Comprehensive Startup Outside General Counsel Readiness Manual
A startup usually needs structured outside-general-counsel support when legal risk becomes interconnected across funding, founders, hiring, product, customers, data and disputes. The objective is not to introduce bureaucracy prematurely. It is to create reliable legal foundations before growth and investor scrutiny make small gaps expensive.
This section treats the topic as a legal-operations system. The aim is to identify the business trigger, legal rule, responsible owner, required evidence, escalation path and completion proof so the company can manage legal risk consistently rather than through isolated emails.
1. Incorporation records
Business and legal issue. Corporate documents should be complete, signed and consistent before fundraising or major contracting. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
2. Cap table
Business and legal issue. The legal share record, options and convertible instruments should reconcile with the commercial cap table. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
3. Founder agreement
Business and legal issue. Roles, equity, vesting, transfer, exit, deadlock and IP should be documented before conflict arises. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
4. Founder IP assignment
Business and legal issue. Core code, brand and other assets created before or around incorporation should be properly vested in the company. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
5. Employee IP
Business and legal issue. Employment documents should assign relevant work product and protect confidential information. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
6. Consultant IP
Business and legal issue. Contractors who build product or content should have clear assignment/licence terms and confidentiality. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
7. ESOP plan
Business and legal issue. Plan rules, grants, vesting, exercise, leaver treatment and corporate approvals should remain consistent. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
8. Board approvals
Business and legal issue. Material corporate actions should be authorised contemporaneously rather than reconstructed during diligence. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
9. Shareholder reserved matters
Business and legal issue. Investor rights and internal approvals should be embedded into the company’s decision process. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
10. Fundraising term sheet
Business and legal issue. Commercial terms should be assessed for control, economics, exclusivity, confidentiality and transaction timetable. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
11. Due diligence readiness
Business and legal issue. A live data room and compliance tracker reduce disruption when investor diligence begins. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
12. Definitive investment documents
Business and legal issue. Share subscription/shareholders agreements require transaction-specific negotiation beyond routine retainer work. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
13. Conditions precedent
Business and legal issue. Closing tasks should have an owner, evidence and deadline so funding is not delayed by avoidable gaps. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
14. Post-closing actions
Business and legal issue. Filings, share certificates, board updates, policy changes and investor rights should be implemented after funding. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
15. Customer contracts
Business and legal issue. Startups should standardise commercial positions before enterprise customers dictate inconsistent risk terms. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
16. Enterprise liability
Business and legal issue. Unlimited liability, indemnity and service credits should escalate based on contract value and insurance. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
17. Data protection
Business and legal issue. Product data flows, notices, vendor sharing and customer commitments should be understood before scale. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
18. Cybersecurity contracts
Business and legal issue. Legal promises in security schedules should match actual technical controls and incident processes. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
19. Vendor dependency
Business and legal issue. Critical cloud, payment and logistics vendors should have continuity, security and exit provisions. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
20. Employment scale
Business and legal issue. Rapid hiring requires consistent appointment, policy and exit documentation. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
21. Senior hires
Business and legal issue. Leadership compensation, incentives, notice, IP and restrictive terms often require bespoke drafting. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
22. Consultant classification
Business and legal issue. Long-term contractor models should be reviewed for legal, tax and employment risk. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
23. POSH readiness
Business and legal issue. As headcount and legal thresholds apply, policy and committee requirements should be operationalised. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
24. Consumer terms
Business and legal issue. Refunds, cancellations, pricing and representations should be reviewed where the startup sells to consumers. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
25. Marketing claims
Business and legal issue. Advertising and influencer claims should be reviewed where regulatory or consumer risk is material. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
26. Regulated-sector entry
Business and legal issue. Fintech, health, food, mobility, education, gaming and other sectors may require specialist advice before launch. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
27. Founder dispute
Business and legal issue. Access, board rights, IP, bank authority and communications should be preserved before adversarial action. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
28. Employee investigation
Business and legal issue. Evidence preservation, fair process, confidentiality and access control should precede termination decisions. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
29. Legal notices
Business and legal issue. A central tracker should prevent notices from remaining in founders’ personal inboxes. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
30. Litigation strategy
Business and legal issue. Early evidence and settlement assessment can prevent disproportionate escalation. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
31. International customers
Business and legal issue. Cross-border contracts can introduce foreign law, data, tax and dispute-resolution issues requiring local/specialist support. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
32. Foreign subsidiary
Business and legal issue. International expansion should allocate local counsel, corporate governance and intercompany documentation. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
33. Insurance
Business and legal issue. D&O, cyber and other cover should align with the startup’s current risk profile and contractual promises. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
34. First in-house hire
Business and legal issue. When legal work becomes daily and embedded, the company should decide whether to bring routine ownership inside. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
35. OGC-to-in-house transition
Business and legal issue. Trackers, templates and repositories should be built so a future internal team can take over cleanly. Management should understand the commercial consequence of the obligation or decision before counsel recommends a response. Legal risk should be translated into choices such as proceed, renegotiate, remediate, escalate, obtain approval or stop the activity. This makes the advice useful to business teams and prevents legal from becoming a purely reactive review function.
Evidence and ownership. The company should maintain the source document, responsible department, legal owner, due date and objective evidence of completion. Where the matter spans legal, finance, HR, IT, CS or operations, assign one accountable owner and record dependencies. Missing ownership is a major cause of missed deadlines even when the legal rule itself is understood correctly.
Workflow and escalation. Routine items can use templates and standard approvals; non-standard, high-value or regulated issues should escalate. Define thresholds in advance wherever possible. The retainer or OGC should not silently make commercial decisions that belong to management. Instead, it should identify the legal consequence, available options, recommended control and the level of authority required to approve residual risk.
Reporting and closure. Open issues should appear on the appropriate tracker until there is proof of completion: filed form, executed agreement, board approval, payment, settlement, training record, regulator response or another clear closure document. A completed legal task should leave a reliable audit trail so that diligence, board review or later litigation does not depend on memory.
Legal-operations checklist
- Corporate records
- Cap table
- Founder docs
- IP assignments
- ESOP
- Material contracts
- Employment docs
- Data/privacy map
- Compliance calendar
- Open disputes
- Funding data room
- Legal intake system
Management questions
- What would an investor find missing today?
- Who owns the company’s core IP?
- Which customer contract creates the biggest liability?
- Are board approvals complete?
- Which employee/consultant exits are risky?
- What regulated activity is planned next?
- When will internal legal capacity be justified?
Final operating principle
Good legal operations turn obligations and advice into repeatable controls. The organisation should be able to identify what is due, who owns it, what evidence proves completion, what risk remains open and what decision management must make. That discipline is more valuable than a long list of laws with no operating responsibility.
