How to choose a lawyer for your startup

Choosing a lawyer when launching a startup is not just about “chemistry”. It affects execution speed, risk management and credibility with investors. Here is a proven method, practical criteria and market prices for choosing the right firm at the right time.

Why a startup specialist lawyer changes everything

A firm experienced in startup issues can anticipate sticking points in your articles (SAS recommended), shareholders’ agreement, intellectual property and GDPR compliance. It knows investor market practices (pre-emption, approval and liquidation-preference clauses), European requirements (GDPR, AI and data) and operational subtleties (SaaS contracts, open source and payment terms). Conversely, choosing a non-specialist exposes you to costly disputes and non-compliance (Code de commerce, GDPR) that can be difficult to remedy.

The 10 essential selection criteria

1) Registration, professional rules and insurance

Check bar registration and the professional rules applicable to lawyers (professional confidentiality and conflicts of interest). The public portal Justice.fr explains the principles and fee information. In litigation, jurisdiction must be addressed from the drafting of your contracts.

2) Company law: formation, articles and shareholders’ agreement

Ask for anonymised examples of SAS articles adapted for fundraising, agreements with investor clauses and governance. The highly flexible SAS is governed by the Code de commerce (Legifrance). For more on founders’ structural SAS choices, see our practical guide to drafting SAS articles suited to a startup.

3) Intellectual property: trademark, code and software patents

Before launch, require a prior-rights search and a filing plan with INPI. Secure the assignment of rights from founders to the company, the open-source policy and development contracts. For software innovation, check the IP strategy (copyright, potentially patentability in Europe depending on the case) and licence scope.

4) Personal data and GDPR

Your lawyer must understand the GDPR (Regulation 2016/679, EUR‑Lex) and guidelines from the CNIL (records of processing activities, legal basis, information, processor agreements and transfers outside the EU). For a product processing sensitive data or involving risky AI, anticipate compliance by design.

5) Commercial contracts, terms of sale/use and SaaS

Ask the firm for its standard templates (NDA, MSA, DPA, SaaS terms of sale and terms of use) and litigation experience (penalty clauses, limitation of liability and jurisdiction clauses). Sector experience (B2B SaaS, marketplace and e-commerce) is decisive in avoiding blind spots.

6) Fundraising and investor relations

On the term sheet, the data room and asset and liability warranties, the lawyer must speak the language of VCs. For regulatory aspects (crowdfunding and financial communications), resources from the AMF are a reference point. On method, see our audit-preparation good practices in the article on the startup legal audit checklist.

7) International and European law

If you target the EU, ensure the firm monitors applicable European legislation (GDPR, data, platforms and competition). Consolidated texts are available on EUR‑Lex. Anticipate data transfers, standard contractual clauses and overriding mandatory provisions applicable to consumers.

8) Pricing: fixed fees, subscriptions and transparency

Require fixed fees detailing deliverables, number of iterations, response SLA and overrun terms. Compare subscriptions for recurring support (board packs, reviews and minor litigation). To estimate your annual budget by phase, refer to our guide to the startup legal budget by stage.

9) Tools, AI and cybersecurity

“AI‑first” firms equipped with tools (electronic signatures, automation and contract management) speed up delivery. On security, check access policy, encryption and incident management against recommendations from ANSSI. For your own processes, practical guidance from Service‑Public Pro is useful.

10) Personal fit, availability and project management

Test responsiveness (SLA), clarity of explanation (clear memos and prioritised to-do lists) and the ability to challenge your choices. Ask who does the work (partner vs junior) and require a project manager with a defined timetable and communication channels.

A 4-week selection method: ready to use

1. Week 1 — Scoping: list your projects for the next 6 months (articles/shareholders’ agreement, terms of sale/use, IP, GDPR and fundraising) and your budget. Draw on our Legal Ops approach to organising the legal function from the outset.
2. Week 2 — Sourcing: shortlist 6–8 firms through recommendations, Justice.fr and the ecosystem (incubators, business angels and VCs). Check sector fit (SaaS, health and fintech) and European alignment.
3. Week 3 — Mini-RFP: send a brief (context, deliverables, deadlines and KPIs). Ask for an anonymised case study and a quote with verifiable deliverables. Include a fee cap clause and a minimum/maximum hourly rate.
4. Week 4 — Paid POC: a fixed-fee test assignment (e.g. SaaS terms of sale + NDA + GDPR memo). Assess quality, speed and clarity, and onboard through a document checklist.

Operational checklists

Due diligence to request from the firm

• References from startups clients (sector, funding round), with 2 verifiable contacts.
• Anonymised examples: investor-oriented SAS articles, shareholders’ agreement, SaaS terms of sale, DPA and IP policy.
• GDPR methodology memo aligned with CNIL + records of processing activities.
• Litigation experience: limitation clauses, interim payment orders and mediation, with resolution rates.
• Cybersecurity policy (access controls and backups) aligned with ANSSI.

Clauses and deliverables to require in the quote

• Dated deliverables, included review rounds, timetable and response SLA.
• Fixed fees per work package: formation (articles + shareholders’ agreement), commercial package (NDA, MSA, terms of sale/use), GDPR package (records, notices, DPA), fundraising package (term sheet, data room, GAP).
• Fee cap clause and transparency on disbursements.
• Conflict-of-interest management and enhanced confidentiality clause.

Common red flags

• No startup references or anonymised examples.
• Vague quote (deliverables not listed, no SLA).
• Poor knowledge of GDPR (text, CNIL guidelines) and IP (INPI).
• No tools (electronic signatures, version tracking) or project management.

What does it cost in 2026? Indicative figures

• SAS formation + articles: €800–€2,500 excluding VAT (excluding statutory fees).
• Shareholders’ agreement (seed): €1,500–€5,000 excluding VAT depending on complexity.
• Commercial package (NDA, MSA, SaaS terms of sale/use): €1,000–€3,000 excluding VAT.
• Initial GDPR package (records, notices, DPA + workshops): €2,000–€8,000 excluding VAT.
• Seed fundraising (term sheet, data room, GAP): €8,000–€25,000 excluding VAT.
• Monthly support subscription: €500–€2,500 excluding VAT (depending on volume/SLA).

To calibrate these budgets by milestone (MVP, seed, Series A), use our summary of how much to allow at each stage. Support from BpiFrance may complement your financing plan.

Key moments when a lawyer is essential

• Before registration: legal form, vesting, founders’ IP.
• Before the first customer: terms of sale/use, liability and data.
• Before fundraising: internal audit, data room and shareholders’ agreement/term sheet.
• International expansion: governing law, data transfers and distribution.

You can follow an audit checklist with our dedicated article on the startup legal audit and, if your product includes AI, anticipate regulatory impacts with our operational AI Act guide.

Quick FAQ

How can I verify that a lawyer is registered?

Consult official information and professional principles on Justice.fr, and ask the firm for its registration number and professional indemnity insurance.

Do I need a different lawyer for GDPR?

Not necessarily. Choose a firm that understands the GDPR and CNIL guides. For complex issues, a data specialist can be involved.

What are the legal priorities at the outset?

Articles + shareholders’ agreement, IP assignment, terms of sale/use, NDA and initial GDPR policies. Service‑Public Pro guidance covers the fundamentals.

How can intellectual property be secured?

File the trademark and arrange assignment of rights to the company. Refer to INPI for filings and prior-rights searches.

In summary, structure your choice around a mini-RFP, a paid POC and quality indicators (SLA, deliverables and clarity). This is the best way to combine speed, legal security and budget control.