Martin Hren on The Legal Cornerstones Every Startup Must Get Right

Starting a business feels incredible. There’s nothing quite like watching your idea come to life, imagining the possibilities, and feeling that rush of excitement about what you’re building. While you’re obsessing over your product, chasing customers, and dreaming about funding rounds, there’s something absolutely critical you need to get right from day one, your legal foundation.

Think of your legal structure as the foundation of a house. You wouldn’t build your dream home on shaky ground, right? The same goes for your startup. Getting the legal basics right protects everything you own personally, makes your company attractive to serious investors, keeps your innovations safe from copycats, and ensures you don’t accidentally break rules that could hurt you later.

Choosing the right business structure and jurisdiction

The first and most consequential legal decision you’ll make is choosing your business structure and where you will incorporate. This choice affects taxation, liability, and your ability to raise capital.

In Croatia, most startups choose to incorporate as a društvo s ograničenom odgovornošću (d.o.o.), the local equivalent of a limited liability company (LLC). This structure offers limited personal liability, straightforward governance, and operational flexibility, making it ideal for small and growing teams. Croatian law also provides a simplified variant known as the simple d.o.o. (j.d.o.o.), designed to lower the barrier to entry for new entrepreneurs. A standard d.o.o. requires a minimum share capital of EUR 2,500, while a j.d.o.o. can be established with as little as EUR 1. The j.d.o.o. structure comes with several key restrictions; it may have only one director and up to five shareholders, and it is legally required to allocate 25% of its annual profit to company reserves. These retained earnings can be used solely to increase share capital or offset losses. Once the company’s share capital reaches EUR 2,500 or more, it automatically transitions into a regular d.o.o., and the statutory limitations no longer apply.

However, for ambitious startups planning to raise international venture capital, many founders eventually establish a dual structure with a Croatian regular or simple doo, operating company, and a foreign holding company (often a Delaware C-Corporation or a UK Ltd) that raises investment and holds intellectual property. This structure is increasingly common among successful Croatian startups. It provides access to international investors familiar with Anglo-American legal systems while maintaining Croatia’s competitive advantages and operational base.

Founders agreement

In startups with multiple founders, disagreements between co-founders are one of the top reasons startups fail. Founders’ agreement isn’t about distrust. It’s about respect and protection for everyone involved, including the business you’re building together. Think of it like a prenup for your startup. Nobody plans for things to go wrong, but smart people still protect themselves.

It should clearly outline equity ownership, detailing each founder’s stake and contribution, establish a vesting schedule to ensure long-term commitment, define decision-making rights and governance structure to prevent deadlock, and include exit provisions, typically through good and bad leaver clauses, to manage ownership transitions fairly if a founder departs.

In Croatia, founders’ agreement is governed by the Croatian Obligations Act. If you’re incorporated as a d.o.o., your founding document (društveni ugovor) establishes basic rights and obligations, but a separate founders’ agreement addresses operational and relationship issues in detail.

Protecting your intellectual property

For most startups, especially in technology, intellectual property (IP) is the core asset. Yet many founders assume that what they create automatically belongs to the company. Wrong. Without proper documentation, that brilliant algorithm your co-founder coded might legally belong to them personally, not your startup. And if they walk away? They could take it with them.

To ensure protection all employees and contractors should sign IP assignment agreements transferring ownership of their work to the company. Every single person who creates anything for your company, founders, employees, contractors, even interns, must sign an agreement explicitly transferring “ownership” of their work to the company. Also, investors will demand these agreements during due diligence, and trying to chase down former team members years later to sign retroactive assignments is a nightmare. Do it from day one, for everyone.

Before you fall in love with a company name or logo, make sure you can really own it. Search existing trademarks through Croatia’s State Intellectual Property Office (DZIV) to avoid conflicts. Then register your marks. For Croatian startups with EU ambitions, register directly with the European Union Intellectual Property Office (EUIPO), one application gives you protection across all 27 EU member states. It’s faster, cheaper than filing in multiple countries individually, and strategically smart if you’re planning to expand into Germany, Italy, France, or anywhere in the single market.

If you’ve developed genuinely novel technology, consider patent protection. File with DZIV for Croatian protection or the European Patent Office (EPO) for broader coverage. Yes, patents are expensive and time-consuming, but they create defensible competitive advantages and significantly boost company valuation for investors and acquirers.

Employment law

Hiring your first employee is exciting, it means your startup is growing. But the moment you bring someone on board in Croatia, you’re stepping into one of the most regulated areas of business law. And unlike some areas where you might get away with learning as you go, employment law mistakes can cost you dearly in fines, back payments, and damaged reputation.

Written employment agreements are mandatory. In Croatia, verbal agreements or casual arrangements don’t cut it. You need a formal employment agreement in writing that specifies the job role, salary, working hours, location, and other key terms.

You can’t just fire people. This is the big cultural shift for founders familiar with US or UK employment norms. In Croatia, you need justified reasons to terminate an employee. You can’t simply decide it’s “not working out” and let someone go tomorrow. Notice periods are legally mandated based on how long someone has worked for you. During probation periods (typically up to six months for most roles), termination is easier but still requires proper procedure.

Here’s where many startups get into trouble: they think they can avoid employment law by classifying everyone as contractors. Croatian labour authorities aren’t stupid, and they look at the substance of relationships, not just what you call them. If your “contractor” works exclusively for you, follows your schedule, uses your equipment, takes direction from you like an employee would, and doesn’t have other clients, guess what? Croatian authorities may reclassify them as employees. When that happens, you’re liable for back-payment of all social contributions, taxes, and employee benefits they should have received, plus penalties.

Contracts and commercial agreements

In the early days of a startup, everything moves fast. You’re meeting potential customers over coffee, striking deals with suppliers via WhatsApp, and partnering with other founders on verbal agreements sealed with enthusiasm and good intentions. This is one of the most dangerous mindsets in early-stage startups.

Here’s what really happens; six months later, your “partner” remembers the revenue split as 60-40 while you remember 50-50. Your customer claims the deliverable includes features you never discussed. Your vendor insists they own the IP they created for you. And suddenly, instead of building your business, you’re in bitter disputes with no documentation to prove who’s right.

Even when verbal contracts are technically enforceable, good luck proving what was agreed upon when it’s your word against theirs. Every significant business relationship needs to be formalized in writing, from the start.

Whether you’re selling software, services, or products, define the relationship clearly. For B2B relationships, use proper contracts signed by both parties. For B2C or SaaS products, well-drafted Terms of Service posted on your website and accepted by users provide legal protection.

When you’re paying someone to deliver something, whether it’s manufacturing, development work, marketing services, or anything else, get it in writing. Specify exactly what they’re delivering, when, and to what standard. Define payment terms, milestones, schedules, and conditions. Include termination provisions specifying how either party can exit the relationship and what happens to work in progress or payments already made.

You’ll share sensitive information constantly, with potential partners evaluating collaborations, contractors working on your product, advisors giving strategic input, even potential investors during due diligence. NDAs protect this confidential information from being shared or used without permission.

Regulatory compliance and data privacy

If your startup collects any personal data, you need to understand GDPR. The General Data Protection Regulation (GDPR) isn’t some distant Brussels bureaucracy you can ignore. It’s EU law that applies to every business processing personal data of EU residents, regardless of where your company is incorporated. And as a Croatian startup, you’re operating in the EU single market, which means GDPR compliance isn’t optional, it’s the baseline legal requirement for doing business.

You need to tell users what personal data you’re collecting, why you’re collecting it, how long you’ll keep it, who you’ll share it with, and what rights they have. This isn’t fine print buried in your terms, it must be clear, accessible, and written in plain language. You’re responsible for protecting personal data with appropriate technical and organizational measures, encryption, access controls, secure servers. If you suffer a data breach that risks people’s rights and freedoms, you must report it to Croatia’s data protection authority (AZOP) within 72 hours.

If you use any services that process personal data on your behalf, cloud hosting, email marketing platforms, analytics tools, payment processors, you need formal Data Processing Agreements (DPAs) with them. These contracts define how they handle data, their security obligations, and what happens if they screw up.

And if your startup handles sensitive data, such as health information, financial records, biometric data, or children’s information, expect stricter scrutiny and higher standards.

If you’re building anything involving artificial intelligence (AI) or machine learning, what tech startup isn’t, there’s a new layer of regulation you need to understand; the EU AI Act. This means building compliance into your product from the design phase. Implement testing for bias and accuracy. The AI Act’s enforcement will ramp up over the next few years, and early compliance gives you a competitive advantage when selling to enterprise customers or raising funds from European investors who understand the regulatory landscape.

Beyond GDPR and AI rules, your industry might have additional compliance requirements, for example, Healthcare and MedTech startups must navigate medical device regulations (MDR), clinical trial requirements, and potentially pharmacy and drug regulations if you’re in digital therapeutics. GDPR’s requirements for health data are stricter than general personal data. Fintech and Payment Services face oversight from the Croatian National Bank (HNB) and must comply with PSD2 (Payment Services Directive), anti-money laundering (AML) regulations, and know-your-customer (KYC) requirements. If you’re handling payments or financial services, you likely need specific licenses. Food and Beverage businesses must comply with EU food safety regulations, Croatian food safety authorities, labelling requirements, and potentially alcohol licensing if applicable. Marketplaces and E-commerce must follow EU consumer protection directives, the Digital Services Act, distance selling regulations, and clear return/refund policies.

Taxation

If your startup has both a Croatian and a foreign entity, document all intercompany transactions for transfer pricing compliance. Transfer pricing rules govern how you price transactions between related entities, for example your US parent company and Croatian subsidiary. When your Croatian entity provides development services to your US entity, or when the US company licenses IP to the Croatian subsidiary, tax authorities in both countries want to ensure you’re pricing these transactions at “arm’s length”, meaning at fair market rates, not artificially shifting profits to lower-tax jurisdictions.

Here’s an even more dangerous trap that catches Croatian founders with international structures completely off guard, tax residency determination. Just because your company is incorporated in Delaware doesn’t automatically mean it’s only taxable in the US. Where your company is managed and controlled matters enormously and getting this wrong can result in double taxation nightmares.

You incorporate a Delaware C-Corp because that’s what investors expect, but you’re the CEO, you live in Zagreb, you work from your apartment or a Croatian coworking space, and you make all the strategic decisions from Croatia. Guess what? Croatian tax authorities may argue your Delaware company is really a tax-resident in Croatia because that’s where the “effective management and control” happens. Under international tax principles and many double taxation treaties, a company can be considered tax-resident where its central management and control actually occur, regardless of where it’s legally incorporated.

Final thoughts

Building a startup in Croatia today offers more opportunities than ever before. EU market access, competitive operating costs, world-class technical talent, and growing investor interest make Croatia a serious player in the European tech scene.

However, ambition and drive must rest on solid legal foundations. From incorporation and IP protection to GDPR compliance and fundraising, the legal cornerstones of your business determine how far and how fast you can grow. Treat legal not as a burden, but as an enabler. It protects your relationships, reassures investors, and helps you scale across borders confidently. With the right structure, clear agreements, and local compliance, your Croatian startup can compete globally while staying rooted in a supportive and fast-evolving ecosystem.

Martin Hren, attorney at Law @ Hren—Tomašković Law Firm | Nlaw Croatia, startup mentor at BIRD Incubator

More Like This: