Most founders panic the second HR comes up.
They picture a battalion of compliance officers, endless handbooks, and a budget that bleeds red.
But people risk does not wait until you “officially” have HR. It shows up the moment you start hiring, managing performance, paying people, or handling conflict.
That’s the mistake: founders think HR is a department, when in reality it’s a set of decisions. If nobody owns those decisions, the risks still exist; they’re just unmanaged.
If you’re scaling fast, real problems show up early:
- A manager promises something in Slack and forgets it by Friday.
- A complaint gets handled informally, then escalates because nobody documented the first response.
- Payroll, classification, and leave questions get guessed at instead of reviewed.
- A “small” conduct issue becomes a retention, reputation, or legal problem.
You do not need to hire a VP of HR to reduce that risk. You do need a few basic systems that make the business harder to break.
1. Write it down.
Verbal promises get lost fast.
Start with the basics: conduct, time off, pay, complaint handling, and who to go to when something goes wrong. In Ontario, employers also need to stay aligned with core statutory obligations such as workplace harassment policies and, for some employers, written job-posting and workplace-information requirements that changed in 2025 and 2026.
Keep it simple. One clear page is better than a polished handbook nobody uses.
The goal is not legal theater. The goal is consistency, so managers do not improvise policy on the fly.
2. Name one owner.
Not everyone.
Not the whole leadership team.
One person should own the “people stuff,” even if they are not a full-time HR leader.
When ownership is vague, everything becomes a group project, and group projects are where accountability goes to disappear. A single owner can track policies, watch for patterns, and make sure issues do not linger until they become expensive. Canadian small-business guidance consistently recommends clear responsibility instead of letting compliance drift across multiple managers.
This role does not need to be glamorous. It needs to be real.
3. Check in quarterly.
Put a recurring calendar block on the books.
It can be a spreadsheet review, a leadership meeting, or a coffee chat with the person who owns people risk. What matters is that you regularly ask: Where are things getting weird?
That question catches patterns early. Rising complaints, manager inconsistency, burnout, attendance issues, and turnover rarely appear all at once; they surface in small signals first. A quarterly rhythm also makes it more likely you will notice when legal or policy obligations need updating, especially as thresholds change with growth.
If you wait until something blows up, you are not managing risk. You are triaging damage.
4. Use outside help early.
Fractional HR, employment counsel, or a trusted advisor can prevent small mistakes from becoming expensive ones.
That does not mean you need a huge retainer or a permanent seat on the org chart. It means you should get a second set of eyes before a termination, a policy change, a new jurisdiction, or a sensitive complaint creates avoidable exposure. For scaling startups, fractional HR is often positioned as a way to get experienced leadership without the cost of a full-time hire.
Outside help is especially useful when a company is too small for a full HR team but already too complex for founder instinct alone.
5. Don’t guess on compliance.
Google is not an HR oracle.
If you are unsure whether something is legal, documentable, or required, ask someone who gets paid to know.
That is not fear. That is discipline.
In Ontario, employers have clear obligations around workplace harassment policies and complaint handling, and federal workplaces have related duties to prevent and address harassment and violence through a written policy and resolution process. Those are not the kind of things you want to “figure out later.”
A cheap answer today can become an expensive mistake tomorrow.
The real point
Every founder has a story about the moment people risk turned into people drama.
A messy termination.
A complaint nobody escalated.
If you are betting on growth but ignoring these basics, you are not scaling. You are gambling.
A manager who “meant well” and still caused harm.
The good news is that control does not require a big HR department. It requires clarity, ownership, cadence, and judgment.
That is a founder problem first.
HR is just where it shows up.
What is the single biggest HR risk you have seen in a company without an HR leader?