This startup legal checklist sets out what Kenyan tech founders must address before product and growth. The legal decisions made in the first six months, including incorporation, IP ownership, founder agreements, and employment contracts, have consequences that are difficult and expensive to undo later, and several of the most common assumptions founders carry into this process do not actually match what Kenyan law requires.
1. The Startup Legal Checklist Starts with Incorporating Properly
Incorporate a private limited company at the Business Registration Service. Avoid starting as a sole proprietorship or informal partnership if you intend to raise investment, since converting a sole proprietorship into a company later requires its own transfer of assets and contracts, an avoidable complication if the company structure is set up correctly from the outset. The articles of association should be tailored from the start to address founder vesting, anti-dilution provisions, and consent rights for major decisions, rather than relying on the generic default articles a quick online incorporation service provides, since those defaults are not written with an investment-ready startup’s governance needs in mind.
2. Get IP Ownership Right, Including Where the Law Already Helps You
All intellectual property the business depends on needs to sit cleanly with the company, and founders who developed code or other IP before incorporation should formally assign it to the company once incorporated, since pre-incorporation work does not automatically transfer to a company that did not yet exist when the work was created. For IP created after incorporation, it is worth knowing that Kenyan copyright law already does some of this work by default: Section 31 of the Copyright Act vests copyright in commissioned work and employee-created work in the commissioning party or employer automatically, subject to any contrary agreement, so a contractor engaged to build a feature does not, contrary to common assumption, walk away owning that code by default. That statutory default is not a reason to skip a written IP assignment clause, however; an explicit clause in every employment contract and contractor agreement remains essential because it removes any argument about whether a particular engagement qualifies as a “commission” under the Act, and because investors and acquirers conducting due diligence will expect to see a clean, documented chain of title rather than be asked to rely on a statutory default they may not be familiar with.
3. Sign a Co-Founder Agreement
Before incorporating, or immediately after, all founders should address the equity split, the vesting schedule, what happens if a founder leaves before vesting is complete, each founder’s role and responsibilities, and the decision-making process for major decisions. A founder dispute is one of the more common reasons an early-stage Kenyan startup fails outright, and a dispute over unvested equity or unclear authority is considerably harder to resolve once the company has outside investors with their own views on the outcome; addressing these questions in writing before the relationship is under strain is far cheaper than negotiating them during a falling-out.
4. Register Your Trademark
Register your trademark at the Kenya Industrial Property Institute (KIPI) before you launch publicly. A trademark application filed before launch protects the brand name and identity the company has invested in building, and filing after a competitor or opportunist has already registered a confusingly similar mark can force a costly rebrand at exactly the point the brand has started gaining market recognition, the worst possible time for that disruption.
5. Understand Data Protection Obligations From Day One, Including the Registration Threshold
Any app or platform collecting personal data from Kenyan users is subject to the Data Protection Act, 2019 from the moment it begins processing that data, regardless of company size. What is not universal, however, is the formal registration obligation: Section 18 of the Act makes registration with the Office of the Data Protection Commissioner (ODPC) mandatory only once the Data Commissioner’s prescribed thresholds are met, based on factors including the nature of the industry, the volume of data processed, and whether sensitive personal data is involved. A very early-stage startup with a small user base may not yet meet the registration threshold, but this does not exempt it from the Act’s substantive obligations, lawful basis for processing, a published privacy policy, functioning consent mechanisms, and data minimisation built into the product design, all of which apply from day one regardless of registration status. The practical approach is to build full DPA compliance into the product from the outset and treat the registration question as a separate, threshold-dependent step to confirm with the ODPC directly as the user base grows, rather than assuming either that registration is required immediately or that it can be ignored indefinitely.
6. Get Employment Contracts Right
Every person who works for the company should have a written contract complying with the Employment Act, 2007. IP assignment and confidentiality clauses are essential for all early employees, for the reasons set out above. A non-compete clause is worth including for employees with genuine access to sensitive commercial information, but founders should understand that the Employment Act itself does not regulate non-compete clauses at all; their enforceability is governed by the common law doctrine of restraint of trade, which requires the restriction to be reasonable in duration, geographic scope, and the legitimate business interest it protects. A non-compete drafted as a broad, indefinite restriction on an employee’s ability to work anywhere in the sector is likely to be struck down as an unreasonable restraint rather than enforced as written, so the clause needs to be scoped narrowly and specifically to what the business can actually justify protecting, rather than copied wholesale from a template with no connection to the role in question.
7. Keep a Clean Cap Table and Shareholders’ Agreement
A startup’s capitalisation table, the record of who owns what percentage of the company and under what instruments, should be maintained accurately and updated immediately whenever shares are issued, options are granted, or a convertible instrument converts, rather than reconstructed from memory and old email threads when an investor asks for it during a funding round. A shareholders’ agreement, separate from the articles of association, should address pre-emption rights on new share issues, tag-along and drag-along rights on a sale of the company, board composition and reserved matters requiring shareholder consent, and what happens to a departing shareholder’s stake. Founders who delay formalising these documents until a funding round is already in motion typically end up negotiating them under time pressure and with an investor’s term sheet effectively setting the agenda, a considerably weaker position than having the company’s own governance framework already in place before that negotiation begins.
Clay & Associates Advocates advises Kenyan tech founders on incorporation, IP assignment and ownership, co-founder agreements, trademark registration, data protection compliance including registration threshold assessments, employment contracts with enforceable restrictive covenants, and cap table and shareholders’ agreement structuring. If you are setting up a startup and want this checklist actually implemented rather than left as a list of good intentions, we can help you work through it in the order that matters most for your specific stage.
Setting up a tech startup in Kenya? Contact Clay & Associates Advocates for a founder legal essentials session. Book a Consultation
Related reading: IP Protection for Software Companies | Data Protection for Media and Technology Companies
For tailored legal advice on this matter, speak with our technology and startups legal services team at Clay & Associates Advocates. We advise businesses and individuals across Kenya on Technology and Startups matters from our offices at Nextgen Mall, Nairobi.
