The data room is where IPO preparation meets scrutiny. By the time a principal adviser and a reporting accountant begin their review, the company’s documents either support the prospectus narrative or they do not. Gaps discovered during due diligence do not simply add a line item to the timeline: they trigger remediation work, prospectus redrafting, and in some cases, regulatory re-submission.
This guide maps what auditors and sponsors actually check in a Bursa Malaysia IPO data room, organized by document category. The scope is operational finance and audit territory: financial statements, MFRS conversion artifacts, board minutes, related-party transactions, tax position, contingent liabilities, and the legal and IP record. The Malaysia IPO Readiness Checklist covers the broader regulatory preparation sequence from eligibility through listing. This companion article goes deeper on the specific document categories that determine whether a data room passes or fails review.
Three parties review the same data room simultaneously: the reporting accountant (preparing the Accountant’s Report for the prospectus), the principal adviser (satisfying itself that the prospectus is accurate and not misleading), and legal counsel (verifying title, material contracts, and regulatory licences). Documents must be organized to serve all three review tracks. A data room that satisfies the reporting accountant but leaves the principal adviser’s compliance checklist unresolved will not move the SC application forward.
The SC Equity Guidelines R7-2024 (revised 20 December 2024, effective 1 March 2025) require the principal adviser to submit a compliance checklist confirming adherence to the guidelines. The SC Prospectus Guidelines (effective 30 June 2022) define the mandatory content of the prospectus, which directly dictates the document categories a data room must support.
For a comparison of how data room obligations differ across Main Market, ACE Market, and LEAP Market, see Main Market vs ACE Market vs LEAP Market. The analysis below focuses on Main Market requirements, which are the most detailed and are the baseline that ACE Market requirements build from.
The Reporting Accountant’s Role
The reporting accountant is not the company’s statutory auditor performing an annual audit. They are a separate engagement: a firm registered with the Audit Oversight Board (AOB) under the Securities Commission Malaysia Act 1993, appointed specifically for the IPO. Their output is the Accountant’s Report, a document required by the SC Prospectus Guidelines for all equity IPO prospectuses.
The reporting accountant may be the same firm as the statutory auditor, or a different firm. The two engagements are legally distinct. The statutory audit reports cover individual financial years. The Accountant’s Report covers the full track record period as a single body of work, expressing an opinion on historical financial information across multiple years for inclusion in the prospectus.
Grant Thornton Malaysia describes the reporting accountant role as covering “assurance on historical financial statements, issuing reports on financial information in the prospectus, reviewing pro forma financial information, and giving comfort letters.” The comfort letter is a separate deliverable: it confirms that the latest interim financial information is consistent with the audited accounts and that no material changes have occurred since the last audited period.
Two readiness prerequisites flow from this: the company must have a firm with AOB registration formally appointed as reporting accountant well before the SC application is filed, and all financial statements across the track record period must be in final signed form before the Accountant’s Report can be issued. Draft or unsigned accounts cannot be submitted.
Financial Statements: The Core Tier
The financial statement requirements for a Main Market IPO are defined in both the SC Equity Guidelines and the SC Prospectus Guidelines.
For applicants using the Main Market Profit Test, audited financial statements are required across the full profit track record period: three to five full financial years. For applicants using the Market Capitalisation Test, at minimum one full financial year of audited revenue is required. If the prospectus is issued more than six months after the end of the most recent financial year, audited interim financial statements are also required.
All financial statements must be prepared under the Malaysian Financial Reporting Standards (MFRS), as administered by the Malaysian Accounting Standards Board. Companies that were previously reporting under the Malaysian Private Entities Reporting Standards (MPERS) must complete an MFRS conversion before the IPO process can proceed. The MFRS conversion produces restated comparative figures that become part of the data room: not just the converted accounts, but the working papers supporting each restatement.
What the reporting accountant checks within the financial statement tier:
MFRS compliance across the full track record period. The most common pressure points are MFRS 15 (Revenue from Contracts with Customers) and MFRS 2 (Share-based Payment). MFRS 15 requires revenue to be recognized when, or as, performance obligations are met under each customer contract. Companies that recognized revenue earlier under MPERS often carry restated comparative figures that reduce reported profit for earlier years in the track record. MFRS 2 requires fair value measurement for pre-IPO share grants, warrants, and employee options; pre-IPO grants that were not measured or disclosed at the time of award must be addressed before the Accountant’s Report can be issued.
Accounting policy consistency. The same accounting policies must be applied across every year in the track record period. A change in depreciation method, a shift in revenue recognition approach, or an adjustment to inventory valuation basis between years will require explanation and, where material, restatement of comparatives.
MFRS 112 (Income Taxes): deferred tax. The deferred tax schedule across each year in the track record period must reconcile temporary differences arising from timing mismatches between accounting and tax treatments. Deferred tax positions arising from MFRS 15 revenue deferral or MFRS 2 share-based payment expense are a regular focus area.
Interim management accounts alignment. The reporting accountant reviews management accounts for the period between the last audited year-end and the prospectus date. Discrepancies between management accounts and the trend implied by the audited track record are a signal that requires explanation.
Grant Thornton Malaysia identifies “incomplete or inconsistent historical financial records” and “non-compliance with MFRS” among the most common IPO readiness blockers encountered in practice.
The Audit Trail: Board Minutes and Working Papers
Beyond the signed accounts, the reporting accountant and principal adviser work through a layer of documentation that most companies do not organize until IPO preparation begins.
Board minutes. The complete sequence of board minutes across the track record period is a mandatory data room component. Minutes must confirm the authorization of every material transaction during the period: RPT approvals, dividend declarations, material contract executions, significant capital expenditures, and any governance resolutions (director appointments and resignations, share issuances, changes to the company constitution).
Missing board minutes from earlier years in the track record are a common discovery during data room assembly. Companies that operated with informal governance before IPO planning began often have periods where no formal board meetings were recorded. Reconstructed minutes are not the same as contemporaneous minutes: the reporting accountant notes the gap, and the principal adviser assesses whether the gap creates a prospectus disclosure obligation.
Statutory audit working papers. The reporting accountant typically reviews the prior years’ statutory audit working papers to understand the scope of the prior audits, the risk areas identified, any prior-year adjustments, and any matters that were raised with management but not adjusted. This review is not about re-performing the statutory audit: it is about understanding the reliability of the financial records underpinning the track record.
Management accounts. Monthly or quarterly management accounts for the current period bridge the gap between the last audited year-end and the prospectus date. Sponsors use management accounts to verify that the business is performing consistently with the audited track record and to assess whether any material changes have occurred since the last audited period.
Related-Party Transactions
Related-party transaction documentation is the highest-risk category in a Bursa IPO data room, based on patterns visible in prospectus filings.
The SC Prospectus Guidelines require disclosure of all RPTs in the prospectus, with a description of each transaction, the counterparty, the value, the nature of the relationship, and a statement that the transaction was conducted at arm’s length or, where not at arm’s length, the basis on which it was entered into.
What must be assembled in the data room for the RPT tier:
Every RPT across the full track record period. This includes transactions with directors, substantial shareholders, and their associates or connected parties. Each transaction requires: counterparty identity, transaction value, nature of the transaction, date, and pricing evidence. Pricing evidence means contemporaneous documentation: third-party quotations or market comparisons created at the time of the transaction, not retrospectively assembled.
What the reporting accountant checks: whether pricing evidence is contemporaneous, whether the pricing is consistent with arm’s-length market rates, and whether the accounting treatment (inclusion or exclusion from revenue, appropriate related-party disclosure in statutory notes) is correct.
What the principal adviser checks: whether any continuing RPTs are structured and disclosed in a form that satisfies the SC Prospectus Guidelines, and whether the framework for post-listing shareholder approval of ongoing RPTs is in place and documented.
RPTs that are not essential to the core business are typically unwound before the SC application is filed. RPTs that must continue (common in groups where service relationships between entities are operationally necessary) require a specific post-listing governance framework covering annual aggregate limits, independent review, and shareholder approval thresholds.
The three Main Market prospectuses currently in the SC Prospectus Exposure Register (KK Mart Retail Berhad, SQ Advanced Interconnect Berhad, and 1 Doc International Berhad, all registered in the first half of 2026) each contain RPT disclosure sections. This reflects the mandatory RPT disclosure requirement under Division 1, Part II of the SC Prospectus Guidelines, which applies without exception to all equity IPO prospectuses.
The volume of promoter-family transactions that were not priced at arm’s length and were not documented with contemporaneous pricing evidence is consistently among the top sources of data room delay.
The Legal and Corporate Record Tier
Legal counsel’s review operates from the same data room but focuses on a distinct set of documents.
Corporate constitution and shareholder agreements. The current company constitution, any shareholders’ agreement, and any investment agreement affecting share rights, pre-emption rights, or tag-along or drag-along provisions must be in the data room and must be resolved before listing. Provisions in shareholder agreements that would be triggered by the IPO (such as change-of-control rights, put options, or anti-dilution mechanisms) must be addressed before the prospectus is finalized.
Intellectual property register. Trademarks, patents, software, and other IP assets used by the group must be held by the group entity, not personally by founders or directors. IP held personally must be formally transferred to the group before the SC application, and the transfer must be correctly priced and documented. Brand names and domain names registered to founders rather than the company are among the most commonly overlooked items in this category.
Material contracts. Every contract above the materiality threshold set by the principal adviser: customer agreements, supply agreements, licensing arrangements, government concessions, and bank facility agreements. Legal counsel verifies enforceability, identifies any change-of-control clauses that could be triggered by the IPO, and checks whether any material contract contains assignment restrictions that would limit the listed entity’s ability to retain the contract post-listing. The reporting accountant uses material contracts to verify revenue and cost recognition.
Regulatory licences and permits. All licences, permits, and approvals necessary for the core business must be current, held by the correct group entity (not personally by founders), and disclosed in the prospectus. Licences that require annual renewal must be verified as current at the time of the data room review. Sector-specific clearances (Bank Negara Malaysia for financial sector companies, the Energy Commission for energy companies) must be confirmed in advance.
Employment contracts. Key management employment agreements are reviewed for change-of-control provisions, restrictive covenants, and any deferred compensation arrangements that would become prospectus disclosure items. Founders who move from equity holders to employed executives through the IPO process may require new employment agreements structured for a listed company context.
The Tax Position Tier
The tax position across the full track record period is reviewed by the reporting accountant and, independently, by legal counsel or a tax specialist retained by the principal adviser.
Tax computations. The full tax computation for each year in the track record period, showing the reconciliation between accounting profit and taxable income, the application of any tax incentives, and the calculation of current and deferred tax. Computations must be consistent with the statutory accounts: where a material discrepancy appears (a computation prepared on a different basis from the audited accounts), the reporting accountant identifies this as a gap.
IRB correspondence. Any correspondence with the Inland Revenue Board during the track record period must be in the data room: routine assessment notices, queries, audit selections, and any investigation notices. An open IRB investigation covering years within the track record period is a mandatory prospectus disclosure item. Discovered late in the process, an open investigation can add months to the timeline through the additional disclosure analysis required and, where the investigation changes the reported tax position, prospectus redrafting.
Tax incentives. Pioneer status, investment tax allowance, and other incentive approvals must be documented with the original approval letters, the conditions attached, and evidence that the conditions were met for each year the incentive was claimed. The reporting accountant verifies that incentives are correctly reflected in each year’s tax computation.
Transfer pricing. For groups with entities in multiple tax jurisdictions, transfer pricing documentation covering related intercompany transactions is expected in the data room. The absence of contemporaneous transfer pricing documentation for material intercompany transactions is a risk flag, both for the tax position itself and for the accuracy of segment or jurisdictional financial information in the prospectus.
Contingent Liabilities and Litigation
The litigation register is a required data room component under the SC Prospectus Guidelines. All pending, threatened, or recently resolved proceedings must be listed, including commercial disputes, labour claims, regulatory investigations, and intellectual property disputes.
What the reporting accountant checks: whether each item in the litigation register is correctly classified and disclosed under MFRS 137 (Provisions, Contingent Liabilities and Contingent Assets). Claims that are probable and estimable require a provision in the financial statements. Claims that are possible but not estimable require disclosure as a contingent liability. Claims that are remote require neither provision nor disclosure. The classification of each claim is a matter of professional judgement, and the reporting accountant’s classification may differ from management’s initial view.
What the principal adviser checks: whether any claim is, individually or in aggregate, material to the group and whether the prospectus risk factor and litigation disclosure sections adequately describe the exposure, management’s position, and the potential financial impact.
Insurance documentation, covering the scope and limits of the company’s material business risk policies, is typically included in the data room alongside the litigation register. Insurance evidence informs the adequacy of the coverage statement in the prospectus but does not eliminate a contingent liability disclosure obligation: a covered claim must still be disclosed.
Customer and Supplier Concentration
Revenue concentration and supplier dependency disclosures are mandatory risk factor components in every Bursa IPO prospectus under the SC Prospectus Guidelines.
Customer concentration. Revenue broken down by customer across the full track record period must be in the data room, supported by signed contract evidence for the top customers. High concentration in one or two customers is a prospectus risk factor disclosure, not a disqualification, but the data room must provide the factual basis for the disclosure: contract terms, customer credit history, and any customer-specific renewal or exclusivity provisions.
Supplier concentration. For manufacturing, retail, and industrial companies, supplier dependency is a parallel disclosure requirement. Single-source or dominant-supplier relationships must be supported by the relevant supply agreements, pricing terms, and any sole-sourcing justification.
What the reporting accountant checks: whether revenue recognition from the top customers is consistent with the contract terms and with MFRS 15 requirements, particularly for long-term arrangements with variable consideration, milestone-based payments, or volume rebate provisions.
Common Data Room Failure Patterns
The following patterns appear in public prospectus filings and practitioner accounts as the most frequent sources of data room delay on Bursa listings.
Incomplete RPT records. Transactions with founders, directors, or related parties that were not documented with contemporaneous pricing evidence. Reconstruction of pricing evidence after the fact is possible but signals a governance gap that the reporting accountant notes.
Board minutes gaps. Periods in the track record where no formal board meeting records exist. Particularly common in companies that operated informally before engaging IPO advisers. Reconstructed minutes raise questions about whether the documented authorizations actually occurred as described.
Management accounts inconsistent with audited accounts. Where internal reporting used different accounting policies or estimates from the statutory accounts, reconciling the two takes time. Companies whose management accounts differ materially from the audited comparatives face questions about the reliability of their interim financial information.
MFRS 15 adjustments not completed. Companies that converted from MPERS on paper but did not fully apply MFRS 15 to all existing contracts arrive with accounts the reporting accountant cannot sign off on without further adjustment work.
IP held personally. Trademarks, patents, or domain names registered in the name of founders or directors rather than the group entity. Transfer requires legal documentation, may require regulatory notification for certain IP categories, and may carry tax implications under Malaysian law.
Open IRB correspondence. Assessment queries or audit selections by the Inland Revenue Board that were not tracked or responded to. These are often discovered for the first time during the data room assembly process.
Tax computation reconstruction. Years where the tax computation was not prepared contemporaneously with the statutory accounts. Retrospective reconstruction is a risk flag: the reporting accountant cannot confirm the computation reflects the circumstances at the time without evidence.
What Makes a Data Room Pass
A data room that passes the three concurrent reviews shares several features: it is organized by document category rather than by transaction date; each category is complete for the full track record period; documents are in final signed form rather than draft; and pricing evidence for RPTs is contemporaneous, not retrospective.
The timeline implication is direct. The SC Prospectus Guidelines and SC Equity Guidelines do not specify how long data room assembly takes; the timeline is determined by how complete the company’s records are at the point of engagement. Companies that begin data room organization at the same time as adviser engagement consistently find that RPT reconstruction and MFRS adjustment work extend the timeline. Companies that complete a preparatory gap assessment 12 to 18 months before the anticipated SC submission date arrive at the formal data room review with most of the high-risk categories already resolved.
For the broader timeline and eligibility sequence that precedes the data room phase, see the Malaysia IPO Readiness Checklist. For a comparison of how listing obligations differ across Bursa’s three boards, see Main Market vs ACE Market vs LEAP Market.
Editorial content. Not legal, regulatory, or compliance advice. References cited here are to public regulatory and practitioner sources. Companies preparing for listing should engage qualified principal advisers, reporting accountants registered with the SC Malaysia Audit Oversight Board, and legal counsel.
Sources: SC Equity Guidelines R7-2024 (revised 20 December 2024); SC Prospectus Guidelines (effective 30 June 2022); SC Malaysia Prospectus Exposure Register (accessed 2026-05-25, citing KK Mart Retail Berhad, SQ Advanced Interconnect Berhad, and 1 Doc International Berhad as named Main Market precedents); Malaysian Accounting Standards Board, MFRS Framework (masb.org.my); Grant Thornton Malaysia, Bursa Malaysia Listing Requirements and IPO Process (2025); Grant Thornton Malaysia, Reporting Accountants for an IPO (grantthornton.com.my/service/Audit-and-assurance/Reporting-accountants/).