Organisational Procedures For Startups And SMEs: How To Create And Maintain Them

Alex Solo
byAlex Solo10 min read

When you’re building a startup or growing an SME, it’s easy to focus on the big wins: landing customers, hiring your first team members, shipping product, raising funding.

But as soon as you have more than a couple of people (or more than a handful of repeat tasks), you’ll start feeling the drag of “how we do things around here” living only in your head, your Slack messages, or a few half-updated Google Docs.

That’s where having clear organisational procedures becomes one of the most underrated tools in your business toolkit.

Done well, organisational procedures help you move faster, reduce mistakes, onboard people properly, and support compliance. Done poorly (or not done at all), you’ll often see the opposite: inconsistent work, customer complaints, internal confusion, and avoidable legal risk.

Below, we’ll walk you through how to create, implement and maintain organisational procedures in a way that actually works for Australian startups and SMEs (without turning your business into a bureaucracy). This guide is general information only, not legal advice.

What Is An Organisational Procedure (And Why It Matters For Small Businesses)?

An organisational procedure is a documented, repeatable set of steps for how a specific task or process is done in your business.

It’s different from a policy:

  • Policies usually set expectations or rules (for example, a privacy policy or a workplace conduct policy).
  • Procedures explain the “how” (for example, the steps your team follows to handle a customer refund request or to investigate a workplace incident).

For startups and SMEs, procedures matter because they:

  • Reduce risk by making sure key tasks are done consistently (especially tasks with legal or safety implications).
  • Support growth by reducing reliance on founders and “tribal knowledge”.
  • Improve quality by giving your team clear standards and checkpoints.
  • Speed up onboarding so new hires can be productive sooner.
  • Help with compliance (particularly around employment law, consumer law and privacy).

If you’ve ever thought “we’re making this up as we go” or “we keep answering the same questions”, that’s usually a signal you need a procedure.

Which Organisational Procedures Should A Startup Or SME Prioritise First?

You don’t need a procedure for everything on day one. The trick is prioritising the procedures that protect your business and remove the biggest operational bottlenecks.

As a practical starting point, most Australian startups and SMEs benefit from procedures in these categories:

Customer And Sales Procedures

  • Handling quotes, approvals and scope changes
  • Invoicing and late payment follow-up
  • Refunds, returns, and complaints handling (particularly important under the Australian Consumer Law)
  • Managing cancellations and rescheduling

Even something as common as “is a quote binding?” can become a recurring issue if your team treats quotes inconsistently, so it’s worth having a clear approach to your quoting process. In many businesses, aligning this with your contracts and terms helps avoid disputes about whether an quotation is legally binding.

Operations And Delivery Procedures

  • Order fulfilment and delivery steps
  • Quality checks and sign-off
  • Managing suppliers and purchase orders
  • Handling incidents (damage, lost stock, service failures)

People And Workplace Procedures

  • Recruitment and onboarding
  • Performance management and discipline (including warnings)
  • Managing leave requests and evidence requirements
  • Ending employment (resignation, termination, redundancy)

This is also where many businesses get caught out: it’s not enough to have a general “be reasonable” approach. Procedures should be aligned with your employment contracts and workplace obligations. If you’re hiring, having the right Employment Contract in place is often the foundation that your people procedures sit on top of.

Data, Privacy And Security Procedures

  • Collecting customer data (what you collect, why, where it’s stored)
  • Managing access to systems (who gets what permissions)
  • Handling data breaches or suspected breaches
  • Responding to customer privacy requests

If you collect personal information (even just names, emails and delivery addresses), you should think about how your procedures match what you say in your Privacy Policy.

Governance And Founder/Investor Procedures

  • Approvals (who can sign contracts, approve spend, hire team members)
  • Board or founder decision-making steps
  • Documenting key decisions

For companies, internal governance often ties back to documents like a Company Constitution and (where there are multiple owners) a Shareholders Agreement. Even if those documents are not “procedures” themselves, they often set the rules your procedures need to follow.

How To Write An Organisational Procedure That People Will Actually Follow

The best organisational procedure is one your team uses in real life.

If it’s too long, too legalistic, or too theoretical, it’ll get ignored. If it’s too vague, it won’t guide behaviour when it matters most.

Here’s a practical approach that works well for startups and SMEs.

Step 1: Name The Procedure Clearly

Use a title that makes it obvious what the procedure is for.

  • Good: “Customer Refund Procedure”
  • Good: “New Starter Onboarding Procedure”
  • Not ideal: “Customer Matters”
  • Not ideal: “Team Admin”

This helps your people find the right document quickly (especially when they’re stressed and need a clear answer).

Step 2: Define The Purpose And Scope (In 2–4 Lines)

Start with a short explanation:

  • What the procedure is for
  • When it applies
  • When it doesn’t apply (if relevant)

This avoids confusion like “does this apply to contractors?” or “is this only for online orders?”

Step 3: Assign Owners And Responsibilities

Procedures fail when everyone assumes someone else will do the task.

List:

  • Owner (the person accountable for keeping the procedure up to date)
  • Who performs it (team role, not necessarily a named individual)
  • Who approves exceptions (for example, refunds over a certain amount)

Keeping this role-based makes the procedure resilient when people change roles or leave.

Step 4: Write The Steps In The Order They Happen

A good structure is:

  1. Trigger (what starts the process)
  2. Actions (what you do)
  3. Decision points (if X, do Y)
  4. Evidence/records (what you save and where)
  5. Finish (what “done” looks like)

Where possible, include templates, links to tools, or screenshots in your internal version (but keep the public-facing version clean if it’s going outside the company).

Step 5: Add “Minimum Standard” Checks

Small businesses often run into trouble when tasks are completed quickly but not properly.

To avoid that, include simple checks like:

  • “Before sending, confirm the customer’s delivery address.”
  • “Before approving a refund, check the customer’s rights and your obligations under the Australian Consumer Law (including whether it may be a major failure).”
  • “Before ending employment, check notice requirements, final pay entitlements and any applicable awards or agreements.”

These checks are especially useful where legal obligations may apply, like consumer guarantees and misleading or deceptive conduct risks.

Step 6: Keep The Language Plain

Your team shouldn’t need a law degree to follow a procedure.

Write like you’re handing the task to a smart person on their first day. Use short sentences. Use bullet points. Avoid jargon unless you define it.

Implementing Organisational Procedures Without Slowing Your Business Down

Even great procedures fail if they’re launched in a way that feels like “more admin” and “more hoops”.

To implement organisational procedures smoothly, aim for a rollout that fits your business size and pace.

Start With The Processes That Hurt The Most

Look for areas where you’re seeing:

  • Repeated mistakes
  • Customer complaints
  • Confusion between team members
  • Delays because approvals are unclear
  • Legal or compliance risks (privacy, employment, consumer issues)

Those are the procedures most likely to deliver immediate ROI.

Train Your Team Using Real Scenarios

A procedure shouldn’t be “read and forgotten”. The best training is scenario-based:

  • “A customer wants to cancel 24 hours before delivery. What do we do?”
  • “An employee calls in sick without evidence. What do we request?”
  • “A customer says the product is faulty after 8 months. What are the options?”

This approach also helps you pressure-test your procedure and find gaps before they become real problems.

Make Procedures Easy To Find (And Easy To Use)

Pick one place where procedures live (for example, your intranet, a shared drive, or a knowledge base). Avoid having “multiple sources of truth”.

Also, name files consistently and keep a simple index page. If it takes five minutes to find the procedure, your team won’t use it.

Build Procedures Into Your Contracts And Customer Touchpoints

Some procedures should align with (or be supported by) your external-facing documents, such as customer terms, cancellation terms, and refund processes.

For example, if you charge cancellation fees, your internal steps should match what your customer contract says and what’s reasonable under Australian Consumer Law. Having clear Terms of Trade can make it much easier to apply consistent processes when a dispute arises.

Procedures are often thought of as “operations”, but they’re also a very practical compliance tool.

Here are some common legal risk areas for startups and SMEs where a strong organisational procedure can help prevent expensive problems.

Australian Consumer Law (ACL) And Complaints Handling

If you sell products or services to customers, you’ll be dealing with refunds, returns, complaints and warranty-like expectations.

A consistent complaints handling procedure can help you:

  • Respond within a reasonable timeframe
  • Escalate complex complaints to the right person
  • Avoid inconsistent promises that could create disputes
  • Handle refunds and remedies in line with the ACL

It also reduces the risk of staff improvising in ways that create misleading statements or admissions you didn’t intend.

Employment Law And Workplace Management

People issues can escalate quickly when you don’t have a consistent process.

Strong procedures are particularly helpful for:

  • Managing leave requests (including when evidence is required)
  • Performance management (warnings, improvement plans, record-keeping)
  • Termination steps (notice, final pay, return of company property)
  • Redundancy processes (consultation and documentation)

Even if your business is moving fast, having a clear process here can be the difference between a clean exit and a costly dispute.

Privacy, Data Handling And Security

For most modern startups, data is part of everyday operations. That can include customer lists, marketing databases, health information (in some industries), employee records, and payment details.

Your procedures should cover:

  • Who can access personal information
  • How personal information is stored and shared
  • What happens if you suspect a breach
  • How you respond to requests (for example, access or correction requests)

When your internal process matches your external promises, it’s much easier to show you’re acting responsibly.

Recording, CCTV And Workplace Surveillance

If your business uses CCTV, records calls, or uses monitoring tools, you’ll want procedures that align with the relevant privacy and surveillance laws.

This area is state-based and can get complex quickly, so it’s important your business has clear rules for when recording happens, what notices (and any required consents) may apply, who can access recordings, how long you keep them, and how you handle requests or complaints. Many businesses start by getting clear on CCTV laws and then building procedures around notice and storage.

How To Maintain Organisational Procedures As Your Business Grows

Creating procedures is one thing. Keeping them up to date as your business grows is where many startups and SMEs struggle.

The good news is you don’t need a huge compliance team to maintain procedures. You just need a simple system.

Set A Review Schedule (And Keep It Realistic)

Different procedures need different review cycles:

  • High-risk procedures (employment, safety, privacy): review every 6–12 months or after any incident
  • Operational procedures (delivery, onboarding, purchasing): review every 12 months or when tools/systems change
  • Fast-changing procedures (AI tools, marketing workflows): review when processes change

A simple approach is to add a “Next review date” and “Owner” at the top of every procedure.

Version Control And Change Notes

When procedures change, confusion usually comes from people not realising what changed.

Use version control, even if it’s basic:

  • Version number (v1.0, v1.1, v2.0)
  • Date updated
  • Short change note (for example, “Updated refund approval threshold from $200 to $500”)

This makes it easier to train your team and reduce “but I followed the old process” issues.

Collect Feedback From The People Using The Procedure

Your best insights come from the people doing the work.

Encourage feedback like:

  • “This step is unclear”
  • “We always have to do an extra step that isn’t written down”
  • “This tool changed, so the instructions are outdated”

If you treat procedures as living documents, they’ll keep adding value instead of becoming shelfware.

Update Procedures When You Change The Business

Procedures should be reviewed whenever you:

  • Launch a new product or service line
  • Enter a new state or market
  • Hire your first employee or scale a team quickly
  • Change your pricing, refund approach, or cancellation terms
  • Adopt new tools that affect how work is done

These moments are when “small gaps” turn into real risk, so updating your organisational procedure set is part of scaling responsibly.

Key Takeaways

  • An organisational procedure is a practical step-by-step guide for how your business does a task, and it’s one of the easiest ways to reduce risk and improve consistency as you grow.
  • You don’t need procedures for everything at once; start with high-impact areas like customer complaints, invoicing, onboarding, privacy and employment management.
  • The procedures your team will follow are clear, role-based, scenario-tested, and written in plain English with simple decision points and minimum-standard checks.
  • Implementation matters as much as writing: train with real examples, make procedures easy to find, and align internal processes with your contracts and customer-facing terms.
  • Maintaining procedures is a lightweight system: assign owners, set review dates, track versions, and update them when your business changes.

If you’d like help putting the right procedures and legal documents in place for your startup or SME, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.

Alex Solo

Alex is Sprintlaw's co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.

Need legal help?

Get in touch with our team

Tell us what you need and we'll come back with a fixed-fee quote - no obligation, no surprises.

Need support?

Need help with your business legals?

Speak with Sprintlaw to get practical legal support and fixed-fee options tailored to your business.