A sample Legal & Compliance Health Check
Every Murjis mandate begins with one. You send your file through the portal; Rachel, our AI assistant, reads and files it; your fractional executive reviews the file and delivers a risk-ranked report, a plan for the year, and the positions your company will take on recurring terms. This is the summary page a client sees in the portal, for a fictional company. The full report runs to eight to twelve pages.
Northwind Technologies Inc.
The company is well organized for its stage; the two gaps that matter are the ones a customer's procurement team and a Series A investor will each find in their first week.
Report: 12 pages, PDF
Clean articles, signed by-laws, a resolution for every issuance, the SAFEs on the cap table.
Two post-money SAFEs on standard terms, properly authorized and recorded.
Three of five engineers are contractors with no assignment of what they wrote.
Eleven customers on four versions of the terms; no data processing addendum on any.
Contractor engineers wrote core product without assigning it; every diligence checklist asks for the chain of title.
A master agreement with a data processing addendum, order form and SLA replaces four generations of terms.
Customers are asking for a privacy program, subprocessor list and breach protocol; none is written down.
Sound means in good order for a company of your size. Needs work means the foundations exist but specific items must be fixed. Gap means something the business should have is missing. Not assessed means the area sits outside the seat engaged and is handed to the right seat.
Confirmatory assignments and waivers of moral rights from the three contractor engineers, present and past; one has left and needs a separate approach.
FIX: DAY 1The product ships with dependencies under licences that carry obligations; an inventory and a policy before the next customer security review.
MONTH 1The name is unregistered in Canada and the United States; a search and filings before the marketing push.
MONTH 2Contractor IP assignments · founder IP confirmed · the one customer contract with unlimited liability amended
Master agreement, DPA, order form and SLA drafted from the playbook · migration plan for eleven customers
Privacy policy and notices · subprocessor list · breach protocol · Law 25 designation
Option plan adopted · data room built · employment agreements re-papered with enforceable terms
The schedule is a plan only; priorities in the business and emerging risk may change the order and the timing.
It wins regulated customers and costs a second environment; declining keeps the stack simple and narrows the market.
Credits as the exclusive remedy protect the company; some enterprise buyers will not sign them.
The first counsel day secures the chain of title to the code and amends the one customer contract that exposes the company without limit.
Next Legal & Compliance Health Check due twelve months after publication; you and your executive are reminded a week before.
Northwind Technologies Inc. is fictional. The findings are typical of a seed-stage software company and are illustrative only; they are not advice about any company.