Legal & Compliance Counsel

About the role

We route other companies' traffic, terminate TLS for domains we do not own, and touch DNS across many providers. This involves significant legal and compliance responsibilities, including data processing agreements, privacy law, subprocessor chains, and contracts with registrars and DNS providers. This is a contract role for counsel who can handle privacy and commercial work for an infrastructure product, providing plain, practical answers rather than long memos. You will help us build a compliance posture our customers can trust and verify.

Responsibilities

• Draft and maintain our data processing agreements and keep the subprocessor list accurate as our provider and infrastructure chain changes.
• Own privacy compliance, including GDPR and CCPA, for a product that proxies traffic and handles domain and DNS data.
• Build our customer MSAs and terms so they are fair, clear, and hold up when an enterprise customer's legal team reviews them.
• Handle the registrar, reseller, and ICANN-adjacent contracts that sit under our domain search, purchase, and transfer flows.
• Support our security and compliance posture, including the documentation customers ask for during vendor review.

Requirements

• Experience with privacy and commercial work for a SaaS or infrastructure company, with strong knowledge of DPAs and subprocessor obligations.
• Fluency in GDPR and CCPA, with the ability to apply them to a product that handles traffic and DNS data, not just marketing lists.
• Ability to draft contracts that are clear and defensible, and explain tradeoffs in plain language.
• Comfortable being the practical legal partner to a small team that moves quickly.

Bonus

• Experience working on registrar, reseller, or ICANN-adjacent agreements.
• Helped a company reach SOC 2 or a similar security posture and know what customers actually ask for.
• Supported infrastructure or developer-tools companies where the data flow itself is the legal question.