A team of three FIPs
Certified privacy professionals: CISSP, CIPP/E, CIPP/US, CIPM, CIPT, FIP.
AI Vendor & Model Due Diligence
We assess a third-party model provider, API or SaaS before integration: where your data is processed, whether the model is trained on it, which transfer mechanism applies, what their DPA says, and what residual risks remain. Deliverable: a due diligence memorandum with a clear go / no-go recommendation.
Why Us
Because a standard security questionnaire doesn't catch AI-specific risks
Certified privacy-engineering and cybersecurity specialists who check the provider's security and look for all available information on how the model was trained
-
-
We turn promises into verifiable facts
We don't take "opt-out exists" on faith; we look for evidence of data isolation and other controls
-
We know where a DPA's weak points are
We read the DPA, subprocessors, transfer mechanisms, certificates and audit reports
-
Legal + tech in one team
We understand the integration architecture, not just the vendor's promises
We help teams make an informed decision about integrating a third-party model, with a clear understanding of where your data will go, what risks you are accepting, and under what conditions integration is possible at all
Our Services
-
Provider and model assessment
We analyze who you are integrating with: where your data is physically processed and stored, whether it is used to train the vendor's model, which subprocessors are involved, which certifications are confirmed (ISO 42001, ISO 27001, SOC 2) and whether they have expired. -
Analysis of data, transfers and the DPA
We review the legal and technical side of the data flow: whether there is a valid DPA, and what applies to data residency, the exit process and data deletion after termination of the agreement. Separately (if needed), we assess the model's output risks (bias, reliability, hallucinations). -
Due diligence memorandum: go / no-go
The deliverable is not a questionnaire but a memorandum listing identified risks grouped by criticality, with a clear recommendation: where the risk is acceptable and it's a go with conditions, and where it's a no-go, explaining what is missing. -
Preparing documentation for integration
If the decision is go, we bring the integration to readiness and update or edit everything the new model touches: the DPA with the vendor (review, editing, negotiating insufficient clauses), RoPA, privacy notice, DPIA for the new model, as well as internal AI policies and registers.
Certified Experts
Our team holds certifications in privacy and cybersecurity
Internationally Recognised Expertise
Relevant and Practical Articles
- Data protection officer
- AI compliance officer
- Data privacy compliance
- Diia.City
- Digital Millennium copyright Act
- Trademark in IT
We Write About What We Practise
ІP, GDPR, contracts and disputes, as well as the legal aspects of implementing technologies such as artificial intelligence and best practices for implementing specific legal solutions.
-
How does Legal IT Group assist with GDPR and CCPA compliance?
To protect copyrights in IT, it is important to record your authorship (date of creation, registration with Ukrpatent), enter into agreements with clear terms, use product licenses, sign NDAs with partners, and implement digital watermarks or signatures in products. If your rights are violated, contact legal experts, such as Legal IT, who can help you monitor violations and take legal action to protect your intellectual property.
-
How does Legal IT Group support with gig contracts and IT contracts?
To protect your copyright in IT, it is important to record your authorship (date of creation, registration with Ukrpatent), enter into contracts with clear terms, use product licenses, sign NDAs with partners, and implement digital watermarks or signatures in products. If your rights are violated, contact legal experts, such as Legal IT, who can help you monitor violations and take legal action to protect your intellectual property.
-
How does Legal IT Group help with trademark protection in the US, EU, and the UK?
To protect copyrights in IT, it is important to record your authorship (date of creation, registration with Ukrpatent), enter into contracts with clear terms, use product licenses, sign NDAs with partners, and implement digital watermarks or signatures in products. If your rights are violated, contact legal experts, such as Legal IT, who can help you monitor violations and take legal action to protect your intellectual property.
-
How does Legal IT Group assist in copyright protection?
To protect copyrights in IT, it is important to record your authorship (date of creation, registration with Ukrpatent), enter into contracts with clear terms, use product licenses, sign NDAs with partners, and implement digital watermarks or signatures in products. If your rights are violated, contact legal experts, such as Legal IT, who can help you monitor violations and take legal action to protect your intellectual property.
-
How does Legal IT Group assist with AI compliance and AI regulation?
Legal IT Group provides GDPR (EU) and CCPA (California) compliance services with the support of a professional team holding CIPP/E, CIPP/US, CIPM, CIPT, LLM, and FIPP certifications. The firm helps conduct GDPR audits, draft GDPR documentation (such as Privacy Policy, RoPA, DPA, TIA, LIA, DPIA, etc.), respond to Data Subject Requests, and deliver GDPR training sessions for your team. Legal IT Group also acts as an external DPO for international companies processing millions of users’ data.
-
How does Legal IT Group help businesses with cybersecurity and cybersecurity compliance?
Legal IT Group supports companies on matters of cybersecurity, regulatory compliance, and cyber risk management. It assists with implementing the requirements of NIS2, DORA, the Cyber Resilience Act (CRA), GDPR, HIPAA, and other international information security standards. Legal IT Group conducts cybersecurity audits and gap assessments, develops cybersecurity policies and procedures, supports incident response and data breach handling, and advises on risk management, business continuity, supply chain security, and regulatory engagement. Legal IT Group also delivers training for management and staff, and helps product and technology companies achieve compliance with the requirements for operating in the EU market.
-
Which major corporate clients does Legal IT Group work with?
The Legal IT Group team works with both startups and large companies, including:
Aurora Multimarket — one of the largest Ukrainian one-dollar-store retail chains.
YouControl — a Ukrainian analytics platform for counterparty verification, company analysis, court records, sanctions lists, and corporate ownership structures.
Nova Poshta — Ukraine’s largest private logistics company, providing delivery services within Ukraine and internationally.
MacPaw — a Ukrainian product IT company known for developing software for macOS and iOS.
UKR.NET — one of Ukraine’s largest internet companies, operating an email service, news portal, and other digital services.
Readdle — an international product IT company of Ukrainian origin, developer of popular mobile applications.
ZONE3000 — a major Ukrainian IT company providing software development, technical support, and digital product services to international clients.
Yuriia-Farm — one of Ukraine’s leading pharmaceutical companies, represented in numerous international markets.
Snov.io — a Ukrainian SaaS platform for sales automation, prospect contact discovery, email marketing, and lead management.
-
What are the fees for Legal IT Group's legal services?
Legal IT Group’s fees depend on the complexity of the project, the scope of work, and the specialists involved. The base hourly rate starts from €120 per billable hour of attorney work. Where a project is personally handled by the practice head or managing partner, the rate is €200 per billable hour.