You have just started trading — or you are a year in and still running on informal arrangements and a template you downloaded from somewhere. A lawyer tells you that you need terms of trade, a privacy policy, employment contracts, an NDA, a shareholders agreement, and registered trade marks. They are right. But the list runs to ten items and each one costs money and time. The real question is not whether to get these documents in place; it is which ones to deal with first, and what the cost of delay actually looks like for each.
The false comfort of the full list
The common advice — "get all your legal foundations right" — is accurate but unhelpful as a guide to action. It treats a shareholders agreement and a website privacy policy as equally urgent, which they are not. It also assumes every business faces the same risks in the same order, which ignores the single most useful thing you can do with a legal to-do list: rank it by the combination of likelihood and irreversibility.
A document you delay for six months is a recoverable problem if the harm it would have prevented is either unlikely or undoable. A document you delay for six months that governs how you charge customers, who owns your IP, or whether you can enforce a payment obligation — that delay is not recoverable in the same way. The framework that matters is not "do I have all ten documents?" but "do I have the documents that control my exposure in the situations I am actually in right now?"
The factors that move the priority order
How directly the document governs getting paid
The highest-priority documents are almost always the ones that sit between you and revenue. For a B2B service business, that is your terms of trade or service agreement — the instrument that defines the scope of work, the payment terms, when the obligation is complete, and what liability you carry if something goes wrong. Without it, you are relying on implied terms and the other party's memory of what was agreed.
The risk is not theoretical. If a client disputes an invoice or refuses to pay because scope was undefined, your ability to recover depends almost entirely on what the contract says — or doesn't say. For a business writing its first significant B2B contracts:
- Terms of trade or a master services agreement should be drafted first
- Payment terms, IP ownership, liability caps, and termination rights belong in that document
- A short schedule or statement of work can then attach project-specific details without re-negotiating the master terms each time
How reversible your structure and ownership decisions are
Decisions made at formation — who owns what, who has which decision-making rights, what happens when a co-founder leaves — are technically reversible but are practically very expensive to revisit once the business is operating and relationships are under pressure. A shareholders agreement made after a dispute arises is a difficult negotiation; one signed when everyone is aligned is a routine document.
If your business has more than one founder, director, or equity holder, a shareholders agreement belongs in the top tier regardless of what stage you are at. The same logic applies to a company constitution if your business is incorporated: the default replaceable rules in the Corporations Act 2001 (Cth) do not reflect most founders' intentions around share transfers, exit events, or deadlocks.
What the law already requires of you
Some documents are not a priority because the risk of not having them is high; they are a priority because operating without them puts you in breach of a legal obligation. Two frameworks catch most small businesses:
Australian Consumer Law (ACL): If you supply goods or services to consumers, the ACL governs what you can and cannot put in your standard form contracts. Since 9 November 2023, the unfair contract terms (UCT) regime covers any business with fewer than 100 employees or less than $10 million in annual turnover — expanded from the previous threshold of 20 employees. Proposing or relying on an unfair term in a standard form contract is now unlawful, with penalties up to $50 million for corporations. This means customer-facing terms drafted before November 2023 should be reviewed.
Privacy Act 1988 (Cth): If your website or app collects personal information — contact forms, analytics, email subscriptions, checkout — you need a compliant privacy policy and lawful data handling practices. The Act applies to most businesses once annual turnover reaches $3 million, and to any business that trades in personal information regardless of size. A privacy policy that has not been reviewed since before the Australian Privacy Principles were updated is not a defence if a complaint is made.
How exposed you are on your people arrangements
Employment and contractor arrangements create compliance obligations from the first person you bring on. The Fair Work Act 2009 (Cth) governs minimum entitlements, the National Minimum Wage Order, and the rules around termination. Misclassifying a worker as a contractor when the substance of the arrangement is an employment relationship can result in liability for unpaid superannuation, leave entitlements, and penalties.
Priority documents here are:
- An employment contract for each permanent staff member (full or part-time), which should cover role, pay, hours, confidentiality, IP ownership, and termination
- A properly structured contractor agreement that sets out deliverables, payment, IP ownership on completion, and the basis on which the arrangement can be ended
- Policies covering leave, workplace conduct, and WHS obligations — these do not need to be elaborate, but they need to exist
How much you depend on leased premises
If you operate from a retail space or a physical location your business cannot easily vacate, the lease is likely the single largest fixed financial commitment the business has made. Every Australian state and territory has legislation that governs retail leases, including pre-lease disclosure requirements, minimum terms, and tenant protections. The relevant Acts are:
- New South Wales: Retail Leases Act 1994 (NSW)
- Victoria: Retail Leases Act 2003 (Vic)
- Queensland: Retail Shop Leases Act 1994 (Qld)
- Western Australia: Commercial Tenancy (Retail Shops) Agreements Act 1985 (WA)
Each Act requires landlords to provide a disclosure statement before a lease is entered into and imposes restrictions on certain lease terms. The practical point is that you cannot assume the landlord's standard lease form is compliant with the applicable Act, and you cannot assume the commercial terms are standard — fit-out obligations, make-good clauses, rent review mechanisms, and assignment restrictions vary substantially between leases and can create significant liabilities that are not apparent on a first read.
Document priorities by business profile
Different business profiles call for different starting points. The table below shows where most businesses in each profile should focus first.
| Business profile | Tier 1 (do now) | Tier 2 (do within 6 months) |
|---|---|---|
| Solo B2B service provider | Terms of trade, privacy policy | Employment contract (first hire), trade mark |
| Co-founded startup, no premises | Shareholders agreement, terms of trade, privacy policy | IP assignment clauses, website T&Cs |
| Retail or hospitality with premises | Lease review, ACL-compliant customer terms | Employment contracts, privacy policy, trade mark |
| Product business, online sales | Website T&Cs, ACL-compliant refund policy, privacy policy | Supplier agreement, trade mark |
| Business bringing on first contractor | Contractor agreement | Employment contract (if hiring follows) |
The tier-1 items are not the most important in the abstract — they are the most important for that profile because they govern the exposure the business faces right now. Tier-2 items matter, but the harm from delay is lower or slower to materialise.
Where an Artificer Legal practitioner adds the most value
The documents in tier-1 are exactly where template solutions are most dangerous. A generic terms of trade does not reflect your pricing model, your delivery obligations, or your liability exposure. A standard NDA may not assign IP created under it or address the specific confidential information your business needs to protect. And documents drafted before the November 2023 UCT reforms may contain terms that are now unlawful to rely on.
An Artificer Legal practitioner can work through the full priority stack with you: identifying which tier-1 documents you are missing or which existing ones need review, drafting the instruments to fit how your business actually operates, and flagging the structural issues — IP ownership, contractor classification, lease obligations — that are expensive to correct later. For businesses in a growth phase, that kind of working review of the full document set is more useful than commissioning each document piecemeal.
Document the deals you are already doing
The instinct to delay legal documents until the business "grows into" needing them gets the risk direction backwards. The documents you need most urgently are the ones that govern the transactions you are already doing, not the ones you expect to need in the future. If you are already taking on clients, collecting data, paying contractors, or occupying a leased space, the relevant documents are already overdue — because the risk they manage is already present.
The exception to "do it now" is the genuinely optional document: a shareholders agreement when you are a sole director, or a franchise agreement when you are not in a franchise. Everything else on the standard list corresponds to a real activity, a real law, or a real counterparty relationship that already exists. The question for each is not "do I need this?" but "how much has the delay already cost me, and can I afford to let it run longer?"
The core principles are these: prioritise documents that sit between you and payment; lock in ownership and structure before relationships are tested; treat statutory obligations — the ACL unfair contract terms rules, Privacy Act disclosure requirements, and Fair Work minimum entitlements — as a baseline rather than a tier-2 consideration; and review any lease document with the applicable state Act in hand before you sign. Building the stack in that order means the most consequential exposures get closed first, and the less urgent documents follow in an order that makes commercial sense.