high support costs.

Follow-up questions

  • Provide CRM funnel, CAC/payback by channel and conversion from free Launch to paid plans.
GTM motions and evidence
MotionPublic evidenceLikely funnel rolePrivate diligence need
Free/self-serve LaunchLaunch first cap table for free; sign-up CTA.Early-stage acquisition and standardization.Activation, conversion, support cost and cohort LTV.
Sales-led Build/Grow/ScaleGet started / request-demo CTAs for paid tiers and Fund ERP.Monetize complexity, compliance and funds.Pipeline, quota capacity, discounting and payback.
Customer stories / logosEquity and ERP pages show logos/testimonials.Social proof and reference selling.Reference permissions, churn and revenue by logo.
Data Desk thought leadershipNewsletter/reports across Carta dataset.Inbound demand and ecosystem authority.Attribution, subscriber conversion and data-rights governance.

GTM appears multi-motion; efficiency remains unverified.

Public GTM funnel Illustrative GTM funnel from market content and free Launch to paid enterprise/fund products.

Counts are intentionally null because funnel metrics are not public.

V.B Partnerships and distribution ecosystem

verified confidence: medium

Morgan Stanley/NYSE partnerships and acquisitions support exit-readiness, credibility and product expansion narratives.

Evidence gaps

  • Partner contracts, referral flows, revenue share, exclusivity and integration metrics.

Hidden risks

  • Partnerships may be non-exclusive marketing relationships without material revenue.

Follow-up questions

  • Provide partner agreements and performance dashboards.
Partnerships and ecosystem channels
Channel / partnerPublic evidencePotential impactDiligence question
Morgan Stanley at WorkAbout page says exclusive partnership and preferred public equity management platform for IPO-planning companies.Late-stage/IPO handoff and enterprise credibility.Revenue share, referral economics, exclusivity and customer ownership.
NYSEAbout page says NYSE preferred listing venue and Morgan Stanley Wealth Management services integrated.IPO-readiness positioning and exchange channel.Commercial terms and customer conversion.
Data ecosystemData Desk reports and featured media logos.Brand authority in private-market benchmarks.Data-use rights and conversion from content.
Acquired platformsVauban, Capdesk and Tactyc acquisitions.Geographic/product expansion.Integration, retention and revenue synergies.

Public partnerships may be marketing-oriented; contracts are needed.

Strategic expansion and channel events Timeline of acquisitions/partnerships that also function as distribution and product-expansion channels.

Partnership economics are not public.

V.C Sales productivity and pricing realization

not publicly verifiable confidence: medium

Public pages do not disclose quota capacity, discounting, sales productivity, expansion or renewal economics.

Evidence gaps

  • Bookings waterfall, ACV, discounting, quota attainment, pipeline coverage, NRR and churn.

Hidden risks

  • Valuation may rely on unproven sales efficiency or heavy discounting in enterprise/fund products.

Follow-up questions

  • Provide sales and pricing packet for last eight quarters.
Sales and distribution diligence gaps
Commercial topicPublic evidenceGapRequest
CAC/paybackNone public.No sales efficiency data.CAC, payback, S&M expense by segment and cohort LTV.
Pricing realizationPublic tiers, free Launch and requested-demo CTAs.No discounting, ACV or net price.Bookings waterfall, average ACV, discounting and renewal uplift.
Salesforce productivityExecutive CRO listed, but no rep counts/quotas.Quota capacity and attainment unknown.Rep roster, quota attainment, ramp, pipeline coverage and churned ARR.
Partner economicsMorgan Stanley/NYSE partnership announcements on About page.No contracts/economics.Partner contracts, referral volumes and revenue share.

Commercial data must come from Carta’s CRM/finance systems.

Chapter 06

06R&D

Carta’s public R&D story emphasizes integrated data connectivity, context-aware AI, human review, security and acquisitions; internal architecture, roadmap, model governance and engineering metrics are private.

VI.A Technology architecture, security and reliability

partially verified confidence: medium

Carta publicly describes encryption, access control, logging, backup/restore, HA architecture, BCP and third-party audits.

Evidence gaps

  • SOC/ISO reports, pen tests, incident register, architecture diagrams, vendor risk and cyber insurance.

Hidden risks

  • Company-controlled security claims may omit audit exceptions, incidents or legacy-system weaknesses.

Follow-up questions

  • Provide security data room and CISO walkthrough.
Security and resilience controls
Control areaPublic controlDiligence relevanceEvidence to request
EncryptionAES256 at rest, TLS 1.2+ in transit.Baseline protection for sensitive cap-table/financial data.Architecture diagrams, key management and encryption scope.
Access controlLeast privilege and every internal action/click logged.Critical after data-use allegations.Access review logs, SoD, privileged access and audit trails.
ResilienceDaily backups/restores, AWS HA/redundant architecture and annual BCP testing.Operational continuity for legal system of record.DR tests, RTO/RPO, incident history and tabletop results.
AssuranceSOC1, SOC2, ISO27001 audits and trust-center quick summary.Enterprise sales requirement.Reports, scopes, exceptions and remediation evidence.

Full security review requires protected reports and technical interviews.

Sensitive data and AI control architecture Publicly disclosed controls around customer data, Data Desk and AI/legal workflows.

Inferred from public controls; not internal architecture.

VI.B AI, data science and data governance

partially verified confidence: medium

Carta publicly describes context-aware AI in Fund ERP and static in-house LLMs for Carta Law, while Data Desk uses aggregated/anonymized customer data.

Evidence gaps

  • Model inventory, evaluations, vendor contracts, data maps, PIAs, DPAs, retention and access logs.

Hidden risks

  • AI workflows touching legal/financial data can create confidentiality, privilege, accuracy and regulatory risks.

Follow-up questions

  • Provide AI governance and privacy/security package.
AI/data governance diligence map
AreaPublic statementRiskRequest
Fund ERP AIContext-aware AI and agent-led workflows with human expertise/monitoring.Incorrect financial/fund outputs or opaque automation.Model inventory, evals, monitoring, error budgets and escalation process.
Carta Law AIStatic in-house LLMs; no client data used outside environment or for training.Confidentiality, privilege, unauthorized model training, attorney oversight.Architecture, vendor contracts, logs, privilege workflow and model access controls.
Data DeskAggregated/anonymized data; opt-out companies excluded.Reidentification, contractual restrictions and customer trust.Aggregation thresholds, privacy reviews, opt-out audit and data lineage.
Sensitive KYC/financial dataCollects bank, brokerage/custodial, tax IDs, equity holdings and government IDs when needed.Privacy, GLBA, AML/KYC and breach exposure.Data map, retention, DPA/subprocessors, PIAs and incident response.

AI/data governance is a cross-cutting technical and legal workstream.

VI.C Product development roadmap and integration

partially verified confidence: medium

Public milestones show acquisitions and AI/product roadmap themes, but R&D staffing, roadmap delivery and integration status are private.

Evidence gaps

  • R&D roadmap, engineering metrics, technical debt, integration plans, release quality and staffing.

Hidden risks

  • Acquisition integration, AI roadmap promises and professional-services dependencies may lag sales narratives.

Follow-up questions

  • Provide product roadmap, architecture review and acquisition integration scorecards.
R&D/product roadmap and acquisition signals
SignalPublic evidenceR&D implicationValidation needed
Vauban/Capdesk acquisitionsEuropean/UK equity-management expansion in 2022.Localization and international platform integration.Integration architecture, churn and roadmap completion.
Tactyc acquisitionForecasting/planning solution for venture funds acquired in 2024.Fund forecasting and analytics expansion.Product adoption, data integration and revenue contribution.
Fund ERP AIContext-aware AI, agent-led workflows and human review.AI-assisted private-capital operations.Model evals, human-in-loop SLAs and error rates.
Carta Law AIAttorney-verified AI workflows and static in-house models.AI-native legal/compliance services.Model inventory, data isolation and professional-liability controls.

Public roadmap references require engineering/product KPI validation.

Chapter 07

07Management/Personnel

Carta has a visible executive team and large public workforce footprint, but board composition, org chart, compensation, turnover, HR matters and litigation exposure require private diligence.

VII.A Management team

verified confidence: high

Carta’s executive roster is public and includes CEO, CFO, CRO, CPO, CMO and Chief Product Officer roles.

Evidence gaps

  • Board/advisors, employment agreements, comp, equity grants, succession and retention packages.

Hidden risks

  • Key-person dependence on founder CEO and leadership distraction from litigation/reputation issues.

Follow-up questions

  • Provide management bios, references, contracts and board materials.
Public executive roster
ExecutivePublic roleDiligence focusPublicly verified source
Henry WardChief Executive OfficerFounder/CEO key-person risk, governance, incident response.Carta Executive Team
Charly KeversChief Financial OfficerFinancial reporting, forecast, controls, fundraising.Carta Executive Team
Jeff PerryChief Revenue OfficerSales execution, GTM, press-reported allegations requiring counsel review.Carta Executive Team
Nick AveryChief People OfficerCulture, retention, HR litigation/remediation.Carta Executive Team
Nicole BaerChief Marketing OfficerBrand recovery, demand generation and Data Desk positioning.Carta Executive Team
Vrushali PaunikarChief Product OfficerProduct roadmap, AI/data governance and platform quality.Carta Executive Team

Board roster, reporting lines and compensation were not public.

Public executive organization map Public executive team roster grouped by function.

Reporting lines are analyst assumptions for visualization; actual org chart was not public.

VII.B Organization, headcount and locations

partially verified confidence: medium

Carta claims 1,900+ employees in 16 locations and 400+ finance experts, but payroll/HR data is not public.

Evidence gaps

  • Headcount by function/geography, hiring plan, attrition, utilization, contractor mix and leases.

Hidden risks

  • Services-heavy staffing could pressure margins and quality if turnover/utilization are weak.

Follow-up questions

  • Provide HRIS/payroll extract, org chart and staffing/utilization dashboard.
Workforce and location footprint
DimensionPublic evidenceDiligence implicationFollow-up
Employee count1,900+ employees in 16 locations.Scaled organization with material fixed costs.Headcount by function/geography, contractor count and productivity.
LocationsSan Francisco, New York, Seattle, Utah, Santa Clara, New Jersey, Washington DC, Canada, Brazil, UK, Denmark and others listed.Multi-jurisdiction HR, tax and regulatory complexity.Entity map, local compliance and office lease obligations.
Careers messagingActive careers page and operating principles.Employer brand remains active.Open roles, attrition, hiring plan and engagement scores.
Operating modelFund ERP page cites 400+ finance experts.Services capacity is a key cost and quality driver.Utilization, cost structure, turnover and QA.

Workforce public claims require HRIS/payroll validation.

VII.C Culture, retention and employment matters

partially verified confidence: medium

Press-reported lawsuits and culture allegations create a material HR/reputation diligence workstream.

Evidence gaps

  • Docket status, settlements, reserves, HR complaint log, engagement survey, DEI metrics and attrition.

Hidden risks

  • Unresolved HR/legal issues may affect retention, recruiting, customer trust and insurance/reserve needs.

Follow-up questions

  • Have employment counsel and HR diligence team review all matters and remediation.
People/culture legal and HR risk surface
SignalPublic evidencePotential impactRequired review
Press-reported lawsuits/exposésSF Standard article summarizes multiple lawsuits and culture allegations.Reputation, retention, damages, sales friction.Dockets, settlements, reserves, insurance and remediation.
CRO named in lawsuit allegationsSF Standard reported allegations involving Jeff Perry; Carta/individual defenses not fully evaluated here.Leadership distraction and HR risk.Counsel memo, HR investigation and current status.
CEO communications on negative pressTechCrunch referenced customer communications around negative press.Customer trust and governance scrutiny.Board oversight and customer churn/renewal impact.
Operating principles emphasize transparency/ownersCareers page states “We play in the open” and “We act as owners.”Culture aspirations may not align with allegations.Employee survey, complaint log and attrition by cohort.

Allegations are not adjudicated here; counsel should evaluate status and exposure.

Chapter 08

08Legal

Carta’s public legal surface includes SEC transfer-agent positioning, Carta Law UK regulation, sensitive privacy/data processing, trademarks and significant reputational/legal incidents; legal conclusions require counsel review.

VIII.A Corporate, regulatory and licensing status

partially verified confidence: medium

Public sources identify eShares, Inc. dba Carta, Inc., transfer-agent status for U.S. companies and Carta Law UK SRA-regulated ABS status.

Evidence gaps

  • Entity chart, good standing, transfer-agent filings/exams, SRA records, legal-service terms and complaints.

Hidden risks

  • Regulatory exams, complaints, legal-service scope and entity permissions may not be visible publicly.

Follow-up questions

  • Have securities and UK legal regulatory counsel review registrations, correspondence and scope.
Corporate/regulatory footprint
AreaPublic evidenceDiligence concernRequest
Corporate identityPrivacy policy identifies eShares, Inc. dba Carta, Inc. and affiliates/subsidiaries including Avantia Law Limited t/a Carta Law.Entity map and cross-border processing.Org chart, subsidiaries, good standing and intercompany agreements.
Transfer agentPricing page states Carta is an SEC-registered transfer agent for U.S. companies.SEC registration, exams, recordkeeping and complaints.Registration, exams, correspondence, policies and incident logs.
Carta LawUK SRA-regulated Alternative Business Structure.Professional regulation, insurance and jurisdictional scope.SRA records, insurance, engagement terms and complaints.
Financial/product transactionsPricing page references stock exercises, repurchases and online transactions.Funds flow, ACH/wires, brokerage/custody dependencies.Bank/payment/vendor contracts and regulatory analysis.

Regulatory counsel review is required before relying on public claims.

VIII.B Intellectual property and data/privacy rights

partially verified confidence: medium

CARTA trademark registrations appear live and relevant; CARTAX was abandoned. Privacy policy confirms sensitive data processing categories.

Evidence gaps

  • Trademark refresh, IP assignments/licenses, patents/open source, DPA/subprocessors, retention and privacy-impact assessments.

Hidden risks

  • IP refresh gaps, data-rights restrictions and privacy obligations could constrain products or create liability.

Follow-up questions

  • Have IP/privacy counsel refresh records and review data-rights contracts.
Privacy and IP evidence
TopicPublic evidenceStatusDiligence request
CARTA mark softwareUSPTO CARTA serial 87124762, registration 5503746, live/continued use accepted.Partially verified during research; refresh required.Counsel refresh TSDR, assignments and oppositions.
CARTA mark financial servicesUSPTO CARTA serial 87124770, registration 5503747, live/continued use accepted.Partially verified during research; refresh required.Counsel refresh TSDR, licensing and use.
CARTAXUSPTO CARTAX serial 90201117 dead/abandoned June 17 2024.Partially verified during research; refresh required.Review abandonment in light of CartaX/secondary-business shutdown.
Privacy policyFinancial, transactional and AML/KYC personal information categories disclosed.Verified company policy.DPA, subprocessors, retention, GLBA/privacy compliance and PIAs.

USPTO API access required key in final session, so counsel refresh is important.

VIII.G Litigation, compliance, privacy and reputational matters

partially verified confidence: medium

Public reporting surfaces the Linear/CartaX data-use controversy, secondary-trading exit and employment/culture lawsuits.

Evidence gaps

  • Complete litigation schedule, docket pulls, reserves, insurance notices, investigations, customer notices and compliance remediation.

Hidden risks

  • Unresolved legal, privacy or reputational issues could impair customer trust, renewal rates, insurance and valuation.

Follow-up questions

  • Have counsel prepare legal exposure memo and customer-trust remediation assessment.
Legal/reputational incidents and exposure map
EventPublic evidenceRisk categoryRequired diligence
Linear/CartaX data-use allegationTechCrunch reported customer accusations and Ward apology/employee-procedure breach statement.Trust, privacy, contracts, reputation.Incident investigation, customer notices, contracts, remediation and churn impact.
Exit from secondary tradingTechCrunch quoted Ward: prioritize trust and exit secondary trading.Strategic, revenue, regulatory.Shutdown scope, residual obligations, broker/dealer/account transfers and product roadmap.
Valuation/revenue/loss reportTechCrunch reported $2B secondary attempt, $380M revenue and $65M 2023 loss.Financial, financing, reputation.Financial package and valuation support.
Employment/culture lawsuitsSF Standard summarized lawsuits and culture allegations.Employment, governance, reputation.Docket review, settlements/reserves, insurance and HR remediation.

Public reporting is sufficient to flag diligence; it is not a legal conclusion.

Evidence

Evidence claims
IDClaimStatusSources
EC-001 Carta presents itself as an active private-capital software and services company with large public scale metrics. verified high SRC-001
EC-002 Carta raised a $500M Series G at a $7.4B valuation in 2021 and told TechCrunch it had raised $1.29B altogether. verified high SRC-013
EC-003 Public reporting in June 2024 indicated Carta was pursuing a secondary sale at a possible $2B valuation, materially below 2021/2022 marks but still above the unicorn threshold. partially verified medium SRC-014
EC-004 Sacra estimated Carta reached $442M ARR in 2024 and was last valued at $7.4B in the 2021 Series G. partially verified medium SRC-018
EC-005 No audited financial statements, management accounts, cash runway, revenue mix, gross margin or cap-table details were found in public sources. not publicly verifiable medium SRC-001SRC-014SRC-018
EC-006 Carta Equity Suite spans cap table, total compensation, equity advisory, liquidity/tender offers, QSBS and 409A products. verified high SRC-004
EC-007 Carta pricing publicly segments corporation plans into Launch, Build, Grow and Scale, with increasingly complex compliance and administration features. verified high SRC-005
EC-008 Carta publicly states it is a registered transfer agent with the SEC for U.S. companies. verified high SRC-005
EC-009 Carta Fund ERP spans front, middle and back-office fund workflows and emphasizes connectivity, context-aware AI and human control. verified high SRC-006
EC-010 Carta Fund ERP claims 400+ finance experts and named fund customers/testimonials. verified high SRC-006
EC-011 Carta Law is positioned as attorney-led, AI-native legal/compliance services for private capital and claims 200+ clients, $14T AUM supported and 40K+ transactions. verified high SRC-007
EC-012 Carta Law says client data is not used to train outside models. verified high SRC-007
EC-013 Carta Data Desk uses a large proprietary dataset and says published customer data is aggregated/anonymized with opt-outs excluded. verified high SRC-009
EC-014 Carta Equity page lists recognizable customer logos/testimonials and claims 1.7M+ equity-holder trust. verified high SRC-004
EC-015 Carta’s security page states AES256-at-rest, TLS 1.2+ in transit, least privilege, full internal action logging, daily backup/restore, AWS HA and annual BCP review/testing. verified high SRC-010
EC-016 Carta Trust Center summarizes annual audits, MDM, penetration testing, disaster recovery, cyber insurance and centralized IAM. verified medium SRC-011
EC-017 Carta Privacy Policy says it collects financial/transactional information and sensitive AML/KYC identifiers where necessary. verified high SRC-012
EC-018 Carta’s January 2024 Linear/CartaX incident generated public accusations that Carta misused cap-table/investor information for secondary-sale outreach. partially verified medium SRC-015
EC-019 Carta exited secondary trading in January 2024 after the credibility hit, with CEO citing trust and data conflicts. verified high SRC-016
EC-020 Independent press reported multiple lawsuits and culture allegations involving Carta. partially verified medium SRC-017
EC-021 Carta executive page lists Henry Ward, Charly Kevers, Jeff Perry, Nick Avery, Nicole Baer and Vrushali Paunikar as executives. verified high SRC-003
EC-022 Carta careers page shows ongoing employer branding and operating principles, but not hiring velocity or turnover. verified medium SRC-002
EC-023 Pulley is a direct cap-table competitor with cap table, 409A, compliance/SBC, fundraising modeling, SAFEs, liquidity, employee experience and crypto products. verified high SRC-019
EC-024 AngelList competes in fund administration, SPVs, digital subscriptions and investor/fund operations. verified high SRC-020
EC-025 Morgan Stanley at Work offers private-company equity administration, liquidity and 409A valuation capabilities. verified high SRC-021
EC-026 Ledgy competes with a global equity/executive-compensation platform from incorporation to post-IPO. verified high SRC-022
EC-027 Carta has live CARTA trademark registrations in software and financial services classes, while CARTAX was abandoned. partially verified medium SRC-023SRC-024SRC-025
EC-028 Public-source screen did not verify an IPO, acquisition or shutdown; active company pages and a 2024 secondary report support private-unicorn eligibility, but absence of disqualifying event cannot be exhaustively proven. partially verified medium SRC-001SRC-002SRC-014
EC-029 Carta uses acquisitions and partnerships to extend geography, product breadth and exit-readiness positioning. verified high SRC-001
EC-030 Carta’s GTM relies on company/fund network effects, public pricing for corporations, sales-led enterprise/fund products, customer stories, Data Desk thought leadership and partner channels. partially verified medium SRC-001SRC-004SRC-005SRC-006SRC-008
Sources
IDPublisherTitleAccessed
SRC-001 Carta About Carta - Our Story 2026-05-20
SRC-002 Carta Careers at Carta 2026-05-20
SRC-003 Carta Executive Team | Carta 2026-05-20
SRC-004 Carta Equity Management Software: One Platform, Unlimited Potential 2026-05-20
SRC-005 Carta Plans & Pricing for Private Corporations 2026-05-20
SRC-006 Carta The Agentic ERP for Funds 2026-05-20
SRC-007 Carta Carta Law: High-Volume Legal & Compliance, Automated 2026-05-20
SRC-008 Carta Data Desk by Carta: Private Market Insights 2026-05-20
SRC-009 Carta About Our Data | Carta 2026-05-20
SRC-010 Carta Cap Table Data Privacy | Legal Hub 2026-05-20
SRC-011 Conveyor / Carta Carta Trust Center | Powered by Conveyor 2026-05-20
SRC-012 Carta Privacy Policy | Legal Hub 2026-05-20
SRC-013 TechCrunch Carta says it just used its own product to establish a new — and far higher — valuation for itself 2026-05-20
SRC-014 TechCrunch Carta’s valuation to be cut by $6.5 billion in upcoming secondary sale 2026-05-20
SRC-015 TechCrunch Carta, the cap table management outfit, is accused of unethical tactics by a prominent startup 2026-05-20
SRC-016 TechCrunch Carta exits secondary trading following credibility hit 2026-05-20
SRC-017 The San Francisco Standard San Francisco unicorn startup Carta hit with multiple lawsuits, exposés 2026-05-20
SRC-018 Sacra Carta revenue, funding & news 2026-05-20
SRC-019 Pulley Pulley | Cap table management for founders and finance leaders 2026-05-20
SRC-020 AngelList AngelList – Build, Lead, Invest 2026-05-20
SRC-021 Morgan Stanley at Work Private Company Workplace Benefits 2026-05-20
SRC-022 Ledgy Ledgy | We make equity work 2026-05-20
SRC-023 United States Patent and Trademark Office USPTO TSDR record, CARTA serial 87124762 2026-05-20
SRC-024 United States Patent and Trademark Office USPTO TSDR record, CARTA serial 87124770 2026-05-20
SRC-025 United States Patent and Trademark Office USPTO TSDR record, CARTAX serial 90201117 2026-05-20

Disclaimer

This report is a public-evidence diligence snapshot, not investment advice. Important financial, legal, technical, and contractual facts remain non-public and should be verified directly with management and primary documents before any investment decision.