Legal, privacy and compliance

Specialist agents · 29

• Obligations registerproposal

  Maintains the inventory of the company's legal, regulatory and contractual obligations, assigning each one an owner and supporting evidence. Detects requirements with no owner or no documentation and proposes completing the register.

• Contract reviewproposal

  Compares clauses in new contracts, renewals and amendments against the company's standard position. Flags risk deviations (liability, penalties, exclusivity, termination) and drafts alternative wording for human review.

• Legal deadlinesproposal

  Monitors expiry dates, notice periods and automatic renewals for contracts, licenses, registrations and recurring obligations. Proposes calendar entries and tracking files with enough lead time to decide.

• Privacy and processing recordsproposal

  Builds and updates the record of processing activities: data categories, purposes, legal bases, processors and retention periods. Identifies new processing or processing lacking a documented legal basis.

• Data subject rightsproposal

  Coordinates the lifecycle of access, rectification, erasure, objection and portability requests: legal deadlines, identity verification, evidence collection and draft responses. Alerts on requests nearing their deadline.

• Compliance documentationproposal

  Compiles compliance controls, records and evidence into a dossier ready for audits, due diligence or customer requests. Detects evidence gaps per obligation and reports them.

• Policy managementproposal

  Detects internal policies that are outdated or inconsistent with regulation or actual practice, proposes revised text and a dissemination plan with read acknowledgement for affected staff.

• Intellectual propertyproposal

  Verifies documentation evidencing intellectual and industrial property rights: trademark and domain registrations, assignments, software and content licenses, and authorship of materials. Flags assets without documented title or with license breaches.

• Insurance and claimsproposal

  Prepares and tracks insurance claim and dispute files with insurers: document gathering, notification deadlines and status. Checks policy coverage against current risks.

• Corporate governanceproposal

  Prepares minutes, notices, registers and corporate documentation (shareholder and board meetings, powers of attorney, annual accounts filings). Checks that resolutions are documented and corporate deadlines are met.

• Regulatory watchanalysis

  Monitors legislative changes and regulator guidance that apply to the company by sector, jurisdiction and size. Writes an impact analysis on current obligations and policies, with effective dates and priority.

• Contract drafting and templatesproposal

  Maintains the standard contract templates (NDA, MSA, SaaS, vendor) and the negotiation playbook with preferred clauses, acceptable fallbacks and red lines. Proposes updates based on contract review learnings.

• US privacy specialistproposal

  Determines which US privacy laws apply (CCPA/CPRA, state laws, COPPA, HIPAA) based on data and users, and prepares privacy notices, opt-out mechanisms and compliance documentation.

• Processors and data transfersproposal

  Manages data processing agreements (DPAs) with vendors and customers, standard contractual clauses and transfer impact assessments for international data transfers.

• Data breach responseproposal

  Coordinates assessment of personal data incidents, internal logging and preparation of notifications to authorities and data subjects within deadlines (72h under GDPR, US state deadlines), with remediation proposals.

• Security certificationsproposal

  Maintains readiness for SOC 2, ISO 27001 or ENS (controls, evidence, related policies) and drafts responses to customer security questionnaires from current evidence.

• IP assignment and invention agreementsproposal

  Verifies that founders, employees and freelancers have assigned IP through PIIA-type agreements, detects missing or insufficient clauses and proposes confirmatory assignment documents.

• Open source licensinganalysis

  Reviews licenses of software components and dependencies (MIT, Apache, GPL, AGPL), flags copyleft obligations or incompatibilities with the distribution model and summarizes risk for product and due diligence.

• Entity maintenanceproposal

  Handles corporate upkeep: formation, annual filings, Delaware franchise tax and registered agent, 83(b) elections, annual accounts and corporate books and registries. Proposes the calendar and documentation per entity.

• Equity instruments and option plansproposal

  Prepares documentation for SAFEs, convertible notes and stock option or phantom plans, and checks their legal reflection in the cap table (conversions, dilution, body approvals and 409A valuation).

• Financing transactions and due diligenceproposal

  Prepares the legal data room, analyzes term sheet provisions and coordinates due diligence requests in funding rounds and M&A, identifying documentary gaps before the counterparty does.

• Employment lawproposal

  Reviews employment contracts, applicable collective agreements, termination processes and correct classification of contractors versus employees, proposing document corrections and flagging misclassification risk.

• Consumer and marketing complianceproposal

  Reviews terms and conditions, cookie policy, commercial communications, advertising and web accessibility against consumer, e-commerce and marketing rules (consent, advertising claims, withdrawal rights).

• Disputes and pre-litigationproposal

  Prepares dispute files, demand letters and pre-litigation claims, manages debt recovery and tracks deadlines and deliverables with litigation counsel.

• Criminal compliance and whistleblowingproposal

  Maintains the criminal compliance model, anti-corruption policies and the whistleblowing channel under Spanish Law 2/2023, including logging and follow-up of reports within acknowledgement and resolution deadlines.

• AML, sanctions and export controlsanalysis

  Screens customers, vendors and partners against sanctions lists and assesses anti-money-laundering (AML) and export control or dual-use obligations, summarizing risk for each counterparty.

• AI governanceproposal

  Classifies the company's AI uses by risk level, prepares AI Act obligations (transparency, human oversight, registration) and US state AI rules, and proposes acceptable use policies.

• Licenses and permitsproposal

  Tracks business licenses, sector permits and authorizations from public administrations, their conditions and renewals, and proposes the files and tasks required before each expiry.

• Outside counsel managementproposal

  Prepares engagements for law firms and external advisors with scope, budget and timeline, tracks legal spend against budget and centralizes received deliverables in the relevant files.