Browse Skills

Draft legally compliant, user-friendly cookie policies and consent notices covering EU/GDPR, UK/PECR, US/CCPA jurisdictions with cookie audit tables and implementation guidance.

Guide the preparation of technical documentation for medical devices under EU MDR 2017/745, covering clinical evaluation, risk management, and post-market surveillance.

Comprehensive legal guidance for startups covering incorporation, contracts, intellectual property, GDPR compliance, terms of service, employment law, and fundraising legal structures.

Guides organizations through SOC 2 Type I and Type II audit preparation, covering Trust Services Criteria mapping, control design and implementation, evidence collection strategies, gap analysis, and continuous compliance monitoring. Applies AICPA attestation standards (SSAE 18), COSO 2013 framework, and industry best practices. This is NOT audit advice — always engage a qualified CPA firm for your examination.

Guides organizations through export control compliance — from ECCN classification and license determination to denied party screening, deemed export controls, and compliance program design. Covers EAR, ITAR, EU Dual-Use Regulation, and sanctions frameworks for technology companies.

Validates and improves legal disclaimers across marketing materials, product pages, and advertising content to ensure regulatory compliance, clarity, and proper placement.

Guides organizations through EU AI Act (Regulation 2024/1689) compliance by classifying AI systems by risk level, mapping regulatory obligations, creating compliance documentation, and building governance frameworks aligned with European harmonized standards.

Expert guidance for auditing and ensuring open source license compliance across software projects. Covers license identification, compatibility analysis, SBOM generation, copyleft obligations, SPDX/CycloneDX standards, OSPO policy frameworks, and M&A due diligence.

Guides organizations through AI regulatory compliance including the EU AI Act, NIST AI RMF, and emerging global AI governance frameworks. Provides risk classification, transparency requirements, and compliance roadmaps.

Guides organizations through ISO/IEC 27001:2022 ISMS implementation, from initial gap analysis through certification audit preparation. Covers Annex A controls mapping, ISO 27005 risk assessment methodology, Statement of Applicability design, internal audit programs, and integration with SOC 2 and GDPR frameworks. This is NOT legal advice — always consult qualified information security and compliance counsel.

Design and implement consent management systems for GDPR, CCPA/CPRA, and ePrivacy compliance. Covers cookie consent flows, CMP selection, IAB TCF v2.2 integration, Google Consent Mode v2, consent signal propagation, and audit-ready consent logging architectures.

Draft, review, and negotiate freelancer and independent contractor agreements with proper IP assignment, scope definition, payment terms, termination clauses, and misclassification risk mitigation across US, UK, EU, and DACH jurisdictions.

Designs and reviews SaaS agreements including subscription terms, SLAs, data processing agreements, acceptable use policies, and liability frameworks. Provides clause-level analysis and risk-balanced contract architecture.

Provides educational guidance on employment law topics including hiring compliance, employment contracts, termination procedures, workplace policies, and contractor classification. This is NOT legal advice — always consult a qualified employment attorney.

Expert guidance on international data transfer mechanisms, adequacy decisions, and transfer impact assessments.

Expert guide for analyzing insurance policies to identify coverage scope, exclusions, gaps, and interpretation issues using established legal principles and industry standards.

Draft professionally structured Non-Disclosure Agreements (mutual and unilateral) with jurisdiction-appropriate terms, trade secret protections, GDPR-compliant data handling clauses, and context-specific carve-outs for business transactions.

Guides organizations through EU AI Act compliance with risk classification, conformity assessments, documentation requirements, governance frameworks, and implementation timelines.

Map ISO 27001:2022 Annex A controls to organizational assets, cross-reference with SOC 2 and NIST CSF, and produce audit-ready evidence matrices with gap analysis and risk treatment plans.

Analyzes open source license compatibility, obligations, and risks for software projects. Provides guidance on SPDX identifiers, CLA management, and FOSS compliance strategies.

Expert analysis of cybersecurity regulations, breach notification laws, and incident response legal requirements.

Draft persuasive legal briefs, motions, and memoranda using IRAC/CREAC methodology with proper case law citation, standards of review, and ethical compliance.

Draft clear, well-structured internal legal memoranda that analyze legal questions using IRAC/CREAC methodology, synthesize authorities, and present findings to support organizational decision-making.

Guides organizations through export control regulations (EAR, ITAR, EU Dual-Use) for software and technology transfers, including classification, licensing requirements, and compliance program design.