Description

This curriculum spans the policy design and governance work typically addressed in multi-phase internal capability programs for startups transitioning from Series A through international scaling, covering the same breadth of operational decisions seen in advisory engagements focused on organizational infrastructure.

Module 1: Foundational Policy Frameworks for Early-Stage Startups

Decide whether to adopt a formal employee handbook at pre-Series A or delay documentation to maintain agility, weighing legal exposure against operational overhead.
Implement a remote work eligibility policy that defines location-based hiring boundaries, tax implications, and time zone requirements for core collaboration hours.
Establish a communication protocol for equity discussions with early hires, specifying when and how to disclose cap table information and vesting schedules.
Choose between centralized decision logs or ad-hoc approvals for cross-functional initiatives, balancing speed with auditability.
Define a minimum data classification standard for customer and employee information, determining access tiers and encryption requirements.
Create a conflict-of-interest declaration process for founders and early executives involving board affiliations, side projects, and vendor relationships.

Module 2: Hiring, Onboarding, and Talent Governance

Implement a structured interview rubric across departments while allowing functional leads autonomy in scoring, ensuring consistency without stifling team culture.
Decide whether to standardize offer letter templates globally or allow regional legal counsel to customize terms, considering compliance and negotiation efficiency.
Design an onboarding checklist that mandates policy acknowledgment signatures, including IP assignment, NDA, and code of conduct agreements.
Establish a probation period review process with documented performance criteria and escalation paths for underperformance.
Integrate background check vendors across jurisdictions, reconciling data privacy laws (e.g., GDPR, CCPA) with due diligence requirements.
Define escalation protocols for hiring manager override of HR recommendations, documenting justification and audit trails.

Module 3: Equity, Compensation, and Incentive Structures

Set a refresh grant policy for mid-level employees post-Series B, determining eligibility windows and performance thresholds.
Implement a 409A valuation review cycle aligned with funding rounds, specifying how option strike prices are communicated to employees.
Decide whether to allow secondary market transactions for employee shares, including approval workflows and insider trading safeguards.
Create a commission structure for sales roles that adjusts for territory, product line, and deal size, with transparent payout calculations.
Standardize bonus eligibility across departments using objective metrics (e.g., OKR completion, revenue targets) versus discretionary allocation.
Establish a policy for handling unvested equity upon role change (e.g., promotion, demotion, or transfer) to prevent disputes.

Module 4: Data Security, Compliance, and Risk Management

Implement role-based access controls (RBAC) for SaaS platforms, defining review cycles for permissions upon role changes.
Choose between self-auditing and third-party SOC 2 assessments, factoring in cost, credibility, and customer procurement requirements.
Define incident response workflows for data breaches, specifying communication chains to legal, PR, and regulatory bodies.
Establish data retention policies for employee communications (e.g., Slack, email) in alignment with litigation hold procedures.
Enforce multi-factor authentication (MFA) across all corporate systems, with documented exceptions for legacy integrations and recovery protocols.
Implement a vendor risk assessment process for third-party tools, requiring security questionnaires and DPA execution before onboarding.

Module 5: Performance Management and Accountability Systems

Adopt a continuous feedback model or retain quarterly review cycles, determining how feedback is stored and referenced in promotion decisions.
Define promotion criteria for individual contributors versus managers, including required competencies and bandwidth thresholds.
Implement a forced calibration process for performance ratings across teams to prevent grade inflation, with escalation paths for disputes.
Establish a policy for managing underperformers, including performance improvement plans (PIPs) with measurable goals and timelines.
Decide whether to publish team-level OKRs company-wide or restrict visibility, balancing transparency with competitive sensitivity.
Create a process for documenting and archiving performance reviews, ensuring access controls and retention periods comply with labor laws.

Module 6: Scaling Culture and Conduct Policies

Define escalation paths for employee grievances involving managers, specifying whether HR or an independent ombudsperson leads investigations.
Implement a social media use policy that governs employee representation of the company online, including retaliation protections.
Create a structured offboarding interview process to capture feedback on culture, management, and policy pain points.
Establish guidelines for internal communications tone (e.g., Slack, email) to maintain professionalism while preserving startup informality.
Decide whether to allow anonymous reporting channels, weighing psychological safety against potential misuse and investigation feasibility.
Standardize manager training on inclusive meeting practices, including facilitation norms and bias mitigation techniques.

Module 7: International Expansion and Localized Policy Adaptation

Choose between a centralized global HR policy with local addenda or fully decentralized policies per jurisdiction, assessing enforcement consistency.
Implement payroll and benefits compliance in new markets by partnering with an EOR (Employer of Record) or establishing local entities.
Adapt working hour and leave policies to align with local labor codes (e.g., 13th-month salary, mandatory vacation).
Translate core policies (e.g., anti-harassment, code of conduct) into local languages with legal validation to ensure enforceability.
Establish a process for handling cross-border data transfers, including SCCs and employee consent mechanisms.
Create a framework for evaluating local trade union or works council requirements before entering regulated markets (e.g., Germany, France).

Module 8: Policy Iteration, Review, and Stakeholder Governance

Set a biannual policy review cadence with designated owners for each policy domain (e.g., HR, Security, Legal).
Implement a change management workflow for policy updates, requiring version control, stakeholder sign-off, and employee attestation.
Decide whether to form a cross-functional policy council with representatives from legal, HR, engineering, and operations.
Create a feedback loop from employee surveys and exit interviews to identify policy friction points and update priorities.
Define thresholds for policy exceptions (e.g., security, hiring) and the approval chain (e.g., C-suite, board committee).
Integrate policy compliance metrics into executive dashboards, tracking acknowledgment rates, audit findings, and incident trends.