Legal methods seem like the best way to protect IP from a business perspective, but it's a big step to take for a solo developer taking on their first new hire.
Do you have any recommendations on how to protect IP and code/data copying by an employee? I've seen solutions as heavyweight as VPNs + virtual desktops (VDIs like Citrix), but I'm wondering what a typical small startup security setup looks like.
You need legal protection.
Don't put your energy into making things suck.
Good luck.