Regulatory Navigation
How startups interact with regulations, compliance requirements, and government agencies. For some startups, regulation is an obstacle to navigate. For others, it’s a competitive moat to build.
The Two Mindsets
Regulation as Obstacle
Most software startups treat regulation as friction — minimize contact, comply minimally, move fast.
- Works for: SaaS, dev tools, most B2B software
- Risk: Ignoring regulation until it’s too late (GDPR fines, data breaches, employment law)
Regulation as Moat
For deep-tech-startups, fintech, health tech, and insurance tech, regulatory approval IS the competitive advantage:
- FDA approval takes years → once you have it, competitors face the same timeline
- Banking licenses are scarce → once granted, you’re in a protected market
- Insurance licensing is state-by-state → complexity deters new entrants
- Environmental permits → first mover locks out others
Stripe’s insight: Payment processing regulation was part of the “schlep” that created Schlep Blindness. Everyone avoided it; Stripe embraced it and built a moat.
Regulatory Landscape by Sector
| Sector | Key Regulations | Approval Timeline | Moat Value |
|---|---|---|---|
| Fintech | Banking licenses, money transmitter laws, KYC/AML | 6-18 months | High |
| Health tech | FDA (US), EMA (EU), HIPAA compliance | 1-10 years | Very high |
| Edtech | FERPA, COPPA (children’s data), state accreditation | 3-12 months | Medium |
| Insurance | State-by-state licensing (US), Solvency II (EU) | 6-24 months | High |
| Crypto/Web3 | SEC, CFTC, MiCA (EU), varies wildly by jurisdiction | Uncertain | Uncertain |
| AI | EU AI Act, sector-specific rules, evolving rapidly | Emerging | Growing |
| Energy | EPA, state utility commissions, grid interconnection | 1-5 years | Very high |
| Aerospace | FAA, ITAR, export controls | 2-10 years | Extreme |
Practical Advice for Founders
Start Early
- Begin regulatory research during customer-development, not after building
- Talk to a regulatory lawyer in your first month (one conversation can save years)
- Map the regulatory pathway before committing to a market
Hire Expertise
- For regulated industries: hire regulatory expertise by Series A at the latest
- Former regulators make excellent advisors — they know the system from inside
- Don’t rely on your startup lawyer for specialized regulatory advice
Choose Your Jurisdiction
- Some jurisdictions are more startup-friendly than others
- UK FCA sandbox for fintech, Singapore MAS for crypto, Delaware for incorporation
- Consider where to incorporate vs where to operate — they can be different
Engage, Don’t Avoid
- Regulators prefer companies that engage proactively
- “Ask forgiveness, not permission” works for software features, NOT for regulated industries
- Building a relationship with your regulator is like building lines, not dots with investors
The Uber Problem
Uber famously launched in markets without regulatory approval, then fought to keep operating. This strategy:
- Worked because ride-sharing had massive consumer demand that created political pressure
- Cost billions in legal battles, fines, and political capital
- Only works when consumer demand is overwhelming AND the existing regulation is clearly outdated
- Does NOT generalize — most startups that ignore regulation simply get shut down
For every Uber, there are hundreds of startups that tried “move fast and break things” with regulators and lost.
Regulatory Risk in Fundraising
Investors evaluate regulatory risk differently:
- Specialized investors (fintech VCs, biotech VCs) understand the timeline and build it into their models
- Generalist investors often underestimate regulatory timelines and overreact to delays
- Your pitch should address regulatory risk head-on: what approvals you need, your timeline, and your strategy for obtaining them