Before a startup expands internationally, it should decide how it will operate in each new country (contractors, an employer of record, a branch or a local subsidiary), confirm what local tax, employment and data protection laws will apply, and register its key intellectual property in the markets that matter. It should also check U.S. export control and sanctions rules and make sure its contracts address governing law and dispute resolution. Doing this work up front is much cheaper than unwinding a structure that was set up informally.
Many startups go global gradually: a first overseas customer, then a remote engineer abroad, then a sales team. Each step can create legal obligations, sometimes before the company realizes it has “expanded.” Below are the main issues to address.
1. Choose an Operating Structure
The structure a company uses abroad drives its tax exposure, employment obligations and liability. Common options include:
- Selling cross-border without a local presence. Often the simplest starting point, but local consumer, tax and data rules may still apply.
- Independent contractors. Flexible, but many countries apply worker classification tests that can treat long-term, integrated contractors as employees.
- Employer of record (EOR). A third-party provider employs workers locally on the startup’s behalf. This can be a practical bridge, though it does not remove every risk, such as permanent establishment or IP ownership questions.
- Branch. A registered extension of the U.S. company. The parent is generally directly exposed to local liabilities.
- Local subsidiary. A separate entity that can hire, contract and hold local licenses. It requires more administration but offers clearer separation.
Whatever the structure, intercompany agreements (services, distribution or IP license agreements between the parent and its foreign affiliates) should be documented and priced on arm’s-length terms for transfer pricing purposes.
2. Understand the Tax Footprint
Activities abroad can create a taxable presence, often called a permanent establishment, depending on local law and any applicable tax treaty. Having employees or dependent agents who regularly conclude contracts in a country is a frequent trigger. Startups should also consider value-added tax or goods and services tax on digital services and goods sold to local customers, withholding taxes on cross-border payments, and U.S. rules that apply to foreign subsidiaries of U.S. companies. Coordinate with a tax advisor familiar with both the U.S. and the target country before hiring or signing local deals.
3. Comply With Local Employment Law
Employment law outside the U.S. is often more protective than in most U.S. states. Many countries require written employment contracts, mandatory benefits and notice periods, and some restrict termination without cause. At-will employment, as practiced in California, is uncommon elsewhere. Equity grants to foreign employees may also raise local securities, tax and exchange control issues, so check them before granting options under a U.S. plan. Our employment law and compliance practice covers many of these issues on the U.S. side.
4. Protect Intellectual Property Country by Country
Patents and trademarks are territorial: a U.S. registration does not protect a brand or invention abroad. Key points:
- Many countries award trademarks to the first to file, so register key marks before entering the market. The Madrid Protocol allows a single international application that designates multiple member countries.
- The Patent Cooperation Treaty (PCT) lets an applicant preserve the option to seek patents in many countries, but strict deadlines apply, and public disclosure before filing can destroy patent rights in many jurisdictions.
- Make sure every employee and contractor worldwide signs an enforceable IP assignment. Local law may limit or condition assignments of employee inventions or treat moral rights differently.
See our intellectual property page for more on building a protection strategy.
5. Address Data Protection and AI Rules
Data protection is often the most significant compliance issue for software startups. The EU and UK General Data Protection Regulations apply to companies that offer goods or services to, or monitor the behavior of, people in those jurisdictions, even without a local office. Transfers of personal data out of the EU generally require a recognized mechanism, such as standard contractual clauses or certification under the EU-U.S. Data Privacy Framework. Many other countries have their own data protection laws, and some impose data localization requirements. California’s own privacy rules may apply at the same time; see California’s new privacy laws.
Startups that build or deploy AI systems should also track the EU AI Act, which imposes obligations in phases depending on the risk category of the system and the company’s role as a provider or deployer.
6. Check Export Controls, Sanctions and Anti-Corruption Rules
U.S. law follows a U.S. company abroad. The Export Administration Regulations can restrict exports of certain software, encryption and technology, including some transfers to foreign employees. Sanctions administered by the Treasury Department’s Office of Foreign Assets Control prohibit dealings with certain countries, entities and individuals. The Foreign Corrupt Practices Act prohibits bribes to foreign officials and requires accurate books and records. Screening customers and partners and training local staff are basic steps.
7. Draft International Contracts Carefully
Cross-border contracts should clearly state:
- Governing law and forum. Choose the law and the courts or arbitral seat that will decide disputes. International arbitration awards are often easier to enforce abroad than court judgments because of the New York Convention.
- Language. Specify which language version controls if the contract is translated.
- Sale of goods rules. The UN Convention on Contracts for the International Sale of Goods (CISG) may apply automatically to sales of goods between parties in member countries unless the contract excludes it.
- Currency, taxes and payment terms, including who bears withholding taxes.
- Local mandatory rules, such as consumer or commercial agent protections that may apply regardless of the chosen law.
A careful contract review before signing a first major foreign deal can avoid surprises later.
8. Watch Industry-Specific Regulation
Fintech, health, telecommunications and other regulated businesses may need local licenses or approvals before offering services. A license or clearance in the U.S. generally does not carry over, so build regulatory timelines into the launch plan.
The Takeaway
International growth goes more smoothly when the legal structure keeps pace with the business. Decide how you will operate in each market, understand the tax and employment consequences, register IP early, map your data flows, and check export and sanctions rules. Local counsel in each country is usually needed, and a U.S. startup lawyer can help coordinate the overall plan.
Frequently Asked Questions
Do I need a foreign subsidiary to hire employees abroad?
Not always. Many startups begin with an employer of record, which employs workers locally on their behalf. As the team grows, a subsidiary often becomes more practical, but the right choice depends on tax, liability and local employment rules.
Does GDPR apply if my startup has no office in Europe?
It can. GDPR can apply to a company outside the EU that offers goods or services to people in the EU or monitors their behavior. A physical office is not required.
Is my U.S. trademark protected in other countries?
No. Trademark rights are territorial, and many countries award rights to the first to file. Startups should register key marks in their target markets, often through the Madrid Protocol.
Can I let foreign employees access my source code?
Usually, but check U.S. export controls first. Sharing certain controlled technology with a foreign national can be treated as an export, and sanctions rules prohibit dealings with some countries and persons.
How Sutter Law Can Help
Sutter Law advises startups on corporate structure, contracts, intellectual property and data privacy issues that arise as they grow beyond the U.S., and can work alongside local counsel and tax advisors abroad. Contact us for a free consultation.
This article is general information, not legal advice. Reading it does not create an attorney-client relationship.
