Browse Skills

Expert in internal audit strategy covering risk-based audit planning, SOX compliance testing, control evaluation, audit report writing, and stakeholder management for audit functions.

Expert advisor for public procurement processes covering tender preparation, bid evaluation, compliance frameworks, and procurement law across EU and US jurisdictions.

Analyzes open source license compatibility, obligations, and risks for software projects. Provides guidance on SPDX identifiers, CLA management, and FOSS compliance strategies.

Analyze and risk-score purchase contracts — from goods purchases to asset and share purchase agreements — identifying risks, missing protections, and negotiation opportunities across jurisdictions.

Guides organizations through EU AI Act (Regulation 2024/1689) compliance by classifying AI systems by risk level, mapping regulatory obligations, creating compliance documentation, and building governance frameworks aligned with European harmonized standards.

Designs and optimizes end-to-end contract lifecycle management systems, covering clause libraries, risk scoring, obligation tracking, renewal workflows, and CLM technology integration for enterprise legal operations.

Expert specialist for drafting, reviewing, and advising on non-compete agreements and restrictive covenants — from enforceability analysis and jurisdictional requirements to scope limitations, consideration requirements, blue-pencil provisions, and garden leave alternatives.

Guides organizations in establishing whistleblower protection programs compliant with the EU Whistleblower Directive, SOX requirements, and national implementing laws. Covers reporting channel design, anonymity protections, retaliation prevention, and internal investigation processes.

Guides organizations through legally compliant employment terminations across multiple jurisdictions, covering notice periods, works council consultation, severance structuring, protected class screening, and litigation risk assessment.

Design, audit, and remediate healthcare data workflows for HIPAA Privacy Rule, Security Rule, and Breach Notification Rule compliance with technical safeguards, PHI access controls, and audit trail design.

Drafts comprehensive, regulatory-compliant clinical trial protocols following SPIRIT 2013, ICH-GCP, and FDA/EMA guidelines, covering study design, endpoints, statistical analysis, safety monitoring, and operational feasibility.

Guide the preparation of technical documentation for medical devices under EU MDR 2017/745, covering clinical evaluation, risk management, and post-market surveillance.

Guides organizations through Data Protection Impact Assessments under GDPR Article 35, covering threshold screening, risk assessment, mitigation planning, and supervisory authority consultation readiness.

Designs effective, audit-ready compliance training programs using instructional design frameworks, regulatory requirement mapping, and scenario-based learning — from anti-bribery to data privacy to code of conduct.

Design and draft regulatory impact assessments (RIAs) using EU Better Regulation, OECD best practices, and cost-benefit analysis frameworks to evaluate policy options, quantify impacts, and support evidence-based regulatory decision-making.

Guides organizations through SOC 2 Type I and Type II audit preparation, covering Trust Services Criteria mapping, control design and implementation, evidence collection strategies, gap analysis, and continuous compliance monitoring. Applies AICPA attestation standards (SSAE 18), COSO 2013 framework, and industry best practices. This is NOT audit advice — always engage a qualified CPA firm for your examination.

Guides organizations through export control regulations (EAR, ITAR, EU Dual-Use) for software and technology transfers, including classification, licensing requirements, and compliance program design.

Drafts API Terms of Use covering rate limits, usage restrictions, data ownership, liability, SLA commitments, and developer responsibilities for platform businesses exposing APIs.

Designs electronic discovery workflows for litigation readiness including legal hold procedures, data preservation, collection protocols, review workflows, and production specifications under FRCP and EDRM frameworks.

Guides organizations through EU Corporate Sustainability Reporting Directive compliance including double materiality assessments, ESRS gap analysis, data architecture, and assurance readiness.

Design and optimize anti-money laundering programs with risk-based KYC procedures, transaction monitoring rules, sanctions screening, and regulatory compliance across US, EU, and FATF jurisdictions.

Design tax-efficient intercompany structures for companies operating across the US and EU, addressing transfer pricing, double taxation treaties, substance requirements, and regulatory compliance.

Design, implement, and audit compliance controls for high-risk AI systems under the EU AI Act and aligned frameworks, covering risk management, data governance, traceability, human oversight, and conformity assessment.

Provides educational guidance on employment law topics including hiring compliance, employment contracts, termination procedures, workplace policies, and contractor classification. This is NOT legal advice — always consult a qualified employment attorney.