Corporate Counsel

About the Company

Xsolis is an AI-driven technology company reducing administrative waste in healthcare by enabling smarter collaboration between providers and payers. Since 2013, our vision has been to create a frictionless healthcare system. Headquartered in Franklin, TN—one of the nation's fastest-growing hubs for healthcare innovation—we are at the heart of a thriving ecosystem of health systems, payers, and technology leaders. Our flagship product, Dragonfly®, is the first and only AI-driven platform to continuously assign real-time predictive scores for medical necessity. Dragonfly has delivered proven results across 600+ hospital, health system, and health plan clients and earned repeated industry recognition. With recognition on the Inc. 5000 and Deloitte Technology Fast 500 lists, Xsolis is one of the fastest-growing privately-held companies in the country.

About the Role

The Corporate Counsel will have varied responsibilities within the legal function and compliance. This role involves reviewing agreements, drafting policies and procedures, and counseling internal departments on regulatory matters across healthcare, technology, privacy, artificial intelligence, and other compliance areas. Xsolis’ Legal and Compliance department is a lean team with opportunities for early-stage creation and development of legal operations and compliance infrastructure.

Responsibilities

• Contract Review & Transactional Support
  • Draft, review, redline, and negotiate customer agreements, including SaaS/subscription agreements, data use agreements, and business associate agreements (BAAs).
  • Review and negotiate vendor, supplier, and third-party service agreements, including software licenses, data processing agreements, and subcontractor BAAs.
  • Maintain contract templates, playbooks, and negotiation guardrails in coordination with the General Counsel.
  • Track contract obligations, renewal dates, and key terms; support contract lifecycle management (CLM) processes.
• Compliance Program Support
  • Assist in building, leading, and maintaining core elements of the corporate compliance program, including HIPAA/HITECH privacy and security compliance, state privacy laws, and emerging AI-specific regulations.
  • Draft, revise, and implement internal policies and procedures (e.g., privacy, information security, data governance, AI governance, vendor management, incident response).
  • Support rollout and training on new and revised policies across the organization.
  • Assist with compliance monitoring, internal audits, and risk assessments.
  • Support incident response and breach investigation/notification processes as needed.
• Legal Research & Regulatory Tracking
  • Conduct legal research on healthcare regulatory matters, including HIPAA, state health data privacy laws, and AI/algorithmic accountability laws.
  • Monitor and track legislative and regulatory developments affecting clinical data, health technology, and AI, and translate findings into actionable guidance for the business.
  • Prepare memoranda summarizing legal and regulatory developments and their business impact.
• Reporting & Analysis
  • Compile reports, trackers, and dashboards related to compliance metrics, contract status, and regulatory developments for the General Counsel and leadership.
  • Support preparation of materials for board, audit, or compliance committee reporting as requested.
• General Legal Support
  • Provide day-to-day legal support across departments (sales, product, engineering, HR, marketing) on contract and compliance-related questions.
  • Assist with various corporate matters and legal projects as assigned by the General Counsel.
  • Manage or support outside counsel engagements on discrete matters as needed.

Requirements

• Education
  • Juris Doctor (J.D.) degree from an ABA-accredited law school.
  • Active license to practice law in good standing in at least one U.S. jurisdiction (Tennessee preferred or eligibility for in-house/registered in-house counsel status in the state of employment).
• Experience
  • 1–4 years of relevant legal experience in a law firm, in-house legal department, or healthcare/technology regulatory environment.
  • Experience with, or strong working knowledge of, HIPAA/HITECH and healthcare data privacy regulations preferred.
  • Experience drafting and negotiating commercial/SaaS agreements preferred.
  • Exposure to compliance program development or policy drafting preferred.
  • Experience or familiarity with health technology, digital health, clinical data, or AI/machine learning legal and regulatory issues strongly preferred.
• Skills & Attributes
  • Strong legal research, writing, and analytical skills, with the ability to translate complex regulatory requirements into clear, practical guidance.
  • Excellent organizational skills with the ability to manage multiple projects and deadlines independently.
  • High degree of professionalism, discretion, and sound judgment in handling sensitive and confidential information.
  • Strong interpersonal and communication skills, with the ability to work cross-functionally with business, technical, and clinical stakeholders.
  • Detail-oriented with a demonstrated ability to work both independently and collaboratively within a small legal team.
  • Genuine interest in healthcare technology, clinical data, and artificial intelligence, with a willingness to continuously learn in a fast-evolving regulatory landscape.
  • Certified Information Privacy Professional (CIPP/US) or similar privacy/compliance certification a plus, or willingness to obtain within a defined period.

Reports directly to the General Counsel. This role does not have any direct supervisory responsibilities.

Work Environment

• Work is typically in a normal office administrative environment involving minimal exposure to physical risks.
• Mostly sedentary work exerting up to 10 pounds of force occasionally or a negligible amount of force to lift, carry, push, pull, or otherwise move objects.
• Work involves sitting most of the time but may involve walking or standing for brief periods.
• This role requires travel to our home offices in TN for training.

Benefits

• Medical, dental, and vision insurance.
• 401K company match.
• Flexible Paid Time Off.
• Paid parental leave.
• HSA/FSA options.
• Educational reimbursement program.
• Employer-paid EAP & Mental Health services.

Xsolis is proud to be an equal opportunity employer. All candidates must successfully pass a background check and fall under the same security role, which includes access to sensitive information, including proprietary data and PHI. Applicants must already be authorized to work in the United States on a full-time, permanent basis without the need for current or future sponsorship.