Skip to content
A/

Services

Tell me the problem. I’ll match the fix.

Every service below starts with a problem founders bring me. Find yours, see what you get and how long it takes. Fixed fee, agreed before we start.

RH / DISCOVER / ASSESS / ACT
Making risk visiblerh. / studio notes

Three ways to work

Audit, compliance, advisory.
Pick one, or all three.

RH / DISCOVER / ASSESS / ACT
01

Audit

Find out where you stand.

I review your product, data, AI and contracts, and tell you exactly what is missing and what could hurt you.

You get

  • A clear risk report
  • A ranked fix-list: now, next, later
  • A readout call with your team
Takes
Typically 3–6 weeks
Best for
Before a big deal, a fundraise or a new market
See all audits
RH / DATA / PERMISSIONS / PEOPLE
02

Compliance

Fix the gaps, properly.

We work through the fix-list together. I draft the documents and help your team change the product where needed.

You get

  • Privacy policy, terms and AI policy
  • Vendor and customer contracts
  • Processes your team can actually run
Takes
Usually 4–8 weeks after the audit
Best for
When you want it done, not just diagnosed
How it works
RH / SYSTEMS / CONTEXT / JUDGMENT
03

Advisory

A lawyer on call as you grow.

Ongoing counsel for new features, new markets, enterprise deals and questions that come up every week.

You get

  • Quick answers by email, chat or call
  • Contract reviews and negotiations
  • Early warning when laws change
Takes
Monthly, scoped to your needs
Best for
Once you are shipping fast and selling to big customers
Talk about advisory

Find your problem

Twelve problems.
Twelve clear fixes.

Don’t see yours? Most first calls start with something that isn’t on a list.

AI-01AI

“Is our AI product actually legal to sell?”

AI audit

I check what your AI does, who is responsible when it goes wrong and what you need to fix before customers or regulators ask.

Made for
Startups building copilots, chatbots, agents or AI that makes decisions.
  • Every AI tool and model you use, listed
  • Which AI laws apply to you, and where
  • Your AI vendor contracts and data use
  • Safeguards, disclosures and human review
You getA plain-English report and a ranked fix-list
TakesTypically 3–6 weeks
See full details
PR-01Privacy

“Are we handling customer data the right way?”

Data protection audit

I follow your users’ data through your product, tools and team, and show you exactly where you are exposed.

Made for
Any startup collecting personal data, especially before big deals or new markets.
  • A map of what data you collect and where it goes
  • Your privacy policy, cookie banner and consent
  • Vendor contracts and data sent abroad
  • Deleting data, user requests and data leaks
You getA risk report, a fix-list and document redlines
TakesTypically 3–6 weeks
See full details
AI-02AI

“We have users in Europe. Does the EU AI Act apply to us?”

EU AI Act check

A clear yes or no, what the Act expects from you, and the dates that apply after the 2026 changes.

Made for
Startups outside the EU with European users, customers or partners.
  • Your role under the Act
  • Whether your AI counts as banned or high-risk
  • What you must tell users about AI
  • A timeline of what to do and when
You getA short memo and a step-by-step roadmap
TakesTypically 2–3 weeks
Ask about this
PR-02Privacy

“India’s new privacy law is coming. What do we need to change?”

India DPDP readiness

Get ready for India’s Digital Personal Data Protection Act before its main duties apply in May 2027.

Made for
Indian startups, and global products with users in India.
  • New consent screens and privacy notices
  • Children’s data and parental consent
  • Data breach reporting
  • Whether you face the stricter ‘significant’ rules
You getA gap list, notice templates and a phased plan
TakesTypically 3–4 weeks
Ask about this
AI-03AI

“What did we just agree to with this AI vendor?”

AI vendor check

I read the AI vendor’s terms before you sign, so you know who owns what and whether they train on your data.

Made for
Teams signing up for OpenAI, Anthropic, AI SaaS or agent platforms.
  • Do they train on or keep your data?
  • Who owns the outputs, and who is liable
  • Where your data is hosted and who sees it
  • Their security and breach promises
You getA risk scorecard and the changes to ask for
TakesTypically 1–2 weeks per vendor
Ask about this
AI-04AI

“Our software decides who gets hired, approved or flagged. Is that allowed?”

Automated decisions check

Find where your software makes big decisions about people, and add the notices, human review and appeal routes the law expects.

Made for
HR tech, fintech, insurance, property and health products.
  • Europe and UK rules on automated decisions
  • California and Colorado rules
  • Notices and opt-outs for users
  • Human review and appeal routes
You getA decision map and the notice and appeal design
TakesTypically 2–4 weeks
Ask about this
AI-05AI

“Our app creates AI images, video or voice. What are the rules?”

AI content & deepfake check

Labelling, watermarking and takedown rules for products that create or host AI-generated content.

Made for
Generative AI apps, creator tools, social and marketing platforms.
  • EU labelling rules for AI content
  • India’s rules and takedown deadlines
  • Deepfake and impersonation policies
  • Guardrails on what users can generate
You getA labelling spec, policy updates and a takedown playbook
TakesTypically 2–3 weeks
Ask about this
AI-06AI

“Enterprise buyers keep asking if we follow an AI standard.”

ISO 42001 readiness

Build the policies and records behind ISO/IEC 42001 and the NIST AI framework, so you can answer yes.

Made for
Scale-ups selling AI to large companies.
  • AI policies and who is responsible
  • A simple AI risk assessment method
  • Mapping to ISO 42001 and NIST
  • An evidence pack for certification
You getA governance pack and a gap list
TakesTypically 6–10 weeks
Ask about this
PR-03Privacy

“Children use our app. What extra rules apply?”

Kids & teens check

Children’s data has the strictest rules. I tell you what to change in your product.

Made for
Edtech, gaming, social and consumer apps.
  • UK Children’s Code
  • US COPPA and state laws
  • EU rules for minors
  • India’s parental consent rules
You getFindings and product design changes
TakesTypically 2–3 weeks
Ask about this
DT-01Deals & trust

“Every big customer sends a 200-question security questionnaire.”

Enterprise deal pack

Answer the privacy, security and AI questions once, then reuse them in every deal.

Made for
B2B SaaS and AI startups selling to larger companies.
  • Your standard data processing agreement (DPA)
  • A bank of ready questionnaire answers
  • Your list of vendors and trust page copy
  • Responsible AI and acceptable-use policies
You getA ready-to-send document set
TakesTypically 2–4 weeks
Ask about this
DT-02Deals & trust

“Investors are starting due diligence next month.”

Fundraise-ready check

Find the IP, data and AI problems before investors or buyers do, and fix the big ones.

Made for
Founders preparing for a priced round or an acquisition.
  • Do you own your code and IP?
  • Do you have the rights to your training data?
  • Privacy and AI legal risks
  • Key customer and vendor promises
You getA red-flag report and a clean issues list
TakesTypically 1–3 weeks
Ask about this
DT-03Deals & trust

“We don’t have a lawyer, and questions come up every week.”

Lawyer on call

Ongoing advice for launches, contracts, vendors and customer questions.

Made for
Teams without in-house counsel who ship every week.
  • New feature and launch reviews
  • Contract and DPA negotiation
  • Updates when laws change in your markets
  • Board and investor updates
You getOngoing advice and a shared decision log
TakesMonthly
Ask about this

Timelines are typical, not promises; they depend on your product, markets and documents. Scope and fee are agreed in writing before any work starts. These are legal reviews, not certifications or security testing. Where you need those, I bring in specialist partners.

How every service works

Same simple steps.
Whatever you pick.

  1. 130 minutes

    Book a call

    You: Pick a slot and tell me what you do. No prep needed.

    Me: I listen, ask questions and tell you honestly whether you need me.

  2. 2Weeks 1–3

    Audit

    You: Share documents and give me a few short calls with your team.

    Me: I look at how you use AI and data, your tools and your contracts.

  3. 3Week 4

    Report & plan

    You: Join one readout call.

    Me: I explain what I found in plain English and give you a ranked fix-list.

  4. 4Weeks 5–12

    Fix it

    You: Approve the drafts and make the changes we agree.

    Me: I write the policies, contracts and processes, and check the changes.

  5. 5Ongoing

    Stay covered

    You: Ping me when something new comes up.

    Me: I advise on launches, deals and new laws before they become problems.

Questions founders ask

Straight answers.
No legalese.

I’m an early-stage startup. Do I really need this now?

If you handle personal data, use AI, or sell to businesses, yes, but at the right size. Early on, a short audit and a few key documents usually cover it. We scale up as you do.

How much does it cost?

Every engagement has a fixed fee, agreed before we start, based on your product and markets. You will know the full price after the first call. No hourly surprises.

What happens on the first call?

You tell me what you are building and what worries you. I tell you what I would do, roughly how long it takes, and whether you need me at all.

Do you work with companies in my country?

Very likely. I advise companies across the EU, UK, US, Asia, the Middle East and India. Where you need a local lawyer, I coordinate one.

We already have a privacy policy from a template. Isn’t that enough?

Usually not. A template describes some other company. If your policy does not match what your product does, it can create more risk than having none.

Can you work with our in-house team or other lawyers?

Yes. I often handle the AI and data work while your existing lawyers handle corporate or litigation.

Ready when you are

Not sure which one you need? Tell me the problem.

Tell me what you’re building. I’ll tell you what you need. No obligation.

Book an intro call