Growth doesn't create legal problems. It detonates the ones already there.

Every issue that surfaces during a funding round, an acquisition, or an international expansion was present from the beginning. The company just wasn't moving fast enough for it to matter. The moment it starts to, dormant problems become acute ones… and the timing is always wrong.

Here's where they detonate, and when.

Day one: your website tells investors more than you think

Before a serious investor reads your deck, they look at your website. Not for the product. For signals about how you operate.

A missing privacy policy, an outdated cookie banner, terms and conditions that haven't been touched since launch - these aren't just compliance gaps. They're tells. They signal a founding team that moves fast and cleans up later. For some investors, that's fine. For enterprise buyers running procurement due diligence, it isn't.

Under GDPR and PECR, a privacy policy isn't optional. The ICO has issued fines, not to the largest companies with the worst practices, but to the ones who looked like they weren't paying attention. More practically, a data protection gap discovered mid-deal can delay or kill a close.

Get the basics right at the start before they become disproportionately expensive once a transaction is in flight.

Early traction: the moment your brand becomes worth stealing

Most founders don't think seriously about trademark protection until a competitor appears using something similar, or until a third party surfaces a prior claim on a name they've spent two years building equity into.

Innocent Drinks built one of the most recognisable consumer brands in the UK on a name that felt simple and ownable. What most people don't know is that the founders faced a protracted dispute over the Innocent trademark in multiple markets, spending years and significant legal resource defending a name they hadn't fully locked down before the brand had value.

The window to act is before traction, not after it. A trademark search costs a fraction of what litigation costs. If you're building something worth protecting, protect it before it's worth protecting, because once it is, the other side has an incentive to fight.

First hire or co-founder friction: when assumptions become disputes

Co-founder disputes don't start with a falling out. They start with an assumption: about equity, about roles, about what happens if one person wants to leave.

No one documents these things at the start because the relationship feels solid and the stakes feel low. Then the business gets traction and the stakes become real.

The most common version: one founder disengages. There's no vesting schedule. They own 40% of a company they're no longer building. The active founder can't raise without investors asking uncomfortable cap table questions. The inactive founder won't sign anything without compensation they haven't earned.

When these disputes land in front of a lawyer, there's often no paperwork at all. Just WhatsApp threads and competing recollections of what was agreed over coffee eighteen months ago. Trying to infer a contract from a message chain is exactly as ugly as it sounds.

The fix is a founders' agreement signed before the company has any value, when nobody has an incentive to be difficult. That window closes faster than most people expect.

First funding round: Understanding a term sheet

When the term sheet arrives, most founders feel like the deal is almost done. It isn't. The term sheet defines the entire structure of the investment: share class, anti-dilution provisions, information rights, consent thresholds, board composition.

Once you've agreed to it, reopening terms feels like bad faith and can collapse the deal entirely. We know getting a term sheet is exciting but, before you sign, it is critical that you understand what each of the headline terms mean.

Most of what's in a term sheet requires legal expertise to fully understand. "Participating preferred" sounds like a minor technical detail until you model what it means for your payout at exit. Consent rights over future hires or spending decisions can constrain you operationally for years.

The conversation is open before you sign. After, it isn't. Call a lawyer before the term sheet is signed, not once the main documents land.

Scaling internationally: the compliance assumption that breaks companies

Expanding into a new market feels like an extension of what you're already doing. Legally, it isn't. It's a second compliance stack running in parallel - different data protection regimes, different employment law, different tax treatment for the same revenue, different rules around what your product can and can't do.

The businesses that get into serious trouble internationally aren't usually the ones who break rules deliberately. They're the ones who assumed their existing compliance posture transferred. It doesn't. GDPR is not the same as CCPA. UK employment law is not the same as German employment law. What's standard practice in one market can be a liability in another.

Build compliance into the market entry plan before you have customers there. Once you do, you're already exposed.

The detonation point nobody talks about

Each of these problems shares the same characteristic: it was fixable at the start for almost nothing, and expensive later when the business couldn't afford the distraction.

The founders who scale without getting caught out aren't the ones who got lucky. They're the ones who treated legal foundations as infrastructure - built early, updated as the company grew, never left as something to sort out later.

Later always comes. The question is whether you're ready for it.