Business Lawyer in Bucharest: Construction Contracts, SaaS, and Defense in Economic Criminal Cases
For many companies in Bucharest, legal risk no longer appears in separate silos. A poorly drafted construction contract generates cash-flow blockages; an incomplete SaaS agreement exposes the company to data incidents and penalties; and a tax documentation gap can escalate into an economic criminal investigation, complete with precautionary measures freezing assets and accounts.
That's why choosing a business lawyer shouldn't be based on a practice label alone. What matters is whether the same team can understand commercial logic, contractual execution, and criminal risk simultaneously - because the most costly crises arise exactly where contracts, financial flows, correspondence, and management decisions intersect. This guide walks through the three areas where that intersection bites hardest: construction contracts, SaaS and business agreements, and economic criminal defense.
67.4M lei
alleged damages in a single DNA case (Sept 2025): tax evasion, bribery, laundering - 14 companies involved
540M lei
additional tax claims from 1,102 ANAF control actions in one recent reporting period
17 Jan 2025
DORA applies - SaaS security and audit clauses stop being "annexes"
3
risk areas that converge in the costliest mandates: contract, tax, criminal
How a commercial dispute becomes a criminal case - the escalation chain
The typical construction example: the company invoices additional works without a clear contractual mechanism, payment is delayed, cash flow tightens, documentation gaps appear - and then a tax audit questions the deductibility or the reality of certain transactions. In SaaS, the logic is identical with different ingredients: no traceability over service delivery, undeclared subcontractors, unclear data roles, invoicing misaligned with services actually rendered, imprecise statements to partners or authorities.
The chain your contracts either break - or feed
Area 1 - Construction contracts: where margins are lost and litigation begins
Disputes rarely originate from a single clause - they accumulate: unrealistic deadlines, no variation mechanism, informal handovers, weak correlation between subcontracts and the main contract, disproportionate guarantees, insufficient documentation for claims. The real stake for the lawyer isn't drafting - it's building an evidentiary and risk-allocation framework usable during execution and in litigation: defined deliverables and handover conditions, precise change-order and time-extension rules, economically calibrated penalties and liability caps, correlation with subcontracts, guarantees and insurance, and notification mechanisms with evidence preserved from day one.
Three recurring execution disputes - and what actually helps
Refusal to pay after completion
Weak point: vague handover criteria and work-statement approval timelines. Useful actions: centralize minutes and proof of earlier acceptances, send formal notices, clarify non-conformities fast. Possible outcome: payment released, a settlement, or a stronger evidentiary position for litigation.
Disputed additional works
Weak point: the variation mechanism doesn't say who approves, by when, on which documents. Useful actions: separate base from additional works, reconstruct the approval trail, notify cost and time impact. Possible outcome: partial cost recognition, recalibrated deadlines, or a documented future claim.
Refused handover, termination risk
Weak point: the contract doesn't separate defects that block handover from those remediable later. Useful actions: technically distinguish essential defects from minor observations, document the works' stage, assess penalties/suspension/forfeiture conditions. Possible outcome: handover with reservations, a remediation schedule, reduced exposure.
Forfeiture clause: the six-step activation logic
Compare the facts with the clause's exact wording → gather the documents proving non-performance → send the notice of default or remediation required by the contract → verify the deadline expired without sufficient remediation → communicate the activation notice and intended effects → immediately secure the evidentiary position on handover, guarantees, and outstanding payments. The useful evidence is concrete: schedules and proof of delay, site minutes, remediation correspondence, work statements, handover documents or refusals, prior notices, photographs, technical reports. Prevention and litigation can run in parallel - while one team manages the blocked project, the same clauses get corrected on current and future sites.
Area 2 - SaaS and business contracts: the risk isn't only in the IP, it's in the operations
Many companies treat SaaS agreements as simple terms and conditions. In reality, a SaaS contract is an instrument of operational governance: uptime, support, security, IP, data export, audit rights, subcontracting, liability. And the regulatory floor is rising: DORA has applied since January 17, 2025 for financial-sector entities and relevant providers, while the Cyber Resilience Act entered into force on December 10, 2024 - with reporting obligations from September 11, 2026 and main obligations from December 11, 2027. These dates directly shape how security, audit, incident-notification, and liability clauses get negotiated. Concretely:
- SLAs can no longer remain simple commercial promises
Service levels tie into regulatory resilience expectations. - Security clauses need real notification and response obligations
Not boilerplate - tested incident workflows with deadlines. - Data roles, subprocessors, and audit rights must be explicit
Who processes what, on whose behalf, and who can verify. - Termination and data portability treated seriously from the outset
Exit is an operational-continuity issue, not an annex. - Liability caps aligned with the product's actual risk profile
Not copied from an unrelated template.
Area 3 - Economic criminal defense: immediate, not reactive
The most costly mistake is delay. Many companies call a lawyer after a search, an interview, or a seizure - but effective defense begins earlier: at the tax audit stage, upon the first document requests, following internal referrals, or upon discovering accounting inconsistencies. The strategic questions go beyond "what do we say at the interview?": which documents to hand over and in what order; which explanations have accounting support; the self-incrimination risk of improvised answers; how to challenge the proportionality of a seizure; how to separate the company's liability from that of individuals; and what remediation is still possible.
Law No. 241/2005 · Fiscal Procedure Code
The legal anchors - and why timing matters
In tax evasion matters, Law No. 241/2005 (updated, including through 2024 amendments) remains the core statute, with Article 9 offenses at the center of many investigations. The Fiscal Procedure Code emphasizes lawfulness, good faith, the primacy of economic substance - and the taxpayer's right to be heard: the authority must ensure the taxpayer has the opportunity to express their point of view before the decision is made. The practical consequence: the legal response must be prepared before the tax or criminal position hardens, from the administrative stage onward.
The risk is measured in public figures, not hypotheticals
In a September 18, 2025 press release, DNA announced five defendants sent to trial for tax evasion, bribery, and money laundering - total alleged damages of 67,493,417 lei across 14 companies, with a proposal to maintain the precautionary measures. In one recent reporting period, ANAF announced 1,102 control actions, additional tax claims of 540,243,299 lei, and precautionary measures totaling 123,514,438 lei. For a company, the difference between prevention and a delayed reaction is financial and operational - not theoretical.
Quick test: what's the right first move?
Scenario 1: Your team is invoicing additional works "as agreed on site," without written change orders - payment is starting to lag.
Reconstruct and fix now. This is link 1 of the escalation chain: undocumented extra works → disputed payment → cash-flow strain → a tax audit questioning the reality of transactions. Reconstruct site instructions and approvals for what's done, and fix the variation mechanism for everything forward - before the commercial problem changes its legal nature.
Scenario 2: ANAF sends an extensive document request. Accounting says: "we'll handle it, it's just paperwork."
Involve legal first. An extensive document request is a warning sign, not paperwork. Which documents go, in what order, with what context - these choices shape any later file. And the right to be heard in the Fiscal Procedure Code only helps if the position is prepared before it hardens. Documents organized by accounting logic alone can read very differently under criminal logic.
Scenario 3: A criminal investigation touches both the company and its administrator personally.
Coordinated, with separation. Separating the company's liability from that of the individuals involved is a core strategic question - interests usually overlap but don't fully align. A coordinated defense keeps positions coherent while protecting each; assuming identical interests produces contradictions the investigation will use.
Scenario 4: You're signing a major SaaS deal. The provider's template has a generic security clause and no subprocessor list.
Negotiate it as governance. Post-DORA and with the Cyber Resilience Act phasing in, security, incident notification, subprocessor transparency, audit rights, and exit/portability are operational-continuity clauses with regulatory weight - and a traceability gap here is the SaaS version of the escalation chain: unclear delivery, misaligned invoicing, imprecise statements.
Interactive: how exposed is your company to hybrid legal risk?
Tick each statement that is true for your company today:
Eight controls that break the escalation chain
- Additional works and variations are only executed against written, approved change orders
- Handover criteria and work-statement approval timelines are precisely defined in contracts
- Notices, minutes, and handover documents follow a strict internal discipline
- Evidence, correspondence, and cost/time approvals are preserved under internal rules
- SaaS contracts define security, incident notification, subprocessors, audit rights, and exit/portability
- Invoicing is aligned with services actually rendered, with delivery traceability
- Tax audit responses are coordinated with legal before positions are submitted
- There's a plan separating the company's position from management's in case of investigation
Choosing the lawyer: five verifiable criteria
Criterion | What to check | Why it matters |
|---|---|---|
Understanding of the business model | Can explain your commercial, contractual, and tax flows | Without this, the defense remains theoretical |
Cross-disciplinary experience | Practice in commercial law, technology, and economic criminal law | Many crises are hybrid in nature |
Procedural availability | Can promptly handle an audit, a search, or a contractual blockage | The first measures and documents can shape the entire case |
Evidentiary rigor | Organizes documents, chronology, correspondence, financial flows | Written evidence frequently changes the outcome |
Strategic approach | Considers the business solution, not just the legal position | Sometimes the real objective is operational continuity |
"The most difficult cases are not the obvious ones, but those in which contractual, tax, and criminal issues overlap. The value of the lawyer shows in mandates where the same situation simultaneously requires contractual renegotiation, a compliance review, preparation for an investigation, challenging precautionary measures - and representation of both the company and its management."
- The premise behind BSA's integrated business-law practice
Where BSA fits
Buju, Stanciu și Asociații presents its services across exactly these three areas - commercial contracts and construction litigation; SaaS, tech, AI, start-up and investment projects; and defense in economic criminal and business crime matters - with a focus, per the firm's own profile, on personalized and pragmatic solutions. For businesses with an international component, the firm's cross-border working relationships are relevant when contracts, payments, or suppliers span multiple jurisdictions. As with any firm's self-description, the test is concrete: ask how the integrated coordination would work on your specific facts.
Frequently asked questions
When should I contact an economic criminal lawyer in Bucharest?
As soon as a sensitive audit, an extensive document request, a credible internal referral, an invitation for questioning, or an indication of a possible precautionary measure appears. An effective defense begins before the critical procedural moment.
What distinguishes a construction-contracts lawyer from a general commercial lawyer?
Genuine relevance to construction means understanding execution: variations, handover, claims, delays, guarantees, subcontracting, and the impact on cash flow. Generic contract drafting is not enough.
How can BSA help a company facing contractual issues and criminal risk at the same time?
Through unified coordination: contractual analysis, evidence organization, interfacing with finance and operations, a strategy for responding to authorities, challenging precautionary measures, and defending both the company and its management. Start a confidential discussion.
Managing construction projects, SaaS contracts - or facing a tax audit?
The right time for legal assistance is before matters escalate, while contracts, notices, and documents can still be organized strategically. For a confidential discussion about construction contracts, SaaS agreements, or defense in economic criminal cases, reach the BSA team.
Sources and references
Law No. 241/2005 on preventing and combating tax evasion (incl. 2024 amendments): legislatie.just.ro · Fiscal Procedure Code - lawfulness, right to be heard, economic substance: anaf.ro · Civil Code - resolution and the forfeiture clause: legislatie.just.ro · DNA - press releases on tax evasion, bribery, and money laundering cases (incl. Sept 18, 2025): pna.ro · ANAF - public statements on anti-fraud control activity: anaf.ro · ESMA - DORA implementation and compliance preparation: esma.europa.eu · European Commission - Cyber Resilience Act: digital-strategy.ec.europa.eu · Buju, Stanciu & Asociații (BSA): bsa.ro
Disclaimer: This article is for general informational purposes only and does not constitute legal advice. Public figures cited (DNA, ANAF) refer to alleged facts and aggregate control activity, not to findings of guilt; every case depends on its own facts and evidence. A dedicated legal analysis is required for a formal opinion.