NVCA 2025 Model Legal Document Updates: What Founders and Investors Need to Know

On October 2, 2025, the National Venture Capital Association (NVCA) released its most significant update to the model legal documents in years. The NVCA model documents—which have become the industry benchmark for virtually all U.S. venture financings—now address tranched financings, national security compliance under the Outbound Investment Security Program (OISP) and Data Security Program (DSP), updated QSBS provisions, and corporate governance policy adoption.

For founders and investors alike, these changes carry real consequences. Below, we break down what changed, why it matters, and what you should be doing about it before your next financing.

1. Tranched Financings Get a Formal Framework

The updated Stock Purchase Agreement now formally supports milestone-based or “tranched” financings—venture rounds split into multiple closings, each contingent on the company achieving specific milestones. For example, rather than wiring $10 million at a single close, an investor might fund $5 million initially and release another $5 million only after the company hits a defined revenue target, obtains a regulatory approval, or reaches a product milestone.

Tranched structures have been used in life sciences deals for years (tracking FDA approval stages), but the October 2025 update is the first time the NVCA SPA has included standardized language for them. The update introduces an Annex to the SPA where parties can define milestones, achievement criteria, and the consequences of failure to fund.

What Founders Should Know

A tranched structure creates real execution risk. If a milestone is ambiguous or subjective, you can end up in a dispute with your lead investor at exactly the moment you need capital. The NVCA update includes optional language that would convert an investor’s preferred stock to common stock if they fail to fund a required tranche—stripping liquidation preference, anti-dilution, and protective rights. But this remedy only works if it’s in the agreement.

Before agreeing to a tranched structure, founders should insist on objective, auditable milestone criteria; model cash runway with and without the second tranche; and ensure their projections don’t over-promise milestone feasibility.

What Investors Should Know

The conversion penalty is real. If your fund cannot meet a later tranche obligation due to LP timing issues or concentration limits, you could lose your preferred rights on previously purchased shares. Investors should confirm internal liquidity planning and side letter flexibility before committing to tranched obligations.

2. National Security Compliance: OISP and DSP Representations

The most consequential change in the October 2025 update is the introduction of two-way national security representations in the Stock Purchase Agreement. Both the company and each investor must now represent compliance with two new federal regulatory frameworks.

Outbound Investment Security Program (OISP)

Effective January 2, 2025, the OISP limits or requires notification of certain transactions by U.S. persons involving “covered foreign persons,” with particular focus on semiconductors, artificial intelligence, and quantum computing linked to countries of concern (primarily China, including Hong Kong and Macau).

Under the updated SPA, companies must represent that they are not engaged in any “covered activity” under the OISP, have no intention of becoming a “person of a country of concern,” and do not hold board seats, voting interests, or contractual management power over any “covered foreign person.”

Data Security Program (DSP)

Effective April 8, 2025, the DSP restricts foreign-connected entities’ ability to access or process certain categories of U.S. government-related data or bulk personal data—including genomic, biometric, geolocation, and sensitive health information.

The updated SPA requires both parties to confirm they are not “covered persons” under the DSP. This encompasses entities organized in or controlled by designated countries, majority-owned affiliates of such jurisdictions, data brokers handling large-scale genomic or biometric datasets, U.S. government contractors with access to restricted federal data, and any entity designated by the U.S. Attorney General as controlled by a country of concern.

Why Two-Way Representations Matter

This is a fundamental shift. Regulatory exposure now travels in both directions. For founders, an investor with undisclosed foreign beneficial ownership could jeopardize customer contracts, federal grants, or exit timing. For investors, a company’s unrecognized DSP status could introduce enforcement risk across the portfolio. The two-way structure encourages early disclosure and constructive problem-solving rather than post-closing surprises.

Practical Steps

For companies: Before launching a financing, conduct a regulatory health check. Map foreign subsidiaries, contractors, and data-access arrangements. Catalogue sensitive data types and third-party processors. Validate beneficial ownership on your cap table. Budget two to four weeks for this work.

For investors: Review LP composition for prohibited beneficial ownership. Confirm co-investment vehicles and SPVs can pass the “person of concern” test. Update diligence checklists with OISP/DSP-specific questions. Ensure your fund documents support clean representations.

3. QSBS Update: One Big Beautiful Bill

The updated SPA revises the Qualified Small Business Stock (QSBS) representation to reflect the expanded capital-gains exclusion threshold. The model language now references the more generous exclusion, which can exempt up to 100% of eligible capital gains for qualifying issuances if the company’s aggregate gross assets have not exceeded $75 million at any point since incorporation.

Because QSBS outcomes are fact-dependent and time-sensitive, companies should align early with tax advisors on qualified trade or business status, active business requirements, redemptions, and aggregation of assets. Investors should track holding periods, issuer eligibility, and potential tacking rules across reorganizations.

4. Corporate Governance Policy Adoption

The updated Investors’ Rights Agreement now encourages adoption of the NVCA’s governance policy suite, including HR and EEO frameworks, diversity and inclusion initiatives, anti-harassment and whistleblower programs, and talent attraction and retention strategies.

While not mandatory, the presence of these policies in the NVCA model documents signals a shift toward institutional expectations. Adopting these policies can be a selling point in later-stage financing or exits, and may streamline portfolio compliance, recruiting, and due diligence. That said, policies are restrictive by nature—adopting a form policy without understanding how it affects your business can create unintended consequences.

5. What This Means for the Montague Law Forms Library

We’ve updated the Montague Law Entrepreneur Forms Library to reflect these changes. Our Series Seed Stock Purchase Agreement, Investor Rights Agreement, Voting Agreement, and ROFR/Co-Sale Agreement now incorporate the October 2025 NVCA provisions, including tranched financing mechanics, OISP/DSP representations, updated QSBS language, and governance policy references.

All forms are available as free, downloadable Word templates with bracket placeholders for customization. As always, we recommend consulting with qualified legal counsel before using any legal document in a live transaction.

This post is for informational purposes only and does not constitute legal advice. Consult with qualified counsel before relying on any information contained herein.