• Certificate of incorporation and bylaws
• Action by incorporator
• Action by written consent of the board of directors in lieu of first meeting
• Form SS-4 Application for Employer Identification Number (and state tax application for state where the business is located)
• Qualification to do business as a foreign corporation in the state where the business is located (required since incorporated in Delaware)
• Corporate records and minute book

‍• Restricted stock purchase agreements for up to four founders
• Stock certificates and receipts for up to four founders
• Action by written consent of the board of directors authorizing initial stock issuances to founders
• State securities filings for stock issuances to founders
• Equity incentive plan
• Form of stock option agreement for issuances under the equity incentive plan (form only)
• Action by written consent of the board of directors to approve the equity incentive plan and the form of stock option agreement
• Action by written consent of the stockholders to approve the equity incentive plan
• Stock option grants to founders (if applicable)
• Action by written consent of the board of directors approving option grants to founders (if applicable)
• State securities filings for stock option grants to founders (if applicable)
• Form U-2 Uniform Consent to Service of Process (in connection with securities filings)

• Form of offer letter for employees (form only)
• Form of at-will employment, confidential information, invention assignment, and arbitration agreement (form only)
• Form of consulting agreement (form only)

‍• Form of indemnification agreement for directors and officers (form only)
• Action by written consent of the board of directors to approve form of indemnification agreement
• Action by written consent of the stockholders to approve form of indemnification agreement

• Identify ideas to patent and/or ideas to keep as a trade secret

• Perform a targeted prior art search
• Prepare a patent application (claims, figure(s), and detailed description)‍

‍‍

‍‍

‍‍

• Who owns patents that come out of the research?
• Can the company get rights?

• What are typical terms?
• What is the difference between an Option and a License?

• Can a faculty member be a founder of a company?
• How can the relationship work for both parties?

Once a start-up or early stage company has a website and begins collecting website visitor information, it’s time to have a privacy policy that reflects the company’s data collection, use and sharing practices. We help clients draft readable privacy policies designed to comply with applicable law. This helps reduce risk of misrepresentation, other consumer protection claims, and regulatory marketing and advertising claims. Website-based services and applications will benefit from terms of use that limit company liability and provide necessary data rights in support of business needs. Similarly, to be able to distribute apps on widely used platforms, a terms of use and privacy policy are typically required. We have deep experience developing low-friction terms that help clients onboard new customers, users, and patients quickly, while managing their legal risks.

As a value-add component, we provide a holistic framework for our digital health clients to help them analyze and prioritize the top issues that we see across our digital health client base. Including for example:
• Data Strategies
• Regulatory Strategies
• Reimbursement Strategies
• IP Strategies
• Expected Customer Contracting
• Employee Agreements
• Fundraising Goals

Depending on the nature of the product or service, types of customers, and location of business operations, different laws and regulations will apply. We help clients navigate the complex and often overlapping laws and regulations, such as HIPAA, the Common Rule, SAMHSA, ERISA, GLBA, CCPA, GDPR, and other requirements. We help clients establish and implement risk-based regulatory compliance and data governance programs. As needed, we also help clients engage with regulators such as HHS, CMS, FDA, FTC, DEA, and similar state and international regulators.

Common digital health offerings for startup and early-stage companies include:
• Privacy policy for website and app (if any)
• Terms of use for website and app (if any)
• Data security foundation (written information security policy, incident response plan, acceptable use policy)
• Enhanced security documentation (BYOD policy, business continuity and disaster recovery plan)
• Assistance with vendor due diligence and contract negotiations
• Review of master sourcing and supply agreements
• Assessment of the regulatory classification of product (if any)
• Review of advertising and marketing (if any)