Comprehensive Corporate Legal Retainer Agreement Drafting Manual
A retainer agreement should function as both an engagement contract and a governance document for the lawyer-client relationship. It should identify the client, define scope, allocate instruction authority, protect confidentiality, explain fees and create a clean transition mechanism. Ambiguity in these clauses tends to surface only when a high-pressure matter arrives.
This section treats the subject as a legal-operations problem rather than a marketing description. Each part identifies the business trigger, the legal risk, the evidence or records that should exist, the internal owner, the role of counsel and the practical control that converts advice into a repeatable process.
1. Exact client entity
Business and legal issue. The agreement should identify the legal entity receiving advice and avoid assuming every affiliate, director or shareholder is also a client. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
2. Affiliate coverage
Business and legal issue. If subsidiaries or group entities are included, the mechanism and limits should be stated expressly. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
3. Individual representation
Business and legal issue. Directors, founders and employees may need separate representation where interests diverge from the company. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
4. Scope schedule
Business and legal issue. Included services should be placed in a clear schedule that can be updated as the business changes. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
5. Exclusion schedule
Business and legal issue. Litigation, transactions, tax, IP prosecution and other specialist work should be clearly carved out unless included. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
6. Work-order process
Business and legal issue. Large matters should have a simple add-on work order describing scope, assumptions, fee, team and deliverables. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
7. Authorised instructing persons
Business and legal issue. The agreement should identify who can request work and who can approve high-risk positions or extra fees. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
8. Settlement authority
Business and legal issue. Counsel should know who can approve a settlement, admission, waiver or commercial concession. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
9. Conflict checks
Business and legal issue. New counterparties and matters should remain subject to conflict review throughout the engagement. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
10. Conflict within group
Business and legal issue. The agreement should anticipate situations where affiliates, directors or shareholders become adverse. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
11. Confidentiality
Business and legal issue. The engagement should address protection of client information and secure communication channels. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
12. Privilege handling
Business and legal issue. Internal circulation of legal advice should be controlled so sensitive advice is not unnecessarily distributed. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
13. Data protection
Business and legal issue. Sharing of employee, customer and investigation data should follow applicable privacy and security obligations. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
14. Cybersecurity
Business and legal issue. The client may require defined storage, access control, incident notification and secure transfer practices. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
15. Monthly fee
Business and legal issue. Professional fee, tax, invoice timing and payment terms should be stated without ambiguity. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
16. Extra-work fee
Business and legal issue. The method for pricing separate projects should be known before work begins wherever possible. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
17. Expenses
Business and legal issue. Court fees, government charges, local counsel, experts, travel and other pass-through costs should be addressed. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
18. SLA
Business and legal issue. Response expectations should distinguish acknowledgement, routine delivery, urgent work and complex assignments. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
19. Client dependencies
Business and legal issue. Turnaround should depend on timely instructions, documents and commercial decisions from the client. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
20. No guarantee of outcome
Business and legal issue. The engagement should distinguish professional service standards from any guarantee of litigation or transaction result. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
21. External counsel
Business and legal issue. The process for briefing senior/local/specialist counsel and approving their fees should be clear. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
22. Experts and investigators
Business and legal issue. Third-party professional appointments should have an approval and confidentiality framework. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
23. File ownership
Business and legal issue. Original documents, client data, counsel work product and copies should be dealt with clearly. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
24. Retention period
Business and legal issue. The agreement should state how long files are retained subject to law, professional duties and client policy. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
25. Return/destruction
Business and legal issue. At closure or termination, documents should be transferred or securely destroyed according to agreed/legal requirements. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
26. Term
Business and legal issue. Fixed, rolling or auto-renewing terms should be chosen deliberately and paired with review dates. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
27. Termination notice
Business and legal issue. Either side should know how to terminate and what happens to urgent work and accrued fees. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
28. Transition assistance
Business and legal issue. Pending deadlines, matter status and document handover should be part of an orderly transition. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
29. Governing law/disputes
Business and legal issue. The engagement should state the agreed legal framework for contractual disputes, subject to professional obligations. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
30. Signature authority
Business and legal issue. The company signatory should be authorised and execution records should be retained. The company should define the commercial objective before legal work begins, because the same clause or compliance question can carry different risk depending on transaction value, customer type, regulation, bargaining power and operational dependency. Counsel should translate legal exposure into a business decision rather than merely mark clauses as acceptable or unacceptable.
Documents and controls. The relevant records should be centralised: approved templates, contracts, board approvals, notices, policies, registers, correspondence, due-diligence files and decision logs as appropriate. Every important matter should have a business owner, legal owner, current status and next deadline. Where advice depends on assumptions, those assumptions should be recorded so the business knows when a change in facts requires fresh review.
Retainer/OGC workflow. The engagement should specify whether this item is routine retainer work, enhanced support or a separate project. Intake should identify urgency, decision-maker, counterparty, documents and commercial position. Counsel should escalate non-standard risks rather than silently accept or reject them. Where multiple departments are involved, a short responsibility matrix can prevent legal, finance, HR, CS and operations from assuming that someone else owns the task.
Management reporting. The matter should be visible at the right level: operational issues can remain with the team, while high-value, regulatory, litigation, director-liability, data or reputational risks should escalate to senior management or the board as appropriate. Closure should be documented through executed contracts, filed forms, receipts, settlement documents, policy approvals or another objective record. A legal function adds value when management can see what remains open and why.
Corporate legal-operations checklist
- Client identity
- Affiliates defined
- Scope and exclusions
- Instruction authority
- Conflicts
- Confidentiality
- Data security
- Fees/taxes
- Extra-work process
- Expenses
- SLA
- Termination
- File transition
- Signature authority
Questions management should answer
- Who exactly is the client?
- Who can approve extra work?
- What is not included?
- How are conflicts handled?
- What sensitive data will be shared?
- What happens if payment is delayed?
- How will active deadlines be handed over on termination?
Final operating principle
A legal retainer or outside-general-counsel model should create institutional memory. The objective is not to make the business dependent on one lawyer’s inbox. Matters, approvals, templates, deadlines and risk decisions should remain traceable. Scope, fees and responsibilities should be reviewed as the company grows so the legal operating model continues to match actual demand.
