Data privacy has been front of mind in Europe for years. In the US, the rules are catching up fast and most founders are finding out what applies to them only when someone asks. A vendor before they sign. An investor during diligence. A customer who knows their rights. What looked like a minor gap turns out to be the thing standing between you and the next step.

BUSINESSES AREN’T UNDONE BY WHAT THEY DID WRONG. THEY’RE UNDONE BY WHAT THEY NEVER THOUGHT TO GET RIGHT.

We help founders and business owners build privacy practices that stand up: from drafting policies and vendor agreements to navigating US state laws, GDPR, and everything in between. This isn’t about compliance for its own sake; it’s about making sure data privacy is never the reason a deal stalls, a vendor walks, or an investor hesitates.

A vendor or partner asked for your privacy policy?

We draft policies that reflect what your business actually does; not a generic template, but something that stands up when someone reads it carefully.

Selling to (or even just visible to) European customers?

GDPR applies to any business handling data from EU residents, regardless of where you’re based. Most US founders discover this too late. We advise on GDPR compliance, cross-border data transfers, and the frameworks that keep data flowing legally between the US and Europe.

Data privacy is only invisible until someone asks. Let’s make sure you’re ready when they do.

Schedule a Consultation

Sharing data with vendors or third parties?

Every time data leaves your business, you need the right agreements in place. We make sure obligations are clearly allocated and your exposure is limited.

Using AI tools in your business?

AI tools process data in ways most standard agreements don’t account for. We help you understand the exposure and make sure your practices stand up.

Getting ready to raise or sell?

Data privacy is increasingly a diligence item. We make sure your privacy practices are documented and defensible before that conversation starts so it moves quickly and stays on your business.

For data-handling terms in commercial contracts, see Contracts & Commercial Transactions. 

For data considerations specific to IP, see Intellectual Property.

Data Privacy and Protection Matters We Handle

  • Privacy policy and terms of service drafting
  • GDPR and European data protection compliance
  • Cross-border data transfer frameworks
  • Data processing and vendor agreements
  • AI and data privacy risk assessment
  • Privacy due diligence for fundraising and M&A
  • Ongoing privacy counsel as the law evolves