Before you post that job listing or bring on your first team member, you need five foundational policies. Not eventually. Not when you're bigger. Before anyone creates anything for your company.
Most founders think: "We're just three people, we don't need HR policies yet." What they don't realize: the work your co-founder creates tonight, the contractor you hired last week, and the employee starting Monday mean you might not own any of it without the right agreements in place.
The expensive truth: Fixing these mistakes later costs 10-100x more than getting them right from day one. Fighting over who owns your core IP can cost $500,000+ in litigation. Misclassifying one contractor can trigger $50,000 in penalties. Facing a harassment lawsuit without a written policy can cost $300,000 to defend even when you win.
Here's the exact order you need these policies, why each one matters, and what happens if you skip them.
The Sequence Matters: Why These 5 Policies Come First
These aren't just random HR documents. They're the legal foundation that protects everything you're building:
Policies 1-3 happen BEFORE anyone does any work:
Intellectual Property Assignment Agreement
Confidentiality/NDA Agreement
Independent Contractor Agreement
Policies 4-5 happen the moment you hire your first employee:
4. Offer Letter Template
5. Anti-Harassment/Anti-Discrimination Policy
The critical insight: You cannot retroactively fix IP ownership or contractor misclassification. These documents must exist before work begins. Your offer letter and harassment policy must exist before your first employee's first day.
Let's break down each one.
Policy #1: Intellectual Property Assignment Agreement
When you need it: Before anyone (co-founders, contractors, employees) creates anything for your company.
What it does: Ensures your company owns all IP created for the business—code, designs, inventions, brand materials, customer lists, business processes, everything.
Without it: Under default copyright law, contractors own what they create. Employees' work may be "work for hire," but edge cases exist. Co-founders who build your MVP before incorporation might own it personally.
Critical questions this policy answers:
Who created what before signing this agreement?
What categories of IP does this cover? (code, creative works, inventions, brand, data)
What happens to weekend/off-hours work?
What about ideas not yet built?
How do you handle open-source or third-party code?
What are the post-departure rights?
State-specific considerations:
California (Labor Code § 2870): Employees cannot be forced to assign inventions they develop entirely on their own time without company resources, unless the invention relates to the company's business or results from company work. Your agreement must include this specific California exception language.
Texas: Strongly enforces IP assignment agreements. Clear, broad language stating all work product belongs to the company is enforceable.
Why it's #1: You cannot build a valuable company on IP you don't own. This comes before everything else—before your first line of code, before your first design, before anything.
Policy #2: Confidentiality/NDA Agreement
When you need it: Before anyone gets access to confidential information—which is immediately for co-founders, and before work begins for contractors/employees.
What it does: Protects trade secrets, customer lists, pricing strategies, product roadmaps, financial information, and any other confidential business information.
Without it: Anyone with access to your confidential information can legally share it, use it for their own business, or take it to competitors. You have limited trade secret protection without a written agreement.
Critical questions this policy answers:
What information would destroy your business if it became public?
What's actually confidential vs. publicly available?
How long should confidentiality obligations last?
What happens when someone leaves?
What are you preventing? (disclosure, use, or both?)
Who are you sharing confidential info with (who doesn't have an NDA)?
Duration standards vary by information type:
Trade secrets: Indefinite protection
General confidential information: 2-5 years
Customer lists: 2-3 years
Product roadmap: 1-2 years
State-specific considerations:
All states: Trade secret protection exists under the federal Defend Trade Secrets Act (DTSA) and state equivalents (like the California Uniform Trade Secrets Act), but only if you take "reasonable measures" to protect secrecy—which requires written confidentiality agreements.
Colorado: Confidentiality agreements are enforceable, but be cautious about overly broad restrictions that might conflict with employees' rights to lawful off-duty activities.
Why it's #2: Once confidential information is disclosed without protection, you cannot unring that bell. This protects what makes your business valuable.
Policy #3: Independent Contractor Agreement
When you need it: Before any contractor does any work for you.
What it does: Defines the contractor relationship, clarifies that they're not an employee, sets deliverables and payment terms, and assigns IP ownership (yes, again—redundancy in IP assignment is good).
Without it: The actual facts of your relationship determine classification, not what you call someone. But without a written agreement reinforcing contractor status, you're making misclassification easier to prove.
The classification test (applies in all 5 states):
How much control do you exercise over their work?
Are they performing your company's primary work?
Do they run an independent business serving multiple clients?
Who has the opportunity for profit or loss?
Can you terminate at-will, or only for breach of contract?
State-specific classification standards:
California ABC test (Dynamex/AB5): Presumes everyone is an employee unless you prove:
(A) Worker is free from control
(B) Work is outside your usual business
(C) Worker is customarily engaged in an independently established trade
Failing any one part = employee. Your contractor agreement won't change that, but it helps document the independence you're attempting to establish.
Colorado (C.R.S. § 8-4-101(5)): Uses a totality-of-circumstances test examining control and primary work factors. Penalties for willful misclassification: $5,000-$50,000 per violation.
New York: No single test, but various laws presume employment. The relationship must genuinely be independent.
Texas/Florida: Follow federal standards more closely, but control and economic reality still matter.
Critical elements your contractor agreement must include:
Specific deliverables (not vague ongoing work)
Payment structure that differs from employee payroll (invoice-based, project-based)
"Work for hire" language for IP ownership
Statement that contractor provides own equipment/tools
Proof of contractor's independent business (insurance, multiple clients, business name)
Clear end date or termination terms
Why it's #3: Before you hire your first contractor, you need an agreement that both documents the independent relationship AND assigns their work to your company.
Policy #4: Offer Letter Template
When you need it: Before your first employee accepts your job offer.
What it does: Welcomes the employee, specifies terms (salary, title, start date, benefits), maintains at-will employment status, and references other required agreements.
Without it: Verbal offers create ambiguity. Email offers create implied contracts. Poorly written offers undermine at-will status or violate pay transparency laws.
Critical elements:
Clear at-will employment language (either party can terminate anytime, for any lawful reason or no reason)
Precise compensation (salary for exempt, hourly wage for non-exempt, with overtime clarity)
Pay transparency compliance (required in CO, CA, NY)
Benefits eligibility and start dates
Contingencies (background check, I-9, signing required agreements)
Reference to IP assignment and confidentiality agreements
State-specific notices
State-specific requirements:
Colorado (C.R.S. § 8-5-201): Must disclose salary range, bonus/commission structure, and benefits description in offer letter.
New York: Must disclose pay range for employers with 4+ employees. Must provide notice of pay frequency, pay day, and overtime rate.
California: Pay scale disclosure required in job postings (15+ employees); best practice to include in offer letters.
New York (Labor Law § 201-g): Must provide sexual harassment policy at time of hire.
What NOT to include:
Promises about future compensation or promotion
Language suggesting guaranteed employment duration
"Annual salary" for non-exempt workers (creates overtime confusion)
Vague equity promises without specifics
Why it's #4: This is the first document that brings someone into your company as an employee (not contractor, not co-founder). It sets the legal tone for the entire employment relationship.
Policy #5: Anti-Harassment/Anti-Discrimination Policy
When you need it: Before your first employee's first day. Not when you're bigger. Not eventually. Day one.
What it does: Prohibits harassment and discrimination based on protected classes, establishes complaint procedures, outlines investigation process, and provides your legal defense in harassment claims.
Without it: You cannot claim you took "reasonable care to prevent harassment"—which is required for the affirmative defense in harassment lawsuits. You're also violating state-specific policy requirements in NY and CA.
Protected classes (federal minimum in all states): Race, color, religion, sex (including pregnancy, sexual orientation, gender identity), national origin, age (40+), disability, genetic information.
State-specific additions:
Colorado: Lawful off-duty activities (including legal marijuana use), marital status, sexual orientation, gender identity, gender expression.
California: Marital status, medical condition, military/veteran status, reproductive health decisions.
New York: Marital status, military status, domestic violence victim status, sexual orientation, gender identity, reproductive health decisions.
Required policy elements:
Definition of harassment and discrimination with specific examples
Multiple reporting channels (never just "report to your manager")
Investigation procedure with timeline
Anti-retaliation protection
Manager responsibilities
Training requirements (mandatory in NY and CA)
Disciplinary consequences
State-specific training mandates:
New York: Annual interactive sexual harassment training for ALL employees (not just managers). Must keep training records for 3 years.
California: 2 hours for supervisors every 2 years (5+ employees), 1 hour for non-supervisory employees every 2 years.
Texas/Florida: No state mandates, but federal best practice is annual training for all employees.
Why it's #5: Federal anti-discrimination law (Title VII) applies from employee #1 for companies with 15+ employees within the next year, and many state laws apply from employee #1. More importantly, your first employee deserves a harassment-free workplace, and you need the legal protection this policy provides.
Implementation Timeline: Getting All 5 in Place
Before you start building (today if you have co-founders):
Policy #1: IP Assignment Agreement signed by all co-founders
Policy #2: Confidentiality/NDA signed by all co-founders
Before you hire your first contractor:
Policy #1: IP Assignment Agreement (contractor version)
Policy #2: Confidentiality/NDA
Policy #3: Independent Contractor Agreement
Before you make your first employee offer:
Policy #4: Offer Letter Template (customized for your first hire)
Policy #5: Anti-Harassment/Anti-Discrimination Policy (written, ready to provide)
On employee's first day:
Policy #1: IP Assignment Agreement signed
Policy #2: Confidentiality/NDA signed
Policy #5: Anti-Harassment Policy provided, acknowledgment signed
Harassment training scheduled (required immediately in NY, within 6 months in CA)
The Bottom Line
These five policies aren't bureaucratic overhead. They're the legal infrastructure that protects everything you're building.
The cost of skipping them:
IP disputes: $500,000+ in litigation to determine who owns your core product
Contractor misclassification: $50,000 per violation in Colorado, plus back wages, penalties, and legal fees
Harassment lawsuit without written policy: $300,000+ to defend even when you win
Pay transparency violations: $10,000+ per violation in Colorado
At-will employment undermined by poorly written offer: Wrongful termination exposure
The cost of getting them right:
8-12 hours of focused work to draft all five policies
$2,000-$5,000 in legal review (optional but recommended)
Annual training costs (free resources available, or $500-$2,000 for professional training)
Every day without these policies in place is a day of uninsured risk. You wouldn't drive without car insurance. Don't build a company without these five foundational policies.
Start with #1 today. If you have co-founders who've already been working on the company, get IP assignments signed this week. Then work through #2-5 in order before you hire anyone.
Your future self, and your future legal team, will thank you.
This content is provided for informational purposes only and does not constitute legal advice; for guidance on your specific situation, please consult with an employment attorney licensed in your state.
