Tactical insights for first-time founders to outsmart the burn, the churn & the breakdown.

Hey Founder,

Most of what you worry about is reversible.

Competitors. Pricing. A bad quarter. A slow fundraise.

Painful, yes. Permanent, no. You adjust and try again.

This issue is about the one kind of problem that isn't reversible: the day your company stops being a business and becomes a legal case.

One lawsuit. One data breach. One badly handled exit. One contract you didn't read closely enough.

Any one of them can replace your roadmap with lawyers, document requests, and investor calls nobody wanted, for months.

The good news: for a few hundred dollars, you can make sure that day costs you a deductible, not the business.

Let's dive in.

Most founders don't get sued over rare edge cases. They get sued over ordinary business.

A founder I worked with had just raised $8 million. Hiring was ramping, customers were coming in, the roadmap was ambitious. It felt like we'd finally graduated from surviving to building.

Then it came out of nowhere. A $5 million-plus lawsuit. Not because we did anything wrong. We got pulled into a country-wide legal case that swept up half the industry.

Instead of building, we spent months talking to lawyers, digging through emails, responding to document requests, and explaining ourselves to investors.

The company didn't stall because the product failed. It stalled because the lawsuit became the business.

Marcus Ryu tells a nearly identical story. Accenture sued Guidewire over IP claims Ryu calls completely meritless. Guidewire still went more than a year without selling software. He believes the case nearly killed the company.

That's the thing about lawsuits. You can win the case and still lose. In time, in money, in momentum.

And you don't need a giant consulting firm on the other side. The moment you have customers, employees, or investors, you're exposed.

Most lawsuits walk through one of four doors:

1. Clients: "If this goes wrong, who pays?"
Software failures, bad advice, or lost data can all become Tech E&O claims.

2. Data: "Who owns the breach?"
One phishing email or security mistake can trigger regulators, legal fees, and customer claims. That's Cyber Liability.

3. Employees: "What was that firing really about?"
A poorly handled exit or workplace dispute can cost months of management time and significant legal fees. That's EPLI.

4. Investors: "Did you do what you said?"
Once you raise outside capital, governance risk follows. Misrepresentation or shareholder disputes fall under D&O insurance.

You don't choose these risks, you choose to build a company.
The risks come with it. 

Founders delay insurance for three reasons.

That last one is the real trap. There's no reward for prevention. You're solving a problem that doesn't exist yet, so your brain can't feel the threat sharply enough to act. That's normalcy bias.

But you don't need to get sued for insurance to matter. You just need to see the risk as it is.

Then the dream logo shows up and asks for proof of insurance. They assume you're already a grown-up company.

If you're not, you're scrambling to find cover, racing through security questionnaires, and negotiating contract terms, all while the deal clock is ticking. I once pushed through SOC 2, cyber, and E&O in under three weeks with $500K on the line.

And when you buy in a rush with no prior history, the insurer prices that as risk. You overpay, and you're forced into whoever can bind fastest.

The cash is only half the bill. The weeks that belonged to your customers get burned on jargon you'll never use again.

So, "Later" isn't neutral. It's a hidden tax.

Every founder thinks: "We're too small to get sued."

It's backwards.

Large companies can absorb lawsuits, most startups can't.

When you're the legal department, finance team, and CEO all at once, one claim can consume months of time and attention.

Insurance exists because small companies can't afford the hit. 

You don't need every policy your broker recommends. You need cover for the risks your business actually has. 

Buy these before you start selling.

Add these as your business evolves.

Don’t buy everything on day one. Get a stack that grows with the company. 

Answer these five questions. Every "yes" is a risk you should cover.

Then circle every exposure you don't have cover for.

That's your priority list.

Think about the client you want in the next 6–24 months.

What insurance, limits, or certifications will they require?

You don't need to meet every requirement today. Just an insurance stack that can grow with you instead of being rebuilt later is enough.

Don't spend hours comparing policies you don't fully understand.

Use startup-focused providers like Vouch or Corgi to understand what you need now, what can wait, and how your cover should evolve as the business grows.

A good insurer won't just sell you a policy.

They'll help you build the right protection for your stage. 

A founder asked me:

No. It's a red flag.

Real investors pay for their own due diligence. If those costs are ever reimbursed, it's usually at closing, from the investment, not from your bank account beforehand.

Here's the rule: If they make money whether the deal happens or not, they're probably not investing. They're selling hope.

What should you do?

Don't pay.

Ask to speak to founders they've backed.
Verify the fund and portfolio independently.
Watch what happens when you question the fee.

A genuine investor will explain the process. A scammer will pressure you, guilt you, or disappear.

As a rule: if someone asks you to pay for the chance to receive investment, walk away. 

Send it my way, just hit reply.

Three resources worth your time this week: 

Before you go…

You don't need to predict every black swan. You just need to make sure one bad day can't undo years of good decisions.

Protect the downside. Give the upside time to compound.

That's the real moat.

See you next Thursday,

— Mariya

Hit reply and let me know. I read every single one (for real).

Hey, I’m Mariya, a startup CFO and founder of FounderFirst. After 10 years working alongside founders at early and growth-stage startups, I know how tough it is to make the right calls when resources are tight and the stakes are high. I started this newsletter to share the practical playbook I wish every founder had from day one, packed with lessons I’ve learned (and mistakes I’ve made) helping teams scale.

Mariya Valeva

Find me on LinkedIn