Lead end-to-end negotiation of complex SaaS, AI, and technology agreements, including data ownership, model training rights, liability allocation, and cross-border regulatory risk.
Design vendor negotiation playbooks and fallback frameworks for enterprise procurement of AI systems and cloud-based platforms.
Structure AI deployments to align with emerging regulatory regimes, including the EU AI Act, Colorado AI Act, and federal procurement requirements.
Structure architect contractual frameworks addressing model risk, data provenance, explainability, and downstream liability in generative AI ecosystems.
Advise on AI vendor contracting and governance frameworks, including allocation of model risk, training data rights, and compliance under the EU AI Act and emerging U.S. AI laws.
Lead negotiation strategy for complex SaaS and technology agreements, including healthcare and enterprise platforms, focusing on liability allocation, data security, and regulatory alignment.
Advise on classification, handling, and system integration of CUI, FCI, and export-controlled data within enterprise and SaaS environments.
Lead CMMC readiness and DFARS compliance strategies, including cybersecurity controls and contractor obligations.
Structure transactions and investments to mitigate CFIUS exposure and national security risk.
Assess OFAC exposure, sanctions risk, and disclosure strategy in high-risk cross-border transactions.
Represent clients in OFAC matters involving SDN designation and delisting petitions, including strategic regulatory engagement and submission drafting.
Advise on CFIUS risk analysis for foreign investment transactions involving U.S. businesses with potential national security implications.
Lead enterprise privacy and cybersecurity program design, including DPIAs, data mapping, and cross-border transfer frameworks.
Direct ransomware response strategy, breach notification, and regulatory engagement across U.S. and international regimes.
Build compliance architectures integrating GDPR, U.S. state privacy laws, and sector-specific requirements (HIPAA, FTC).
Conduct advanced cookie and tracking compliance analysis under GDPR, ePrivacy Directive, and CPRA.
Conduct multijurisdictional privacy compliance programs, including GDPR, LATAM frameworks, and U.S. state privacy laws.
Lead cybersecurity incident response advisory for credential-stuffing and ransomware-related events, including regulatory exposure analysis and communications strategy.
Develop enterprise AI governance policies and risk assessment frameworks aligned with federal procurement standards and global regulatory trends.