Checklist · Corporate

Running a Regulation D Private Placement: A Securities Compliance Checklist

15 U.S.C. § 77

Type: Checklist
Jurisdiction: National
Date: 2023-10-24
Topic: Corporate

This checklist walks a founder or company through a private securities offering under Regulation D from first principles to closing. It starts with the threshold question—whether the instrument is a security under the Howey test—then explains why Section 5 of the Securities Act forces you into an exemption, and how to choose between Rule 504, Rule 506(b), and Rule 506(c). It covers the accredited-investor definition and the reasonable-steps verification that distinguishes 506(c) from 506(b) self-certification, the general-solicitation bright line, disclosure and anti-fraud obligations under Rule 10b-5, integration and bad-actor screening under Rule 506(d), and the Form D and state blue-sky notice filings preserved by NSMIA Section 18. It closes with legends, Rule 144 resale restrictions, a consolidated one-glance checklist, and the primary authorities. It is the compliance companion to UpLaw's securities-exemption guide.

Running a Regulation D Private Placement: A Securities Compliance Checklist

Corporate > Securities | Published 24 October 2023 - Updated 16 April 2025 | UpLaw - uplaw.us

Every sale of stock, every SAFE, every convertible note is a sale of a security. Federal law says you either register it with the SEC or fit inside an exemption—there is no unregulated third door. Regulation D is the door almost every startup walks through, and walking through it cleanly is a checklist, not a leap of faith.

Keywords: Regulation D, Rule 506(b), Rule 506(c), accredited investor, private placement, Section 4(a)(2), Howey, general solicitation, Form D, blue sky, bad actor, Rule 10b-5, Rule 144, resale restrictions

When Verdant Robotics Inc.—a fictional Delaware startup building autonomous weeding robots for organic farms—decides to raise a $2.5 million seed round from a dozen angels and one small venture fund, its founders think the hard part is the pitch. It is not. The hard part is that the moment Verdant offers stock, SAFEs, or notes to investors, it has triggered federal and state securities law, and every one of those instruments must either be registered or exempt. This checklist is how Verdant—and you—run that offering without stepping on a landmine.

Use it as a working document. The phases run roughly in order, but several run in parallel (you screen for bad actors while you draft disclosure), and the last phase—recordkeeping and resale control—outlives the closing by years. For the doctrinal foundation underneath every step here, read Raising Capital Legally: A Comprehensive Guide to Securities Exemptions for Startups; this checklist is its operational companion.

Phase 1 — Confirm you are actually selling a security (the Howey test)

[ ] Identify the instrument you are offering (stock, SAFE, convertible note, LLC unit, revenue share, token).
[ ] Run the four-factor Howey test: (1) an investment of money, (2) in a common enterprise, (3) with an expectation of profit, (4) derived from the efforts of others.
[ ] If all four are met, treat the instrument as a security and proceed—do not talk yourself out of it.
[ ] Flag edge cases (a token, a "profit-sharing" agreement, an LLC membership interest where members are passive) for securities counsel.

Why it matters, and the traps. SEC v. W.J. Howey Co., 328 U.S. 293 (1946), is the case that defines "investment contract," and its four factors sweep in far more than plain stock. Startup instruments are securities: shares are securities, and so are SAFEs and convertible notes, because the investor puts in money and expects a return from the founders' efforts, not their own. The classic trap is the founder who believes a SAFE or a "friends-and-family" note is somehow outside the securities laws because it is not stock—it is not. Every instrument Verdant will sell is a security. For how SAFEs work as instruments, see Simple Agreements for Future Equity: An Overview of How SAFEs Actually Work; to run a SAFE round mechanically, see Running a SAFE Financing Round: A Practical Checklist.

Phase 2 — Understand why you need an exemption (Section 5)

[ ] Confirm the default rule: Section 5 of the Securities Act makes it unlawful to offer or sell a security in interstate commerce unless a registration statement is in effect or an exemption applies.
[ ] Rule out registration (an IPO-style S-1 registration is wildly disproportionate for a seed round—expensive, slow, and public).
[ ] Select an exemption from registration as your legal basis (for a private placement, almost always Section 4(a)(2) as implemented by Regulation D).
[ ] Write down, in one sentence, the exact exemption you are relying on. You will need it for Form D and your files.

Why it matters, and the traps. Section 5 of the Securities Act of 1933 (15 U.S.C. § 77e) is the engine of the whole regime: absent registration, an unexempt offer or sale is illegal, and the buyer can generally rescind—get their money back—for up to a year under Section 12(a)(1). There is no "we're too small to matter" exception. The statutory private-offering exemption lives in Section 4(a)(2), and the Supreme Court in SEC v. Ralston Purina Co., 346 U.S. 119 (1953), held that its availability turns on whether the offerees can "fend for themselves"—whether they have access to the kind of information registration would provide. Because "fend for themselves" is a fuzzy standard, the SEC built Regulation D as a set of bright-line safe harbors inside Section 4(a)(2). Rely on the rule, and you get certainty. The trap is treating the exemption as automatic; it is a claim you must be able to prove, with the offeror bearing the burden.

Phase 3 — Choose your lane: Rule 504, 506(b), or 506(c)

[ ] Estimate your raise size and investor pool.
[ ] Compare the three Regulation D rules against your facts:
- [ ] Rule 504 — up to $10 million in 12 months; allows non-accredited investors; no federal disclosure mandate; but offers no NSMIA preemption, so full state registration/qualification may apply in every state where you sell.
- [ ] Rule 506(b) — unlimited raise; unlimited accredited investors plus up to 35 sophisticated non-accredited investors; no general solicitation; investor self-certification permitted; NSMIA-preempted.
- [ ] Rule 506(c) — unlimited raise; accredited investors only; general solicitation allowed; issuer must take reasonable steps to verify accredited status; NSMIA-preempted.
[ ] Pick one rule for the offering and commit; do not blend 506(b) and 506(c) mechanics.
[ ] Confirm your choice with counsel before the first offer goes out.

Why it matters, and the traps. Regulation D lives at 17 C.F.R. §§ 230.501–230.508. For a venture-backed startup, the choice is almost always between Rule 506(b) and Rule 506(c), because both preempt state substantive review under NSMIA and neither caps the raise. The decisive variable is whether you need to advertise. Verdant already knows its dozen angels and the fund—it has pre-existing relationships and no need to market publicly—so Rule 506(b) is the natural fit: it lets Verdant close quickly on self-certified accredited investors without the burden of documentary verification. If Verdant instead wanted to post its raise on a demo-day platform or tweet "we're raising," it would have to use 506(c) and verify every investor. The trap with Rule 504 is the blue-sky one: it looks flexible because it tolerates non-accredited investors and light disclosure, but without NSMIA preemption you may have to register the offering in each state, which for a multi-state angel round can cost more than the raise justifies. For the full comparative treatment, see Raising Capital Legally: A Comprehensive Guide to Securities Exemptions for Startups and the sibling resource map, Raising Capital: A Startup Securities Toolkit.

Phase 4 — Nail down the accredited-investor definition and verification

[ ] Learn the individual accredited thresholds under Rule 501(a): net worth over $1 million excluding the primary residence, or income over $200,000 (individual) / $300,000 (joint) in each of the two most recent years with a reasonable expectation of the same.
[ ] Learn the newer knowledge-based categories: holders of Series 7, 65, or 82 licenses; "knowledgeable employees" of a private fund.
[ ] Learn the entity thresholds: banks, registered investment companies, and entities with more than $5 million in assets, among others.
[ ] If Rule 506(b): collect a signed accredited-investor questionnaire (self-certification) from each investor and retain it.
[ ] If Rule 506(c): take reasonable steps to verify accredited status—review W-2s, tax returns, brokerage/bank statements, a credit report, or obtain a written confirmation from the investor's CPA, attorney, registered broker-dealer, or investment adviser.
[ ] Retain all verification materials in the deal file.

Why it matters, and the traps. "Accredited investor" is defined in Rule 501(a), and it is the linchpin of a 506 offering because accredited investors are presumed able to fend for themselves. Under 506(b), a good-faith self-certification questionnaire is generally enough unless you have reason to doubt it—Verdant can take its angels' checked boxes at face value. Under 506(c), self-certification is expressly not enough: the issuer must take reasonable steps to verify, an affirmative documentary burden. The most common and most dangerous mistake is running a publicly marketed 506(c) round while treating verification like a 506(b) questionnaire—checking a box instead of reviewing a tax return or getting a third-party letter. If verification fails and you solicited generally, you have no 506(b) fallback (you blew the no-solicitation condition) and you may have an unexempt, rescindable offering. Verdant's fund investor will typically qualify as an entity with over $5 million in assets; its angels will qualify on income or net worth—but Verdant still documents each one.

Phase 5 — Respect the general-solicitation bright line

[ ] Decide before you speak publicly whether you are in a 506(b) (no general solicitation) or 506(c) (solicitation permitted) offering.
[ ] If 506(b): offer only to investors with whom you have a substantive, pre-existing relationship; do not post the raise on social media, pitch it at open demo days, email cold lists, or issue press releases about the terms.
[ ] Avoid "conditioning the market"—public statements that function as an offer.
[ ] If 506(c): you may advertise, but the verification burden of Phase 4 attaches to every investor.
[ ] Train the founders: a single tweet, LinkedIn post, or open-forum pitch can retroactively destroy a 506(b) exemption.

Why it matters, and the traps. General solicitation is the wall between the two 506 lanes. Rule 506(b) prohibits "any form of general solicitation or general advertising," which the SEC reads broadly to include public websites, unrestricted social media, seminars advertised to the public, and cold outreach to people you do not know. The doctrinal reason traces back to Ralston Purina: a genuinely private offering is one made to people who already have access to information and a relationship with the issuer. The classic founder trap is enthusiasm—posting "We just opened our seed round!" on X while running a 506(b) offering. That single post can convert a compliant private placement into an illegal public offering, with no way to un-ring the bell because 506(b) requires that no general solicitation occurred. Verdant's rule is simple: until the round closes, the founders talk terms only with investors they already know or are introduced to substantively, and marketing says nothing about the raise.

Phase 6 — Build disclosure and satisfy anti-fraud (Rule 10b-5)

[ ] Determine your affirmative disclosure duty: with all-accredited investors under 506(b) or 506(c), Regulation D imposes no specific disclosure format; if you admit non-accredited investors under 506(b), you must deliver detailed Rule 502(b) disclosure (audited financials and issuer information scaled to the raise).
[ ] Regardless of format, satisfy anti-fraud: disclose every material fact and correct any misleading statement, because Rule 10b-5 applies to every securities transaction, exempt or not.
[ ] Prepare a Private Placement Memorandum (PPM) or, for a lean seed round, a robust risk-factors memo plus the operative documents (SAFE/note/stock purchase agreement, cap table, key contracts).
[ ] Give every investor a genuine opportunity to ask questions and obtain additional information.
[ ] Log what was disclosed, when, and to whom.

Why it matters, and the traps. Here is the counterintuitive core of private-placement compliance: an exemption from registration is not an exemption from fraud liability. Rule 10b-5 (17 C.F.R. § 240.10b-5), promulgated under Section 10(b) of the Securities Exchange Act, makes it unlawful to make an untrue statement of material fact—or to omit a material fact needed to make what you did say not misleading—in connection with the purchase or sale of any security. It has no private-offering carve-out. So even in Verdant's all-accredited 506(b) round with no mandated disclosure form, the founders cannot inflate the pipeline, hide a co-founder's departure, or bury the fact that a key patent application was rejected. The trap is reading "no required disclosure" as "no disclosure needed." The practical answer is to disclose as if you had to, in a PPM or a tight risk-factors memo, because good disclosure is your best defense to a later rescission or fraud claim. For what belongs in the surrounding paperwork, see The Startup Legal Document Stack: What Founders Need and Why; for drafting and reviewing the operative purchase, subscription, and side-letter agreements themselves, see The Commercial Contracts Toolkit: Drafting, Reviewing, and Enforcing Business Agreements; and to make your data room withstand scrutiny, Getting Diligence-Ready Before You Raise: A Comprehensive Guide for Founders.

Phase 7 — Screen for integration and bad-actor disqualification (Rule 506(d)) and keep the offering clean

[ ] Apply the integration analysis (Rule 152): confirm that a separate earlier or later offering will not be collapsed into this one in a way that breaks an exemption condition. Rely on the 30-day integration safe harbor where it fits.
[ ] Run bad-actor checks under Rule 506(d): confirm that no "covered person"—the issuer, its directors, executive officers, 20%+ beneficial owners, promoters, and placement agents—has a disqualifying event (certain securities-fraud convictions, SEC or state regulatory orders, injunctions).
[ ] Collect bad-actor questionnaires from all covered persons and retain them.
[ ] If a disqualifying event predates 9 September 2013, confirm it triggers only the disclosure obligation, not disqualification.
[ ] Keep offering hygiene: consistent dates, a single set of terms, and a clear start/close so integration and solicitation questions have clean answers.

Why it matters, and the traps. Two separate doctrines can quietly wreck a 506 offering. Integration (governed today by Rule 152) asks whether what looks like two offerings is really one; if a company does a quiet friends-and-family raise and then a broadly marketed 506(c) raise too close together, the general solicitation from the second can be attributed to the first and destroy its 506(b) exemption. The current framework and its 30-day safe harbor give real breathing room, but the sequencing must be deliberate. Bad-actor disqualification under Rule 506(d) is a hard gate: if any covered person has a disqualifying event, the entire 506 exemption is unavailable—full stop. The trap is skipping the questionnaires because "everyone here is clean." You verify, in writing, because the disqualification is triggered by facts, not by your assumptions, and a placement agent or a 20% investor you did not vet can carry a disqualifying order. Verdant collects a signed bad-actor and accreditation questionnaire from each founder, officer, and the fund before accepting a dollar.

Phase 8 — File Form D and the state blue-sky notices (NSMIA Section 18)

[ ] File Form D with the SEC electronically via EDGAR within 15 calendar days after the first sale of securities in the offering.
[ ] Get EDGAR access codes (CIK and filer credentials) early—obtaining them takes time and the 15-day clock does not wait.
[ ] File state blue-sky notice filings in each state where an investor resides: for 506 offerings, states may require only a notice filing plus a fee (and often a Form U-2 consent to service), because NSMIA Section 18 preempts state substantive review of "covered securities."
[ ] Track each state's fee and deadline; many mirror the federal 15-day window, some differ.
[ ] File amendments to Form D annually if the offering continues, and to reflect material changes.

Why it matters, and the traps. Form D (Rule 503) is a short notice, not an application—no one approves it—but failing to file is a common, avoidable black mark that surfaces in every later diligence review and can jeopardize the exemption in some states. The National Securities Markets Improvement Act (NSMIA) added Section 18 to the Securities Act, making Rule 506 securities "covered securities" that states cannot substantively regulate; this is precisely why 506 beats Rule 504 for a multi-state round. But NSMIA preserved the states' power to require notice filings and fees and to police fraud, so you still file blue-sky notices state by state. The trap is thinking preemption means "do nothing at the state level"—it does not. Verdant, selling to angels in California, New York, and Massachusetts and a Delaware fund, files Form D on EDGAR within 15 days of its first closing and then makes the corresponding state notice filings and fee payments. When this diligence trail matters most is at the next round; see Bringing On New Investors After the Seed Round: Navigating the First Priced Financing.

Phase 9 — Close, legend the certificates, and control resale (Rule 144)

[ ] Confirm each investor has signed the operative purchase documents and delivered funds before you treat them as closed.
[ ] Place a restrictive legend on every certificate or electronic entry: the securities are "restricted securities" not registered under the Securities Act and may not be resold absent registration or an exemption.
[ ] Instruct the transfer agent (or maintain internal stop-transfer records) to enforce the legend.
[ ] Explain Rule 144 to investors: restricted securities of a private issuer generally cannot be freely resold until a one-year holding period runs (six months for reporting companies), and even then within volume and manner limits for affiliates.
[ ] Update the cap table and retain the full offering file—questionnaires, verification, disclosure, Form D, state filings, signed documents—indefinitely.

Why it matters, and the traps. A private placement produces restricted securities: the exemption covered the issuance, but the investor cannot simply flip the shares. Rule 144 (17 C.F.R. § 230.144) is the safe harbor that eventually lets restricted securities be resold, but for a non-reporting startup like Verdant the practical floor is a one-year holding period, and affiliates face additional volume and current-information conditions. The legend is what operationalizes this—it warns downstream buyers and gives the transfer agent authority to block a non-compliant sale. The trap is a sloppy close: unlegended shares, a cap table that does not match the signed documents, or a missing verification file. Every one of those becomes a diligence exception that can stall or reprice your Series A. Keep the file forever. The cleaner your seed paperwork, the smoother the priced round documented in Bringing On New Investors After the Seed Round: Navigating the First Priced Financing and the founder-side mechanics in Founder Equity, Vesting, and the 83(b) Election: A Practical Checklist.

Common mistakes to avoid

Assuming the instrument isn't a security. A SAFE, a note, or a revenue-share is a security under Howey. Treating it as informal paper skips the entire compliance analysis.
Publicly announcing a 506(b) raise. One social-media post or open demo-day pitch can convert a private offering into an illegal public one, with no cure.
Box-checking verification in a 506(c) deal. "Reasonable steps to verify" means documents or a third-party letter, not a self-certification questionnaire.
Reading "no required disclosure" as "no disclosure." Rule 10b-5 anti-fraud liability applies to every offering; omit a material fact and you invite rescission.
Skipping bad-actor questionnaires. A single disqualified covered person kills the entire 506 exemption. Verify in writing.
Forgetting Form D or the state notices. They are cheap, they are fast, and their absence is a permanent diligence red flag.
Blowing integration by sequencing raises carelessly. A marketed round too close to a private one can taint the earlier exemption.
Choosing Rule 504 for a multi-state round. No NSMIA preemption means full state qualification—often costlier than the flexibility is worth.
Closing sloppily. Unlegended certificates and a mismatched cap table haunt you at the next financing.

The consolidated one-glance checklist

[ ] Security? Instrument passes the Howey four-factor test.
[ ] Exemption identified. Section 4(a)(2) via Regulation D; registration ruled out.
[ ] Lane chosen. Rule 504, 506(b), or 506(c)—committed, not blended.
[ ] Accreditation. Thresholds understood; 506(b) self-certification or 506(c) reasonable-steps verification completed and filed.
[ ] Solicitation. No general solicitation in a 506(b) deal; verification burden accepted in a 506(c) deal.
[ ] Disclosure. PPM or risk-factors memo prepared; every material fact disclosed; Rule 10b-5 satisfied.
[ ] Integration. Sequencing checked against Rule 152 and its 30-day safe harbor.
[ ] Bad actor. Rule 506(d) questionnaires collected from all covered persons.
[ ] Form D. Filed on EDGAR within 15 days of first sale.
[ ] Blue sky. State notice filings and fees paid where investors reside.
[ ] Close. Documents signed, funds in, certificates legended, transfer restrictions in place.
[ ] Resale. Rule 144 holding period explained; full offering file retained indefinitely.

Primary authority

Securities Act of 1933 §§ 4(a)(2), 5, 12(a)(1), 18 (15 U.S.C. §§ 77d(a)(2), 77e, 77l(a)(1), 77r) — registration requirement, private-offering exemption, rescission remedy, and NSMIA preemption of "covered securities."
Regulation D, 17 C.F.R. §§ 230.501–230.508 — Rule 501 (definitions, including accredited investor), Rule 502 (general conditions, disclosure, general-solicitation limits, resale limits), Rule 503 (Form D), Rule 504 (limited offering), Rule 506(b) and 506(c) (the principal private-placement safe harbors), Rule 506(d) (bad-actor disqualification).
Rule 152, 17 C.F.R. § 230.152 — integration framework and 30-day safe harbor.
Rule 144, 17 C.F.R. § 230.144 — resale of restricted securities.
Rule 10b-5, 17 C.F.R. § 240.10b-5 — anti-fraud liability in connection with the purchase or sale of any security.
SEC v. W.J. Howey Co., 328 U.S. 293 (1946) — the investment-contract / "security" test.
SEC v. Ralston Purina Co., 346 U.S. 119 (1953) — the "fend for themselves" standard for the private-offering exemption.
National Securities Markets Improvement Act of 1996 (NSMIA) — enacted Section 18, preempting state substantive regulation of covered securities while preserving notice filings and antifraud authority.

Related UpLaw resources

Related Guides & Articles

Related Checklists

Related Toolkits

This checklist is general legal information from UpLaw (uplaw.us), not legal advice, and does not create an attorney-client relationship. Securities laws, rules, dollar thresholds, and filing fees change; verify current requirements and consult qualified securities counsel before offering or selling any security.