# Legal playbook URL: /workflows/legal/playbook ยท Id: `page:workflows/legal/playbook` > How the Legal Team makes a Startup lawful from its first day, wakes each legal floor row on its trigger, and keeps people only where the law names one. [Agents](/business/nouns/agent) do a [Startup](/business/nouns/startup)'s legal work from its first day, and a person acts only where the law names one. The [Legal Team](/agents/legal) draws that line exactly, and every act on it reaches the right person with the work done. ## Lawful before the first sale A Startup has paper before it has a [Customer](/business/nouns/customer). [Publish terms](/workflows/processes/contracting/publish-terms) runs the moment the Startup is created and generates its [customer paper](/systems/legal-and-corporate/paper) from the definition. It declares a [Purpose](/business/nouns/purpose) for each use of personal data the [Products](/business/nouns/product) make. Launch refuses a Startup without published paper. The rule costs nothing to meet and closes the gap most new businesses leave open for months. The same day, a Startup already sits inside a [Company](/business/nouns/company) that can sell and sign for it. A [Studio](/business/nouns/studio) Startup sits in the Studio's holding Company; a self-serve founder connects their own. [The entity](/systems/legal-and-corporate/entity) covers both. ## The floor wakes on triggers The [legal floor](/systems/legal-and-corporate/floor) lists every obligation the law can put on a Startup, one row each. A row sleeps until its trigger fires. The first commercial email wakes [CAN-SPAM](/systems/legal-and-corporate/floor/can-spam); the first EU reader wakes [Tracking](/systems/legal-and-corporate/floor/tracking). Each woken row names the [Process](/business/nouns/process) that meets it and the [Role](/business/nouns/role) that signs. A [Startup Template](/business/nouns/startup-template)'s page lists the rows it wakes, so a founder sees the obligations before choosing. [Screen an Offer](/workflows/processes/screening/screen-offer) applies the floor to every new [Offer](/business/nouns/offer). It tags each [Reserved Act](/business/nouns/reserved-act) the Offer performs, each class of regulated data it touches, and each [Credential](/business/nouns/credential) delivery requires. An Offer that needs a Credential the Startup cannot supply stays unpublished. ## Who signs Sales need no person. An Agent completes a checkout or accepts a click-through [Agreement](/business/nouns/agreement) as an electronic agent inside its [Mandate](/business/nouns/mandate), and the contract binds the Company. A natural person signs only the acts the law reserves to one: board votes, securities, sworn filings, identity checks, and insurance applications. For a Startup the Studio holds, the officer desk signs them in batches; for a self-serve Startup, the owner of record does. [Who signs](/systems/legal-and-corporate/who-signs) gives the full table and how each signature binds to the exact text read. ## Licensed review A Reserved Act is a [Verb](/business/nouns/verb) the law reserves to the holder of a named Credential, such as filing a patent application for someone else. Its [Function](/business/nouns/function) is always human, and no [Setting](/business/nouns/setting) hands it to an Agent. Take a Startup that drafts provisional patent applications. When a fulfilled [Order](/business/nouns/order) contains a filing, [Attest work](/workflows/processes/licensed-review/attest-work) checks the [Parties](/business/nouns/party) for conflicts, reads the practitioner's standing fresh, and presents the work. The practitioner's [Attestation](/business/nouns/attestation) performs the act under their Credential or declines it. A decline is final, and no platform rule overrides it. Intake, drafting, scheduling, delivery, and billing stay automated, so the practitioner spends time only on the judgment the law requires. ## Agents in public Every Agent says it is an agent, in every [Channel](/business/nouns/channel). A [Message](/business/nouns/message) that recommends a sibling Startup says the two share an owner. An Agent that sends for a person does so only under that person's Mandate, and every [Action](/business/nouns/action) records whom it was for. The principal answers for its Agents, so a [Limit](/business/nouns/limit) is checked before every call. An act outside the Mandate becomes an [Approval](/business/nouns/approval), never a contract. [Agents and the law](/systems/legal-and-corporate/agents) covers disclosure, delegation, and the provider and deployer roles. ## Privacy and consent A [Consent](/business/nouns/consent) is a grant for one Purpose, with its basis, region, notice version, and expiry. The [Privacy Officer](/agents/legal/privacy-officer) keeps one for every [Contact](/business/nouns/contact) and every Purpose the Startup uses. An opt-out becomes a [Suppression](/business/nouns/suppression) held by the Company and read before every send. An opt-out at one Startup binds every sibling within the hour, because one legal sender covers them all. [Privacy request](/workflows/processes/privacy/privacy-request) finds every record about a [Person](/business/nouns/person) across every [System](/business/nouns/system). It exports, corrects, or restricts those records and confirms before the legal deadline. ## Proof Each control's query runs every day and records the [Evidence](/business/nouns/evidence) it returns, through [Evidence collection](/workflows/processes/compliance/evidence-collection). A control without current Evidence opens an [Issue](/business/nouns/issue). Compliance is a property of the records, not a quarterly project. ## Next - [Legal Team](/agents/legal): who staffs it, what runs when, and what it measures. - [Customer paper](/systems/legal-and-corporate/paper): every document a Customer accepts or reads. - [Legal floor](/systems/legal-and-corporate/floor): every row, its trigger, and its signer.