Contract Checklist for Startups: Stage-by-Stage (2026)
A stage-gated contract checklist for startups covering Day Zero through Series A, with a priority matrix, IP assignment mistake-fix pair, and key laws verified.
Generate a founders agreement in 60 seconds
Describe what you need in plain English. A panel of AI agents (Researcher, Drafter, Critic, Validator, Adversary) writes a review-ready draft you can edit, sign, and send.
What contracts does a startup need — and in what order?
A startup needs seven core contracts: a founders agreement, IP assignment agreements, a mutual NDA, a contractor agreement, a customer-facing services agreement or terms of service, an employment offer letter template, and a privacy policy. Which ones are urgent depends entirely on your current stage — the wrong sequence costs money; the right sequence protects equity.
Key takeaways
- The single most dangerous omission is skipping an IP assignment agreement at founding. Under 17 U.S.C. § 101, independent contractors own their work product unless a written agreement says otherwise — meaning a founder or freelancer who built your MVP may legally own it.
- An IRC § 83(b) election must be filed with the IRS within 30 calendar days of receiving restricted stock. The IRS grants no extensions. Missing this deadline converts future equity appreciation into ordinary income, not capital gains.
- The FTC's 2024 nationwide non-compete ban (Ryan LLC v. FTC) was struck down and the FTC dropped its appeal in September 2025. Non-competes now live or die under state law — they are void in California under Cal. Bus. & Prof. Code § 16600 and enforceable in varying degrees elsewhere.
- Electronic signatures are fully valid for standard business contracts under the ESIGN Act (15 U.S.C. § 7001, enacted 2000) and UETA, adopted by 47 states.
- Investors run due diligence in the same order you should draft: founders documents first, then IP assignments, then customer and employment agreements.
The startup contract priority matrix: which document belongs at which stage
Every other checklist hands you a flat list. This one reflects how investors actually evaluate your legal stack — and how one missing document at the wrong stage can block a funding round or strip you of IP ownership.
The matrix below uses three priority levels: Critical (a gap here creates immediate legal or investor risk), Important (needed before your next milestone), and Defer (not yet worth the overhead).
| Contract | Day Zero | First Customer | First Hire (5+) | Series A Ready |
|---|---|---|---|---|
| Founders agreement (equity, vesting, roles) | Critical | Critical | Critical | Critical |
| IP assignment (all founders + early contributors) | Critical | Critical | Critical | Critical |
| Mutual NDA | Critical | Critical | Critical | Critical |
| Contractor agreement (with IP assignment clause) | Defer | Critical | Critical | Critical |
| Customer services agreement / MSA | Defer | Critical | Critical | Critical |
| Terms of service + privacy policy | Defer | Critical (if digital) | Critical | Critical |
| Employee offer letter template | Defer | Important | Critical | Critical |
| Separation / offboarding agreement | Defer | Defer | Important | Critical |
| Data processing agreement (DPA) | Defer | Important (EU/CA) | Critical | Critical |
| Board consent resolutions | Important | Important | Important | Critical |
| IRC § 83(b) election (tax filing, not a contract) | Critical | — | — | — |
Read this table left to right: "Critical" in the Day Zero column means founders should sign it the day they incorporate, not after the first client call. Anything marked "Defer" is not needed yet — and adding it early creates administrative noise without reducing risk.
The five contracts that must exist before investor due diligence
Investors won't tell you which documents they're looking for until they're already in the room. Here is what they audit — in the order they look — at a typical Series A.
1. Founders agreement with vesting schedule
The founders agreement establishes equity splits, vesting timelines, decision-making authority, and what happens when a founder leaves. The market standard is a four-year schedule with a one-year cliff: no shares vest in year one; 25% vest at month 12; the remaining 75% vest monthly over the next 36 months. Without a vesting schedule, a co-founder who leaves after three months walks away with their full equity stake — a red flag that prevents most early-stage funding. For a deeper look at what this document must include, see our founders agreement guide.
2. IP assignment agreements from every contributor
Investors want proof your company owns its product. Every founder, contractor, advisor, and early employee who contributed code, design, or invention must have signed a document assigning those rights to the company before contributing — not after. An unexecuted IP assignment discovered in due diligence frequently triggers a price reduction or a deal kill. Read more in our guide to IP clauses in contracts.
3. A signed contractor agreement for every freelancer
If an agency built your website, a freelance designer made your brand, or a solo engineer wrote early modules, each needs a signed contractor agreement that includes an explicit IP assignment and a confidentiality clause. The ESIGN Act (15 U.S.C. § 7001) means you can collect these signatures digitally — there is no reason to have unsigned work relationships. Understand the implications of worker classification in our contractor vs. employee guide.
4. A standard customer agreement or MSA
Even one enterprise customer with a signed master services agreement signals to investors that you have a repeatable commercial process. The agreement needs to address scope, payment terms, limitation of liability, IP ownership of deliverables, and termination rights. You can generate a services agreement on Pactlio and have it reviewed before your first enterprise deal closes.
5. Privacy policy and terms of service
If your product touches user data — including email addresses — you need a privacy policy. If you have California users, California Consumer Privacy Act (CCPA) compliance applies. If you have EU users, GDPR Article 13 requires a lawful basis disclosure and a privacy notice at the point of data collection. A data processing agreement (DPA) is also required under GDPR Article 28 any time you use third-party processors like AWS, Stripe, or Mailchimp to handle EU personal data. You can create a privacy policy on Pactlio that covers both CCPA and GDPR requirements. See also: how to create a privacy policy.
The most expensive mistake: the IP assignment clause founders get wrong
This is the error that costs the most and is easiest to fix — before it happens.
The scenario: A startup pays a freelance engineer $18,000 to build its core API over six months. The payment was real, the work was real, but the contract was a one-page SOW with no IP assignment language. The startup assumes it owns the code because it paid for it.
The law says otherwise: Under 17 U.S.C. § 101 of the Copyright Act, independent contractors own the copyright in their original work unless (a) it qualifies as a "work made for hire" under a specific statutory list — which software rarely does — or (b) the parties sign a written agreement explicitly transferring ownership. Payment does not transfer copyright.
The real cost: When this startup raises a seed round, the investor's counsel discovers the gap in due diligence. The freelancer, now aware of leverage, demands $50,000 to sign a retroactive assignment. Some refuse entirely. Some are simply unreachable.
Mistake vs. fix
| Wrong clause | Correct clause | |
|---|---|---|
| What it says | "Contractor will deliver a working API by [date] for $18,000." | "Contractor irrevocably assigns to Company all right, title, and interest worldwide — including all copyrights, patents, and trade secrets — in any work product, code, inventions, and deliverables created in connection with this Agreement. This assignment takes effect upon creation, without further consideration." |
| Who owns the code | The contractor | The company |
| Risk at due diligence | Deal-blocking | None |
The fix costs nothing to add. Use Pactlio's contractor agreement template, which includes a full IP assignment and confidentiality clause by default. For a broader view of what to look for in any agreement, see our guide on how to review a contract.
Jurisdiction notes: where startup contract law differs most
Three areas where state or country law overrides a generic template:
| Issue | Key variation | What to do |
|---|---|---|
| Non-competes | Void in California (Cal. Bus. & Prof. Code § 16600); enforceable with limits in Texas, New York, Florida; FTC federal ban struck down (Ryan LLC v. FTC, N.D. Tex., Aug. 20, 2024) | Check non-compete law by state; use non-solicitation clauses as an alternative |
| Worker classification | California AB 5 applies the ABC test for contractor status; IRS uses a 20-factor common-law test nationwide | Classify workers carefully; misclassification triggers back taxes and penalties |
| Data privacy | GDPR (EU) requires a DPA with all processors; CCPA (California, effective 2020) requires a privacy notice and opt-out rights for sales of personal data | Add GDPR/CCPA clauses to your privacy policy and vendor agreements before your first EU or California user |
| Electronic signatures | Valid in all 50 states under ESIGN (15 U.S.C. § 7001) or state UETA equivalents; wills and real estate deeds in some states still require wet ink | Use DocuSign, Adobe Sign, or Pactlio's built-in e-signature; see how to sign a contract online |
Common mistakes to avoid
- Skipping IP assignments at founding. Every founder must sign an IP assignment the day the company incorporates. IP created before that document exists may belong to the individual, not the entity.
- Using a template from a different state. A Delaware contract with a Texas governing-law clause and a California employee creates three jurisdictional layers. Specify governing law deliberately, not by accident.
- Relying on verbal agreements with early hires. An offer letter is not bureaucracy — it fixes compensation, equity, and at-will status in writing. Disputes about verbal equity promises are common and expensive.
- Missing the IRC § 83(b) election window. The 30-day deadline from the restricted stock grant date is absolute. The IRS does not grant extensions. File immediately — do not wait for paperwork to arrive in the mail.
- Auto-renewing contracts you forgot you signed. Vendor and SaaS agreements often include auto-renewal clauses that lock you in for another year with 30 days' notice. Track renewal dates from day one. Learn how auto-renewal clauses work.
- Not having a termination clause. A contract with no exit mechanism is a trap. Every services agreement needs a termination-for-convenience right with defined notice periods. Review red flags in contracts before you sign.
Sources
- Electronic Signatures in Global and National Commerce Act (ESIGN Act), 15 U.S.C. § 7001: https://www.govinfo.gov/content/pkg/PLAW-106publ229/pdf/PLAW-106publ229.pdf
- Internal Revenue Code § 83(b) — IRS Election Overview: https://www.irs.gov/pub/irs-drop/n-83b.pdf
- Cooley GO — What Is a Section 83(b) Election?: https://www.cooleygo.com/what-is-a-section-83b-election/
- FTC Noncompete Rule — Federal Trade Commission: https://www.ftc.gov/legal-library/browse/rules/noncompete-rule
- Ryan LLC v. FTC, No. 3:24-cv-00986-E (N.D. Tex. Aug. 20, 2024) — permanent injunction blocking FTC non-compete rule: https://www.ftc.gov/legal-library/browse/rules/noncompete-rule
- White & Case — FTC Non-Compete Rule: post-mortem and state-law landscape: https://www.whitecase.com/insight-tool/white-case-global-non-compete-resource-center-ncrc
- California Bus. & Prof. Code § 16600 — ban on non-competes: https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?sectionNum=16600.&lawCode=BPC
- 17 U.S.C. § 101 — Copyright Act definition of "work made for hire": https://www.law.cornell.edu/uscode/text/17/101
- GDPR Article 28 — processor obligations and DPA requirement: https://gdpr-info.eu/art-28-gdpr/
- GDPR Article 13 — information to be provided at data collection: https://gdpr-info.eu/art-13-gdpr/
- California Consumer Privacy Act (CCPA) — California Attorney General: https://oag.ca.gov/privacy/ccpa
- Uniform Electronic Transactions Act (UETA) — Uniform Law Commission: https://www.uniformlaws.org/committees/community-home?CommunityKey=2c04b76c-2b7d-4399-977e-d5876ba7e034
This article is general information, not legal advice. Laws vary by jurisdiction. Pactlio generates professional drafts for review — have a licensed attorney review anything important.
Frequently Asked Questions
What contracts does a startup need on day one?▾
On day one, a startup needs a founders agreement covering equity splits and vesting, IP assignment agreements signed by every founder, and a mutual NDA. These three documents establish who owns what and prevent the disputes that kill most early-stage companies before they reach product-market fit.
Does a startup need a lawyer to create contracts?▾
Not for every contract. Standard documents — NDAs, contractor agreements, offer letters — can be drafted with AI tools and reviewed by a founder. Complex agreements like SAFE notes, Series A term sheets, or cross-border licensing deals warrant attorney review. The rule of thumb: the more irreversible the consequence, the more you need professional review.
What is an 83(b) election and why does it matter for founders?▾
An IRC § 83(b) election is a one-page IRS filing that lets founders pay tax on restricted stock at the grant-date value — usually near zero — rather than at each vesting date when shares may be worth far more. The 30-day filing window from the grant date is absolute; the IRS grants no extensions for any reason.
Do non-compete clauses in startup employment contracts still work?▾
It depends on the state. The FTC's 2024 nationwide non-compete ban was struck down by a federal court in Ryan LLC v. FTC and the FTC dropped its appeal in September 2025. Non-competes now revert to state law. California bans them under Cal. Bus. & Prof. Code § 16600. Enforceability varies widely across other states.
Who owns the code a freelancer writes for my startup?▾
The freelancer does, unless a written agreement says otherwise. Under 17 U.S.C. § 101, independent contractors retain copyright in their work product unless they sign an explicit IP assignment. 'Work for hire' applies automatically to employees, not contractors. Without a signed assignment clause, you do not own what you paid to build.
What contracts do investors check during Series A due diligence?▾
Investors typically audit: founders agreements with vesting schedules, IP assignment agreements from all founders and early contractors, employee offer letters and NDAs, any customer MSAs, the cap table, board resolutions, and data processing agreements if the startup handles personal data. Missing or unsigned documents create deal risk and renegotiation leverage.
Can I use electronic signatures on startup contracts?▾
Yes. The ESIGN Act (15 U.S.C. § 7001, enacted 2000) and the Uniform Electronic Transactions Act, adopted by 47 states, give electronic signatures the same legal standing as wet ink. Contracts signed via DocuSign, Adobe Sign, or similar tools are fully enforceable for standard business agreements.
What is a standard founder vesting schedule?▾
The market standard is a four-year vesting schedule with a one-year cliff — meaning no shares vest in the first year, then 25% vest at month 12, with the remaining 75% vesting monthly over the following 36 months. This is not a legal requirement but is expected by most venture investors and accelerators.