/general-counsel-advisor

name: "general-counsel-advisor"
description: "Legal review of contracts and term sheets (MSA, SaaS, NDA, DPA, employment), IP strategy and regulatory exposure (HIPAA, GDPR, FDA, fintech). Use whenever the user asks if a contract is risky or what to watch in a deal; not a substitute for licensed counsel."
license: MIT
metadata:
  version: 1.0.0
  author: Alireza Rezvani
  category: c-level
  domain: general-counsel-leadership
  updated: 2026-05-12
  python-tools: contract_risk_scanner.py, term_sheet_analyzer.py
  frameworks: contract-review, ip-strategy, term-sheet-decoding, regulatory-mapping

General Counsel Advisor

Strategic legal frameworks for startup General Counsels and founders without one. Contract risk, IP strategy, term sheet decoding, regulatory landscape.

This is **not legal advice**. It surfaces the right questions to bring to qualified outside counsel and catches the obvious traps before they reach a signature. Treat every output as a starting point for a conversation with a licensed attorney, not as a substitute for one.

Keywords

general counsel, GC, legal review, contract review, MSA, SaaS agreement, NDA, DPA, employment agreement, contractor agreement, IP assignment, invention assignment, open source license, OSS compliance, term sheet, liquidation preference, anti-dilution, option pool, vesting, acceleration, drag-along, pro-rata, board composition, regulatory, HIPAA, GDPR, CCPA, FDA, MDR, fintech, BSA/AML, money transmitter, AI Act, indemnity, liability cap, force majeure, auto-renewal, choice of law, venue, non-compete, non-solicit

Quick Start

# Scan a contract for risky clauses (uses bundled sample if no path given)
python scripts/contract_risk_scanner.py
python scripts/contract_risk_scanner.py path/to/contract.txt

# Analyze a term sheet for founder-friendliness
python scripts/term_sheet_analyzer.py
python scripts/term_sheet_analyzer.py path/to/term_sheet.json

Key Questions (ask these first)

• **Who owns the IP being created or shared?** (Founders forget that contractors don't auto-assign IP without a written clause.)
• **What's the liability cap, and what's carved out?** (Standard: 12 months of fees, with carve-outs for IP infringement, data breach, willful misconduct.)
• **Is there a DPA in place if any personal data flows?** (GDPR, CCPA, state laws — non-negotiable if EU/CA data is touched.)
• **What's the termination right, notice period, and auto-renewal trap?** (5-year auto-renew with 60-day notice is a common founder mistake.)
• **Does this contract or product launch trigger a new regulatory regime?** (Healthcare → HIPAA. Fintech → BSA/AML. Medical device → FDA/MDR.)
• **For term sheets: liquidation preference, pre-money option pool, anti-dilution flavor?** (Three places where 5% of founder economics can quietly disappear.)

Core Responsibilities

1. Contract Review

Standard contracts a startup signs in its first 5 years:

• **Vendor MSA** — Master Service Agreement (cloud, tooling, services)
• **Customer SaaS Agreement** — your standard customer paper + customer redlines
• **NDA** — mutual + one-way, with carve-outs for residuals + independent development
• **DPA** — Data Processing Agreement (required when personal data flows)
• **Employment Agreement** — offer letter, IP assignment, non-compete (where enforceable), arbitration
• **Contractor / 1099 Agreement** — IP assignment is critical; misclassification risk
• **Equity Agreements** — option grants, RSU agreements, advisor grants (FAST template, YC SAFE for advisors)

**Run** `contract_risk_scanner.py` on the text. It flags the 12 most common founder-killer clauses.

2. IP Strategy

• **Invention assignment** — every employee and contractor signs one. No exceptions.
• **Open source license compliance** — track every OSS dependency's license; AGPL and GPL trigger copyleft obligations.
• **Trade secrets** — define what's protected and how (clean room dev, access controls, NDAs).
• **Patents** — file provisional within 12 months of disclosure; PCT for international.
• **Trademarks** — register the word mark first, design mark second; clear before launch.
• **Copyright** — automatic on creation, but register for statutory damages eligibility.

See `references/ip_and_regulatory.md`.

3. Term Sheet Decoding

When a term sheet arrives, the difference between a founder-friendly and founder-hostile sheet often hides in three clauses:

• **Liquidation preference** — 1x non-participating is standard; 1x participating or 2x is hostile
• **Pre-money vs post-money option pool** — pre-money pool dilutes founders; post-money dilutes everyone proportionally
• **Anti-dilution** — broad-based weighted average is standard; full ratchet is hostile

**Run** `term_sheet_analyzer.py` to get a 0-100 founder-friendliness score with flags.

4. Regulatory Landscape

When to engage outside counsel **before** committing:

| Trigger | Regime | First Step | |---|---|---| | Healthcare data | HIPAA, HITECH, state breach laws | Specialist health-tech counsel | | Cardholder data | PCI DSS (industry standard, not law, but contractually required) | QSA + counsel | | Money movement | BSA/AML, state money-transmitter (50-state patchwork) | Fintech specialist | | Medical device claims | FDA 510(k) / De Novo / PMA, MDR (EU), ISO 13485 | Medical-device specialist | | EU residents' personal data | GDPR + EU AI Act if AI is deployed | EU privacy counsel | | California residents | CCPA / CPRA | Privacy generalist | | Securities (tokens, equity crowdfunding) | SEC rules (Reg D, Reg A+, Reg CF) | Securities counsel | | Defense / aerospace customers | ITAR, EAR, DFARS, CMMC | Export-control counsel | | AI in EU | EU AI Act (risk-tiered) | EU privacy + product counsel | | AI for hiring (NYC, CO, IL) | Local bias-audit laws | Employment counsel |

See `references/ip_and_regulatory.md` for sequencing.

Workflows

Workflow 1: Contract Review

1. Save the contract as plain text 2. Run `contrac