Legal Docs Checklist for start ups

4 April 2025

Congrats on starting your new venture. It is an exciting time as your idea starts to morph into something marketable in the near future.

As you start to form your team and become a proper company there are some key docs that you should be getting right at this early stage. There are some very common errors made right at the beginning of a company’s journey that can be expensive to fix later.

Let’s have a look at four of the key docs.

Shareholders’ Agreement

Between founders, and also with family and friend investors, you will need a ‘prenup’ agreement. And any investors you bring into your business will come with their own expectations on what legal protections they should have. These agreed terms between the owners of the business are covered in a shareholders’ agreement.

What is it?

The Company Constitution or Articles contain a lot of the nuts and bolts on how your company will operate legally, but it is the Shareholders’ Agreement which normally governs your legal relationship between founders and with business partners and investors.

In the shareholders’ agreement you will sign up to a lot of rules, but particularly: (i) rules on operating the business (eg any restrictions on shareholders and if any shareholders have special rights on voting or appointments); (ii) rules on how shares can be issued that will impact your control over the business (eg how and on what conditions the company can issue new shares for future fund raises and perhaps restrictions on the sale of shares); and (iii) what rights each shareholder has during an exit event (eg being forced to sell shares at a certain price (drag) or the right to force others to sell (tag)).

What to look out for?

New business partners, including investors, will understandably want protection on their investment of time, energy and money. You need to understand what restrictions there might be on your ability to run the business in the direction you might want to in the future, and how easy it will be to raise capital if you are no longer getting on with your business partners.

It is hard for founders because at this early stage the investor may hold the cards, but if you hamstring yourself early on then you could have to spend a lot of founder time and energy extracting the business from the deal. 

Between the founders you need to find a fair mechanism if one founder wants to leave or if there is a dispute that cannot be resolved.

Contractor Agreement

Early on it is likely you will use contractors rather than staff, especially for design and development of software. Contractors offer flexible manpower, bring expertise you do not have and cannot afford full time, and will often deliver projects for a fixed cost.

What is it

Simply a written agreement with your contractor on what they will do and for how much.

What to look out for?

IP that your employees create is automatically owned by the company which employs them, which is great. But the opposite is true for contractors; the contractor will own the IP unless the contractor agreement has a strong clause in which the IP is transferred (assigned in legal speak) to your company.

The issue is sometimes not spotted until an investor is doing their due diligence and they ask the company to fix it. And at that point the contractor may know their rights and value, and it could be expensive to fix. This is more common than you would like to think.

This is also true for the founders. If there is no employment agreement with the founders then the founders may be acting as contractors to the company, and the IP they generated will belong to the founders and not the company. If the founders fall out then it can be very, very expensive for the company to fix.

It is definitely worth the time getting the IP all in the right place early on with bulletproof contractor agreements.

Privacy Policy

It is pretty likely that you will be using a lot of personal data to power your business. Either as part of the main service or at the very least in your CRM.

What is it?

The Privacy Policy is a notice, not a contract, where you are transparent about how you use personal data and what rights your customers have. It is usually in the footer of your website or app, and you may flag it to your customers during onboarding or sign up.

What to look out for

The Privacy Policy will govern how you can use personal data of your customers. Think of it as a transparent and open promise to your customers.  If, later on down the line, you want to use the data in ways not described in your privacy policy, then you may find you cannot legally process the data in the new way. But your privacy policy needs to be reasonably precise so cannot just say you can use the data for anything at all. This is a tricky area. 

There are also a fair few points that need to be covered in your Privacy Policy to comply with the Australian Privacy Act, the EU/UK GDPR and various US state laws. It will be an administrative pain to have to re-write and re-send your privacy policy to all customers if you (or even worse a regulator) spot your error later on.

As with contractor agreements and the Terms of Use / T&Cs, your future investors will read your Privacy Policy carefully during due diligence.  The Australian regulator is becoming more and more aggressive in its enforcement and compliant processing of data is a key risk that investors are concerned about. 

T&Cs or Terms of Use

You obviously want to do business on your own terms rather than your clients. It will put you in a better legal position if a dispute ever arises, and on a practical level you can align all your processes (e.g. billing timings, notices you might have to send to customers and the data security promises you might make in contracts).

What are they?

The legal contract under which your company will do business with its customers. In an ideal world all customers will sign up to your T&Cs, but that is often not the reality. If you are lucky enough to sell to big banks, telcos or large government departments then they will insist you contract on their own standard agreements.

A good rule of thumb for an average SaaS business is that 80% – 90% of contracts will be on your standard T&Cs, 10% – 15% will be on your T&Cs with some amendments and then the largest 5% or so of clients will insist on their own T&Cs and you will have to make them work for your business.

What to look out for

There is not much point in having your lawyers draft you fantastic T&Cs that protect you to the nth degree but are not balanced. A pragmatic and commercial approach is needed in your T&Cs. Yes, they should address the key risks to your business but not to the extent that the terms become far too one-sided.

This is because:

  • You will waste far too much time and resources arguing over your T&Cs if your customers read them and simply cannot sign them. As a small business, you will be accepting a lot of changes suggested by your prospects anyway, so you may as well decrease the sales cycle time by making your T&Cs fairer in the first place.
  • Under the Australian consumer law terms that are unfair can be struck out as voidable by the court. And you could even be fined for unfair terms. This law also applies to any standard term document you send to a company of under 100 staff; which is the majority of your customer base.

Please let us know if you would like some help with these key documents so that your business is in the best possible place.

Peter Violaris

peter@uxlaw.com.au

Image Credit: Canva AI images – prompt ‘very important document’