Scroll through to see the kind of work we handle. Real examples from actual cases (anonymized, obviously).
01
Data Breach Response & Management
When the worst happens, you need a plan fast. We've guided companies through dozens of data breaches - from notification requirements to Privacy Commissioner dealings to managing the PR fallout. One of our e-commerce clients had 50,000 customer records exposed. We had them compliant with notification requirements within 72 hours and helped them avoid regulatory penalties.
Real Example: Healthcare tech company, ransomware attack, patient data at risk. We coordinated the legal response across three provinces, handled all regulatory notifications, and got them through the Privacy Commissioner review without fines.
02
SaaS & Cloud Contract Negotiations
Those vendor agreements aren't as standard as they claim. We've reviewed hundreds of SaaS contracts and always find stuff that needs fixing. Liability caps that don't actually protect you, indemnification clauses that go one way, data ownership issues, audit rights that are basically useless. We negotiate these daily, so we know where there's room to push.
Real Example: Startup was about to sign an AWS competitor's enterprise agreement. We found clauses that would've let the vendor unilaterally change pricing and terms. Negotiated caps on increases and better termination rights. Saved them probably $200K over three years.
03
AI & Machine Learning Legal Issues
AI's the wild west right now from a legal perspective. Training data rights, algorithmic bias liability, automated decision-making under PIPEDA, intellectual property in AI-generated content. We're working with regulators and industry groups to figure this stuff out. If you're building or using AI, you need someone who understands both the tech and the emerging legal landscape.
Real Example: Client building an AI-powered HR screening tool. We structured their data pipeline to comply with privacy laws, drafted terms that properly allocated IP rights, and built in explanability features to meet potential regulatory requirements.
04
Open Source Compliance & Strategy
Open source is amazing until you realize that GPL code you incorporated means you might have to open source your entire product. We've cleaned up open source compliance messes and helped companies build proper SBOM (Software Bill of Materials) processes. Also advise on open source strategy - when to contribute, when to fork, how to manage community expectations.
Real Example: Company about to sell to a major acquirer. Due diligence found GPL violations that could've killed the deal. We negotiated with the original copyright holders, got proper licensing sorted, and saved the acquisition.
05
Cryptocurrency & Blockchain Legal Work
Crypto's legally complicated in Canada. Securities law implications, tax treatment, AML requirements, smart contract enforceability. We've helped crypto exchanges navigate FINTRAC registration, advised DAOs on legal structure, and dealt with the fallout when things go wrong. Not gonna lie, this area's still evolving fast.
Real Example: NFT marketplace client got a cease and desist claiming copyright infringement. We sorted out the DMCA-equivalent takedown process, helped them implement better verification, and defended them when one dispute went to litigation.
06
Cybersecurity Insurance & Risk Transfer
Cyber insurance is complicated and most policies don't cover what you think they cover. We review policies before you buy them, help with the application process (misrepresentations can void coverage), and if you need to make a claim, we work with insurers to maximize recovery. Also advise on risk transfer through contracts - getting your vendors to absorb some cyber risk.
Real Example: Client had a ransomware attack and their insurer tried to deny the claim based on some security practice questions in the application. We fought it, got them $500K in coverage, and they were able to recover without going under.
07
Employment Law for Tech Companies
Tech employment has its own issues. Non-competes (mostly unenforceable in Canada but people keep trying), IP assignment agreements, contractor vs employee classification, equity compensation, remote work policies. We've handled hundreds of employment agreements for tech companies and dealt with our share of wrongful dismissal cases when things don't work out.
Real Example: CTO left to start a competing company and tried to recruit the entire engineering team. We enforced non-solicitation clauses, protected trade secrets, and negotiated a settlement that let both companies move forward.
08
Cross-Border Data Transfers & Privacy
Got customers or vendors outside Canada? Cross-border data transfers are a minefield. PIPEDA requirements, adequacy decisions, standard contractual clauses, data localization requirements in some countries. We map out your data flows and build compliant transfer mechanisms. EU's GDPR and California's CCPA often come into play too.
Real Example: Canadian company expanding to Europe needed GDPR compliance. We structured their data processing, appointed a EU representative, updated all their contracts and policies. They launched in five EU countries without regulatory issues.
