• Partner with Ashby’s Product Team and individual Product Managers to provide proactive legal advice on new products and features, particularly those involving AI and candidate data, addressing areas such as privacy, PII handling, transparency, bias mitigation, and anti-discrimination/equal opportunity. • Own privacy compliance, including global DPA playbooks, privacy policy updates, and working with our DSAR team to streamline responses to data subject requests. • Respond to customer security and compliance questionnaires, and develop scalable processes to handle volume. • Contribute to the creation of customer-facing compliance documentation, FAQs, and GTM materials in partnership with product, security and marketing. • Partner closely with the Ashby Security team to respond to any security incidents, including drafting relevant security related communications. • Provide proactive advice by staying up to date on relevant industry regulations and developments, particularly in the regulation of the use of AI in the hiring process across our key regions and privacy law developments e.g., GDPR, EU AI Act, and U.S. federal and state AI/privacy laws. • Advise on data practices, data retention, and cross-border data transfers. • Support vendor due diligence and negotiations on privacy and compliance terms. • Work on a wide range of legal matters as they arise or are proactively identified, including IP, employment, global expansion and fundraising. • Help shape the legal function’s operations and structure as Ashby continues to grow, including identifying opportunities for innovation through technology.