Tutela della proprietà intellettuale per le startup prima di un round di investimento

In September 2024, a Lausanne-based SaaS startup reached term sheet stage with a Basel venture fund. The CTO had spent fourteen months building the core recommendation algorithm. Three developers had contributed under informal arrangements, with no NDAs signed. When the fund's legal team requested documentation proving when each component had been developed and by whom, the CTO produced GitHub commit logs. The fund's IP counsel responded: commit logs can be rewritten. What external timestamp did the startup have?

What followed was six weeks of delay, forty hours of legal fees, and a final term sheet with a 15 percent discount on the valuation, because the startup could not document in an uncontestable way when each component of the code had been developed and by whom. This scenario is not an isolated case. It is the most common avoidable error in Swiss and European startup funding rounds.

What investors examine during IP due diligence

Institutional investors and venture capital funds now conduct IP audits with forensic rigour. Four questions dominate every process:

Ownership: Who owns the code, the design, the concept? Freelancers who worked without an explicit work-for-hire contract can make claims. Founders who brought code from a previous employer can expose the company to liability.

Moment of creation: When exactly was the core invention developed? This is decisive when a competitor launched a similar product shortly before or after.

Documentation: Does a traceable development path exist? Commits, revisions, concept sketches with verifiable timestamps?

Litigation risk: Are there potential third-party claims? Without timestamped documentation, the answer is always: possibly.

Why the timestamp is decisive

Swiss law ZertES (RS 943.03) and EU Regulation eIDAS (Art. 41) grant qualified electronic timestamps a legal presumption: the stated moment is considered accurate and the integrity of the file is presumed intact, until proven otherwise.

For a startup, this means that a Swiss Trust Layer seal on the first commit of the core algorithm is first-degree evidence before Swiss and EU courts. The other party has to prove the timestamp is false, not you that it is correct.

Swisscom Trust Services, the certification provider behind Swiss Trust Layer, is simultaneously a ZDA accredited under ZertES and a QTSP listed on the EU Trust List under eIDAS. A single document covers Swiss courts and all 27 EU member states.

What would have happened differently

Had the Lausanne CTO applied a qualified timestamp through Swiss Trust Layer at each development milestone, each snapshot would have carried a ZertES-qualified timestamp issued by Swisscom Trust Services. The algorithm's first version, the architecture design, and the first functional build would each have had legally presumed dates under eIDAS Art. 41. The fund's IP audit would have taken two days rather than six weeks. The term sheet would have reflected the startup's actual IP value, not a risk-adjusted discount. Fifteen timestamps across fourteen months of development would have cost CHF 75. The documentation gap cost the founders roughly CHF 300,000 in dilution at the final round size.

What to seal and when

Not every file requires a seal, but the right ones need one absolutely:

Before any conversation with investors: Seal the pitch deck, the product memo, and the technical description in their current version. This establishes the baseline of what existed before the contact.

At each significant development milestone: Core algorithm commit, technical architecture, first functional version of the product. These seals build the development chain that investors want to see.

Before engaging external developers: Before onboarding any freelancer or agency, seal your current technical state. This creates an uncontestable record of "what we had before this person."

Before any external disclosure: Any material shared in an investor demo, a technical due diligence session, or a partnership discussion should be sealed before sharing.

Legal documents: Contracts with freelancers and external developers, NDA agreements, co-founder documents.

The process: five minutes, lasting protection

1. Upload the file. Any format is accepted. The file never leaves your control. Only the SHA-256 cryptographic hash is processed.

2. Receive the timestamp. Swiss Trust Layer transmits the hash to Swisscom Trust Services and receives a ZertES- and eIDAS-qualified timestamp. The process takes under two minutes.

3. Store the certificate. You receive a PAdES-compliant certificate with hash, timestamp, certification chain, and identity. Store it alongside the original file in your data room.

4. Document continuously. Seal at each significant milestone. This builds a version chain that is decisive in due diligence processes.

5. Offer verification. Every investor can verify your seals at swisstrustlayer.com/validate, without an account, without a login, in seconds.

The role of the cryptographic seal in due diligence

A well-prepared IP audit changes the negotiation dynamic. Instead of answering investors' questions with "you should trust us," you can show a data room with publicly verifiable seals on every critical IP component.

Investors conducting IP due diligence look for exactly this type of documentation. A clean, timestamped IP chain works as legal protection and as a data room asset that directly supports your valuation. Startups with solid IP documentation close rounds faster, with higher valuations and fewer onerous warranty clauses. Those without documentation spend weeks in delay, pay legal fees to reconstruct a history they could have built in advance in a few minutes per file.

Frequently asked questions from founders

"We have everything on GitHub, isn't that enough?"
Git commits can be manipulated and have no external certification anchor. GitHub logs are not usable as evidence in court. A Swiss Trust Layer seal on a repository snapshot is directly usable in court in both Switzerland and the EU.

"Our lawyer says NDAs are sufficient."
NDAs govern confidentiality, not property rights. An NDA does not prove when something was developed or who owns it. Timestamps and NDAs complement each other, they do not replace each other.

"We are too early for these processes."
The opposite is true. The earlier you document, the stronger your position. Most IP disputes involve exactly the early phase, when teams experiment, bring in freelancers, and share ideas with potential partners.

The cost of protection versus the cost of not having it

Swiss Trust Layer Seal Credits Lite start at CHF 5 per document. IP disputes that reach arbitration or litigation typically involve legal costs of CHF 150,000 to 400,000 before resolution, according to Swiss Arbitration Association data. Deals that fall through or get renegotiated downward because of an unclear IP chain cost more.

The Lausanne startup closed its round six weeks late. Legal fees during the extended due diligence came to CHF 42,000. The term sheet was renegotiated with a 12 percent valuation reduction to account for IP documentation risk. Fifteen qualified timestamps covering fourteen months of development milestones would have cost CHF 75. The documentation gap cost the founders roughly CHF 300,000 in dilution at the final round size. The arithmetic is not complicated.

Protect your startup today. swisstrustlayer.com