Gilles Crofils

Gilles Crofils

Hands-On Chief Technology Officer

Tech leader who transforms ambitious ideas into sustainable businesses. Successfully led digital transformations for global companies while building ventures that prioritize human connection over pure tech.1974 Birth.
1984 Delved into coding.
1999 Failed my First Startup in Science Popularization.
2010 Co-founded an IT Services Company in Paris/Beijing.
2017 Led a Transformation Plan for SwitchUp in Berlin.
November 2025 Launched Nook.coach. Where conversations shape healthier habits

Simple Habits That Keep Tech Freelancers Protected

Abstract:

The article offers practical guidance for tech freelancers on protecting personal assets when running a business, emphasizing that forming a company such as a GmbH, SASU, OÜ, or Ltd is only the starting point for limiting personal liability. It highlights that statutory protections can quickly unravel if founders neglect ongoing legal, financial, or data compliance routines—such as keeping business and personal finances separate, avoiding personal guarantees, and staying on top of filings. The piece draws on real-world examples from Germany, France, and the UK where directors faced personal consequences due to compliance lapses, mismanagement, or GDPR breaches, underscoring that even minor mistakes can have serious repercussions. It details how different European company structures offer varying degrees of protection, but all require consistent, minimalist routines—monthly, quarterly, and annual habits like contract reviews, insurance checkups, and GDPR audits—to maintain asset shields. The article advocates for using digital tools, automation, and checklists to streamline compliance, and shares the author’s personal experience that steady, simple habits—not perfection—bring lasting peace of mind as business needs evolve.

Building a company as a tech freelancer can feel like a big leap, but for me, it was more like a stumble. When I set up my first company in Paris in the late 90s, I thought paperwork was the hardest part—until I missed a compliance deadline and realized how exposed my savings were. The thrill of picking a company name and getting that official stamp quickly faded when I learned that forming a GmbH, SASU, OÜ, or Ltd is just the beginning. The real challenge? Keeping your own assets safe as your business shifts and grows. Many, like me, find out too late that company structure alone isn’t enough—you need steady habits and good choices after setup. A small slip, like signing the wrong contract or missing an annual filing, might put your savings at risk.

This article takes a plain look at how tech professionals can keep surprise personal liability at bay. I’ll share some traps I’ve fallen into myself, from personal guarantees to simple compliance mistakes. There’s a focus on different company structures in Europe and how certain rules don’t always protect founders as much as expected. You’ll also get practical routines, digital tools that help with compliance, insurance basics, and GDPR habits to avoid headaches.

Expect direct lessons, minimalist routines, and straightforward advice—plus a few stories from the trenches. The goal is peace of mind that lasts, even if your daily routines change or clients come from new places. Whether you’re starting fresh or tightening up your current setup, these tips can help protect both your business and personal assets.

Liability Needs Ongoing Attention

Company Formation Is Just the Start

When I first registered a company, I thought my assets were safe right away. Many tech freelancers hope setting up a company, like a GmbH, SASU, OÜ, or Ltd, will shield their assets instantly. But this only holds if you stick to the right routines. Statutory protections often fall apart if legal duties get ignored or if you sign personal guarantees. Even after you set up your company, personal risks can pop up and catch founders by surprise. Simply forming a company won’t guarantee asset protection; you have to keep up with regular habits and compliance.

Risks stick around after the paperwork. Things like co-signing contracts, giving personal guarantees, or missing filings mean your own assets could be exposed. Sometimes, years later, courts have held directors or owners responsible for these decisions. As your business model changes, new risks can creep in, so staying alert is important.

Tech work often changes with new clients, projects, or data. Processing client data, signing international deals, or scaling up all bring risks your initial company setup doesn’t handle. Your routines need to grow with your business, so it helps to know the common little traps that even careful pros can miss.

Where Personal Assets Stay at Risk

If you sign contracts as yourself or accept a personal guarantee—maybe to convince a big client—it can break your company’s shield. I’ve been there, tempted to sign just to land a deal. This happens often when bigger clients want extra assurance. Even with a company, your own assets might be exposed in these cases. Missing compliance steps can have the same effect.

Things like missing filings, failing to update director lists, or mixing personal and business finances easily lead to fines or even dissolving your company. It’s easy to overlook these when work gets busy. Letting compliance slip or mixing money breaks the protective barrier and lands the risk right back on your shoulders. Data protection is another spot where personal risk sneaks in.

Maybe you think GDPR violations are covered by your company. Actually, handling customer data poorly can result in personal fines, no matter your company structure. It’s easy to overlook this risk, but mishandling data can affect you directly. Different countries also have unique rules to watch.

Liability Shields in Europe

Comparing Company Structures

Limited liability companies like GmbH, SASU, OÜ, and Ltd aim to separate your assets from business debts. But the fine print can cause trouble, even for the careful. For instance, GmbH shareholders are usually safe, but directors can get personally hit for missing insolvency deadlines or messing up taxes. In 2019, a German court held a GmbH director personally liable for failing to file for insolvency on time—an expensive mistake that wiped out years of savings. SASU in France offers strong protection, yet things like crime or poor management tear down the shield fast.

  • Estonia’s OÜ is famous for fast, cheap digital setup, but personal liability kicks in for fraud or big mistakes.
  • The UK Ltd is simple to run, but directors are at risk for wrongful trading or breaking duties.
  • In all forms, signing in your own name or giving personal guarantees can cancel out the company’s protection.

Every country adds unique twists. Statutory protection works only when company bosses follow both the rules and the intent behind them. Skip the details or local requirements, and cracks appear in your shield. Sometimes, courts can even completely set aside the company barrier.

When Courts Ignore the Company

Courts in Germany, France, and the UK can push through the company wall if directors act fraudulently, show gross negligence, or ignore duties. This is not just theory; real directors have lost protection in court.

  • In Germany, directors sometimes pay up personally for post-insolvency deals.
  • In France, managers have ended up responsible for tax debts caused by bad management.
  • UK courts have gone after directors for wrongful trading and fraud.

The lesson: bending rules or taking shortcuts can cost you, no matter the company structure. Making good habits stick is the safest bet. What routines really help?

Keeping the Shield Strong

Simple Routines for Safety

Liability protection goes way beyond ticking boxes at setup. Simple routines—like keeping business and personal accounts separate, updating company registers, and filing things on time—matter a lot. Missing one step can undo all your effort. Even if you’re solo, it’s smart to record big decisions. Here’s a minimalist checklist (and yes, I use it myself):

  • Keep business and personal money in their own accounts (no exceptions, even for a coffee)
  • Update director and shareholder registers as soon as anything changes
  • File annual accounts and tax paperwork when due
  • Record big decisions, even if you’re a one-person company

Honestly, these habits have saved me more than once. They help prevent surprises and keep your asset shield strong.

Documenting Decisions, Even Solo

Even if you work alone, documents like annual notes or digital records for big decisions help. These don’t need to be fancy. But if questions pop up, you can quickly show you followed good practice. For me, documenting decisions is like pruning my garden—regular care keeps things healthy and stops small problems from turning into a jungle.

A yearly catch-up with a legal or accounting expert can fix issues before they get expensive. Just one focused session, backed by neat digital records, can save headaches.

Professional Reviews Made Easy

A yearly review by a professional is a cost-effective way to spot risks. Digital records make the job simpler and faster. Organizing digitally means quick answers and fewer hassles.

Automation can do even more of the heavy lifting. For example, after switching to Zervant for invoicing, I cut my admin time in half and stopped worrying about missing a filing. Digital tools and simple checklists keep everything in order without piles of paperwork.

Letting Automation Do the Work

Automated reminders and tools like AND CO, Debitoor, or just a cloud folder can keep routines running smoothly. Set an annual reminder for filings or insurance checkups. Keeping workflows minimalist means fewer things fall through the gaps. I once missed a tax deadline before setting up automated reminders—never again. But is insurance enough to handle every risk?

Insurance Needs Regular Attention

Coverage Isn’t Always Complete

Professional indemnity, cyber protection, and director insurance are common picks for tech pros. But policies have gaps—things like fraud, known claims, or regulatory fines are often excluded. It is not just what’s covered, but what’s not that matters. Common exclusions are:

  • Fraud or actions done on purpose
  • Claims already known before you took insurance
  • Regulatory penalties or fines

A yearly look at your insurance can help you avoid expensive surprises later.

Make Insurance Reviews a Habit

Once a year, compare how your business actually works with what your insurance covers, check limits, and review for any new risks. This is even more important if you take on new services or types of clients. Digital platforms from insurers make this less of a pain, letting you tweak policies online.

Keeping your insurance up to date is a sensible way to cut risk. It’s a habit worth keeping as your business changes direction or size.

Digital Tools for Insurance Management

Using insurer portals makes it simple to review, renew, or update your coverage. Storing digital copies of documents in a safe cloud folder helps keep things tidy and easy to find. These tools keep your insurance organized.

Protecting data is another area where routines matter just as much as insurance.

GDPR and Data Risks

When Data Breaches Bypass the Shield

Little data mistakes can bring trouble. Courts in Germany, Romania, and the UK have fined individuals—not just companies—for handling data poorly. The company structure doesn’t protect you from personal negligence with data.

It only takes one lost file or missed data request to cause real problems. If you handle sensitive data or work across borders, the risks are even higher. Simple habits can really ease GDPR stress.

Simple GDPR Routines

A yearly GDPR review is often quick to do, especially with a checklist from well-known authorities. Cover the basics: privacy policies, where your data goes, is your response plan fresh? Write these decisions down as you go.

Documenting each step—like what you did after a small breach or moved data storage—can save your neck later. Automated solutions like Iubenda or Termly help update privacy policies and keep records neat.

Set up automated calendar reminders so GDPR checks and plan updates don’t get missed, even when work piles up. Honestly, keeping up with GDPR feels like chasing a moving target, but it’s better than the alternative.

Just as data risks can sneak up on you, working with clients in new countries brings its own surprises.

Cross-Border Work and New Risks

Local Rules and Client Jurisdiction

Serving clients in other countries can be more complicated than it first seems. Each country may have its own laws, risks like employment misclassification, double taxation, or missing a local compliance step. This can create liability issues both at home and where your client is, so it’s important to know where you might get caught out.

GDPR adds another angle. It’s not just about your company address—data laws depend on where your client’s customers live. Some risks include:

  • Accidentally falling under employment rules abroad
  • Double taxation if residency gets unclear
  • Missing a local law triggers a fine

GDPR hits based on where the data subject is, not your company’s spot. Handling customer data from another country can mean extra compliance checks—and personal risk. For example, a freelance developer working from Portugal with German client data might fall under German GDPR rules.

Carefully written contracts can help limit some of these risks, but only if you keep them clear and up to date.

Contract Clauses to Limit Risk

Good contract clauses help limit personal risk in cross-border work. It’s helpful to include things like:

  • Limit of liability, such as capping damages to the contract’s value
  • Jurisdiction and law choices, so both sides know which country’s laws apply
  • Mutual insurance requirements

Following these tips makes it easier to avoid surprises if things go west. Regular contract reviews keep you in sync as your business changes.

Updating templates with a lawyer, especially for new countries, is smart. Digital contract tools make it fast and simple, even for minimalists. Setting a yearly reminder to check contracts can be one of the easiest risk-management habits.

A minimalist approach works well for long-term safety: small habits, good tools, and regular attention help tackle even cross-border risks.

Simple Routines for Safety

Key Habits for Peace of Mind

Monthly Habits

Each month, keep business and personal finances apart, update your bookwork, and look out for new contracts or risks. Digital tools can do the admin for you. I like to check and balance my bank accounts while sipping coffee, update the books, and scan for new risks or contracts. These monthly routines keep the paperwork easy and risks in check.

Quarterly Check-Ins

Every three months, run your compliance checklist, review GDPR logs, and see if contract templates need a refresh. Set reminders so these checks don’t become a big chore. Keeping up quarterly helps you manage compliance and avoid big headaches.

Annual Reviews

Once a year, file company accounts, audit your insurance, check GDPR, and schedule a talk with an advisor. Keeping all proofs online in a secure folder makes these tasks smoother. Annual check-ins keep things up to date and your business safe. Digital tools and templates make things simpler than ever.

Tools and Templates for Tech Minimalists

Digital Platforms

Tools like AND CO, Debitoor, and Zervant simplify invoicing, contracts, and compliance. For GDPR, Iubenda or Termly handle privacy updates. After moving to Zervant, I noticed my compliance tasks took half the time—leaving more hours for things I actually enjoy.

Automation can cover most compliance and contract work. Cloud backups are there in case you need to check or restore something.

Cloud Backups and Reminders

Google Drive, Dropbox, and other backup tools keep everything safe and handy. Add automated reminders in your calendar so nothing is missed. This makes compliance easy without lots of manual tracking.

Checklists That Save Time

Minimalist checklists, borrowed from insurance or freelancer associations, can be reused each year. This reduces brain drain—just update as needed. Reusable checklists help lower admin stress for years to come.

Lessons from Real Business

When Things Go Wrong

Even with a company in place, directors in Germany, France, and the UK have been held liable for late insolvency filings, mismanaging business, or fraud. These cases show how skipping basic checks or ignoring problems can turn into a personal headache, sometimes years after the slip. GDPR problems can also bring direct personal fines, even for mistakes that look small.

Once, in Berlin, a missed tax filing nearly cost us our limited liability status—an expensive lesson I won’t forget. During my years running an IT services company between Paris and Beijing, I learned the hard way that missing a single annual filing in one country can undo months of careful planning. There have been real cases where people got personal fines under GDPR rules for poor data handling or failing to document a response. Even a minor error can bring real penalties if you don’t catch it and fix it.

What Works for Peace of Mind

Tech professionals who avoid issues often follow a few smart habits:
- Have clear contracts with liability caps
- Do regular insurance reviews
- Keep up minimalist compliance routines, using digital tools for records and reminders

The fear of an unexpected fine used to keep me up at night, but these routines have made my freelance life much less stressful. Consistent routines, solid contracts, and automation are great foundations. Staying informed about new rules and keeping up with annual check-ins helps avoid surprises.

Regular habits, like keeping an eye on changing laws or booking yearly reviews, keep you safer as business or legal rules shift. Seeing liability protection as a steady habit means less stress down the road.

After moving from Berlin to Lisbon, I found that automating compliance freed up time for gardening and carpentry—my new hobbies that keep me sane. Making liability checks part of your usual business is a real stress saver, even as you grow or change direction. From my time building and scaling companies, I’ve learned that routines—especially those that simplify or automate admin—really do bring peace of mind. It’s about keeping up with habits, not chasing perfection.

Running a tech business is much more than just filling out some forms or picking a company name. Real asset protection comes from simple daily routines—like keeping bank accounts separate, reviewing insurance, and keeping your contracts current. Small habits, such as setting calendar reminders or making cloud backups, can go a long way. Digital tools turn admin into a task you can finish in a few clicks. Stick to these routines as your business changes, review them each month, quarter, and year, and you’ll keep risks under control. Peace of mind comes from simple habits and a little regular attention.

You might be interested by these articles:


25 Years in IT: A Journey of Expertise

2025-

Nook
(Lisbon/Remote)

Product Lead
Building the future of health coaching. Leading product development and go-to-market strategy for a platform that makes personal wellness accessible through natural dialogue.
Making health coaching feel like talking to a friend who actually gets you.

2024-

My Own Adventures
(Lisbon/Remote)

AI Enthusiast & Explorer
As Head of My Own Adventures, I’ve delved into AI, not just as a hobby but as a full-blown quest. I’ve led ambitious personal projects, challenged the frontiers of my own curiosity, and explored the vast realms of machine learning. No deadlines or stress—just the occasional existential crisis about AI taking over the world.

2017 - 2023

SwitchUp
(Berlin/Remote)

Hands-On Chief Technology Officer
For this rapidly growing startup, established in 2014 and focused on developing a smart assistant for managing energy subscription plans, I led a transformative initiative to shift from a monolithic Rails application to a scalable, high-load architecture based on microservices.
More...

2010 - 2017

Second Bureau
(Beijing/Paris)

CTO / Managing Director Asia
I played a pivotal role as a CTO and Managing director of this IT Services company, where we specialized in assisting local, state-owned, and international companies in crafting and implementing their digital marketing strategies. I hired and managed a team of 17 engineers.
More...

SwitchUp Logo

SwitchUp
SwitchUp is dedicated to creating a smart assistant designed to oversee customer energy contracts, consistently searching the market for better offers.

In 2017, I joined the company to lead a transformation plan towards a scalable solution. Since then, the company has grown to manage 200,000 regular customers, with the capacity to optimize up to 30,000 plans each month.Role:
In my role as Hands-On CTO, I:
- Architected a future-proof microservices-based solution.
- Developed and championed a multi-year roadmap for tech development.
- Built and managed a high-performing engineering team.
- Contributed directly to maintaining and evolving the legacy system for optimal performance.
Challenges:
Balancing short-term needs with long-term vision was crucial for this rapidly scaling business. Resource constraints demanded strategic prioritization. Addressing urgent requirements like launching new collaborations quickly could compromise long-term architectural stability and scalability, potentially hindering future integration and codebase sustainability.
Technologies:
Proficient in Ruby (versions 2 and 3), Ruby on Rails (versions 4 to 7), AWS, Heroku, Redis, Tailwind CSS, JWT, and implementing microservices architectures.

Arik Meyer's Endorsement of Gilles Crofils
Second Bureau Logo

Second Bureau
Second Bureau was a French company that I founded with a partner experienced in the e-retail.
Rooted in agile methods, we assisted our clients in making or optimizing their internet presence - e-commerce, m-commerce and social marketing. Our multicultural teams located in Beijing and Paris supported French companies in their ventures into the Chinese market

Cancel

Thank you !

Disclaimer: AI-Generated Content for Experimental Purposes Only

Please be aware that the articles published on this blog are created using artificial intelligence technologies, specifically OpenAI, Gemini and MistralAI, and are meant purely for experimental purposes.These articles do not represent my personal opinions, beliefs, or viewpoints, nor do they reflect the perspectives of any individuals involved in the creation or management of this blog.

The content produced by the AI is a result of machine learning algorithms and is not based on personal experiences, human insights, or the latest real-world information. It is important for readers to understand that the AI-generated content may not accurately represent facts, current events, or realistic scenarios.The purpose of this AI-generated content is to explore the capabilities and limitations of machine learning in content creation. It should not be used as a source for factual information or as a basis for forming opinions on any subject matter. We encourage readers to seek information from reliable, human-authored sources for any important or decision-influencing purposes.Use of this AI-generated content is at your own risk, and the platform assumes no responsibility for any misconceptions, errors, or reliance on the information provided herein.

Alt Text

Body