Sure, at their size now. Not before, as policy beyond "use good judgement" at a small company is basically pointless.

Your first dozen hires must all be good enough to write such policies...