Startup legal checklist
Australian startup founders usually need legal documents before the business feels ready for lawyers. The first co-founder conversation, first contractor, first customer, first investor discussion and first privacy question can all create legal risk if the paperwork is left until later.
This guide explains the core legal documents for startups Australia founders should consider at formation, launch and early growth stage. It focuses on commercial legal documents that protect ownership, reduce founder disputes, support capital raising, allocate customer risk and help the company pass due diligence.
What legal documents does an Australian startup need?
An Australian startup will usually need a founders agreement or shareholders agreement, written IP assignments, confidentiality documents, company or trust structure documents, employment and contractor agreements, customer terms, a privacy policy where personal information is handled, and investment documents when raising capital.
The right order depends on the business model. A SaaS startup selling subscriptions needs customer terms early. A healthtech, fintech, AI or crypto startup may also need sector-specific regulatory analysis before product launch.
Why legal documents matter for Australian startups
Startup documents turn commercial assumptions into enforceable obligations. They identify who owns the company, who owns the intellectual property, who can issue shares, how decisions are made, what customers can expect, and what happens when a founder, employee, contractor, customer or investor relationship changes.
Australian founders also operate within a legal framework that affects early documents. The Corporations Act 2001 governs companies, directors’ duties, shareholder rights and company constitutions. The Fair Work Act 2009, National Employment Standards, modern awards and superannuation rules affect employment documents. The Australian Consumer Law affects customer terms, unfair contract terms and consumer guarantees. The Privacy Act 1988 and Australian Privacy Principles can affect data collection, privacy policies and data breach response. IP ownership is affected by copyright, trade mark and assignment rules.
A lightweight startup legal checklist can be useful, but founders should avoid treating all documents as equally urgent. The right legal sequence depends on what the startup is doing, who is contributing value, what data is collected, whether regulated services are involved, and whether the company is preparing for investment.
2. Confidentiality Agreement and IP Assignment Deed
Confidentiality documents and IP assignment deeds protect the startup’s information, code, designs, inventions, brand assets, content, data models and product know-how. They are particularly important where founders use external developers, designers, consultants, agencies or fractional product teams.
A non-disclosure agreement, often called an NDA in Australia, can help protect confidential information shared with developers, commercial partners, advisers, prospective investors or acquisition counterparties. An NDA should define confidential information, permitted use, disclosure limits, return or destruction obligations and exclusions for information already public or independently developed.
An IP assignment deed deals with ownership. IP Australia states that IP created by a contractor in Australia is the contractor’s property unless the contract says otherwise. Payment for work does not necessarily transfer ownership. A founder who pays a developer for an app, website, algorithm, design system or software module may still need a written assignment to ensure the company owns the resulting IP.
Founder IP should also be assigned to the company. If a founder developed the idea, prototype, source code, brand or trade secrets before incorporation, investors and buyers may later ask for evidence that the company owns or can use those assets.
Trade marks should be considered separately. Registering a company or business name does not by itself give the startup trade mark protection for its brand. IP Australia administers Australian trade mark registration and provides tools for checking whether a proposed brand is registrable or already in use.
3. Business Structure Documents
Business structure documents record the legal vehicle through which the startup operates. For many venture-backed or investor-facing startups, a proprietary limited company is the usual operating entity because it provides a familiar share structure, limited liability and a recognised framework for issuing equity.
Some founders consider trusts, holding companies or asset-holding structures. Those decisions can affect tax, control, asset protection, capital raising, employee equity and future sale options. The ATO notes that business structure choices affect tax obligations, reporting and registration requirements. Legal and tax advice should be coordinated before founders lock in a structure.
Core structure documents may include a company constitution, consents to act as director, share issue documents, ASIC registration records, trust deed if a trust is used, loan documents between related entities, and intellectual property holding or licence documents where assets are separated from the trading business.
Employee Share Schemes should be considered before promising equity to employees or advisers. The ATO’s start-up concession can be relevant for eligible companies, but ESS documents require careful tax, valuation and securities law analysis. A casual email promising options or shares can create avoidable uncertainty if the startup later raises capital or changes its equity plan.
4. Employment and Contractor Agreements
Employment and contractor agreements should match the actual working relationship. A founder cannot avoid employment obligations by labelling a worker as a contractor if the legal character of the arrangement is employment.
Employment agreements should address duties, salary, hours, leave, confidentiality, IP, restraints, termination, policies and compliance with the National Employment Standards. Modern awards may also apply depending on the role and industry. Superannuation Guarantee obligations should be checked separately, including for some contractor arrangements.
Contractor agreements should address scope of work, deliverables, payment, milestone acceptance, IP assignment, confidentiality, data handling, subcontracting, insurance, termination and dispute resolution. For software, AI, SaaS, app development and platform projects, the agreement should also deal with source code access, open-source components, security obligations, documentation and handover.
Sham contracting risk needs early attention. The Fair Work Ombudsman describes sham contracting as misrepresenting an employment relationship as an independent contracting arrangement. Startups with fast-moving teams should document the reason for each engagement model and review it as roles change.
5. Customer Terms and Conditions
Customer terms allocate commercial risk between the startup and its users, customers or clients. They should explain what is supplied, how payment works, what service levels apply, what the customer can and cannot do, how liability is limited, when accounts can be suspended, and how the contract ends.
For a SaaS startup, platform business, app, marketplace or AI product, customer terms should be tailored to the product. A SaaS agreement may need clauses for subscriptions, acceptable use, uptime, support, customer data, security, integrations, AI outputs, beta features, usage limits and data export. A marketplace may need separate terms for buyers, sellers and platform operators.
The Australian Consumer Law can affect customer terms even where the startup sells online. Consumer guarantees may apply, and standard form contracts with consumers or small businesses can attract unfair contract terms risk. Since 9 November 2023, unfair contract terms can expose businesses to penalties in addition to terms being unenforceable.
A startup should not copy customer terms from an overseas competitor without reviewing Australian Consumer Law, privacy, payment, refund, liability and unfair contract terms issues.
6. Privacy Policy and Data Compliance
A privacy policy is required for many startups that collect personal information, and it is commercially expected for most startups that collect customer, user, employee, health, financial or behavioural data. The policy should reflect actual data flows, not a generic description of what a startup might collect.
The Australian Privacy Principles under the Privacy Act 1988 set out obligations for covered organisations and agencies. The Privacy Act commonly applies to organisations with annual turnover above $3 million, and to some smaller organisations regardless of turnover, including health service providers and businesses that trade in personal information. Regulated sectors such as healthtech, fintech and some data-intensive AI businesses may need privacy analysis earlier than a general startup.
A useful privacy policy should explain what personal information is collected, how it is collected, why it is used, when it is disclosed, whether overseas disclosures occur, how individuals can access or correct information, how complaints can be made, and how the startup manages privacy enquiries.
Privacy compliance usually requires more than a website policy. Startups should also consider data processing clauses in vendor contracts, cyber security controls, staff access rules, retention and deletion processes, consent flows, direct marketing rules and a Notifiable Data Breaches response plan. The OAIC explains that the NDB scheme requires certain entities to notify affected individuals and the Commissioner about eligible data breaches that are likely to result in serious harm.
7. Seed Investment Term Sheet
A seed investment term sheet records the main commercial terms for an investment before long-form documents are prepared. It helps founders and investors test alignment on valuation, investment amount, security type, board or observer rights, information rights, founder vesting, warranties, completion conditions and future financing rights.
Australian startups may raise through a priced equity round, convertible note, SAFE-style instrument or other early-stage structure. The best structure depends on valuation certainty, investor expectations, company stage, tax considerations, securities law issues and future funding plans.
Investment documents often include a term sheet, subscription agreement, shareholders agreement amendments, share issue resolutions, updated cap table, investor warranties, disclosure materials and sometimes employee share scheme documents. Regulated startups, including fintech, crypto, healthtech and AI-enabled health products, may also need regulatory diligence before funds are accepted.
A short term sheet can still create practical pressure. Founders should avoid agreeing to investor rights that conflict with existing shareholder documents, employee equity plans or later venture capital expectations.
Common legal mistakes founders make
Most startup legal mistakes come from acting too informally at the start and trying to reconstruct the legal position during investment or sale due diligence.
- No written founder deal. The cap table does not explain roles, vesting, decision rights, exits or founder departures.
- Missing IP assignments. Contractors, agencies or former founders may still own important code, designs or content.
- Template customer terms. The terms do not match the product, revenue model, Australian Consumer Law risk or data flows.
- Misclassified workers. Contractors perform employee-like roles without a proper employment, superannuation or sham contracting analysis.
- Privacy policy mismatch. The website policy says one thing while the product, analytics stack, AI tool or vendor contracts do another.
- Unclear structure. The startup uses a structure that complicates fundraising, employee equity, asset ownership or exit planning.
- Investor terms agreed too early. Founders accept term sheet provisions without checking the effect on control, dilution, future rounds or existing shareholders.
When should you engage a startup lawyer?
A startup should engage a lawyer before a legal decision becomes hard to unwind. The best timing is usually before issuing founder shares, appointing key contractors, launching customer terms, collecting sensitive data, raising capital, granting employee equity or signing a material customer, supplier or channel partner agreement.
Some founders can start with a focused document review rather than a large legal project. The priority is to identify which documents are essential now, which can wait, and which risks need specialist advice because of the startup’s industry.
| Stage | Documents to prioritise | Why it matters |
|---|---|---|
| Co-founder formation | Founders agreement, shareholders agreement, company constitution, IP assignments | High priority because ownership and control issues become harder to fix after value accrues. |
| Product build | Contractor agreements, software development agreement, confidentiality agreement, IP assignment deed | High priority where external developers, designers or AI vendors create core product assets. |
| Customer launch | Customer terms, SaaS agreement, website terms, privacy policy, data processing clauses | Medium priority before revenue, and high priority for regulated or data-heavy products. |
| Hiring and scaling | Employment agreement, contractor agreement, policies, ESS documents | Medium priority unless the role involves regulated services, sensitive data or valuable IP creation. |
| Capital raising | Seed investment term sheet, subscription agreement, updated shareholders agreement, cap table, disclosure materials | High priority because investor terms can affect control, future rounds and exit options. |
Frequently Asked Questions
What legal documents does a startup need in Australia?
Most Australian startups should consider a founders agreement or shareholders agreement, IP assignment documents, confidentiality agreements, structure documents, employment or contractor agreements, customer terms, a privacy policy where personal information is handled, and investment documents when raising capital. The exact list depends on the startup’s structure, product, data, team and industry.
Do startups need a shareholders agreement?
A startup with more than one founder or shareholder should usually have a shareholders agreement. It records decision rights, share transfers, founder vesting, dispute processes, exits and investor-related mechanics that are often not covered adequately by a standard constitution.
Do I need an IP assignment deed for contractors?
Usually, yes. IP Australia states that IP created by a contractor in Australia belongs to the contractor unless the contract says otherwise. A written IP assignment is important where contractors create code, designs, product assets, documentation, branding, databases or other material the company needs to own.
Does every Australian startup need a privacy policy?
Not every startup is automatically covered by the Privacy Act, but many startups still need a privacy policy because they collect personal information, sell to customers who expect one, operate in a regulated sector, handle health or financial data, use analytics and marketing tools, or plan to raise capital. Privacy obligations should be checked against the startup’s actual data flows.
What is the difference between a founders agreement and a shareholders agreement?
A founders agreement is often used early to record the relationship between founders, including roles, vesting, contributions and IP. A shareholders agreement governs shareholders’ rights and obligations in relation to the company. In many startups, the commercial founder deal is documented in a shareholders agreement once the company is incorporated.
When should a startup engage a lawyer?
A startup should engage a lawyer before issuing founder shares, engaging key contractors, launching customer terms, collecting sensitive data, hiring staff, promising equity, raising capital or signing a material commercial agreement. Early advice is usually cheaper than fixing ownership, employment, privacy or investor-document problems later.
Can I use online legal templates for my startup?
Templates can help founders understand document categories, but they can create risk if they do not match Australian law, the company’s structure, the product, the data flows, the revenue model or the intended investment pathway. Templates should be reviewed carefully before they are used for founder equity, IP ownership, customer terms, employment, privacy or capital raising.
Sources
- ASIC: Company rules and constitutions
- ASIC: Register a company
- Federal Register of Legislation: Corporations Act 2001
- Fair Work Ombudsman: National Employment Standards
- Fair Work Ombudsman: Independent contractors
- business.gov.au: Australian Consumer Law and your business
- OAIC: Australian Privacy Principles
- OAIC: Notifiable Data Breaches scheme
- IP Australia: Who owns intellectual property?
- IP Australia: Trade marks
- ATO: Business structures and key tax obligations
- ATO: Employee Share Schemes start-up concession
Disclaimer
This article provides general information only and is not legal advice. Startup documents should be prepared or reviewed against the company’s structure, industry, product, data flows, funding plans and commercial arrangements.
