Part 1 of this series argued that Web3 infrastructure projects must move beyond token-dependent capital formation and embrace the discipline of equity-first fundraising.

This instalment introduces the Polity Investor Readiness Framework – a structured assessment model across four dimensions that must converge before a project is fit to approach institutional capital.

The Myth of the Minimum Viable Pitch

There is a persistent belief in start-up culture that fundraising readiness can be reduced to a compelling narrative, a polished deck, and a charismatic founder.

In consumer technology, where the barriers to entry are lower and the metrics more immediately legible, this may occasionally suffice. In Web3 infrastructure, it is woefully insufficient.

Infrastructure projects operate at the intersection of advanced technology, evolving regulation, and institutional finance.

Each of these domains has its own standards of rigour, and institutional investors will probe all three with equal thoroughness.

A project with brilliant tech but no regulatory strategy will fail due diligence as swiftly as a compliant project with a hollow architecture.

Even a project with strong technology and a clear compliance position will be declined if it lacks a credible revenue model.

Due diligence in the current market is deeper and more demanding than at any prior point in the sector’s history (1), and founders who underestimate the breadth of what investors now require risk disqualifying themselves before the conversation begins.

The Investor Readiness Framework

The Polity Investor Readiness Framework assesses preparedness across four interdependent dimensions.

A project must achieve adequate maturity in all four before it is ready for institutional engagement; strength in one dimension cannot compensate for weakness in another.

Dimension 1: Regulatory and Legal Readiness

For projects operating in regulated financial services – which, by definition, includes most Web3 infrastructure that touches value transfer, identity, or custody – regulatory readiness is a baseline requirement.

This means more than having engaged a law firm. It means having a jurisdiction-specific regulatory strategy in which the project intends to operate, with documented legal opinions, licence applications or approvals, and a clear timeline for achieving full compliance.

Under MiCA, a project offering crypto-asset services in the European Union must demonstrate compliance with capital requirements, governance standards, and consumer protection obligations.

VARA imposes comparably rigorous obligations in the UAE. In the Cayman Islands, where many Web3 entities are domiciled, the regulatory landscape continues to evolve and demands proactive engagement.

The jurisdictional choices a project makes, and the quality of its compliance framework, directly influence investor confidence – venture capital firms now routinely assess jurisdictional setup, potential licencing exposure, and token classification as part of standard diligence.

Investors will expect to see data protection impact assessments (DPIAs) under GDPR or equivalent frameworks, evidence that the project has considered eIDAS 2.0 compliance for digital identity wallets, and legal opinions on the classification of any token or digital asset the project issues or handles.

These documents should be in place well before the fundraise begins – not as items on a post-funding to-do list.

Dimension 2: Technical Readiness

A well-articulated architecture is non-negotiable, but it is only the beginning.

Investors – particularly those with technical due diligence teams or specialist advisers – will scrutinise the project’s approach to security, scalability, interoperability, and resilience with a level of detail that many founding teams underestimate.

For infrastructure projects, this scrutiny extends to the system’s ability to handle institutional workloads, its compliance with relevant standards (ISO 27001 for information security, SOC 2 for service organisations, and ISO 31000 for risk management), and its approach to key management, identity verification, and data sovereignty.

Architecture Decision Records (ADRs) that document the rationale behind significant technical choices are increasingly expected by sophisticated investors as evidence of disciplined engineering practice.

ADRs demonstrate the professional maturity of the engineering team by documenting rejected alternatives alongside selected paths.

If the project relies on a modular architecture – as many contemporary infrastructure ventures do – investors will want to understand the interoperability vectors, the integration strategy, and the risks associated with third-party components.

Security is a particularly acute concern: the high-profile DeFi exploits in 2024 and 2025 resulted in billions of dollars in losses across the sector (2).

Projects must demonstrate that security is embedded in the architecture from the outset, supported by independent audits and a credible incident-response plan.

Vague assurances about future security measures will not survive technical diligence.

Dimension 3: Commercial and Economic Readiness

A robust economic model must go beyond tokenomics.

It must articulate how the enterprise captures value, what its cost structure looks like at scale, and what assumptions underpin its financial projections.

Sensitivity analyses, scenario modelling, and honest articulation of key risks are the minimum expectation.

Investors will probe the project’s go-to-market strategy with particular attention.

Who are the target customers? What is the sales cycle for enterprise clients? Are there letters of intent or pilot agreements in place?

What is the competitive landscape, and what defensible advantage does the project hold?

Evidence of “paid pilots” or enterprise conversion rates is now a mandatory requirement for infrastructure Series A rounds.

The economic model must be credible without reliance on token price appreciation.

If the unit economics only work when the token is trading at some aspirational multiple, investors will walk away.

The 2022–2023 downturn demonstrated conclusively that speculative demand is not a business model – and investors with any memory of that period will test this point rigorously.

Dimension 4: Organisational and Governance Readiness

Institutional capital flows to teams, not just technologies.

Investors assess the leadership team’s experience, the depth of the bench, the clarity of roles and responsibilities, and the quality of governance frameworks.

For Web3 projects with decentralised governance aspirations, this presents a particular challenge: how does one demonstrate institutional-grade governance while building towards a decentralised model?

The answer lies in transparent constitutional frameworks, clearly articulated decision-making processes, and governance documentation aligned with standards such as ISO 37000 for organisational governance and ISO 37301 for compliance management.

Progressive decentralisation must be presented as a credible, staged roadmap with defined milestones and accountability mechanisms, not an article of faith.

Board composition, advisory arrangements, conflict-of-interest policies, and key-person risk mitigation are all elements that sophisticated investors evaluate as a matter of course.

Projects that lack formal governance structures – or that treat governance as an afterthought to be addressed post-funding – are signalling a lack of maturity that no pitch deck can overcome.

The Integration Challenge

The real difficulty is that these four dimensions are not independent.

Regulatory strategy shapes technical architecture. Technical capabilities constrain commercial possibilities. Governance structures determine how effectively all other elements can be coordinated.

True investor readiness requires integrating all four dimensions into a coherent, mutually reinforcing whole.

This integration is what separates projects that attract institutional capital from those that do not. It is demanding work, and it cannot be rushed.

But it is precisely this evidence – that the project has been thought through as a complete enterprise, not merely as a technology looking for a capital structure – that gives institutional investors the confidence to deploy capital.

Polity’s own programme offers one illustration of this principle in practice.

The framework has been adopted internally as a readiness discipline, shaping decisions ranging from jurisdictional structuring and constitutional governance design to the sequencing of technical architecture and the articulation of the economic model.

The experience of applying it has reinforced a central conviction: that the quality of preparation is the most reliable predictor of fundraising outcomes.

Next week: Part 3 turns to the fundraising process itself – why building relationships with investors is a long game, and how to play it well.

About Polity

The disciplined fundraising framework presented in this series is part of an ongoing programme of governance publications developed within the Polity governance model. Polity builds infrastructure for regulated digital finance. Its governance frameworks are designed to bridge decentralised systems and institutional-grade compliance requirements, with a focus on MiCA alignment across European and international markets.

Disclaimer: This article is published for informational and educational purposes only. It does not constitute investment advice, legal advice, or an endorsement of any product, service, or security practice. Polity does not provide investment advice, custody services, or regulated crypto-asset activities. Readers should conduct their own due diligence and consult qualified professionals before making any decisions based on the content of this publication. All third-party sources are cited for reference; their inclusion does not imply endorsement by or affiliation with Polity.

References
(1) CoinDesk (2025). ‘Web3 Funding Hit $9.6B in Q2 Despite Fewer Deals.’ CoinDesk. Available at: https://www.coindesk.com/business/2025/08/29/web3-funding-hit-usd9-6b-in-q2-despite-fewer-deals   (Accessed: 10 March 2026).
(2) Chainalysis (2025). ‘Crypto Hacking: Stolen Funds 2025.’ Chainalysis Blog. Available at: https://www.chainalysis.com/blog/crypto-hacking-stolen-funds-2025/  (Accessed: 10 March 2026).