Carta

1. Data Collection: The first step involves gathering necessary data, including the cap table and Articles of Incorporation. This foundational information is crucial for getting started with Carta.

2. Kick Off Call: After data collection, a kick-off call is scheduled with the onboarding manager. This call aims to address any missing data points, clarify questions, and ensure all necessary information is in place for a successful implementation.

3. Data Reconciliation: This step involves ensuring that the cap table accurately reflects on Carta. It may require providing additional documents to reconcile any discrepancies between the existing records and the data entered into Carta.

4. Sign Off: The final step in the onboarding process is to verify the cap table and sign the securities. This formalizes the implementation and marks the completion of the setup process.

1. Customizable Features and Settings: Carta offers customizable options and settings that allow users to tailor alerts and workflows to suit their specific needs. This flexibility is crucial for adapting the software to various operational requirements and user preferences, enhancing productivity and efficiency.

2. Equity Plan Administration: Carta provides tools to manage and administer equity compensation plans, which can be customized according to the specific requirements of different companies. This includes handling various types of equity instruments like stock options, RSUs, and ESPPs.

3. Custom Reporting and Valuations: Carta supports customized reporting capabilities, which are essential for companies to generate specific reports based on their unique data needs. Additionally, Carta offers valuation services, including 409A valuations, which can be tailored to the company's specific financial and operational context.

4. Integration Capabilities: Carta can integrate with various other tools and platforms, enhancing its utility and customization. For instance, Carta integrates with top tools for finance and accounting, which allows it to fit seamlessly into the broader tech stack of a company.

5. Tiered Pricing and Services: Carta's tiered pricing model offers different levels of features and services, which companies can choose from based on their size, stage, and specific needs. This tiered approach allows for scalability and customization as the company grows.

6. Custom Coded Waterfall Modeling: For complex financial modeling, Carta offers custom-coded waterfall models that are tailored to a company's unique distribution rules as outlined in their operating agreements. This feature is particularly valuable for companies with complex financial structures.

7. Custom Module Editor for Image Analysis: In a different application of Carta software, the IN Carta Image Analysis Software features a Custom Module Editor that allows users to create highly customized image analysis protocols. This tool is designed to meet specific research needs, providing flexibility in how images are analyzed and data is interpreted.

1. Setup Fees: While not explicitly mentioned, software platforms like Carta often require an initial setup process, which may include data migration, customization, and training. These services could potentially incur setup fees, depending on the complexity of the implementation and the level of support required.

2. Maintenance Fees: Maintenance or subscription fees are common for SaaS products, covering ongoing support, software updates, and access to cloud-based services. Carta's pricing structure is based on annual subscriptions, with costs varying by headcount size and chosen tier (Launch, Build, Grow, Scale). These tiers suggest that maintenance and access to the platform's features are included within the annual subscription cost.

3. Support Charges: Carta offers hands-on customer support during migration and continued assistance once the platform goes live. While specific support charges are not mentioned, the provision of hands-on support suggests that Carta values customer service, which may be included as part of the subscription fee rather than as an additional cost.

4. Additional Services: Carta offers various services such as 409A valuations, which are essential for compliance and financial reporting. While the basic subscription may include standard 409A valuations, complex valuations or additional financial services might incur extra charges.

5. Integration Costs: Carta supports integrations with over 50 HR platforms and other systems. Depending on the complexity and number of integrations required, there might be additional costs associated with setting up and maintaining these integrations.

6. Training Costs: While Carta is designed to be user-friendly, new users may require training to fully leverage the platform's capabilities. If Carta offers specialized training sessions or materials beyond the basic support, these could potentially come with additional costs.

1. Certification Program: Carta provides a structured certification program that includes multiple levels of training, each designed to enhance the user's proficiency with the platform. The program is divided into three tiers: Proficient, Premier, and Expert, each consisting of two one-hour sessions. This program is aimed at law firm and equity admin users, helping them to understand and utilize Carta's tools and workflows effectively.

2. Support Options: Carta offers a range of support options, including comprehensive guides, video tutorials, and a dedicated customer service team. These resources are designed to assist users in navigating the platform, troubleshooting issues, and maximizing their use of Carta's features.

3. Community Insights and Help Resources: Carta's community insights provide valuable tips on navigating SaaS procurement and utilizing Carta effectively. Additionally, Carta's help resources, such as FAQs and user guides, offer detailed information and solutions for common issues, enhancing the user support experience.

4. Interactive Learning: Carta's Equity 101 educational program is another resource aimed at providing fundamental concepts about equity. This program includes engaging and informative lessons that are accessible for users across various industries and life stages, helping them understand and maximize their equity options.

1. Encryption: Data encryption is a critical security measure mentioned in multiple sources. It ensures that data, whether at rest or in transit, is encrypted, making it unreadable without the appropriate decryption keys. This is a cornerstone of data security policies and is considered non-negotiable for sensitive data.

2. Data Lifecycle Management (DLM): DLM involves managing the entire lifecycle of data from creation and storage to usage and eventual destruction, in compliance with enterprise policies. This includes automated processes to keep data secure and available, and safely destroying it according to organizational policies.

3. Penetration Testing: Regular penetration testing is conducted to identify and fix vulnerabilities. This includes testing for low-level vulnerabilities such as buffer overflow attacks, SQL injection, and XSS, among others. It helps in maintaining robust security by addressing potential entry points for attackers.

4. Physical Security Measures: Physical access controls are implemented to protect data at rest. This includes securing physical media and facilities to prevent unauthorized access and potential data breaches.

5. Data Sanitization and Equipment Disposal: Proper data sanitization processes are in place to ensure that storage is explicitly overwritten before reallocation. Equipment disposal is also managed in-house to prevent data leakage from discarded hardware.

6. Network Protection and Monitoring: Multilevel security products and practices are used to ensure network security. This includes using firewalls, intrusion detection systems, and continuous monitoring to prevent and detect unauthorized access or anomalies in network traffic.

7. Access Control: Managing who can access data is fundamental to data security. This includes implementing robust access control measures to limit who can read, edit, save, and share sensitive information.

8. Security Awareness Training: Training staff, contractors, and partners on organizational security policies and best practices is crucial to prevent unintentional or malicious breaches. This helps in raising awareness about potential security threats and the importance of following security protocols.

9. API Security: The use of APIs is secured through frameworks that allow controlled data flow between systems. This includes building integrations into workflow processes and providing support for custom integration development.

10. Backup and Recovery: Regular data backups are essential to ensure that data can be restored in the event of loss or corruption. This acts as an insurance policy against data loss scenarios, such as ransomware attacks.

1. Periodic Updates: Carta periodically releases updates to its software platforms, including the Carta for iPhone app and the Carta 2 firmware. These updates aim to improve user experience, introduce new functionalities, and address any identified issues.

2. User Notification and Documentation: When updates are available, Carta informs its users through various channels, which may include direct notifications within the software, email announcements, or posts on their official blog and social media platforms. For significant updates, Carta provides detailed documentation or release notes that outline the changes, new features, and any necessary actions users need to take.

3. License Activation and Protocol Updates: For specific software like the IN Carta Image Analysis Software, after upgrading, users must activate their license again and update any existing protocols to ensure compatibility with the new version. This process is crucial for maintaining access to the software's full capabilities and avoiding disruptions to ongoing work.

4. Support for Transition: Carta offers support to users during the transition to a new update. This includes providing installation guides, troubleshooting tips, and customer support assistance for any issues that arise during or after the update process. For complex updates, Carta may offer additional resources such as video tutorials or live support to guide users through the update process.

5. Continuous Improvement and Feedback Loop: Carta's update process is part of a continuous improvement cycle that involves gathering user feedback, monitoring the performance of new features, and making further adjustments as needed. This approach ensures that Carta's software evolves to meet the changing needs of its users and stays competitive in the market.

1. Data Ownership: Carta recognizes the importance of safeguarding personal information and considers it a paramount responsibility. The company adheres to strict procedures and systems to protect cap table data, ensuring that customer data is encrypted both at rest and in transit. Carta follows the principle of least privilege for system and data access, restricting access to authorized individuals based on their assigned role.

2. Data Portability: Carta supports data portability, allowing users, under certain circumstances, to obtain the personal information they have provided to Carta in a structured, commonly used, and machine-readable format. This facilitates the transfer of data to another entity or service provider, empowering users with greater control over their personal information.

3. Compliance and Security Measures: Carta is committed to complying with all applicable laws, statutes, and regulations concerning the protection and handling of personal information. The company employs a robust defense-in-depth strategy to safeguard customer data, including encryption, access control, and regular audits by independent third-party auditors as part of SOC1, SOC2, and ISO 27001 audits.

4. User Rights and Access Control: Carta ensures that access to systems storing customer data is limited to authorized individuals, with documented approval required for access outside a user’s standard job function. The company logs every internal action and click on the platform, providing transparency and accountability. Users have the right to request disclosure, revision, or deletion of their personal information, and Carta commits to addressing these requests promptly after verifying the user's identity.

1. Flexibility and Agility: Organizations prioritize flexibility and agility, allowing them to quickly adapt to market changes or internal shifts in strategy. This is evident in how companies like Carta adapt their offerings and strategies in response to market demands and internal growth targets.

2. Strategic Planning and Forecasting: Effective scaling requires careful planning and forecasting. Organizations assess their current capabilities, market conditions, and future goals to make informed decisions about scaling up or down. This involves using tools and platforms that provide insights into financial metrics, customer data, and operational efficiency.

3. Investment in Infrastructure and Team: Scaling up often necessitates investment in infrastructure and team expansion. This includes adopting enterprise-grade solutions, enhancing team capabilities, and ensuring the infrastructure can support increased demand and complexity.

4. Cost Management and Optimization: Organizations consider the financial implications of scaling, including the impact on budgets, revenue projections, and cost optimization. This involves scrutinizing pricing tiers, subscription costs, and additional charges to ensure alignment with financial goals and operational efficiency.

5. Customer and Employee Focus: Scaling decisions are made with a strong focus on maintaining customer satisfaction and employee engagement. This includes transparent communication, ensuring product and service quality, and fostering a culture that supports growth and adaptation.

6. Risk Management and Compliance: As organizations scale, they pay close attention to risk management and compliance, ensuring that their scaling strategies do not compromise data security, legal obligations, or ethical standards.

7. Leveraging Technology and Partnerships: Effective scaling involves leveraging technology solutions and partnerships that can facilitate growth, improve operational efficiency, and enhance service offerings. This includes adopting platforms like Carta for equity management and exploring collaborations that support scaling objectives.

Contract Renewal:

Automatic Renewal: Carta's subscription services automatically renew for additional one-year periods unless either party notifies the other of their intention not to renew8. This automatic renewal ensures uninterrupted access to Carta's services but requires parties to be mindful of renewal dates to avoid unwanted extensions.

Contract Cancellation:

Cancellation Rights: Customers have the unilateral right to terminate their use and access to Carta's offerings. To initiate the cancellation process, customers are instructed to send an email to a specified address3. This process provides a straightforward method for customers to terminate their services.

No Refunds Policy: All purchases are final, with no refunds, credits, or cancellations except as expressly disclosed at the time of purchase2. This policy emphasizes the importance of careful consideration before purchasing Carta's services.

Termination for Breach: The contract can be terminated due to a breach, with cancellation meaning an end to the contract as created by the right due to a breach10. This clause protects both parties by allowing termination in the event of non-compliance with the contract terms.

Customer Data Access Post-Termination: Upon termination of a customer's access to the Carta Launch Plan, Carta will provide reasonable transition assistance for thirty days to allow the customer to find a new transfer agent. After this period, Carta ceases to act as the customer's transfer agent. Additionally, upon termination, a customer's law firm may retain access to customer data on Carta as long as the law firm continues to represent the customer and is in good standing with Carta1. This provision ensures that essential data remains accessible to authorized parties even after service termination.

Qualifying Event Upgrade Requirement: Under the Carta Launch Plan, certain qualifying events, such as exceeding ten aggregate security holders or adding a new class of stock, require the customer to upgrade their subscription subject to Carta's then-current pricing and service offerings. Access to services and support may be disabled until payment for an upgrade is made1. This clause outlines specific conditions under which customers are obligated to adjust their service level.

1. General Data Protection Regulation (GDPR): Carta is compliant with GDPR, which is crucial for protecting personal data within the European Union. This compliance ensures that Carta handles personal data according to the regulation's strict guidelines, providing users with assurances regarding the privacy and security of their information.

2. Service Organization Control 2 (SOC2): Carta follows SOC2 guidelines, which emphasize the importance of managing customer data based on five "trust service principles"—security, availability, processing integrity, confidentiality, and privacy. This compliance demonstrates Carta's commitment to maintaining high standards for data security and management.

3. Data Protection Act (DPA): Carta adheres to the DPA regulations, ensuring that personal information is used fairly, lawfully, and transparently. This compliance further supports the protection of personal data against unauthorized access and loss.

4. Personal Identifiable Information (PII) Regulations: Carta is mindful of adhering to regulations concerning PII, which involves data that could potentially identify a specific individual. By complying with PII regulations, Carta ensures that all personal data is handled with the utmost care and security.