How to tell if your tech startup is regulated, and when to get specialist advice.

This is general information, not legal advice. Regulatory perimeters are detailed and change often. If there is any chance your product is regulated, take specialist advice before you launch or take payments.

Why it matters

In some sectors, operating without the right authorisation is not a paperwork problem but a criminal offence, and customers or partners may be unable to contract with you. Regulation also shapes your product, your cost base and your time to market. Discovering it after you have built the product is the most expensive way to learn.

A quick map of common regulators

This is not complete. Energy, telecoms, legal services, transport, defence and export-controlled technology also have their own regimes.

Step by step

1. Describe exactly what the product does in one paragraph, from the customer’s point of view: what money, data or decisions flow through it.
2. Read the regulator’s own guidance on whether activities like yours are in scope. Many have perimeter guidance or innovation support services.
3. Consider partnering. Many fintechs launch under an authorised partner’s permissions, as an agent or through a platform provider, rather than seeking their own authorisation first. Healthtech companies often run pilots under careful research or evaluation frameworks.
4. Get a scoped opinion. Pay a specialist for a short written view on whether you are regulated and what that means, rather than an open-ended engagement.
5. Build compliance into the roadmap. If authorisation or certification is needed, it affects timelines and capital. Reflect it in your forecasts and product plan.
6. Mind financial promotions when raising. Communications inviting investment are themselves regulated. Your fundraising materials and any crowdfunding campaign need to follow the rules, usually with help from an authorised platform or adviser.

Worked example

Coinlane, a Birmingham tool that helps freelancers split income into tax and savings pots, plans to hold customer money. A two-hour session with a fintech solicitor confirms that holding funds would require authorisation. Coinlane instead partners with an authorised e-money provider that holds the funds, while it builds the experience on top. It launches six months earlier than it could have under its own authorisation, and revisits the decision once revenue justifies the cost.

Common mistakes

• Assuming you are “just software” and therefore not regulated.
• Relying on a competitor’s model without knowing what permissions they hold.
• Making health or financial claims in marketing that trigger regulation the product itself avoided.
• Leaving regulatory work until an investor asks.

What to measure

• Regulatory questions identified versus answered in writing.
• Time and cost to compliant launch, tracked in the plan.
• Number of marketing claims reviewed against regulatory rules.