Right of First Refusal on Startup Shares: What Changes Outside Delaware

A right of first refusal (ROFR) gives existing shareholders — usually co-founders, the company, or investors — the option to buy a departing shareholder's stock on the same price and terms as any outside offer, before that offer can close. In Delaware and most US-style venture deals, ROFR exists only if someone wrote it into a contract; the law creates nothing automatically. In the UAE and Saudi Arabia, that assumption doesn't hold: UAE mainland company law imposes a statutory pre-emption right on LLC transfers whether or not anyone negotiated one, and Saudi law lets founders bake ROFR directly into the company's constitutional documents instead of a side contract only some shareholders ever sign.

Every English-language explainer on this topic — Kruze, AngelList's education center, most VC-blog primers — describes ROFR as a Delaware stockholders agreement clause with a 15-to-30-day matching window. That's accurate, and it's also only true for one legal system. If your company is incorporated in Riyadh or Dubai, the mechanism you actually have is different from the one those articles describe, and the difference isn't cosmetic.

What ROFR actually does

The mechanics are the same everywhere the concept exists. A shareholder who wants to sell first has to find a real buyer and a real price — the ROFR isn't triggered by an intention to sell, it's triggered by an actual offer. The seller then notifies the parties holding the right, disclosing the price and terms. Those parties get a fixed window to match the offer and buy the shares themselves instead. If nobody exercises the right within the window, the original sale can proceed to the outside buyer.

The point isn't to trap a shareholder who wants out. It's to stop ownership from landing with someone the existing shareholders never agreed to sit across the table from — a competitor, an unrelated financial buyer, an ex-employee's estate — without giving the people already on the cap table a chance to keep it in-house first. Most well-drafted versions carve out low-risk transfers — a personal trust, a spouse or estate, a holding company the same person controls — since those don't change who actually has economic control.

Delaware: a contract, and only a contract

Delaware General Corporation Law doesn't create a ROFR for any company by default. It exists exactly as far as someone drafted it — in a stockholders agreement, a standalone ROFR and co-sale agreement, or a restrictive legend written into the certificate of incorporation. Skip that step, which happens more often than most founders expect on a scrappy seed round, and there's no legal restriction at all on who a shareholder can sell to.

A second consequence follows: a contract-based ROFR only binds the people who signed it. Every new investor, every option holder who exercises, every advisor granted stock needs a joinder agreement adding them in, or they're not covered. A cap table that's grown through several rounds can easily have shareholders who were never actually bound by the restriction everyone assumes is universal, because nobody circulated the joinder.

UAE mainland: the law creates the right whether you draft it or not

Mainland UAE runs on Federal Decree-Law No. 32 of 2021 on Commercial Companies, and Article 78 gives existing LLC partners a statutory pre-emption right whenever another partner wants to transfer their stake to an outside party. The selling partner has to notify the other partners through the company's manager, disclosing the price and terms — the same shape as a contractual ROFR, except nobody had to negotiate it into existence. The remaining partners have thirty days to exercise the right. If none of them do, the transfer can proceed, but typically only with the approval of partners holding a majority of the remaining capital, unless the company's memorandum of association sets a different threshold. Transfer to an outsider without going through that process is voidable — the company or the other partners can challenge it after the fact, not just block it in advance.

That statutory default only applies to mainland LLCs, which is most operating companies in the UAE outside the free zones. Move into ADGM or DIFC — the common-law free zones we've covered before in the context of SAFE agreements in the UAE — and the picture flips back to something closer to Delaware. Both run on English-style common law, and neither imposes a statutory ROFR the way mainland commercial law does. A company incorporated in ADGM or DIFC needs the same negotiated stockholders agreement a Delaware company would, with the same joinder discipline for every new shareholder.

Know which UAE entity you actually are before assuming you either have or don't have a ROFR. A mainland LLC has one baked in regardless of what your shareholders agreement says; an ADGM or DIFC entity has exactly what you drafted, and nothing more.

Saudi Arabia: written into the company, not a side letter

Saudi Arabia's default position is similar in spirit to the UAE's — shareholders generally get first right to buy at the same price and terms an outside buyer offered, with thirty days from notification of the agreed price to exercise it unless the company's own documents extend the window. What the 2022 Companies Law adds on top, in Article 178, is real flexibility to customize that mechanism: shareholders can write prior-approval requirements, purchase options, first-refusal rights, or mandatory buy-sell triggers directly into the company's Articles of Association, rather than into a separate contract most of the cap table never signs.

That distinction matters more than it sounds. A Delaware-style ROFR lives in a side agreement — binding only its signatories, requiring a joinder for every new shareholder, invisible to anyone who doesn't go looking for it. A restriction written into the AoA is part of the company's constitutional documents: every shareholder is bound the moment they acquire shares, because accepting the shares means accepting the AoA that governs them — no separate signature, no gap for a new investor or a converted SAFE holder to fall through.

For a founder who's already navigating what a Saudi founders agreement needs to cover, this is one more reason the document can't just be a translated US template: a US-style stockholders agreement treats ROFR as an add-on contract, and Saudi law gives you a stronger, structurally different place to put it.

What actually goes wrong without it tracked

None of this matters until someone actually tries to sell — and that's when an unenforced ROFR, contractual or statutory, turns into a real problem. A departing early employee sells vested shares to a friend without anyone checking whether existing shareholders should have been offered first. A co-founder's estate inherits shares and nobody flags that the ROFR window ever opened. In the UAE, that's not just an oversight — it's a transfer that's voidable years later, a liability that surfaces exactly when an acquirer's or investor's counsel goes looking for clean title.

The failure mode is rarely bad faith. It's that ROFR triggers are event-based — tied to a transfer that might happen once every few years — and a spreadsheet or a filing cabinet has no mechanism to flag "this shareholder just tried to sell" or "this thirty-day window opened on this date." Govy's governance module tracks ROFR alongside the shareholder registry it's actually tied to, so a pending transfer is visible against the same ledger that records who owns what today — not a separate compliance checklist someone has to remember to consult.

The rule that actually holds

Don't assume Delaware's version of ROFR is universal, and don't assume "we have a shareholders agreement" means the restriction covers everyone on your cap table. Check which entity you're actually incorporated as, because that answers whether the right exists by default or only exists on paper you drafted — and then check whether every current shareholder is actually bound by it, not just the ones who were there when the document was signed.

Govy's shareholder registry, governance tracking, and jurisdiction-aware legal templates keep the ROFR question tied to the same ledger as the rest of your cap table, instead of a clause sitting in a PDF nobody checks until a transfer is already underway. See how it fits your structure at govy.tech.

FAQ

What is a right of first refusal on startup shares?

It's a mechanism that gives existing shareholders — usually co-founders, the company itself, or investors — the option to buy a departing shareholder's stock on the same price and terms as any outside offer, before that offer can close. The seller isn't blocked from leaving; the existing shareholders just get to match the deal first. In the US it exists only if someone wrote it into a contract; in the UAE and often Saudi Arabia, a version of it exists by default.

How long does a startup have to exercise a right of first refusal?

Fifteen to thirty days is typical in a negotiated US-style ROFR, and it's a number the parties choose. In the UAE, the exercise window for LLC partners is fixed by statute at thirty days from notice under Federal Decree-Law No. 32 of 2021. Saudi Arabia's default is also thirty days from notification of the agreed price, unless the company's own constitutional documents extend it.

Is right of first refusal the same as a pre-emption right?

They're close enough to use interchangeably in most startup contexts, and UAE law explicitly labels its statutory ROFR a pre-emption right. The technical distinction some lawyers draw is that pre-emption can also cover new share issuances — the right to maintain your percentage by buying a slice of a new round — while ROFR specifically covers an existing shareholder's exit. Read your shareholders agreement's definitions section before assuming which one you have.

Does Delaware require a right of first refusal on startup shares?

No. Delaware General Corporation Law doesn't create a ROFR automatically for any company — it exists only if founders and investors negotiate one into a stockholders agreement, a ROFR and co-sale agreement, or a provision in the certificate of incorporation. Skip that drafting step and a Delaware startup has no restriction at all on who a shareholder can sell to.

What happens if a shareholder sells without honoring a right of first refusal?

In a contract-based ROFR, the company or the other shareholders can typically sue for breach and, depending on the drafting, block the transfer from being recorded on the cap table. Under UAE law, it's more direct: a transfer made without complying with the statutory pre-emption process is voidable, meaning it can be unwound even after the fact.