Raising Capital: A Startup Securities Toolkit

Corporate > Securities | Published 27 March 2026 - Updated 29 April 2026 | UpLaw - uplaw.us

Every dollar a startup raises from an outside investor is presumptively an illegal securities transaction — until you find the exemption that makes it legal. This toolkit is the map of those exemptions, the instruments that ride on them, and the filings that keep you clean.

Keywords: raising capital, securities exemptions, Regulation D, Rule 506, accredited investor, general solicitation, SAFE, convertible note, priced round, Form D, blue sky, Rule 701, Regulation Crowdfunding, Regulation A+, Howey test

---

How to read this toolkit

Fundraising law feels like a thicket because founders meet it out of order — they sign a SAFE first and learn what a "security" is later. This toolkit puts the pieces back in logical sequence so you can see the whole board before you make a move.

Read it as a resource map, not a statute. Each section states the governing doctrine in plain English, anchors it to the controlling statute, rule, or case, and then points you to the UpLaw article, guide, or checklist that goes deep on that piece. Skim the "at a glance" list next, find the stage you are in, and jump. When it is time to actually run a round, follow the deep-dive resources and the consolidated checklist at the end.

A word on scope. This toolkit covers U.S. federal securities law as it applies to early-stage private companies — the exemptions a startup uses to raise seed and venture money, plus the instruments and filings that go with them. It does not cover public offerings, broker-dealer regulation, investment-company or investment-adviser rules, or tax in any depth (the tax mechanics of founder and employee equity live in their own resources). And it is general legal information, not advice. Securities missteps are among the few startup mistakes that carry personal liability and rescission rights, so treat the deep dives as reading and treat qualified counsel as the person who signs off before you accept a check.

If you want the single narrative companion to this map, read Raising Capital Legally: A Comprehensive Guide to Securities Exemptions for Startups. This toolkit organizes and extends that guide; that guide fills in the prose.

The fundraising map at a glance

Here is the whole lifecycle in one view. Each item is a stage you will pass through, with the section of this toolkit that covers it.

• Foundation — Is your instrument a security? (It almost always is.) Why Section 5 means you need an exemption for every raise.
• Pick your exemption — Reg D 504 / 506(b) / 506(c), Reg CF crowdfunding, Reg A+ (Tier 1/Tier 2), Rule 701 for employees, or the bare Section 4(a)(2) private offering.
• Know your investors — Who is accredited, when you may generally solicit, and how verification differs by exemption.
• Choose your instrument — SAFE, convertible note, or priced preferred stock; what each does to your cap table.
• Paper the employee side — Rule 701, the option pool, and equity for advisors and contractors.
• File and notice — Form D within 15 days; state blue-sky notice filings under NSMIA.
• Tell the truth — Anti-fraud liability under Rule 10b-5 and Section 12(a)(2); when you need a private placement memorandum.
• Be ready to be checked — Diligence readiness and a clean cap table so the next round closes.

Our fictional guide through all of this is Quill Robotics, Inc., a Delaware C-corp building warehouse-picking arms. Quill starts with a friends-and-family SAFE, raises a seed on SAFEs sold to angels, and then converts everything in a priced Series A led by an institutional venture fund. We will watch each decision as it lands on Quill.

Foundation — is it a security, and why exemptions matter

Start with the rule that governs everything else. Section 5 of the Securities Act of 1933 (15 U.S.C. § 77e) makes it unlawful to offer or sell any security in interstate commerce unless a registration statement is in effect or the transaction is exempt. Registration is the full-blown IPO machinery — prospectus, SEC review, audited financials, ongoing reporting. No seed-stage startup registers. So every startup raise depends on fitting inside an exemption. There is no third path.

That makes two questions unavoidable at the door: (1) Is what I am selling a security? (2) If so, which exemption covers this sale?

Is it a security? The catch-all is the "investment contract," and its test comes from SEC v. W.J. Howey Co., 328 U.S. 293 (1946). An investment contract exists where there is (a) an investment of money, (b) in a common enterprise, (c) with an expectation of profits, (d) derived from the efforts of others. Nearly everything a founder sells to raise money clears this bar. Preferred stock is a security by name. A SAFE is a security — it is a contract for future equity bought in the expectation that the founders' efforts will make it valuable. A convertible note is a security twice over (a note and an equity conversion right). Even a "revenue share" or a "profit interest" sold to a passive backer is usually an investment contract under Howey. The lesson: assume it is a security. The rare exception — a truly active co-venturer who works the business — is not the person writing you a check to sit back and wait.

Why exemptions matter — the stakes. If you sell an unregistered, unexempted security, the consequences are not theoretical. Under Section 12(a)(1) the buyer gets a rescission right: they can force you to return their money with interest, often for a year, regardless of how the company performed. State securities administrators can pursue you. And control persons — founders and directors — can face personal liability under Section 15. An exemption is not paperwork; it is the shield.

For the doctrinal deep dive on how these pieces fit for a startup, see Raising Capital Legally: A Comprehensive Guide to Securities Exemptions for Startups. For where financing sits in the broader arc of company-building, The Founder's Path from Formation Through Financing: A Roadmap and Resource Toolkit maps the journey from incorporation to your first priced round.

Quill's first move. Quill's founder wants to take $50,000 from a former colleague for "a piece of the company." The moment she frames it as a passive investment in Quill's future, it is a security under Howey. She cannot just take the check and issue a stock certificate — she needs an exemption. That realization is the entire reason this toolkit exists.

The exemption menu: Reg D, Reg CF, Reg A+, Rule 701, Section 4(a)(2)

Congress and the SEC built a ladder of exemptions, each trading off how much you can raise, from whom, how loudly you may advertise, and how much disclosure and filing you owe. Here is the menu.

Regulation D — the workhorse

Regulation D (17 C.F.R. §§ 230.501–230.508) implements the exemptions in Sections 3(b) and 4(a)(2) and is where the overwhelming majority of startup rounds live. It has three offerings:

• Rule 504 — up to $10 million in a 12-month period. No federal accreditation requirement, but you get no federal preemption of state law, so you must comply with every relevant state's registration or exemption regime. Useful for small, single-state or intrastate-flavored raises; rarely the tool for a venture round.
• Rule 506(b) — unlimited raise; sell to unlimited accredited investors plus up to 35 non-accredited but sophisticated investors; no general solicitation — you may only approach people with whom you (or your placement agent) have a substantive, pre-existing relationship. This is the classic quiet private placement and the most common startup path. Self-certification of accredited status (a checked box) is generally acceptable because you may reasonably rely on investor representations.
• Rule 506(c) — unlimited raise; accredited investors only; you may generally solicit and advertise — demo days, LinkedIn, a public "we're raising" post — but in exchange you must take reasonable steps to verify each investor's accredited status (review W-2s, tax returns, brokerage statements, or a qualified third party's letter). The trade is publicity for a real verification burden.

Both 506(b) and 506(c) are "covered securities" under NSMIA, meaning states cannot impose their own registration — a huge simplification discussed below.

To run a Reg D deal end to end, use Running a Regulation D Private Placement: A Securities Compliance Checklist, the companion checklist that turns this section into filing-desk steps.

Regulation Crowdfunding (Reg CF) — the retail path

Reg CF implements Section 4(a)(6) and lets a company raise up to roughly $5 million in a 12-month period from the general public — accredited and non-accredited alike — but only through a registered funding portal or broker-dealer, with investment caps tied to each investor's income and net worth, and mandatory disclosures on Form C (including financial statements that must be reviewed or audited above certain thresholds). Reg CF is powerful for consumer brands with a fan base; it is heavier on process and public disclosure than a quiet 506(b).

Regulation A+ — the "mini-IPO"

Regulation A (as expanded by the JOBS Act) offers two tiers. Tier 1 allows up to $20 million with state coordination; Tier 2 allows up to $75 million in a 12-month period, preempts state registration, permits general solicitation and non-accredited investors (subject to per-investor caps), and requires a qualified offering circular (Form 1-A) plus ongoing reporting. Reg A+ is a genuine capital-raising machine for later-stage or brand-driven companies, but the audit, filing, and legal costs put it out of reach for a typical seed round.

Rule 701 — equity for the team

Rule 701 is the exemption that lets a private company issue securities to employees, directors, officers, consultants, and advisors under a written compensatory benefit plan — your stock options and restricted stock — without registration. It has volume limits and, above a disclosure threshold ($10 million of securities sold in a 12-month period under current rules), triggers enhanced disclosure to recipients. Rule 701 is why your option pool is legal. It is covered in its own section below.

Section 4(a)(2) — the bare private offering

Behind Reg D sits the statutory exemption it was built on: Section 4(a)(2) exempts "transactions by an issuer not involving any public offering." The Supreme Court gave it meaning in SEC v. Ralston Purina Co., 346 U.S. 119 (1953), holding that whether an offering is "public" turns on whether the offerees need the protection of the Act — i.e., whether they can fend for themselves because they have access to the kind of information registration would provide. Reg D Rule 506 is a safe harbor that gives 4(a)(2) bright lines; you can rely on raw 4(a)(2) without Reg D, but then you lose the safe harbor's certainty and NSMIA preemption. Most founders use 506 precisely to avoid arguing Ralston Purina factors after the fact.

Quill picks its lane. Quill's seed is angels the founders know personally, no public announcement — a clean Rule 506(b). A year later, wanting to post about the raise on social media and add a few angels they have never met, they consider 506(c) and accept the verification burden for the publicity. Reg CF and Reg A+ never enter the picture; Quill's investors are individuals it can verify, not a crowd.

Accredited investors, general solicitation, and verification

Three concepts recur across the whole menu, so learn them once.

Accredited investor (Rule 501). An individual qualifies by income (over $200,000, or $300,000 with a spouse, in each of the last two years with a reasonable expectation of the same) or by net worth (over $1 million excluding the primary residence). Entities qualify by asset size or by having all equity owners be accredited. The SEC has added qualification by certain professional certifications (e.g., holders of Series 7, 65, or 82 licenses). Accreditation matters because most startup exemptions either restrict the round to accredited investors or cap the number of non-accredited ones.

General solicitation. The line between a "private" and "public" offering is whether you solicit generally — advertising, public posts, unrestricted websites, cold outreach to strangers. Under 506(b) you may not generally solicit; you rely on pre-existing, substantive relationships. Under 506(c), Reg CF, and Reg A+ you may. Under raw 4(a)(2), general solicitation is fatal. This single question determines whether you can talk about your raise on the internet.

Verification. How hard you must confirm accredited status depends on the exemption. Under 506(b) you may reasonably rely on the investor's written representation (self-certification). Under 506(c) you must take reasonable steps to verify — documentary review or a third-party verification letter from a lawyer, CPA, broker-dealer, or registered adviser. Do not blur the two: a company that advertised its round (making it a 506(c) offering by conduct) but only collected self-certification checkboxes has blown the exemption.

For the mechanics of gathering accreditation reps and running verification inside a live deal, again see Running a Regulation D Private Placement: A Securities Compliance Checklist.

The instruments: SAFEs, convertible notes, and priced preferred rounds

The exemption legalizes the sale; the instrument is what you actually sell. Three dominate early-stage financing.

SAFEs

A SAFE (Simple Agreement for Future Equity), created by Y Combinator, is a contract giving the investor the right to receive equity in a future priced round, usually subject to a valuation cap and/or a discount. It is not debt: no maturity date, no interest, no repayment obligation. It is fast, cheap, and founder-friendly, which is why seed rounds run on it. But a SAFE is unambiguously a security, so it still needs an exemption (almost always 506(b) or 506(c)).

The catch founders miss is dilution stacking: every SAFE converts at the next round, and a stack of SAFEs with different caps can quietly hand away far more of the company than the "post-money" cap suggests. Post-money SAFEs (the current standard) at least make the dilution legible before conversion. For how SAFEs actually behave, read Simple Agreements for Future Equity: An Overview of How SAFEs Actually Work; to run the round itself, use Running a SAFE Financing Round: A Practical Checklist.

Convertible notes

A convertible note is a loan that converts to equity at a future round. Because it is debt, it carries a principal amount, an interest rate, and a maturity date — and if it matures before a qualifying round, the investor can, in principle, demand repayment or force a conversion, which is leverage a founder rarely wants pointed at them. Notes typically carry a cap and discount like a SAFE, plus accrued interest that converts into additional shares. Choose a note over a SAFE when investors want the (mostly nominal) protection of creditor status or a defined maturity. Everything about the securities-law treatment is the same: a note is a security and needs an exemption.

Priced preferred rounds

Eventually a lead investor prices the company and buys preferred stock — the Series Seed or Series A. This is the real thing: a negotiated per-share price, a defined pre- and post-money valuation, and a stack of preferred rights (liquidation preference, anti-dilution protection, board seats, protective covenants, information rights, pro rata rights). All outstanding SAFEs and notes convert into (usually shadow) preferred at this event. A priced round is documented on the NVCA-style suite — stock purchase agreement, certificate of incorporation, investors' rights agreement, voting agreement, right of first refusal/co-sale agreement.

For the founder's-eye view of that first institutional round, read Bringing On New Investors After the Seed Round: Navigating the First Priced Financing. The document suite you will be signing is inventoried in The Startup Legal Document Stack: What Founders Need and Why.

Quill goes from SAFE to Series A. Quill raised $1.5 million on post-money SAFEs at a $10 million cap. Eighteen months later, Meridian Ventures offers to lead a $6 million Series A at a $24 million pre-money valuation. At closing, the SAFEs convert to shadow preferred at their $10 million cap (a good outcome for those early angels, a real chunk of dilution for the founders), Meridian buys new Series A Preferred, and Quill signs the full NVCA suite. The founder finally sees, on a fully diluted cap table, exactly what the SAFE stack cost — the lesson every founder learns at their first priced round.

Employee and advisor equity (Rule 701 and the option pool)

Equity is how startups pay people they cannot yet afford, and issuing it is a securities transaction too. Rule 701 is the exemption that makes compensatory equity legal for private companies: options and restricted stock granted to employees, officers, directors, general partners, consultants, and advisors under a written plan or agreement. Above the disclosure threshold ($10 million in securities issued in a 12-month period), you must deliver enhanced disclosure — including financial statements and risk factors — to recipients. Most startups stay under it for years, but growth-stage companies must watch it.

Two adjacent points founders always ask about:

• The option pool. Investors will require you to reserve a pool of shares (often 10–20%) for future hires, and — critically — they usually want it created pre-money, so the dilution falls on existing holders (you), not on the new investor. This is a negotiation, not a rule.
• Founder equity and vesting. Founder shares should vest over time and are usually bought as restricted stock, which makes the 83(b) election essential: filing it within 30 days of the grant lets a founder pay tax on the (tiny) value at grant rather than as the stock vests and appreciates. Miss the window and the tax bill can be brutal. The full mechanics live in Founder Equity, Vesting, and the 83(b) Election: A Practical Checklist.

Getting the equity plan, the pool, and founder vesting right at incorporation saves enormous cleanup later. Incorporating a Startup the Right Way: A Founder's Legal Checklist sets up the corporate scaffolding these grants ride on.

Form D, blue-sky notices, and ongoing compliance

An exemption is not self-executing paperwork-free — Reg D carries filing obligations, and the states carry their own.

Form D. For any Reg D offering (504, 506(b), or 506(c)), you must file a Form D with the SEC electronically through EDGAR within 15 days after the first sale of securities. Form D is a short notice, not a disclosure document — it names the issuer, the exemption claimed, the offering size, and the amount sold. It is easy to file and easy to forget; a missed or late Form D can complicate future financings and, in some states, jeopardize the state exemption. File it on time, and file an amendment annually while the offering continues.

Blue sky. Every state has its own securities law ("blue sky" laws). The saving grace is NSMIA (Section 18 of the Securities Act), which preempts state registration for "covered securities" — including Rule 506(b) and 506(c) offerings. But preemption of registration is not preemption of everything: states may still require a notice filing (typically a copy of the Form D and a fee) and retain anti-fraud authority. So for a 506 deal you generally file Form D federally and a notice-plus-fee in each state where an investor resides. Note the asymmetry: Rule 504 is not covered by NSMIA, so a 504 offering must satisfy each state's substantive rules — one of the main reasons 504 is used sparingly.

For entrepreneurs running several ventures or a holding structure, be careful that each entity's raises are tracked separately; Running Multiple Businesses Under One Structure: A Deep Dive into Holding, Operating, and Parent Companies explains how the entity map interacts with financings.

Anti-fraud, disclosure, and the private placement memorandum

Here is the point that catches founders off guard: finding an exemption from registration does not exempt you from the anti-fraud rules. No matter which exemption you use, you remain liable under Section 17(a) of the Securities Act, Section 10(b) and Rule 10b-5 of the Exchange Act, and Section 12(a)(2) for any material misstatement or omission in connection with the sale. You cannot lie, and you cannot leave out something material — a pending lawsuit, a co-founder's departure, a key customer's cancellation, a going-concern risk.

Two practical implications:

• Disclosure is a shield. Even when no exemption requires a formal disclosure document, telling investors the truth — clearly and in writing — is what protects you from a later fraud claim. When you sell to non-accredited investors under 506(b), Reg D actually mandates specified disclosure. When you sell only to accredited investors, disclosure is not mandated but is still wise.
• The private placement memorandum (PPM). A PPM is the disclosure document for a private offering: business description, risk factors, use of proceeds, capitalization, terms, and the offering documents. Most SAFE and seed rounds skip a full PPM (the SAFE plus a short deck and a risk-factors sheet suffices), but larger or non-accredited-heavy rounds warrant one. Its real function is not ceremony — it is the written record that you disclosed the risks.

Getting diligence-ready and the cap table

The best-run raise stalls if the company cannot survive due diligence. Before a lead investor wires money, its counsel will inspect your corporate records, cap table, IP assignments, key contracts, employment and contractor agreements, prior financing documents, and securities-law compliance (yes — they will ask to see your Form D filings and your accreditation records). Gaps here are where deals slow, valuations get chipped, and closings slip.

Two anchors:

• A clean cap table. Your capitalization table is the ledger of who owns what — founders, option holders, SAFE and note holders, and (after the round) preferred holders — on a fully diluted basis. It must reconcile exactly to your signed documents. A cap table that does not tie to the paper is the single most common diligence red flag, and SAFE stacks with inconsistent caps are the usual culprit.
• A diligence-ready data room. Assemble the corporate, IP, financing, and compliance documents before you start fundraising, not after a term sheet. The comprehensive playbook is Getting Diligence-Ready Before You Raise: A Comprehensive Guide for Founders.

If you are building the underlying legal foundation of the business at the same time, The Small Business Legal Toolkit and The Commercial Contracts Toolkit: Drafting, Reviewing, and Enforcing Business Agreements map the contracts and entity work a diligent investor will expect to already be in place.

The map as a working checklist

Use this as the gated sequence for a real raise. Do not advance a gate until the prior one is closed.

Gate 1 — Confirm you are selling a security and need an exemption.

• [ ] Assume the instrument is a security under Howey; confirm with counsel if you think otherwise.
• [ ] Confirm registration is off the table and an exemption is required (it is).

Gate 2 — Choose the exemption.

• [ ] Decide: 506(b) (quiet, some non-accredited) vs. 506(c) (advertise, accredited-only, verify) vs. 504 / Reg CF / Reg A+ for special cases.
• [ ] If you will publicize the raise at all, default to 506(c) and plan for verification.

Gate 3 — Qualify your investors.

• [ ] Collect accreditation representations (506(b)) or verification evidence (506(c)).
• [ ] Cap non-accredited investors at 35 and provide required disclosure if using 506(b) with any non-accredited.

Gate 4 — Choose and paper the instrument.

• [ ] SAFE, convertible note, or priced preferred — and model the dilution before signing.
• [ ] Use standard-form documents; have counsel review deviations.

Gate 5 — Handle employee equity.

• [ ] Adopt an equity plan under Rule 701; confirm you are under the enhanced-disclosure threshold.
• [ ] File 83(b) elections within 30 days of any restricted-stock grant.

Gate 6 — File and notice.

• [ ] File Form D on EDGAR within 15 days of the first sale.
• [ ] Make state blue-sky notice filings and pay fees in each investor's state.

Gate 7 — Disclose and don't defraud.

• [ ] Provide honest, written disclosure of material facts and risks; prepare a PPM if the round warrants one.

Gate 8 — Stay diligence-ready.

• [ ] Keep the cap table reconciled to signed documents.
• [ ] Maintain a data room of corporate, IP, financing, and compliance records.

Primary Authority

• Securities Act of 1933 — § 5 (registration requirement), 15 U.S.C. § 77e; § 3(b) (small-issue exemptive authority); § 4(a)(2) (private-offering exemption); § 4(a)(6) (crowdfunding); § 12(a)(1) (rescission for unregistered sales); § 12(a)(2) and § 17(a) (anti-fraud).
• Regulation D — 17 C.F.R. §§ 230.501–230.508 (Rules 501 accredited-investor definition, 504, 506(b), 506(c); Form D under Rule 503).
• Regulation Crowdfunding — 17 C.F.R. Part 227 (implementing Securities Act § 4(a)(6)).
• Regulation A — 17 C.F.R. §§ 230.251–230.263 (Tier 1 and Tier 2, Form 1-A).
• Rule 701 — 17 C.F.R. § 230.701 (compensatory issuances by private companies).
• National Securities Markets Improvement Act (NSMIA) — Securities Act § 18, 15 U.S.C. § 77r (preemption of state registration for covered securities).
• Securities Exchange Act of 1934 — § 10(b) and Rule 10b-5, 17 C.F.R. § 240.10b-5 (anti-fraud).
• SEC v. W.J. Howey Co., 328 U.S. 293 (1946) — the investment-contract test defining "security."
• SEC v. Ralston Purina Co., 346 U.S. 119 (1953) — "public offering" turns on whether offerees need the Act's protection.

Secondary Sources

• Louis Loss, Joel Seligman & Troy Paredes, Securities Regulation (treatise) — the standard reference on the registration/exemption framework.
• Thomas Lee Hazen, The Law of Securities Regulation — concise doctrinal overview of exemptions and anti-fraud.
• SEC, Small Entity Compliance Guides and Compliance & Disclosure Interpretations on Regulation D, Regulation Crowdfunding, and Rule 506(c) verification.
• National Venture Capital Association (NVCA) model financing documents — the market-standard priced-round suite.

Related UpLaw Resources

Related Guides & Articles

• Raising Capital Legally: A Comprehensive Guide to Securities Exemptions for Startups
• Simple Agreements for Future Equity: An Overview of How SAFEs Actually Work
• Bringing On New Investors After the Seed Round: Navigating the First Priced Financing
• Getting Diligence-Ready Before You Raise: A Comprehensive Guide for Founders
• The Startup Legal Document Stack: What Founders Need and Why
• Running Multiple Businesses Under One Structure: A Deep Dive into Holding, Operating, and Parent Companies

Related Checklists

• Running a Regulation D Private Placement: A Securities Compliance Checklist
• Running a SAFE Financing Round: A Practical Checklist
• Founder Equity, Vesting, and the 83(b) Election: A Practical Checklist
• Incorporating a Startup the Right Way: A Founder's Legal Checklist

Related Toolkits

• The Founder's Path from Formation Through Financing: A Roadmap and Resource Toolkit
• The Small Business Legal Toolkit
• The Commercial Contracts Toolkit: Drafting, Reviewing, and Enforcing Business Agreements

---

This toolkit is general legal information from UpLaw (uplaw.us), not legal advice, and does not create an attorney-client relationship. Securities laws, rules, dollar thresholds, and filing fees change, and their application depends on your specific facts; verify current requirements and consult qualified securities counsel before offering or selling any security.