
How to score AI & automation startups - market size, team, IP, and unit economics
Prioritize unit economics from day one: set a CAC payback target under 12 months, aim for LTV/CAC of 3x, and keep gross margins above 70%. This trio anchors every GTM decision and funding plan.
To size the market, define TAM, SAM, and SOM with concrete numbers. For SMB-focused tools priced at $8k–$25k ARR, TAM could be in the range of $0.5–2.0B, depending on geography. Break TAM down by number of target firms and average annual contract value; refine to SAM by service scope; estimate SOM from pilot velocity and pipeline conversion.
Build a compact, capable team: 6–12 core members includes a CEO, CTO, 2–3 ML engineers, a data engineer, a product manager, and a field sales lead with customer success support.
Defensible IP and data moat: prioritize three pillars – unique models and code structure, durable data partnerships with rights for reuse, and scalable platform architecture that protects data privacy. File provisional patents for novel algorithms where applicable; keep sensitive datasets as trade secrets; negotiate data licenses that enable recurring revenue and configurable terms.
Unit economics and metrics: target gross margins of 70–85%, CAC payback 12 months, LTV/CAC > 3x, and annual churn under 5%. Use ARR as the primary growth metric; track expansion ARR per logo and aim for predictable quarterly growth to de-risk funding rounds.
Execution cadence: run 2–3 week sprints to validate features with real users, establish pilots that deliver measurable outcomes within 90 days, and keep the sales cycle under 60 days for early customers.
Underwriting checklist for utility-scale renewable energy & battery storage projects
See also: Startups in Cyprus.
Set a minimum DSCR of 1.3x on project cash flow across the senior debt term, with a 15% capex contingency in all cash-flow forecasts.
Lock in a long-term offtake with price escalators of 2-3% annually; if any merchant exposure exists, attach hedging or a floor price to stabilize revenue.
Model resource and technology risk using P50 and P90 energy yields. For solar, target CF in the 0.18-0.24 capacity factor range at the site; for wind, 0.28-0.45; plan for 4-6 hours of storage duration to meet dispatch requirements.
Interconnection: confirm queue position, estimate grid-upgrade scope and cost, and secure a deliverability plan with COD alignment. Add a 10-20% contingency to interconnect capex and schedule buffers for potential delays.
Technology and supply chain: select two or three credible vendors for critical components; verify warranties: PV modules 25 years, inverters 10-15 years, batteries 8-12 years; ensure spare parts availability for the project's horizon; evaluate lead times and service support.
EPC and construction risk: use fixed-price EPC contracts, include liquidated damages for schedule slippage and performance guarantees; require performance bonds; include comprehensive commissioning and acceptance testing requirements.
O&M budgeting: solar O&M 10-15 USD per kW-year; battery storage O&M 15-30 USD per kWh-year; build in routine replacements for the battery pack around year 8-12; include remote monitoring and skilled O&M staff costs.
Performance monitoring and degradation: assume PV degradation 0.4-0.8% per year; storage capacity fade 2-4% per year depending on DoD and cycle depth; reflect these in cash flow and hedging needs.
Regulatory and environmental: assess permitting timelines and potential relocations; analyze incentives, tax credits, and grid connection rules; stress test policy changes and their impact on revenue.
Insurance and risk transfer: secure builder's risk, all-risks, and delay-in-start coverage; obtain performance guarantee coverage tied to COD; verify that policy limits meet loan requirements.
Documentation and governance: assemble bankable warranties, PPAs, interconnection agreements, EPC and O&M contracts, and insurance certificates; establish lender's collateral package and any parent-company guarantees; ensure redlines reflect enforceable remedies and dispute resolution.
Due diligence protocol for early-stage biotech: IP status, clinical timelines and exit paths
Start with a fast IP risk sprint and a 12- to 18-month clinical milestone map to unlock a clean go/no-go decision and a credible exit plan.
IP status
- Patent family map: list issued and pending claims by jurisdiction, note expirations (typical utility patent term is 20 years from earliest filing); identify coverage for composition, method of use, and manufacturing processes around the lead candidate and key indications.
- Freedom-to-operate assessment: for each target indication and geography, catalog overlapping patents, potential design-arounds, and viable license options. Schedule a 2–3 week FTO sprint with in-house and external counsel; produce a go/no-go rating per jurisdiction.
- Ownership and obligations: verify inventor assignments, founder agreements, and option/royalty terms; audit third-party rights in licensed IP or background technology; confirm chain of title and interim sublicensing rights where applicable.
- Trade secrets and know-how: document critical processes, manufacturing steps, and data-generation methods; implement NDAs and access controls; ensure protection for key know-how and data assets.
- Maintenance and cost outlook: compile annual maintenance costs by patent family, including foreign filing and renewal fees; build a 5-year budget and flag upcoming costs that affect value capture.
- IP sufficiency forecast: estimate protection window under current claims; plan for at least 18–24 months of enforceable coverage during pivotal development milestones; map patent-extension strategies if applicable (e.g., pediatric data protections).
Clinical timelines
- Regulatory route: select IND (US) or CTA (EU) as primary gate, and determine if fast-track or orphan designations apply; confirm manufacturing, CMC data needs, and partner expectations early.
- Regulatory milestones: schedule Pre-IND/Scientific Advice meetings; IND/CTA submission; first-in-human dosing; data readouts; set target dates and gates for decision-making at each milestone.
- Timeline estimates (typical ranges): IND submission to first dosing 6–12 months; Phase I 12–18 months; Phase II 24–36 months; Phase III 30–50 months. Adapt to indication complexity, trial design, and patient recruitment speed.
- CMC and manufacturing readiness: verify GMP-grade drug substance, formulation stability, and supply chain readiness; plan scale-up manufacturing and batch release controls; ensure QA/QC documentation is in place.
- Data package requirements: compile nonclinical tox, PK/PD, and safety pharmacology data; maintain an up-to-date Investigator’s Brochure; plan interim analyses to de-risk partner discussions.
Exit paths
- Licensing deals with pharma/biotech: upfront payments for early-stage assets typically range from modest six figures to a few million dollars, with milestone payments that can reach tens of millions; royalties usually in the low single digits. Structure milestones to reflect regulatory events, data readouts, and commercialization milestones.
- Mergers & acquisitions: buyers seek a clear path to value, strong IP protection, and credible early clinical data. Expected terms often include upfronts from mid six figures to low tens of millions and milestones climbing into the tens or hundreds of millions, plus potential tiered royalties post-approval.
- Public funding or IPO path: requires a robust data package, validated lead candidates, and a scalable manufacturing plan; prepare a data room with GMP batch records, preclinical tox data, PK/PD, and a clear plan for imminent clinical readouts to attract investors.
- Decision gates and metrics: monitor probability of technical success by stage, cash runway, and time-to-close for deals; implement reroute options if interim data miss targets, preserving optionality for value realization.
Monetization blueprint for a digital investment hub: pricing tiers, KYC flow, transaction fees
See also: KV Fund.
See also: Government Financing Model for Strategic Business Park....
Recommendation: Launch a three-tier pricing model: Free Starter, Growth at $9/month, and Pro at $29/month, with defined per-trade and withdrawal fees to align revenue with usage. Pair this with a lean KYC flow and clear onboarding milestones to convert sign-ups into funded accounts within 24–48 hours. Offer a 14-day trial for Growth and Pro to boost activation and apply annual billing discounts to improve cash flow and retention.
Starter (free) – 5 trades included per month; after that, 1.50 per trade. Deposits via ACH are free; card deposits incur 2.9% + $0.30. Bank withdrawals up to 2 per month free; additional withdrawals $4 each. Stocks/ETFs trades beyond included are 1.50 per trade; Crypto trades incur 0.75% per trade.
Growth ($9/month) – 100 trades included per month; after that, 0.50 per trade for stocks/ETFs. Crypto trades incur 0.60% per trade. Deposits via ACH are free; card deposits incur 2.9% + $0.30. Bank withdrawals include 1 free per month; additional withdrawals $2.50 each. Includes advanced screeners and priority chat support.
Pro ($29/month) – unlimited trades; no per-trade fees for stocks/ETFs. Crypto trades incur 0.40% per trade. Deposits via ACH are free; card deposits incur 2.9% + $0.30. Bank withdrawals are free. Includes API access, real-time data, and priority support; currency conversions incur a 0.25% spread; large bank transfers up to $20k/month are free, above that 0.10% per transfer.
KYC flow – Step 1: sign-up with basic identity, Step 2: Tier 1 verification (government ID, selfie, address) to enable Low-risk features, Step 3: Tier 2 verification (source of funds, employment/income docs) for higher monthly volumes or elevated risk, Step 4: Tier 3 verification for corporate clients or high-risk profiles as needed. Timelines: Tier 1 minutes, Tier 2 4–12 hours, Tier 3 1–2 business days. Ongoing monitoring runs daily checks against updated watchlists and behavior-based risk scores; re-verify annually or on trigger events.
Unit economics and targets – target a blended take rate of 0.25%–0.50% of traded value across tiers after discounts. Aim for CAC payback within 9–12 months and gross margin above 60% by controlling payments, liquidity costs, and automated KYC. Activation from sign-up to funded account should exceed 40%–60%; convert Free users to Growth or Pro at 8%–12% monthly. Track churn below 6% in the first year and optimize onboarding and pricing with iterative experiments.
Minimum viable tech stack, security controls to launch a compliant investor portal
Adopt a lean stack: Next.js frontend with React, a Node.js API (NestJS or Express) or FastAPI, PostgreSQL as the primary data store, Redis for session cache, and S3-compatible storage. Tie this to a managed cloud backbone (AWS, Azure, or GCP) to simplify security controls, backups, and scaling. This configuration delivers fast, accessible UX, straightforward scaling, and predictable costs for an MVP investor portal.
Authentication and access controls ensure protection from day one. Use OIDC/OAuth 2.0 with MFA through a trusted IdP (Okta, Auth0, or Azure AD). Implement RBAC and ABAC to assign permissions by role and data attributes. Route API calls through a gateway with mutual TLS and strict rate limits; enable a WAF and IP allowlisting. Store only short-lived access tokens, refresh tokens in secure cookies or native secure storage, and rotate keys every 90 days.
Data protection and privacy cover both data in transit and at rest. Encrypt data at rest with AES-256 and in transit with TLS 1.2+. Use cloud KMS or equivalent for key management and rotate keys on a quarterly cadence. Keep secrets in a dedicated vault with strict access. Separate production, staging, and development datasets; minimize PII exposure and apply tokenization or hashing where possible. Enforce data retention policies aligned to investor communications and regulatory needs.
Integrity, auditing, and compliance require centralized logs and traceability. Instrument all services with OpenTelemetry, ship logs to a central store, and enforce immutability where feasible. Retain logs 12–36 months and set alerting on unusual login patterns or privilege escalations. Align controls to SOC 2 Type II, ISO 27001, and data privacy regulations; maintain a vendor risk program and documented incident response playbooks with 24–72 hour notification windows.
Security testing and governance embed safeguards in the development lifecycle. Run SAST and dependency scanning on every PR; perform DAST on staging; scan container images and secrets. Enforce automated security gates in CI/CD, require code reviews, and rotate credentials used by CI runners. Limit blast radius with feature flags and canary releases.
Cost and unit economics to guide MVP planning estimate practical spend and scalability. For a modest MVP, expect compute and API costs in the $20–100/month range, managed database in the $40–150/month range, storage $5–20/month, data transfer $5–50/month, and security services $20–100/month. As user count grows toward a few hundred investors, total monthly costs rise toward $300–600 and scale with traffic, data volume, and regulatory requirements. Build the architecture to scale linearly, with autoscaling, managed services, and predictable pricing tiers for each component.
Ready to set up your Cyprus company?
Our specialists guide you through the entire process — registration, tax setup, and bank account opening.
Request a consultation →