Using Reg D to Raise Capital for a Business

The Core Issue: How an Operating Business Actually Raises Capital Under Regulation D

Yes, an operating business can use Regulation D to raise capital. It lets you sell securities to investors without registering the offering publicly with the SEC. But securing the exemption is only half the job.

The other half is disclosure. Regardless of whether your investors are accredited, anti-fraud rules mean you need a real disclosure record to protect yourself from personal liability if the business does not go the way you planned.

That is the tension this article is about. The exemption keeps you out of the public registration process. It does not keep you out of court if an investor claims you hid something.

The Common Founder Assumption

A lot of founders think Regulation D is a real estate thing. They assume it is for syndicators buying buildings or for blind-pool funds, and that it does not apply to an operating company like a tech startup or a manufacturing business.

The next assumption is worse. They believe that if they are raising money for an active business from a few high-net-worth people they already know, a good pitch deck and a handshake are legally enough.

They are not. When you take money from an investor in exchange for an interest in your company, and that investor is relying on you to run the business and generate a return, you are selling a security.

If you are selling a security, you have two options. You register it publicly, which is expensive and slow, or you fit the offering into an exemption. There is no third door where the rules do not apply because the people are wealthy or because you know them.

The Baseline Rule: Regulation D

Regulation D is the set of federal exemptions that let a company raise private capital without going through an IPO. For most operating businesses, the relevant piece is Rule 506.

Rule 506 does two things. It dictates who you can take money from, and it dictates how you can market the offering.

That is the whole framework. Get the investor mix right, follow the marketing rules for the exemption you pick, and the SEC will not force you to register the offering.

But following those rules is where founders stop, and stopping there is the mistake.

The Exemption Illusion: Checking the SEC Box Is Not Enough

No. Following Regulation D does not fully protect you from liability. Securing the exemption only excuses you from registering the offering with the SEC. It does nothing about Rule 10b-5 anti-fraud liability, which applies to your offering no matter how clean your exemption is.

This is where a lot of founders get comfortable too early. They file the Form D, assume the legal work is done, and move on. The exemption is the easy part. The anti-fraud exposure is the part that actually puts your personal assets at risk.

What Regulation D Actually Does

Rule 506 does two useful things, and that’s it.

First, it gives you federal preemption under NSMIA. In plain English, the states cannot force you to register your securities offering at the state level. They can still make you file a notice and pay a fee, but they cannot make you go through a full state registration.

Second, it operates as a strict statutory safe harbor. If you follow the rules on who can invest and how you can market, the SEC will not force you into a public registration. You stay private.

Notice what that covers. It covers registration. That’s the whole scope. It says nothing about whether you told your investors the truth.

The Rule 10b-5 Anti-Fraud Trap

Every securities offering is subject to Rule 10b-5. Exempt or not, private or public, accredited investors or not – it applies to all of it.

Rule 10b-5 makes it illegal to omit any material fact an investor would need to make an informed decision. A material fact is anything a reasonable investor would want to know before wiring money. Your key-man risk, your existing debt, your pending litigation, the fact that half the proceeds are paying you back for prior expenses – if it matters to the decision, it has to be disclosed.

Here’s the part founders miss. When the business fails and an investor loses money, they do not sue you for failing to file a Form D. Nobody cares about the Form D at that point. They sue you for fraud, and the claim is always the same: you hid the risks and they never would have invested if they had known.

To defend that claim, you have to prove exactly what you told the investor before they wired the funds. Not what you remember telling them. Not what you meant to convey in a meeting. What you can actually document.

That is the whole problem with leaning on the exemption alone. The exemption keeps the SEC off your back on registration. It does not create a record of what you disclosed. Without a written disclosure record, you are defending a fraud claim from memory, and the investor’s memory will be a lot more convenient than yours.

Pitch Deck vs. PPM: Marketing the Upside vs. Disclosing the Downside

A pitch deck and a Private Placement Memorandum do two different jobs. The pitch deck sells the opportunity. The PPM discloses the risks and builds your defensive record.

You legally need the PPM in more situations than you think. It is strictly mandated only when you take non-accredited investors under Rule 506(b), but in almost every raise it is the document that actually protects you if an investor sues.

The Role of the Pitch Deck

A pitch deck highlights the business model, the market opportunity, the team, and the projected upside. That is its job. It exists to get someone interested enough to take the next meeting.

The problem is that a pitch deck is inherently optimistic. You are showing the best version of the deal, not the risks.

That makes it a terrible legal defense tool if things go wrong. If the business fails and an investor points to your deck, every optimistic projection reads like a promise you did not keep. A deck built to sell is not a record built to defend.

The Protective Function of the PPM

A Private Placement Memorandum is the container for the offering. It lays out the mechanics of the security, the exact use of proceeds, the conflicts of interest, and the specific risks of the operating business.

Those risks are not generic. For an operating company, that means the real ones: key-man risk, supply chain failure, customer concentration, regulatory shifts, the chance that the whole thing does not work.

Here is why that matters. When an investor claims you hid the downside, the PPM is your proof that you warned them. It shifts the burden onto the investor because they signed subscription documents acknowledging they read it and understood the risks.

From your point of view, the PPM is not a marketing document. It is the paper that lets you say, in writing, “I told you this could happen, and you invested anyway.”

When Is a PPM Strictly Required?

The technical rule is narrow. Under Rule 502(b), specific disclosure documents are strictly required when you include non-accredited investors in a Rule 506(b) offering. Bring in even one non-accredited investor, and the mandatory disclosure package kicks in.

If you raise exclusively from accredited investors, the SEC does not statutorily require a PPM. That is where founders get themselves in trouble.

The practical answer is that the anti-fraud rules do not care whether a PPM was technically mandatory. Rule 10b-5 applies to every offering. If you have no written disclosure record, you have no clean way to prove what you told the investor before they wired the money.

So do not let the absence of a strict statutory mandate talk you out of your primary legal shield. Whether a PPM is required depends on your investor mix and the facts, but even when it is not required, it is usually the center of your disclosure record. In an all-accredited raise, I would still want one.

Rule 506(b) vs. Rule 506(c): The Practical Tradeoffs for Business Operators

Once you have decided to raise under Regulation D, you have to pick a lane. Rule 506(b) lets you raise privately from your existing network without verifying anyone’s wealth, but you cannot market the offering publicly. Rule 506(c) lets you advertise the raise to the world, but you have to take real steps to verify that every investor is accredited.

The choice comes down to how you plan to find your investors.

Rule 506(b): The Network Raise

Rule 506(b) is the private path. You cannot generally solicit, which means no posting the offering on social media, no “we’re raising” on your public website, and no talking up the deal on a podcast.

The rule requires a pre-existing, substantive relationship with the investor before you offer them the deal. You need to actually know the person and understand their financial situation before the offering comes up, not meet them at a conference and pitch them on the spot.

The tradeoff runs in your favor on verification. Under 506(b), you can rely on the investor’s self-certification through a standard Investor Questionnaire. They check the box that they are accredited, you have a reasonable basis to believe them, and you move on.

So 506(b) is friendlier at intake but tighter on marketing. If you already have a network of people who trust you, this is usually the cleaner path.

Rule 506(c): The Public Raise

Rule 506(c) is the public path. You can run ads, pitch from a stage, email a cold list, and put an “Invest Now” button on your website. General solicitation is allowed.

The tradeoff is on the other side. Every single investor must be accredited, and you cannot just take their word for it. Self-certification does not cut it under 506(c).

You have to take “reasonable steps to verify” accreditation. In practice that means collecting tax returns, W-2s, brokerage statements, or a letter from the investor’s CPA or attorney confirming their status.

That verification creates friction in the sales process. Some investors do not want to hand over their tax returns to a founder they just met, and you will lose a few of them at that step. You are trading marketing freedom for a heavier intake burden.

If it were me, I would start with 506(b) unless you genuinely need to advertise to fill the raise. Public marketing sounds appealing, but the verification burden and the accredited-only limit are real costs. Pick the exemption that matches how you actually plan to reach investors, not the one that sounds the most impressive.

The Trap of the Non-Accredited Investor

Yes, Rule 506(b) technically lets you take money from non-accredited friends and family. Up to 35 of them. But the 35-investor allowance is one of the most misunderstood numbers in Regulation D, and bringing even one non-accredited investor into the deal changes your compliance obligations in ways most operating businesses are not prepared to handle.

The “Friends and Family” Myth

Founders read that Rule 506(b) allows up to 35 non-accredited investors and treat it as a free pass to raise from their personal network. That is not what the rule says.

Rule 506(b) requires that each non-accredited investor either has enough financial sophistication to evaluate the merits and risks of the investment, or is represented by a purchaser representative who does. In plain English, your college roommate who wants to write a $10,000 check does not qualify just because he likes you and trusts the business.

You have to be able to show the investor actually understood what they were buying. If you cannot, you are exposed.

The Real-World Consequence

Including even one non-accredited investor triggers the specific disclosure requirements under Rule 502(b). That means a Private Placement Memorandum with detailed, mandated disclosures – not an optional document, a required one.

It often triggers financial statement requirements as well, and depending on the size and structure of the raise, that can mean audited financials. For an early-stage operating company, audited financials are expensive and slow, and they can push your timeline back by months.

So here is the practical answer. Most of the time I would not take non-accredited money unless the check sizes are large enough to justify the jump in compliance cost. If you are taking $25,000 from a friend, the paperwork and audit burden can cost more than the investment is worth to you.

That is not a legal problem. It is a math problem. You can do it – I just do not think you will like what it does to the economics and timeline of your raise.

The Execution Sequence: What Actually Needs to Be Drafted

Once you have decided on your exemption and your investor mix, the raise comes down to four things: an Operating Agreement to govern the business, a PPM to disclose the risks, subscription documents to legally take in the money, and Blue Sky filings to notify the states.

These are not interchangeable, and they are not optional paperwork you generate after the fact. Each one does a specific job.

The Core Offering Documents

The Operating Agreement (or Limited Partnership Agreement, if you are using an LP) governs the entity. It sets the economics, the voting rights, and who actually controls the business. This is where you define the split between founders and investors, what investors can and cannot vote on, and what discretion the manager keeps.

The Private Placement Memorandum is your disclosure document. It lays out the offering terms and the risks of the operating business in writing, which is the record you rely on if an investor later claims you hid something. Whether a PPM is strictly required depends on your investor mix and the facts, but even when it is not mandated, it is usually the center of your disclosure record.

The Subscription Agreement and Investor Questionnaire are how the investor actually enters the deal. The subscription agreement is the contract where the investor agrees to buy the security. The questionnaire is where they confirm their accreditation and suitability, and it is what supports your position that you took the investor’s status seriously.

Federal and State Filings

Form D must be filed with the SEC within 15 days of your first sale. It is a short notice filing, but the deadline is real, and missing it can create problems with state regulators down the line.

Blue Sky filings come next. Rule 506 preempts state registration, but it does not erase state notice and fee requirements. You still have to file notice in every state where an investor resides and pay the required filing fee.

The practical point: federal preemption saves you from registering the offering with the states. It does not save you from filing with them.

Getting It on Paper

Raising capital under Reg D comes down to structuring the entity correctly, defining the economics clearly, and putting the risk on paper so the investor is warned. That is the whole job.

The mistake to avoid is treating the documents as generic forms. The Operating Agreement has to match how you actually intend to run the business, and the disclosure has to match the real risks of your specific venture. If the paper says one thing and you operate another way, the paper works against you.

For founders whose deals do not fit the standard template, you can learn more about legal services for non-standard Reg D offerings.