Last issue, we talked about Corporate Governance: From startup to scale up. This time, let's talk about what happens when the foundation cracks.
Every startup will face a crisis. Not might. Will.
A co-founder walks out. A key client threatens to go public with a complaint. A product fails spectacularly. A funding round collapses at the eleventh hour. A regulator comes knocking. A story hits the press before you've had your morning coffee.
The companies that survive crises aren't the ones that avoid them. They're the ones that manage them. And the difference between the two comes down to preparation, discipline, and speed.
The First 24 Hours Will Define You
Most startups lose control of a crisis not because the problem is unsolvable, but because they freeze. Or worse, they react emotionally.
The moment a crisis hits, you need three things immediately:
A War Room. Not a Slack thread. Not a WhatsApp group with 47 people. A small, empowered team: typically founder, legal counsel, comms lead, and one operational decision-maker. Everyone else waits. Too many voices in the first hours create confusion, contradictory messaging, and leaked information.
A Single Source of Truth. What actually happened? Not what someone thinks happened. Not what Twitter says happened. Before you say a single word externally, you need to establish the facts as you know them, and be honest about what you don't yet know.
A Holding Statement. Silence is not a strategy. But neither is a panicked press release full of promises you can't keep. A holding statement buys you time: "We are aware of [situation]. We are actively investigating and will provide a full update by [time]. The safety/trust/interest of our [customers/users/partners] is our absolute priority." That's it. That's enough for now.
Controlling the Narrative Across Three Audiences
Here's where most startups get it wrong. They treat crisis communication as a single message. It's not. You are managing three very different conversations simultaneously, and each audience needs a different approach.
1. Investors: Radical Transparency, Delivered Early
Your investors should never learn about a crisis from the press. Ever.
The moment you have confirmed facts, pick up the phone. Not email. Not a quarterly update. The phone. Investors have seen crises before. What they haven't forgiven is being blindsided.
Your message to investors should cover what happened, what you know so far, what you don't yet know, what your immediate response plan is, and what you need from them, even if the answer is just patience and discretion.
Founders often make the mistake of trying to minimize the situation. "It's under control" when it clearly isn't. Investors can smell this. And once you lose credibility with your board, you've created a second crisis inside the first one.
The counterintuitive truth: investors who are brought into the tent early often become your strongest allies. They have networks, experience, and sometimes the calm perspective you desperately need when you're in the eye of the storm.
2. Customers: Empathy First, Solutions Second
Your customers don't care about your internal processes. They care about how this affects them.
Lead with acknowledgment. If a product failed, if data was compromised, if service was disrupted: say so plainly. Avoid corporate speak. Avoid the passive voice. "Mistakes were made" is the fastest way to make people furious.
Instead: "We failed to deliver what we promised. Here's what happened. Here's what we're doing about it. Here's what this means for you specifically."
Give them a timeline, even if it's imperfect. Give them a human being to contact — not a support ticket black hole. And then, critically, follow through on every single commitment you make during the crisis. Broken promises during a crisis are remembered for years.
Segment your customer communication. Your enterprise client with a seven-figure contract needs a personal call from leadership. Your self-serve users need a clear, honest blog post or email. One size does not fit all.
3. Media: Less Is More, But Never Nothing
Media crises are where startups most commonly self-destruct. Either they say too much, too fast, without legal review, or they say nothing and let speculation fill the vacuum.
The rules are straightforward but require discipline:
- Designate one spokesperson, and only one. Everyone else in the company responds to media inquiries with: "All questions are being handled by [name/role]. Let me connect you."
- Prepare three to five key messages and stay within them. Journalists are skilled at drawing you off-script.
- Don't speculate, don't assign blame, and don't make promises about outcomes you can't guarantee.
- Never say "no comment." It sounds like you're hiding something. Instead: "We're actively working through this and will share more details as soon as we can."
If the story is already out and contains inaccuracies, correct the record quickly and factually. Don't get emotional. Don't attack the journalist. Provide the facts with supporting evidence where possible.
And here's something founders rarely consider: your employees are also a media channel. In the age of LinkedIn, Glassdoor, and anonymous accounts, every person in your company is a potential spokesperson. Brief your team. Give them language they can use. Make them feel informed rather than left in the dark, because people who feel excluded from information tend to create their own narratives.
The Legal Dimension Most Founders Miss
Crisis management without legal counsel is like performing surgery without anesthesia: technically possible, but inadvisable and unnecessarily painful.
Here's what should be happening from the first hour:
Preserving privilege. Communications made for the purpose of seeking legal advice are privileged. Once you start copying the entire company on crisis emails, that privilege can evaporate. Be intentional about what's communicated, to whom, and through which channels.
Assessing regulatory exposure. Depending on your industry and jurisdiction, you may have mandatory disclosure obligations, particularly around data breaches, financial irregularities, or workplace safety incidents. Missing a regulatory deadline during a crisis can turn a manageable situation into an existential one.
Reviewing all external communications. Every statement you make: to media, customers, regulators, or on social media, can and will be used in future proceedings. Every word that goes out externally needs legal review. This isn't about being overly cautious. It's about not creating new liabilities while trying to resolve existing ones.
Documenting everything. Decisions made, timelines, who knew what and when. If a crisis leads to litigation, regulatory inquiry, or investor dispute down the line, your documentation is your defense.
After the Storm: The Debrief Nobody Wants to Do
The crisis is resolved. The fires are out. Everyone wants to move on and never think about it again.
This is exactly when you need to stop and conduct a proper post-crisis review. What went right? Where did communication break down? Were decision-making authorities clear? Did you have the right people in the room? What would you do differently?
Document it. Build it into a crisis response playbook. Because the next crisis is already forming somewhere in your business. You just don't know what it looks like yet.
The companies that navigate crises most effectively share one trait: they treat crisis management not as a reactive exercise but as a permanent capability. They have frameworks before they need them. They've thought about scenarios before they happen. They know who calls whom, who speaks to the press, who talks to investors, and who handles regulators, before the phone starts ringing.
The Bottom Line
A crisis doesn't have to be a death sentence for your startup. Handled well, it can actually build trust, demonstrate leadership maturity, and strengthen relationships with the people who matter most to your business.
Handled poorly, it can unravel years of work in days.
The difference isn't luck. It's preparation, discipline, and having the right counsel in the room when it counts.
Next issue: The legal landmines hiding in your cap table — and how to defuse them before your Series A.
Ghassan Haddad
The Legal Rooms
Share this article