Founder's Guide to Startup IP

Your Startup Is Just a Bundle of Legal Rights

Let’s cut the fluff. For a tech startup, your company isn’t a mission or a product—it’s a collection of intellectual property. Your code, your brand, your secrets. That’s the entire game. Getting IP wrong at the start is a company-killer. It will blow up investor diligence, block an acquisition, or let a competitor eat your lunch.

This is not a task you delegate to your lawyers and forget. Your IP strategy is your business strategy. Protecting your assets is as important as building them. Here are the unforgivable mistakes and how you can avoid them.

The #1 Deal-Killer: The Founder IP Footgun

You and your co-founders have been hacking away for months. You’ve built a prototype, designed a logo, bought a domain. Then you form your Delaware C-Corp. Here’s the terrifying truth: the new corporation owns absolutely none of it. You, the individual, still own the IP you created.

If you don't formally transfer this work to the company, your startup is an empty shell. When a VC’s lawyer finds this in diligence—and they always do—they will halt the investment. Why would they fund a company that doesn’t own its own product?

The Fix: The Founder IP Assignment. As part of your incorporation, every single founder must sign an Intellectual Property Assignment Agreement. This document formally transfers all relevant pre-incorporation assets (code, designs, domains, inventions, even social media handles) from the individuals to the company. This is non-negotiable. If your lawyer doesn’t make this a mandatory step, find a new lawyer.

Your Team Is a Leaky Bucket of IP

Once you’ve solved the founder IP issue, you need to control the flow of IP from everyone who touches the company. Don’t trust handshakes. Don’t rely on assumptions.

Employees: The CIIAA Is Not Optional

Every employee, from day one, must sign a Confidential Information and Invention Assignment Agreement (CIIAA) . This is the core of your IP protection strategy. It has two jobs:

It obligates the employee to keep your secrets (trade secrets) confidential. · It automatically assigns any IP they create related to their job to the company.

Without a signed CIIAA, an engineer could theoretically walk away claiming ownership of the feature they just built. This is an existential threat. Make it part of your onboarding checklist before they get their laptop.

Contractors: Assume They Own Everything (Unless You Have a Contract)

This is the most common tripwire for early-stage founders. The legal default for independent contractors is the opposite of employees: the contractor owns the IP they create for you unless a written agreement explicitly states otherwise.

You paid a freelancer $5,000 to design your logo? You probably bought a license to use it, not ownership. That freelancer could sell a similar logo to your competitor. That contractor who built your v1? They might own the code.

The Fix: A Contractor-Specific IP Assignment. Every contractor, consultant, or freelancer MUST sign an agreement with a "work for hire" provision and an explicit, upfront assignment of all intellectual property to your company. Never let them start work without it. Investors will check the agreements for your 3-5 most critical technical contributors.

Contractor Red-Flag Checklist

Did they start work on a verbal agreement before signing the contract? Red Flag. · Are they using their own laptop and their own software licenses? Red Flag. (This further establishes them as independent, making the IP assignment clause even more critical). · Is the contract just a generic template you downloaded? Red Flag. (Have your lawyer provide a version tailored for contractors).

A Tactical Guide to the Four Types of IP

Think of IP as a bundle of different tools. You need to know which tool to use for which job.

1. Trademarks (Your Brand)

A trademark protects your brand identity: name, logo, slogan. It prevents others from creating confusion in the marketplace.

The Common Mistake: Committing to a name before doing a search. You register a domain, build a site, print hoodies, and then get a cease-and-desist letter from a company in an adjacent market with a similar name.

Conduct a "Knockout" Search: Before you get attached to a name, do a 30-minute search. Check Google, social media, domain registrators, and the free USPTO TESS database . Look for similar-sounding names in your industry. · File for Federal Registration (®): Using a name gives you weak, local "common law" rights (™). Federal registration gives you much stronger, nationwide protection. This is a must-do before a major funding round or public launch. · Budget Realistically: Expect costs of $1,500 - $3,000 per class (i.e., category of goods/services). This includes lawyer fees to handle the filing and USPTO fees (typically $250-$350 per class). The process takes 9-18 months.

2. Copyrights (Your Code and Content)

Copyright protects original works of authorship, which for a startup primarily means your software code, website copy, and marketing content. Protection is automatic upon creation.

The Common Mistake: Using open-source software without understanding the license. Some "copyleft" licenses are viral—if you use them, you may be forced to make your own proprietary code public.

Focus on Ownership: Since copyright is automatic, your only job is to ensure the company owns it. This is what the CIIAA and contractor agreements are for. · Audit Your Open Source: You are absolutely using open-source code. You need to know which licenses are in your codebase. Use a tool like Snyk , FOSSA , or Black Duck to scan your repositories. · Know Your Licenses: Green vs. Red. · Safe (Permissive): MIT, Apache 2.0, BSD. These are generally safe to use in commercial software. · High Risk (Viral Copyleft): GPL, AGPL. If you use code with these licenses, you may be forced to release your own source code. Flag these for immediate review with your lawyers.

3. Patents (Your Inventions)

A patent gives you a 20-year monopoly to exclude others from making, using, or selling a truly novel invention. It’s the strongest but most expensive form of IP protection.

The Common Mistake: Software founders either rush to patent simple business logic (weak, expensive, and distracting) or they publicly disclose a core invention before filing, which can forfeit patent rights.

Stay Strategic, Not Reactive: Most VCs do not care if a pre-seed SaaS startup has patents. They want to see a great product and early traction. Your time and money are almost always better spent on engineering and sales. Patents are for deep tech, biotech, hardware, or highly defensible algorithms. · Use Provisional Patents Wisely: If you have a genuinely novel invention and absolutely must disclose it, a provisional patent application is a good, lower-cost option ( $3,000-$5,000 ). It’s a one-year placeholder that secures a filing date. It basically starts a clock, giving you a year to decide if you want to pursue a full, non-provisional patent ( $15,000-$25,000+ ). · Do NOT Publicize Your Secret Sauce: A blog post, public demo, or detailed conference presentation can be considered a "public disclosure." In the U.S., this starts a one-year grace period to file a patent. In most of Europe and Asia, any public disclosure before filing can immediately destroy your patent rights.

4. Trade Secrets (Your "Secret Sauce")

A trade secret is confidential information that has business value because it’s a secret (e.g., Google's search algorithm, the Coca-Cola formula). For most startups, your customer list, product roadmap, and internal performance metrics are trade secrets.

The Common Mistake: Believing an NDA is sufficient, or failing to take "reasonable steps" to actually keep the information secret. To claim something is a trade secret, a court will ask you what you did to protect it.

The CIIAA is Your Primary Weapon: The confidentiality clauses in your employee and contractor agreements are your first line of defense. · Practice Good Digital Hygiene: "Reasonable steps" include using password managers, enabling two-factor authentication, restricting access to sensitive data on a "need-to-know" basis (e.g., not everyone needs access to your cap table), and having a swift offboarding process to revoke access when someone leaves. · Don’t Over-rely on NDAs: NDAs are for external parties like partners or potential acquirers. Most seed-stage VCs will not sign an NDA to see your pitch deck. Don’t argue. Their reputation is their bond. The correct response is, "Of course. We understand."

Smarter Questions to Ask Your Lawyer

Show your legal team you’ve done your homework. This gets you better advice and saves you money.

"Please confirm every founder has signed an IP Assignment Agreement, transferring all pre-incorporation IP to our new C-Corp." · "Please provide a standard CIIAA for employees and a tailored version for independent contractors we can use." · "For our trademark, what is the cost for a full search and filing in classes X and Y? Are there other classes you recommend?" · "We use these key open-source libraries. Can we schedule a 30-minute call to review the licenses and flag any potential conflicts?" · "Can you walk us through the standard IP reps and warranties we will need to make to investors in our Series A round?"

How to Apply This: Your IP Action Plan

Build Your IP Register. Create a spreadsheet. Columns: Contributor Name, Role (Founder, Employee, Contractor), Contribution, Start Date, End Date, Agreement Signed (Yes/No). Find the "No"s and get them signed immediately. · Run a Real Trademark Search. Go to the USPTO TESS database. Search for your name, phonetic spellings, and common misspellings. If it’s not perfectly clear, budget for a legal opinion. · Schedule Your Open Source Audit. Put one hour on the calendar with your tech lead. Use a scanner tool (even a free one) to get a list of licenses. Your goal is to find any GPL or AGPL licenses and assess their impact. · Set Up a Secure Data Room. Create a folder in Google Drive, Dropbox, or a dedicated VDR service. Upload every signed IP agreement. This is your diligence folder. Being able to share it instantly with a clean, complete set of documents signals competence to investors.