Summary. Governance is not a document set; it is a cadence. A board that meets on a schedule, receives materials in advance, surfaces conflicts before discussion, oversees the two or three risks that could destroy the company, and records enough to show that a judgment was exercised will satisfy essentially every fiduciary standard in American corporate law. This toolkit builds that cadence: composition and charters, meeting mechanics and minute practice, conflict procedures, the oversight architecture that answers a Caremark claim, and the protective stack. It closes with an annual calendar and a diagnostic for an existing board.

What this toolkit is for, and who should use it

Most governance failures are not scandals. They are a board that stopped meeting during a growth period, a conflict everyone knew about and nobody papered, a compliance report that never reached the directors, and minutes that record resolutions and nothing else. Each is invisible until a books-and-records demand produces the file.

This toolkit is for a private company with an outside investor or an independent director, for a family business professionalizing its board, and for the general counsel or corporate secretary responsible for making the process work. It assumes a board of three to nine people and no dedicated governance staff.

Roadmap at a glance

  1. Composition and structure — who sits on the board and why.
  2. Charters and delegation — what each body may decide.
  3. The meeting — materials, agenda, and conduct.
  4. The record — minutes, consents, and the minute book.
  5. Conflicts — disclosure, recusal, and cleansing procedures.
  6. Oversight — identifying mission-critical risks and the reporting that reaches the board.
  7. Compliance infrastructure — codes, policies, and the whistleblower channel.
  8. Compensation — process, benchmarking, and documentation.
  9. The protective stack — exculpation, indemnification, advancement, and insurance.
  10. Information rights and books-and-records readiness.
  11. The annual calendar.
  12. A diagnostic for an existing board.

Stage 1 — Composition and structure

Decide deliberately rather than by accretion.

  • Size. Three to seven for a private company. Larger boards deliberate worse and meet less often.
  • Composition. Management directors, investor-designated directors, and at least one genuinely independent director — someone with no employment, family, business, institutional, or philanthropic relationship material to them with any interested party.
  • The independent director is the most valuable seat on a private board, and the appointment mechanism should be mutual rather than controlled by one side.
  • Observers should be limited in number, and the board should reserve the right to exclude them from privileged or conflicted portions of a meeting.
  • Terms and removal as the charter and any voting agreement provide.
  • Onboarding. A director package containing the charter, bylaws, any stockholders' agreement, committee charters, the current business plan, the last four meetings' materials, the D&O policy summary, and the indemnification agreement.

Illustration. A company adds a second investor director and finds itself with a four-person board split two-two on every contested question. The fix — a mutually agreed fifth independent director — takes one board action and prevents a deadlock that would otherwise require a court.

Resources

Stage 2 — Charters and delegation

  • Committee charters for audit, compensation, and nominating and governance, each stating authority, composition, meeting cadence, and reporting obligation. Add a risk or compliance committee where a mission-critical risk warrants dedicated attention.
  • A delegation of authority matrix stating what management may do, what requires committee approval, and what requires the board — by category and dollar threshold. Review it against actual practice annually; most matrices drift.
  • Protective provisions in the charter or a stockholders' agreement, listing what requires investor consent, with a deemed-consent mechanic so an unreachable holder cannot stall a financing.
  • A forum selection bylaw designating one court for internal-affairs claims.

Resources

Stage 3 — The meeting

  • Cadence. Quarterly at minimum, monthly for an early-stage company, with special meetings as needed. Set the year's dates in advance.
  • Notice complying with the bylaws, or waivers.
  • Materials distributed at least three business days in advance, and longer for a significant transaction. Record the distribution date.
  • An agenda distinguishing action items from informational items.
  • Content for any decision of consequence: background, alternatives considered, risks, financial analysis, and a recommendation with its basis.
  • Executive sessions without management, on a regular cadence.
  • Adjourn rather than decide when the board is not ready. Delay almost never creates liability.

Illustration. A board approves a sale in a two-hour meeting, with no written agreement in front of it, no valuation, and no market check. The price is excellent. The board is still liable, because the question is whether a judgment was exercised, not whether the outcome was good.

Resources

Stage 4 — The record

  • Minutes recording attendance (including advisors and observers, with partial attendance times), materials distributed, topics presented, questions asked, alternatives discussed, conflict disclosures and recusals by name, and the resolutions and votes.
  • Not verbatim, and not one line per topic. Enough to show engagement.
  • Counsel review of minutes for significant meetings.
  • Approval at the next meeting, and a complete, indexed minute book.
  • Written consents prepared with the same care, including recitals establishing the basis for the action.
  • Assume every minute will be produced in a books-and-records demand or in diligence, and draft accordingly.

Resources

Stage 5 — Conflicts

  • Annual conflicts questionnaire plus a real-time disclosure obligation, and a register of related parties screened against transactions.
  • Identify conflicts at the start of the agenda item, before discussion.
  • Recuse and record — the conflicted director leaves for deliberation and vote, with departure and return times noted.
  • For a material conflict, form a special committee of genuinely independent directors, empowered to say no and to retain its own counsel and financial advisor of its own choosing. Empowerment matters more than composition.
  • For a controller transaction, condition it from the outset on both an independent, empowered committee and an informed majority-of-the-minority vote.
  • Present corporate opportunities to the disinterested board formally, and record the refusal.
  • Consider a charter renunciation of specified corporate opportunities, scoped to investor directors' actual activity.

Resources

Stage 6 — Oversight

  • Identify, in writing, the two or three risks that are existential to this company — patient safety for a provider, credit and anti-money-laundering for a lender, product safety for a manufacturer, licensing for a payments company.
  • Assign each to the board or a committee, in a charter, on a defined cadence.
  • Require management reporting against each risk, including negative information, leading indicators, and near misses. A dashboard that only reports green is evidence against the board.
  • Establish a red-flag escalation protocol so a warning letter, whistleblower report, failed audit, recall, or material incident reaches the board with a documented response.
  • Minute the discussion every time.
  • Test the system periodically and document the result.

Illustration. A food company's board never had a committee, a reporting line, or a minute entry on food safety, despite years of failed inspections. When a listeria outbreak followed, the absence of any board-level system — not the outbreak — was what sustained the claim.

Resources

Stage 7 — Compliance infrastructure

  • A code of conduct with annual certifications.
  • A related-party transaction policy with approval thresholds.
  • A whistleblower policy with an anonymous channel and a stated escalation path to the audit committee, and a log reviewed at the committee with the disposition of each report.
  • An insider trading and information policy where relevant.
  • Document retention and litigation hold procedures, with the technical capability to suspend automated deletion.
  • A compliance function with adequate resources, direct board access, and independence from the business it monitors.

Resources

Stage 8 — Compensation

  • A compensation committee of disinterested directors, with a charter.
  • Market data from a credible survey source, reviewed annually.
  • A documented process for executive compensation, including a written rationale for any outlier.
  • Equity grants approved by the board or the committee, at a fair market value supported by a current § 409A valuation, with the grant notice and agreement executed and returned.
  • Founder and insider compensation set at a defensible level with support, before anyone is in a dispute.
  • Minutes reflecting the committee's consideration of the data.

Resources

Stage 9 — The protective stack

Four mechanisms that fail in different places; a company with three of them has a gap.

  • Exculpation in the certificate under 8 Del. C. § 102(b)(7), extended to officers where permitted. Free, and unavailable retroactively.
  • Mandatory indemnification in the bylaws — "shall," not "may."
  • Standalone indemnification agreements with every director and officer, containing mandatory advancement on an undertaking and a covenant against adverse amendment. Worth more than the bylaws, because bylaws can be amended by the people who would owe the indemnity.
  • D&O insurance: limits against actual exposure; dedicated Side A excess; a final adjudication trigger on the conduct exclusion; carve-outs to the insured-versus-insured exclusion for derivative suits and bankruptcy trustees; prior-acts and allocation provisions; and tail coverage addressed in any transaction.
  • Give directors a summary of the coverage. Most have never seen it.

Resources

Stage 10 — Books-and-records readiness

  • Maintain a complete minute book, indexed, with every consent and every set of materials.
  • Maintain the stock ledger reconciled to the cap table.
  • Understand that stockholders have a statutory inspection right — 8 Del. C. § 220 for corporations, 6 Del. C. § 18-305 for LLCs — and that a demand is the opening of litigation.
  • On a demand: issue a litigation hold immediately, covering personal devices and messaging applications; suspend automated deletion; negotiate scope and produce a clean set under a confidentiality and incorporation-by-reference agreement; and never clean up the file.
  • Notify the insurer, because a demand may itself be a claim or a circumstance under a claims-made policy.

Resources

Stage 11 — The annual governance calendar

Assign each item to a named person and put it on the corporate secretary's calendar.

Q1 — Annual meeting or written consent; director elections; officer appointments; conflicts questionnaires collected and reviewed; code of conduct certifications; D&O renewal preparation begun.

Q2 — Committee charters reviewed; delegation of authority matrix reconciled to actual practice; compensation benchmarking; 409A valuation refreshed; equity plan reserve confirmed against the hiring plan.

Q3 — Mission-critical risk list reconsidered; compliance program assessment; whistleblower log reviewed by the audit committee; insurance program reviewed with the broker present at a board or committee meeting; board education session.

Q4 — Budget and plan approval; board and committee self-evaluation, documented; minute book reviewed for completeness and gaps closed; indemnification agreements confirmed for all current directors and officers; next year's meeting calendar set.

Continuous — Materials distributed in advance; minutes drafted within two weeks and approved at the next meeting; conflicts disclosed as they arise; red flags escalated; consents filed in the minute book on execution.

Resources

Stage 12 — A diagnostic for an existing board

Answer these honestly. Any "no" is a project.

  1. Can you produce a complete minute book for the last five years within a day?
  2. Were materials distributed in advance of the last four meetings, and is the distribution date recorded?
  3. Do the minutes of the last four meetings show questions asked and alternatives considered, or only resolutions?
  4. Is there a written list of the company's mission-critical risks, and does each appear in the minutes within the last twelve months?
  5. Does negative information reach the board, or only summaries?
  6. Was every related-party transaction in the last three years disclosed, with the interested director recused and the recusal recorded?
  7. Does every current director and officer have a signed indemnification agreement with mandatory advancement?
  8. Does the certificate contain an exculpation provision?
  9. Has anyone read the D&O policy's insured-versus-insured exclusion?
  10. Is the delegation of authority matrix consistent with what management actually does?
  11. Has the whistleblower channel received anything, and did the audit committee see it?
  12. Could you answer a books-and-records demand tomorrow without creating anything new?

A board answering yes to all twelve is protected by the business judgment rule in the overwhelming majority of cases. A board answering no to several is exposed regardless of how well the business is performing — which is the same lesson the fiduciary cases have taught for forty years.

Master resource index

Articles

Checklists

Related toolkits

External and primary sources

This toolkit is educational and not legal advice. Fiduciary standards, exculpation and indemnification rules, and the permissible modification of duties vary by state and entity type, and Delaware law in this area continues to develop. Consult qualified corporate counsel before adopting or amending governance documents.