What the JD asks
Ensure AI solutions align with the firm's governance, ethics, and risk standards
Respond to client RFPs and surveys on AI governance and data handling
Uphold confidentiality across all AI touching privileged client work
Strongest quadrant
For a firm that treats client confidentiality as
existential, this is the mandate that matters most. The evidence below is the deepest I have.
What I have done
Audited the confidentiality wall — it held
Verified the access-control boundary between employment legal and commercial legal at a Fortune 500 SaaS — the exact confidentiality gap that had blocked adoption of prior contract-management tools. Tenant data isolation enforced at the database level, not in application code. The architecture guarantees what policy can only promise.
Enterprise engagement · Tenant isolation
Governance engineered into the build
AESOP 4-dimension scoring engine with hard veto power — Safety, Bias, Accuracy, Compliance. 990 tests. Any critical failure blocks deployment. Independent Harvey evaluation: same engine ported to Legal AI OS. Vendor can't grade its own homework. ABA Formal Opinion 512: 6 duties baked into compliance evaluation prompt, confidentiality weighted at 30% of the safety dimension.
AESOP · Legal AI OS · Harvey evaluation
ISO 27001 — Vanta-Certified Auditor, Passed First Try
Led preparation for ISO 27001 certification at Risilience and achieved it while there. Ran the internal audit. Vanta-certified auditor. This is governance at the organizational level — the same framework a law firm's clients demand evidence of in every RFP and security questionnaire. HIPAA-compliant voice AI architected at Build Solutions AI.
Audit trail and RFP response capability
Regulatory mapping mode pre-populates compliance templates with cited evidence from evaluation history. Append-only audit trail — every evaluation, every override, every drift alert timestamped and immutable. Governance packs for RFPs: ABA 512 compliance evidence, data handling documentation, one-click export.
Compliance · Audit · RFP response