The Startup Legal Checklist: What Kenyan Tech Founders Must Do First

This startup legal checklist sets out what Kenyan tech founders must address before product and growth. The legal decisions made in the first six months, including incorporation, IP ownership, founder agreements and employment contracts, have consequences that are difficult and expensive to undo later, and several common assumptions founders carry into the process do not match what Kenyan law actually requires.

1. The Startup Legal Checklist Starts With Incorporating Properly

Incorporate a private limited company under the Companies Act, 2015 through the Business Registration Service. Avoid starting as a sole proprietorship or informal partnership if you intend to raise investment, since converting later requires transferring assets and contracts. Tailor the articles of association from the start to address founder vesting, anti-dilution provisions and consent rights for major decisions, rather than relying on generic default articles that were not written for an investment-ready startup’s governance needs.

2. Get IP Ownership Right

All intellectual property the business depends on must sit with the company. Founders who developed code or other IP before incorporation should formally assign it to the company once incorporated, since work created before the company existed does not transfer automatically.

For work created after incorporation, section 31 of the Copyright Act provides that copyright vests initially in the author, but where a work is commissioned by a person who is not the author’s employer, or is made in the course of employment under a contract of service, the copyright is deemed transferred to the commissioner or employer, subject to any agreement between the parties excluding or limiting the transfer. That default is not a reason to skip a written IP assignment clause. An explicit clause in every employment contract and contractor agreement removes arguments about whether an engagement qualifies as a commission, and investors conducting due diligence will expect a documented chain of title.

3. Sign a Co-Founder Agreement

Before incorporating, or immediately after, all founders should agree the equity split, the vesting schedule, what happens if a founder leaves before vesting is complete, each founder’s role, and how major decisions are made. A founder dispute is one of the more common reasons early-stage companies fail, and unvested equity or unclear authority is far harder to resolve once outside investors are involved.

4. Register Your Trademark

Register your trademark at the Kenya Industrial Property Institute before you launch publicly. Under section 23 of the Trade Marks Act, registration is for ten years and may be renewed. Filing before launch protects the brand name and identity you have invested in, and filing after a competitor has registered a confusingly similar mark can force a costly rebrand just as the brand gains recognition.

5. Understand Data Protection Obligations From Day One

Any app or platform collecting personal data from users in Kenya is subject to the Data Protection Act, 2019 from the moment it begins processing, regardless of company size. Registration is a separate question. Section 18 of the Act provides that no person shall act as a data controller or processor unless registered with the Data Commissioner, but leaves it to the Data Commissioner to prescribe the thresholds for mandatory registration, having regard to the nature of the industry, the volume of data processed and whether sensitive personal data is involved.

Under the Data Protection (Registration of Data Controllers and Data Processors) Regulations, 2021, a controller or processor is exempt from mandatory registration if it has an annual turnover or revenue below KES 5,000,000 and fewer than ten employees. The exemption does not apply to a controller or processor whose turnover is below KES 5,000,000 but which processes personal data for the purposes specified in the Third Schedule. Even an exempt startup must still comply with Parts IV and VI of the Act, so build lawful-basis, consent, privacy-policy and data-minimisation practices into the product from the outset.

6. Get Employment Contracts Right

Under section 9 of the Employment Act, 2007, a contract of service for three months or more, or for work that could not reasonably be expected to be completed within three months, must be in writing. IP assignment and confidentiality clauses are essential for all early employees. A non-compete clause is worth including for employees with genuine access to sensitive commercial information, but the Employment Act contains no provision dealing with non-compete clauses, so their enforceability is governed by the common law doctrine of restraint of trade. A broad, indefinite restriction is unlikely to be enforced as written, so scope any clause narrowly to the legitimate business interest it protects.

7. Keep a Clean Cap Table and Shareholders’ Agreement

Maintain the capitalisation table accurately and update it whenever shares are issued, options are granted or a convertible instrument converts, rather than reconstructing it from old emails when an investor asks. A shareholders’ agreement, separate from the articles, should address pre-emption rights on new issues, tag-along and drag-along rights on a sale, board composition and reserved matters, and what happens to a departing shareholder’s stake. Founders who delay these documents until a funding round is under way end up negotiating under time pressure with the investor’s term sheet setting the agenda.

Frequently asked questions

This article is general information on Kenyan law as at its publication date, not legal advice. Reading it does not create an advocate and client relationship.