Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
- Overview
Practical Steps And Common Mistakes
- 1. Build an IP asset register
- 2. Check chain of title from founders, employees and contractors
- 3. Review trade marks, branding and naming risk
- 4. Review software and open source use
- 5. Check inbound and outbound licences
- 6. Check confidentiality and know-how protection
- 7. Review data rights and privacy settings
- 8. Match the IP position with deal documents
- Common mistakes founders and SMEs make
- Key Takeaways
An IP due diligence review can make or break a deal. Buyers and investors often assume a business owns its brand, code, designs and content, then discover too late that key rights sit with a founder personally, a contractor overseas, or a company that never signed the right paperwork. Founders make the opposite mistake too, they focus on pitch decks and financials, but cannot clearly prove who owns the trade marks, software, product names or customer-facing content.
That gap matters in New Zealand because IP value often sits at the centre of early stage and growing businesses. If ownership is unclear, the buyer may reduce the price, ask for warranties and indemnities, delay completion, or walk away entirely. This guide explains what an IP due diligence review usually covers, what New Zealand businesses should gather before they sign, where founders often get caught, and how to fix common problems before a transaction or capital raise gets serious.
Overview
An IP due diligence review tests whether a business actually owns, controls and can lawfully use the intellectual property that supports its revenue and growth. The review is not just about registered rights. It also covers unregistered material, contracts, data use, employee and contractor arrangements, and whether the business may be infringing someone else’s rights.
- Who legally owns trade marks, domain names, software, designs, content, databases and know-how
- Whether employees, founders and contractors have signed valid IP assignment and confidentiality terms
- What is registered in New Zealand or overseas, and what still needs registration
- Whether licences, reseller deals, SaaS terms, development agreements or white label contracts limit ownership or use
- Whether open source software, third party content or AI tools create restrictions or compliance issues
- Whether branding, packaging, marketing or product features risk infringing another party’s IP
- How customer data, privacy disclosures and data access rights affect the value of the IP asset base
- What warranties, indemnities and disclosure points should be addressed before the deal documents are signed
What IP Due Diligence Review Means For New Zealand Businesses
An IP due diligence review is a practical ownership and risk audit. It asks a simple question, if someone buys, invests in, or partners with this business, what IP rights are they really getting?
For many New Zealand startups and SMEs, the answer is less tidy than expected. A founder may have registered a domain in their own name. A developer may have built the first version of the product before the company was incorporated. A designer may have supplied a logo without a signed transfer of rights. These issues are common, but they need to be identified early.
Intellectual property can include registered and unregistered rights. In business terms, that often means:
- brand names, logos and taglines
- registered and unregistered trade marks
- domain names and social media handles
- source code, object code and software architecture
- website copy, product descriptions, graphics and videos
- design files, packaging, labels and product appearance
- customer databases and internal systems
- confidential information, pricing models, recipes, formulas and processes
- patents or patentable inventions, if relevant
In New Zealand, registered rights such as trade marks are usually checked against official records, while unregistered rights are verified through contracts, creation records, internal policies and actual business use. A clean search result does not solve the whole problem. The main risk is often contractual, not procedural.
For buyers and investors, the review helps answer whether the target’s IP is secure enough to support valuation. For founders, it helps fix gaps before they become leverage in negotiations. For both sides, it provides a clearer basis for warranties, disclosure and post-completion integration.
Why ownership evidence matters
Ownership is not always automatic. If a contractor created code, branding or content, the company may only have a licence to use it unless the contract clearly assigns the IP. If a founder created assets before the company existed, a later transfer may be needed. If rights sit in the wrong entity, the deal may need restructuring.
This is where founders often get caught. They assume payment equals ownership. In law, that is not always true. The paperwork matters.
Why infringement risk matters
The review also checks whether the business may be using someone else’s IP without permission. That could involve:
- a product name too close to an existing trade mark
- website images copied under a loose assumption they were free to use
- software built on open source components without compliance with licence terms
- marketing claims that overstate originality or ownership
If infringement risk appears late in the deal, it can affect price, settlement timing and future expansion plans. It may also create Fair Trading Act issues if the business has represented that it owns rights it does not actually control.
When This Issue Comes Up
IP due diligence usually becomes urgent when money or control is about to change hands. The best time to prepare is earlier, before you sign a contract, before you invest in branding, and before you spend money on scale.
Common trigger points include:
- raising seed, venture or growth capital
- selling shares in a company or selling business assets
- buying a competitor, brand or software product
- licensing technology to customers, distributors or strategic partners
- bringing in a co-founder or key contractor to build core product features
- expanding from New Zealand into Australia or other markets
- rebranding, launching a new product line or registering a new domain
During investment rounds
Investors want to know whether the company can protect its edge. If the main value is software, data, a brand or a unique process, they will usually ask for evidence that the company owns it and can keep using it.
At this stage, gaps are often still fixable. A founder assignment deed, contractor IP assignment, updated employment contract or trade mark filing can materially improve the position before final investment documents are signed.
During a business sale or acquisition
For a buyer, an IP due diligence review is part of checking what is actually being acquired. The buyer needs to confirm whether the target’s IP is owned by the company, personally by founders, or shared under third party licence terms that may not transfer on sale.
For a seller, preparation can protect deal value. If you wait until the buyer’s lawyers ask hard questions, you may be negotiating under pressure.
During product and brand rollout
This issue also comes up before launch. A business might be ready to print packaging, register a domain and start selling online, but the brand search has not been done, the logo designer has no written IP transfer, and the website terms do not deal clearly with customer terms or licence rights.
That is a preventable problem. Early housekeeping is usually cheaper than a forced rebrand after launch.
Practical Steps And Common Mistakes
The most useful IP due diligence review starts with documents, not assumptions. Gather the evidence, map the assets, and fix chain-of-title issues before the other side finds them.
1. Build an IP asset register
List the assets that matter commercially. Keep it specific and linked to actual documents.
- trade marks, logos, business names and product names
- domains and social accounts
- software repositories, code libraries and deployment credentials
- design files, CAD drawings, packaging artwork and templates
- marketing copy, photos, video and training materials
- customer lists, databases and analytics assets
- patents, patent applications or invention disclosures
- key confidential information and internal processes
For each asset, record who created it, when it was created, where the evidence sits, whether it is registered, and which entity owns it now.
2. Check chain of title from founders, employees and contractors
The chain of title is the ownership trail. If a business cannot prove how rights moved into the company, the review will raise a red flag.
Check:
- founder assignment documents for pre-incorporation work
- employment contracts with clear IP ownership and confidentiality clauses
- contractor and consultant agreements with express assignment terms
- agency agreements covering ownership of branding, campaigns and creative output
- software development agreements dealing with source code ownership, third party tools and delivery
A common mistake is relying on invoice payment and email instructions. Those may show the work was requested, but they may not transfer ownership.
3. Review trade marks, branding and naming risk
Your name and branding often carry a large part of business value. Buyers and investors will want comfort that the brand can be used without challenge.
Look at:
- whether the core trading name and product names are registered as trade marks in the relevant classes
- whether the registrations are in the correct entity name
- whether any logo updates mean the registered mark no longer reflects current use
- whether there are conflicting brands in New Zealand or intended expansion markets
- whether packaging, labels and marketing claims could mislead consumers or overstate exclusivity
Founders often invest in branding before clearance and registration. That creates avoidable cost if a conflict appears after launch.
4. Review software and open source use
Software businesses need a closer look at what has been built and what has been borrowed. The legal issue is not just ownership of custom code. It is also the right to exploit, modify, distribute and license the software as promised.
Check the development stack, open source components, third party SDKs, APIs and hosted services. Some licences are permissive. Others can impose conditions on distribution, attribution or source code disclosure. The review should also confirm who controls repositories, administrator access and build environments.
A common mistake is assuming a freelancer or dev shop built everything from scratch. Another is using generative AI tools without checking terms around training inputs, output rights or confidentiality.
5. Check inbound and outbound licences
Many businesses do not own every piece of IP they use, and that is not necessarily a problem. The issue is whether the licences are clear, sufficient and transferable.
Review contracts for:
- software licences and SaaS subscriptions
- white label arrangements
- distribution and reseller agreements
- franchise or brand use rights
- content and image licences
- manufacturing agreements covering tooling, specifications and designs
Pay attention to change of control clauses, assignment restrictions, termination rights and geographic limits. A buyer may assume the target can continue using a critical asset after completion, but the contract may say otherwise.
6. Check confidentiality and know-how protection
Some of the most valuable IP is never registered. Recipes, algorithms, customer segmentation methods, supplier agreement terms and pricing models may only be protectable if they have been kept confidential in practice.
Look for confidentiality clauses in employment, contractor and commercial agreements. Check internal access controls, document handling, password practices and whether sensitive information has been shared too widely without restrictions.
If confidential information has effectively entered the public domain, its value may be lower than the business claims.
7. Review data rights and privacy settings
Customer and user data often sits beside IP value, especially in software, e-commerce and service businesses. New Zealand’s Privacy Act 2020 does not create ownership of personal information in a simple property sense, but privacy compliance still affects how valuable and usable the data asset is.
Check whether the business has:
- a privacy policy aligned with actual collection and use practices
- clear disclosures about analytics, marketing and third party processors
- contracts with service providers handling personal information
- appropriate internal controls for access, retention and deletion
- a realistic position on using customer data for product training, profiling or secondary purposes
If a business says its database is a major asset, the buyer will want to know whether the business can lawfully keep using that data in the way the revenue model assumes.
8. Match the IP position with deal documents
Due diligence findings should flow into the transaction documents. If there are gaps, the deal may need specific warranties, disclosures, indemnities, holdbacks or conditions to completion.
Examples include:
- a condition that a founder signs an IP assignment before settlement
- a warranty that no infringement claims have been received
- disclosure of open source use and licence obligations
- a carve-out where a seller retains ownership of pre-existing materials
This part matters because legal risk does not disappear just because both sides know about it. The contract still needs to allocate responsibility clearly.
Common mistakes founders and SMEs make
The same issues appear repeatedly in New Zealand transactions:
- registering trade marks, domains or app store accounts in a person’s name instead of the company’s name
- using friends, freelancers or overseas developers without signed IP assignment terms
- assuming a business name registration or company name gives full brand protection
- forgetting that rebrands, new logos and new packaging may need fresh clearance work
- failing to document who contributed what when multiple founders built the early product
- promising customers ownership or licence rights in contracts that conflict with internal IP strategy
- copying website content, images or design elements too casually
- treating privacy disclosures as separate from IP value, when they directly affect data use
Most of these problems are fixable if they are found early. They become more expensive when discovered in the final stages of a deal.
FAQs
Do I need an IP due diligence review if my business only has a brand and website?
Yes. A brand, domain, website copy, logo, images and customer data can still be commercially important IP. Buyers and investors will usually want to know who owns those assets and whether they can be used without infringement risk.
Is a New Zealand company name enough to protect my brand?
No. A company name registration and a trade mark registration serve different purposes. A company can be incorporated with a name, but that does not automatically give strong exclusive branding rights in the market.
Who owns work created by a contractor?
Not always the business that paid for it. Ownership depends on the contract and the legal relationship. If the contractor agreement does not clearly assign IP to the company, the contractor may retain rights.
What if the product was created before the company existed?
The founders may need to transfer the IP into the company formally. This often comes up with early code, branding, product designs and domain names acquired before incorporation.
Can open source software affect a sale or investment round?
Yes. Open source use is common and often acceptable, but licence terms need to be checked carefully. The issue is whether the business has complied with the relevant conditions and whether those terms affect commercialisation, distribution or disclosure obligations.
Key Takeaways
- An IP due diligence review checks whether a business owns, controls and can lawfully use the IP that underpins its value.
- The review should cover registered rights, unregistered assets, contracts, software, branding, data use, confidentiality and infringement risk.
- Founders often run into trouble where code, logos, content or domains were created before incorporation or by contractors without clear assignment terms.
- Trade marks, software licences, open source use, privacy settings and change of control clauses can all affect valuation and deal certainty.
- Preparation works best before you sign a contract, before you invest in branding, and before a buyer or investor starts asking for evidence.
- Clear records, signed agreements and accurate disclosure can prevent price reductions, delays and avoidable disputes.
If your business is dealing with IP due diligence review and wants help with trade mark protection, IP assignment documents, software and contractor agreements, or deal warranties and disclosures, you can reach us on 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.








