Legal Setup and Insurance

Entity choice: LLC first, S-corp election later

The most common mistake technical founders make here is overthinking it. The standard path for a solo or two-person MSP is simple: form an LLC now, and elect S-corp taxation later, once profit justifies it.

An S-corp is not an entity type – it's a tax election you file with the IRS on top of an existing entity. An LLC is cheap to form, has minimal compliance overhead, and is taxed as a pass-through by default. Corporations, by contrast, require annual shareholder meetings, minutes, and directors' meetings; LLCs don't. That's why LLC-plus-late-S-election is the default for solo founders.

Why the S-corp election eventually pays: as a plain LLC, all net profit is hit with the 15.3% self-employment tax (up to the Social Security wage base – $176,100 in 2025 – with 2.9% Medicare above that). Under an S-corp election, you pay yourself a "reasonable salary" that is payroll-taxed, and take remaining profit as distributions that avoid self-employment tax.

When to elect: the consensus threshold is net profit consistently above $50,000–$60,000/yr. At that level the election saves roughly $2,000–$4,000/yr; at $100k profit, $5,000–$8,000/yr. Against that, S-corp admin overhead – payroll processing, extra filings, higher accounting fees – typically runs $3,000–$8,000/yr, which is why some CPAs argue for waiting until around $150k profit. Below the threshold, the election can cost more than it saves. Run the math with a CPA once you're profitable; don't elect on day one.

The day-one checklist is short:

• Form the LLC in your state
• Get an EIN from the IRS
• Open a separate business bank account (never commingle funds)
• Appoint a registered agent
• Get an attorney-drafted MSA before your first managed contract

The insurance bundle a new MSP needs

MSPs are a high-risk class to insurers for a structural reason: a compromise of the MSP cascades to every client – you are a supply-chain attack vector by definition. That shapes both what you need and what it costs. Typical 2026 costs for a small MSP:

A realistic bundled total for a solo MSP carrying $1M/$2M limits is roughly $2,500–$6,000/yr. Add workers' compensation the day you hire your first technician – it's required in most states once you have an employee.

Cyber premiums are priced on your revenue, managed endpoint count, claims history, and – importantly – your own security controls: MFA everywhere, EDR on your systems, and tested backups. Securing your own MSP isn't just good practice; it directly lowers your premium and keeps you insurable.

Certificates of insurance: the ticket to play

Expect any client above mom-and-pop size to demand a certificate of insurance (COI) before signing. This isn't bureaucratic theater. Every vendor with access to a client's systems creates liability for that client, and insurance requirements in contracts transfer that risk back to the vendor – you. Larger and regulated clients (and their insurers and auditors) won't onboard a vendor without a COI, and often require being named as additional insured on your policy.

Increasingly, clients' own cyber insurers require proof that their MSP carries E&O and cyber coverage – no COI, no contract. Two practical implications:

• Get insured before you sell, not after. Waiting until a prospect asks stalls the deal for weeks.
• Offer the COI upfront. Handing it over unprompted signals professionalism and removes a common back-and-forth from your sales cycle.

How E&O and your MSA's liability caps interact

Your E&O policy and your MSA are two halves of the same risk system, and they only work together.

The MSA's limitation-of-liability clause caps what a client can recover from you – commonly tied to fees paid over some period. Your E&O policy then covers claims up to its policy limit. When the contract cap sits comfortably inside your policy limits, a worst-case claim is an insurance event. When there's no cap – the classic failure mode of free, downloaded contract templates – a client's claim can exceed your policy limit, and the difference comes out of the business.

The same free templates typically also lack a defined service scope and exclusions (unsupported hardware, end-of-life software), which is exactly what a plaintiff's lawyer exploits: if the contract doesn't say what you weren't responsible for, you were arguably responsible for everything. This is why "no real contracts" shows up consistently on lists of first-year MSP mistakes, and why the fix is an attorney-drafted MSA with a clear scope, exclusions, and a liability cap – not a borrowed PDF.

Licenses, registered agents, and the boring basics

None of this is hard, but skipping it creates problems at the worst times:

• Business license/registration: requirements vary by state and city; check your local jurisdiction when you file the LLC. Regulated-vertical clients (compliance-driven industries especially) may ask for proof of registration during vendor onboarding.
• Registered agent: required for an LLC – the address where legal notices are served. Use a commercial registered agent service (typically cheap) rather than your home address if you value privacy or move often.
• Foreign qualification: if you land clients in another state and establish real presence there, you may need to register the LLC there too. Ask your accountant when it comes up; don't pre-register everywhere.

When to actually pay a lawyer

You don't need a lawyer on retainer, but there are moments where paying one is the cheapest insurance you'll buy. Budget roughly $1,500–$5,000 for initial legal setup plus insurance, most of it going to documents:

1. Your MSA and SOW templates. This is the non-negotiable one. Don't download free templates – the missing exclusions and liability caps are precisely the expensive parts.
2. Reviewing your non-compete and non-solicit from your current or former employer before you take clients or contacts with you. An amicable ex-employer can become your first client; a lawsuit from one can end the business.
3. Regulated-client paperwork – e.g., business associate agreements for HIPAA-covered clients – the first time you encounter each type.

What you generally don't need a lawyer for: forming the LLC itself (state filing plus a registered agent service is usually enough for a single-member LLC), the EIN, or the S-corp election paperwork (your CPA handles that).

Bottom line

Form an LLC now; revisit the S-corp election with a CPA once net profit sustainably clears $50–60k. Buy general liability, tech E&O, and cyber liability before your first real contract – typically $2,500–$6,000/yr all-in as of 2026 – because serious clients will demand a COI before they sign anything. Spend your legal budget on an attorney-drafted MSA with liability caps that sit inside your policy limits. Then get back to finding your first clients – the legal setup is a week of admin, not a phase of the business. For the rest of the launch checklist, see how to start an MSP and what it really costs.