Legal & Compliance

Inventory of what personal data exists, where it flows, on what basis — the foundation of every privacy program.

Intake, verification, retrieval, and response workflow meeting statutory clocks without panic.

Shift privacy questions into design docs so answers shape architecture, not patches.

Deal-breaker checklist separating acceptable edits from escalations in vendor paper.

Employer agreements, contractor IP clauses, and open-source license discipline protecting company assets.

Permissive vs copyleft vs source-available tradeoffs matched to project goals.

Data map, DSAR flow, and privacy-by-design triggers operating within one quarter.

Playbook-driven redline handling keeping legal review fast and consistent.

License inventory and CI gates preventing copyleft surprises in proprietary code.