7 HR Compliance Mistakes Startups Make (and How to Avoid Them)

When you're focused on product-market fit and runway, HR compliance is easy to push to the bottom of the list. But the penalties for getting it wrong — lawsuits, fines, back pay, and damaged reputation — can be existential for a small company.

The good news: most compliance mistakes are preventable. They don't require expensive lawyers or a full-time compliance team. They require consistent processes and a system that doesn't let things fall through the cracks. Investing in dedicated HR software early is the simplest way to prevent most of them.

Here are the seven we see most often, and what to do instead.

1. No Written Offer Letters

Many startups extend job offers verbally or via a casual email. No formal document spells out compensation, benefits, start date, probationary period, or confidentiality expectations.

A typical pattern: a 20-person company without documented offer letters faces a former employee claiming a verbal $10K signing bonus. With no paper, the company often settles to avoid litigation costs that would exceed the bonus. The fix is documentation at hire, not negotiation at exit.

The fix: Use a standardized offer letter template for every hire. Include: job title, compensation, benefits summary, start date, reporting structure, probationary period and termination clauses that comply with your provincial employment standards, and any contingencies. Have every candidate sign and return the letter before their start date. Store signed copies in a centralized system — not in a manager's email inbox.

Template must-haves: Beyond the basics, your offer letter should include equity details (if applicable), a reference to the employee handbook, and a clear statement about any pre-employment requirements like background checks or drug screenings.

2. Inconsistent Time-Off Tracking

PTO is tracked in a shared spreadsheet that's updated when someone remembers. Balances don't add up. Managers approve time off in Slack DMs with no paper trail. Remote employees in different time zones take days off that nobody notices.

Why it matters: Across Canada, accrued but unused vacation pay must be paid out on termination — this is a provincial employment standards requirement in every province. Messy records risk overpaying, underpaying, or facing an employment standards complaint. Inconsistent enforcement can also lead to discrimination allegations if one employee's informal time-off requests are consistently approved while another's are denied.

The fix: Use a centralized system where employees request time off and managers approve it with a click. Balances should update automatically. Every approval should be timestamped and logged. If you're using WalnutsHR's time-off tracking, this happens automatically — no spreadsheets, no Slack DMs, no guesswork.

Pro tip: Review your time-off policy for provincial-specific requirements at least annually. Minimum vacation entitlements, statutory holidays, and sick-leave rules vary by province — Ontario's ESA, British Columbia's Employment Standards Act, Quebec's Act respecting labour standards, and Alberta's ESC all differ materially. If you have employees in multiple provinces, you must comply with each province's rules individually.

3. Missing SIN, TD1, and Work Authorization Records

Canadian employers must collect a Social Insurance Number (SIN) within three days of hire. They must also get completed TD1 federal and provincial tax-credit forms before the first pay run, and — for non-citizens — verify that the employee has authorization to work in Canada (a permanent resident card, open work permit, or employer-specific work permit). These steps get skipped or done inconsistently, which creates CRA reporting problems and, for work-authorization gaps, Immigration, Refugees and Citizenship Canada (IRCC) exposure.

CRA payroll audits routinely check for completed TD1s and accurate remittances. Small companies are not exempt — in fact, their records tend to be messier than larger employers with dedicated payroll teams.

The fix: Make SIN, TD1 (federal and provincial), banking information, and work-authorization verification non-negotiable steps in your onboarding checklist. Do them before day one where possible, and no later than the first pay run. Store the records securely. For SINs starting with 9 (temporary residents), track the work-permit expiry and re-verify before it lapses. And keep TD1s on file — employees can resubmit them any time their personal tax situation changes.

4. No Employee Handbook

The company has unwritten rules and norms but no formal handbook. Policies live in founders' heads or scattered Notion pages. When a policy question comes up, the answer is "I think we usually..." followed by an improvised response.

Why it matters: An employee handbook isn't a bureaucratic formality. It's your primary legal defense in disputes. When an employee claims they weren't aware of a policy, your handbook (plus a signed acknowledgment) is your evidence that they were informed. Without it, you're arguing from memory.

A handbook also creates consistency. When two managers interpret PTO policies differently, or when one team enforces a dress code and another doesn't, you're creating the conditions for favoritism claims.

The fix: Create a concise handbook covering: anti-discrimination and harassment policies (required under every provincial human-rights code), vacation and leave policies, code of conduct, disciplinary procedures, and provincial employment-standards basics. Have every employee acknowledge receipt. Update it annually and re-distribute the acknowledgment.

You don't need a 100-page document. A 15-20 page handbook that covers the essentials is better than a comprehensive one that nobody reads. Focus on policies that protect both the company and employees.

5. Ignoring Provincial Employment Standards

The startup uses a one-size-fits-all approach, defaulting to the rules of HQ's province. With remote work expanding, this mistake is more common — and more dangerous — than ever. A company headquartered in Ontario with employees in Quebec, British Columbia, and Alberta is subject to four distinct employment-standards regimes, each with its own overtime thresholds, statutory holidays, vacation minimums, and termination notice requirements.

Typical pattern: An Ontario-based startup hires a remote employee in Quebec without realizing the deduction stack is different — QPP replaces CPP; QPIP is in addition to EI (which still applies in Quebec at a reduced rate) — and that separate CNESST contributions for workplace health and safety apply. Quebec's vacation rules look similar to other provinces but use different terminology (indemnité de vacances vs vacation pay) and slightly different accrual triggers — small differences that compound across a payroll year. When the role is later terminated, Quebec-specific notice and severance rules under the Act respecting labour standards differ from Ontario's ESA. When a province later identifies misclassification, the employer typically owes retroactive employer-side CPP, EI, vacation pay, and statutory entitlements — plus interest and possible penalties.

The fix: For every province where you have employees, audit compliance with that province's requirements. Create a province-by-province compliance matrix that covers wages, leaves, posting requirements, and termination rules. If you have employees in more than two or three provinces — especially if one of them is Quebec — get outside HR or legal counsel. The cost of a compliance audit is a fraction of the cost of a violation.

If you're operating in Canada, data residency and provincial privacy laws add another layer of complexity on top of employment standards.

6. No Termination Documentation

When things don't work out, the employee is let go with a verbal conversation and no written record. There's no documentation of performance issues, warnings, or the reason for termination. The manager says, "It just wasn't a good fit," and that's the entire record.

Why it matters: "Wasn't a good fit" is not a legal defense. In a wrongful termination claim, the burden is on you to demonstrate that the termination was for legitimate, non-discriminatory reasons. Without documentation, you're fighting that battle with nothing but testimony against testimony. Plaintiff's attorneys know this — and they know that undocumented terminations are their strongest cases.

The fix: Document performance issues as they occur — not weeks later, not retroactively when someone is being managed out. Use a progressive discipline approach:

Build a culture where managers document conversations in real time. A two-sentence email after a coaching conversation — "Per our discussion today, we talked about X, and the expectation going forward is Y" — takes 30 seconds. Legal fees in a contested wrongful-dismissal claim regularly run into five figures, often exceeding the underlying severance dispute.

7. Skipping Required Training

Several provinces require specific workplace training — harassment and violence prevention is the most common. Startups often don't know about these requirements until it's too late.

Current requirements by province (as of 2026):

• Ontario: Workplace violence and harassment training for all workers under the Occupational Health and Safety Act, refreshed when policies or risks change
• British Columbia: Bullying and harassment prevention training under WorkSafeBC policy
• Alberta: Harassment and violence prevention training under OHS legislation
• Quebec: Psychological harassment prevention policy and training requirement under Quebec's Act respecting labour standards
• Federal (CLC-regulated employers): Work Place Harassment and Violence Prevention Regulations require training at hire and at least every 3 years

All provinces require some form of occupational health and safety orientation — the details vary, but the obligation is universal across Canada.

The fix: Check your province's requirements. At minimum, provide anti-harassment and workplace-violence training to all employees within their first few months and refresh it on the cadence your province requires. Keep dated records of who completed what training and when. If a Ministry of Labour or WorkSafe inspector asks, "we did the training but didn't keep records" is functionally the same as "we didn't do the training."

Your Compliance Self-Check

Use this checklist to audit where your team stands today. If you can't check every box, prioritize the gaps — starting with the ones that carry the highest penalties.

Build Compliance Into Your Workflow

The common thread across all seven mistakes: things slip through the cracks when there's no system. Compliance isn't about hiring a lawyer or memorizing regulations. It's about building processes that catch requirements before they become violations.

WalnutsHR helps growing teams stay compliant by putting documents, policies, time-off tracking, and employee records in one place — with reminders and audit trails built in. When you're comparing options, see how WalnutsHR stacks up against other categories on our alternatives page.

The best time to build your compliance foundation was when you hired your first employee. The second best time is today.

Don't wait for a compliance issue to force your hand. See our pricing or get started free with WalnutsHR and build your compliance foundation today.