Home/Services/Data Privacy

Data Privacy

For products that run on personal data, privacy is not a blocker to route around. Built well, it is what lets you sell to serious customers and operate across borders.

The patchwork of US state privacy laws, paired with cross-border transfer rules, has made data compliance a moving target that touches product, sales, and engineering at once. Our practice, led by CIPP/US-certified counsel, builds privacy programs that satisfy regulators and enterprise procurement without turning your roadmap into a compliance exercise.

We start from how your product actually uses data and work outward to the documents and processes that govern it, rather than handing you a template that assumes a business you do not run.

What we handle

  • Privacy programs, notices, and internal policies built around your data flows
  • Data processing agreements, data-sharing agreements, and sub-processor terms
  • Compliance with comprehensive US state privacy laws and sector-specific regimes
  • Cross-border data transfer strategy and the contractual mechanics behind it
  • Data mapping and processes for handling consumer rights and access requests
  • Breach response planning and the contractual obligations that surround it

How we work

Map

We document what data you collect, where it goes, and who touches it. Nothing else is reliable without this.

Assess

We test that map against the regimes that actually apply to you and your customers.

Build

We produce the agreements, notices, and processes, and align them with your contracts and vendors.

Maintain

We keep the program current as new state laws come into force and customer demands escalate.

Who this is for

SaaS and AI companies whose products depend on personal data, businesses selling into privacy-sensitive enterprises, and teams preparing for the diligence that comes with a financing or sale.

Talk through your data program →